last executing test programs: 10m28.112221372s ago: executing program 32 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xd, &(0x7f00000044c0)=ANY=[@ANYBLOB="1800000000000000fdffffff00000000850000000700000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000002e80)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000100)='./file1\x00', 0x0, 0x151) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0x2e, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x6, 0x7, 0xfffffffffffffffc}, 0x0) 10m28.039307543s ago: executing program 33 (id=1277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="000000001812000000c1cd000000000000080000", @ANYRES32=r0, @ANYBLOB="0000001a00000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='f2fs_fiemap\x00'}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRESOCT, @ANYRES8=r3, @ANYBLOB="8eaf1c505d180b2effee70c4958dc9032b828c9383f0d326b86b079571207a8995f52e2ff11bc6fb35db75b746c59c5a4ba8e39f11eb1515cd8d11add7ee04d1f89885519e387aaa3ce8d892d166846317d826e18a071e0cb54dfe02695c4f44d528d6794b828a"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x1063c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x8, 0xffffffff, 0x1, 0x0, 0x0, 0x7f0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f00001fe000/0x1000)=nil, &(0x7f0000327000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000295000/0x2000)=nil, &(0x7f00002c7000/0x3000)=nil, &(0x7f0000328000/0x4000)=nil, &(0x7f00002c7000/0x3000)=nil, &(0x7f0000365000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000004f000/0x1000)=nil, &(0x7f0000000180)="d08ae42c4567f20b833f9b8dbe6dface55d4ffca577b4c7255a7aef4abffaa2206cfb6e5ba3421a586df326019f88b81d05297a4d79106735e197efadf8afbebb3751249b0d5c32251003b258a046029cf3a1d9926a20fd8627f30ea3ad70ac4c4c285142f1ad975b09c6e70371fd164d685b1c64fb92cc92993542455519b97ab624f1e8deff38fc233002fa2b0b2bb24491dffdb68ac97d8bff951ac04ec6b51919e", 0xa3, r4}, 0x68) setsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000)=0xee8, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$PTRACE_GETSIGMASK(0x420a, r6, 0x0, 0x0) setsockopt$inet_udp_encap(r5, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRES16], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0xb}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 9m49.732882066s ago: executing program 34 (id=1922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 9m38.858196657s ago: executing program 35 (id=2052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="d3260329ab", 0x5, 0x4055, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x8b80}], 0x1) 7m37.396257101s ago: executing program 36 (id=3468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000200000000000000090000009c30", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085c429f581bdb74a000000862000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000580)=""/152, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r1], &(0x7f0000000380)=[{0xfffffffe, 0x2, 0x4, 0x7}, {0x4, 0x1, 0x10, 0x4}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x54, 0x1000, &(0x7f00000004c0)="4fffb541e59d5f72cef3b0b8488d4e5ebf484ad4b64a2a2925a3d353b0b228d4bffa7e9c1b055edb84626d0b74205a0526d7aea55d7446b73458e7edd8352abd8877d3fa3f7e225c17a45c68b38a8a982eaca115", &(0x7f0000001e00)=""/4096, 0x6, 0x0, 0x85, 0xa4, &(0x7f0000000800)="8e369dc6e3a618319dc1f34f9d66559072a0870adee7056db3eef416903d095c3e7287176bf48473ba3e136d7f353730e3aa1ecc68196b52b11746ee8a1ef72366c8a0981e5d5d4e293bdbdfb460d41dcf362b2f18a4c71cd283e0a2a4e6605e030658cdbe648ab84bc7b062eddd61b75deef50e59f3985250f4045dc2a861b03bf4bb53ce", &(0x7f00000008c0)="2ecd4fdb86f26fef7437caa542a7745e36c0951cf83df1f4032e355565fcd53db5e5be647f22c057b3c066f4c23790b7d381d6a919565461c927c779cab34e18fc6f907e70288f67fd99df753db50242050cf4454cf2446acd8693f1934f1aed29a18427553802504330cdf91ed5382fd2a0a38b7328f94b7649d4328c493131cc78421e53524bc1e451d4ada190e905a22de8046a803bf80342e94f5ef4eb6d78289611", 0x4, 0x0, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000cf00000000000000ff0000", @ANYRES32=r1, @ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0xffffffe5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1a2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TCSBRKP(r8, 0x5425, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x48) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 7m15.410232309s ago: executing program 37 (id=3751): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x4008020) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 7m14.658599113s ago: executing program 38 (id=3764): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x100, 0xfffffffe, 0x800001b4}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='ext4_mballoc_alloc\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x18) r7 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 6m48.380103344s ago: executing program 9 (id=4164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 6m48.265788116s ago: executing program 9 (id=4170): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000680)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = syz_open_dev$usbfs(&(0x7f0000000440), 0x9, 0x48140) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f00000005c0)=ANY=[@ANYRES32=r1]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty}, &(0x7f0000000380)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfffffffffffffd5b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 6m48.111101509s ago: executing program 9 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000200000000000000090000009c30", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085c429f581bdb74a000000862000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000580)=""/152, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r1], &(0x7f0000000380)=[{0xfffffffe, 0x2, 0x4, 0x7}, {0x4, 0x1, 0x10, 0x4}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x54, 0x1000, &(0x7f00000004c0)="4fffb541e59d5f72cef3b0b8488d4e5ebf484ad4b64a2a2925a3d353b0b228d4bffa7e9c1b055edb84626d0b74205a0526d7aea55d7446b73458e7edd8352abd8877d3fa3f7e225c17a45c68b38a8a982eaca115", &(0x7f0000001e00)=""/4096, 0x6, 0x0, 0x85, 0xa4, &(0x7f0000000800)="8e369dc6e3a618319dc1f34f9d66559072a0870adee7056db3eef416903d095c3e7287176bf48473ba3e136d7f353730e3aa1ecc68196b52b11746ee8a1ef72366c8a0981e5d5d4e293bdbdfb460d41dcf362b2f18a4c71cd283e0a2a4e6605e030658cdbe648ab84bc7b062eddd61b75deef50e59f3985250f4045dc2a861b03bf4bb53ce", &(0x7f00000008c0)="2ecd4fdb86f26fef7437caa542a7745e36c0951cf83df1f4032e355565fcd53db5e5be647f22c057b3c066f4c23790b7d381d6a919565461c927c779cab34e18fc6f907e70288f67fd99df753db50242050cf4454cf2446acd8693f1934f1aed29a18427553802504330cdf91ed5382fd2a0a38b7328f94b7649d4328c493131cc78421e53524bc1e451d4ada190e905a22de8046a803bf80342e94f5ef4eb6d78289611", 0x4, 0x0, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000cf00000000000000ff0000", @ANYRES32=r1, @ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0xffffffe5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1a2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TCSBRKP(r8, 0x5425, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000011000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x48) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 6m47.401622114s ago: executing program 9 (id=4181): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 6m47.355049404s ago: executing program 9 (id=4182): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 6m47.08374082s ago: executing program 9 (id=4185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 6m47.06575876s ago: executing program 39 (id=4185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) 6m29.753079916s ago: executing program 4 (id=4390): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) 6m29.60621325s ago: executing program 4 (id=4397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 6m29.57845891s ago: executing program 4 (id=4399): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000000daf41df7e01726e9f09b96071d00000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe(&(0x7f0000000380)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r5, @ANYRES8=r3, @ANYBLOB="0000000000000000b7048b352f226240d04866f79712d5d129000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000020000000000004000001800000000", @ANYRES32=r5, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 6m28.083792089s ago: executing program 4 (id=4414): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x34, &(0x7f0000000400)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x57, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000002890b78313beb29a0296000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x4, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) r8 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xffffffffffffdffd, 0x3, 0x0, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x9}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r10, 0x0, r12, 0x0, 0x80, 0x6) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000000), 0x208e24b) 6m26.955442771s ago: executing program 4 (id=4431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) open(&(0x7f0000000380)='./bus\x00', 0x143c62, 0x48) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 6m26.424184431s ago: executing program 4 (id=4433): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x79) 6m26.423298551s ago: executing program 40 (id=4433): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x79) 5m0.290256727s ago: executing program 1 (id=5423): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) 5m0.18416789s ago: executing program 1 (id=5425): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x200000000000011d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 4m56.343803064s ago: executing program 1 (id=5470): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) 4m56.232127886s ago: executing program 1 (id=5471): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x34, &(0x7f0000000400)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x57, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000002890b78313beb29a0296000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x4, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) r8 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xffffffffffffdffd, 0x3, 0x0, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x9}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r10, 0x0, r12, 0x0, 0x80, 0x6) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000000), 0x208e24b) 4m55.212473486s ago: executing program 1 (id=5481): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x10) 4m54.683625337s ago: executing program 6 (id=5486): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000680)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$usbfs(&(0x7f0000000440), 0x9, 0x48140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x9, 0xe, @loopback, @empty, 0x7, 0x700, 0x1, 0x8}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfffffffffffffd5b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 4m54.641421778s ago: executing program 6 (id=5487): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x143a82, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xfffffdb8}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4m54.552908679s ago: executing program 6 (id=5488): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b45, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m54.368225032s ago: executing program 1 (id=5489): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xfffffdb8}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4m54.341087813s ago: executing program 41 (id=5489): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) sendfile(r2, r0, 0x0, 0x8000fffffffc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xfffffdb8}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 4m54.299988284s ago: executing program 6 (id=5493): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x34, &(0x7f0000000400)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x57, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000002890b78313beb29a0296000000000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x4, 0x12) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000380), 0x101bf) r8 = creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0xffffffffffffdffd, 0x3, 0x0, 0xc}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x9}}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r11, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r10, 0x0, r12, 0x0, 0x80, 0x6) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000000), 0x208e24b) 4m53.376075452s ago: executing program 6 (id=5497): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000680)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_open_dev$usbfs(&(0x7f0000000440), 0x9, 0x48140) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x4, 0x9, 0xe, @loopback, @empty, 0x7, 0x700, 0x1, 0x8}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfffffffffffffd5b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0xa, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) 4m53.158813366s ago: executing program 6 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x4008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 4m53.067963698s ago: executing program 42 (id=5498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x4008020) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 2m10.636299009s ago: executing program 2 (id=7551): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x100000004, 0x8382) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000e00000055000000a086ddc0041884fa4d4f24edbf43aede3eac1f9c0fd9ae176825de5b2bed081ecc7be4f3652074cc19de725d0dea5b5a1e0489113a61998e2e4c61c7e22f71b9d22c8170590bd00b1de7b62898afe2ba233d46ff1fa370ef2b8ff3e3d6e4fd09b25ea312c3b66eb7e88f54e68d54ff1cbefe9d07db"]) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e30, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x401}}) 2m10.324124894s ago: executing program 2 (id=7553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0xffef, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2a, 0x8000, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044078}, 0x0) 2m10.316117624s ago: executing program 2 (id=7554): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 2m10.273547065s ago: executing program 2 (id=7555): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000380)={[{@usrquota}, {@bh}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@stripe={'stripe', 0x3d, 0x8}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000400)='./file1\x00', 0x8a, &(0x7f00000001c0)={[{@journal_async_commit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0xf8}}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x452, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x9c5, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x7, [@func={0xe, 0x0, 0x0, 0xc, 0x5}, @enum64={0x2, 0x9, 0x0, 0x13, 0x1, 0xc, [{0xe, 0x10}, {0xb, 0x6, 0x3}, {0xb, 0x9, 0x800}, {0x1, 0x1, 0xc9ad}, {0x6, 0x800, 0x7ff}, {0x2, 0x3, 0x1b}, {0xa, 0x81f, 0xfffff439}, {0xd, 0x5a8000, 0x1}, {0x9, 0xc8af, 0x44}]}, @enum={0x8, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x8}, {0x0, 0xffffff39}, {0xc, 0x5}, {0x5, 0x5}]}, @func={0x4, 0x0, 0x0, 0xc, 0x1}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @union={0xa, 0x0, 0x0, 0x5, 0x0, 0x8}]}, {0x0, [0x2e, 0x30, 0x61, 0x5f, 0x0]}}, &(0x7f00000005c0)=""/180, 0x103, 0xb4, 0x0, 0xf, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x51, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x7a, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0/file0\x00', 0x0, 0x8, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000540), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xd, 0x371, 0x7, 0xa, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b50300000000000085000000eaffffffb7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x7f}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000002240)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000a00)={0x0, 0x2, 0x0, [0xffffffffffffffc9, 0x6, 0x9, 0x1, 0x10000], [0x4d4c3dad, 0x9, 0x3, 0xfffffffffffffffc, 0x8, 0x1, 0xf, 0xd, 0x3, 0x2, 0x5, 0x85d, 0xabbd, 0x2, 0x1, 0x1, 0x100000000000000, 0xffffffffffffffff, 0x10, 0x2, 0x7f03, 0x2ad5, 0x10000, 0x7f, 0x80000001, 0x8, 0x7, 0xd7, 0x5dd, 0x3ff, 0xffffffffffff8001, 0x8000000000000000, 0x0, 0x4, 0x65800000000, 0x1ff, 0x6, 0x1, 0x3, 0x8304, 0x9, 0x7, 0x7fff, 0x1, 0xc3, 0x40, 0x9, 0x1, 0x100000000, 0x1, 0x5, 0x1000, 0xb2e, 0x44a7, 0x6, 0x2, 0x1ff, 0x1, 0x9, 0x2, 0x8, 0xffffffffffffffff, 0x32, 0x6, 0x8000, 0x6, 0x200, 0xf, 0x28000000, 0x2, 0x100000001, 0x7, 0x2, 0x7, 0x8, 0x1, 0x1, 0x3, 0xfffffffffffffffe, 0xc, 0xf, 0x7, 0xffffffffffffffff, 0x6, 0x8001, 0x5, 0x2, 0x97, 0x0, 0x8, 0x4, 0x1, 0x4, 0xff, 0x5cc, 0x5, 0x1, 0xd5, 0xb, 0x2, 0x5, 0xff, 0x9, 0xaf50000000000000, 0x3ff, 0x2, 0x4, 0x3611aa3f, 0x2, 0xff, 0x9, 0x1, 0x10001, 0x7, 0x6, 0xd0, 0xa2f3, 0x7, 0x4, 0x7fffffff800000, 0x7644]}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000e40)={0x0, "614f493241ccd82ce6ed01cbf32415c2"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001e40)={0x18, 0x2, {0x448b, @struct={0xd8ae, 0x8001}, r7, 0xb, 0xfffffffffffffffe, 0x3, 0x1, 0x2, 0x48, @struct={0x8, 0x3}, 0x2, 0x7, [0x92, 0x7, 0x2, 0x5, 0x4, 0x3]}, {0x2, @usage=0x8000000000000000, r8, 0x2a, 0xfffffffffffffffe, 0x1, 0xb0000, 0x4, 0x8, @struct={0x5, 0x6a92}, 0xffffff02, 0x7, [0x1, 0xba8c, 0x7, 0xe100, 0x0, 0x44]}, {0x1, @usage=0x3, r9, 0x6, 0x1, 0x0, 0x6, 0x80000001, 0x0, @struct={0x81}, 0x2, 0x1, [0x3, 0x40, 0xe000000, 0x9, 0x7, 0x4]}, {0x0, 0x40, 0x5}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = epoll_create1(0x0) epoll_pwait2(r10, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, &(0x7f00000000c0), &(0x7f0000000100)={[0x5]}, 0x8) r11 = getpid() r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x24020000) r13 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r13, 0x0) 2m9.551043289s ago: executing program 2 (id=7565): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000700)=""/4096) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_page_free\x00', r3, 0x0, 0xfff}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r10}}, 0x18) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r13}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x41, 0x2) 2m8.223042895s ago: executing program 2 (id=7580): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2}], 0x1, 0x9e) r4 = dup3(r3, r0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd808, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 2m8.173161646s ago: executing program 43 (id=7580): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000140)=[{r3, 0x2}], 0x1, 0x9e) r4 = dup3(r3, r0, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xd808, 0x8, 0xfffffff7, 0x2, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa6}) 4.62826867s ago: executing program 8 (id=8942): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000190a0103"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x20002004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x3, 0x1fc, 0x1, 0x5}}) close_range(r6, r7, 0x2) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpgrp(0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) 4.441725874s ago: executing program 3 (id=8945): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x6, 0x73, 0x8, 0x5, 0x12, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8, 0x7f, 0x6}}) syz_emit_ethernet(0x1fc, &(0x7f0000000140)={@random="ec27b9121f1f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "066206", 0x1c2, 0x2f, 0xff, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x11, 0x0, 0x10, 0x0, 0x0, 0x9, 0x67}, @dstopts={0x0, 0x12, '\x00', [@generic={0x9, 0x6f, "a1784fc2fff0b74c8c7e0423716c2f6b36cf33b59f3c589c19ac80b54e120daeb41e806da77a16e770baad9a1039f2c450325dddeeaef132675ca588b8331a8a2c5debfb4137d227e5fed7c8684603804114b3f415ac46d00c5357a02173348cb36b71b09aa0990dd6c4aa7c3799a6"}, @hao={0xc9, 0x10, @mcast1}, @pad1, @jumbo={0xc2, 0x4, 0x10}, @pad1, @ra={0x5, 0x2, 0x1ff0}, @ra={0x5, 0x2, 0x4}]}, @srh={0x21, 0x2, 0x4, 0x1, 0x77, 0x38, 0x5, [@ipv4={'\x00', '\xff\xff', @empty}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1, 0x0, [0x4, 0x7], "8e"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0, 0xb], "c6faa03162a9818188ade2c732a96c70"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x7, 0x4], "44634a8b330c511e5e147adb30359c17206497a9ee467de0ea07674075dd96f4df48a8b5a982bd61715fd148e8fb0c4ff5cca05a4327efbd98be191081408c94c58b8acd4c5e9979989fcc489d1fb69618"}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x7, 0x2, 0x1, 0x0, 0x4, 0x3}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0x1, 0x3, 0x0, 0x0, 0x4, 0xd}, 0x2, {0x2, 0x400, 0x1, 0x7, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "2aa572b2efc3bf61d4e540cf72007169ded18cf75181c11903431c61ff9eadd87914436b34b28b1c8be849ec52001f9e960460fd596e4e093eb284fec76c14a4b1cf63dbd3cf6fbaefbc17b96cbc"}}}}}}}, &(0x7f0000000340)={0x1, 0x1, [0xe3b, 0x47e, 0xa47, 0x50e]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r5, 0x20, 0x70bd2a, 0x4, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x305ba1be}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x54}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xdcf4, @local, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x8c}}, 0xc004) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x8, 0x1) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000000900)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1e4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x800}, 0x800) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000940), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x8081) getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000b40)={@mcast2, 0x0}, &(0x7f0000000b80)=0x14) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000dc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x1bc, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000e00), r4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r8) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x3c, r11, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x15, 0x1b}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4e3cc9d6e3"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x10) r12 = syz_open_dev$vcsn(&(0x7f0000000f80), 0x1, 0x200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001000)={0x2, &(0x7f0000000fc0)=[{0x4, 0x5, 0x3, 0x3939}, {0x1000, 0x7, 0x8, 0x6af}]}) r13 = socket$pppoe(0x18, 0x1, 0x0) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001300), 0x80000, 0x0) r15 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r16 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000014c0), 0x8603, 0x0) r17 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r18 = socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r12, &(0x7f00000015c0)=[{{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000012c0)=[{&(0x7f00000010c0)="d98167b895daa020aa21b1abf438af43817607784c46a85e5346219c3ac026eff39392703633670c9493f742c6a35ad43b88d38c7d3492bef49f39e9534bdce62a31c9397cbcf40369b7d0a9d3f112578d90c1", 0x53}, {&(0x7f0000001140)="7348ac62f55b52ae019f6e6fd70d404fe858be8530c9c69f533b0ebb549bcfe8e5fda6dc3f45e265c4a308a632d03c13ad8889b37be51ff6273369cc6357ac113da92469b8f177c81d38277243a51ffde138e0db3498899a1cdd49172d77d753108da8078821feef3d87c09998ca3934670c3335bcb877cfb783fe7e2917ec2ca336374c6a342a6801693ae591d002335261a80d3bf4", 0x96}, {&(0x7f0000001200)="6ea3230e41f7b7c4657ab8647ccf9026185e49e1fc034f9f2bb54af9323cf0d293725342e8137c8bff1fddc7bbb8ef66189d4bb0d1fbbdfbce47627c68413b97ebfa4189b0f18a989c6349a56d56b898952586445283f2230c42aa64c23a2a20cba91a3a3b4207dc8a6858e79de1942dea39bce69a0a2f5ebb19c11088c74d17837607f11d698247cb477fd2bc377e63421e60777f2698f0d11145ad2fb61d02c38eb9b3755bcdcba77651e1f1927f46b1cedeedbb0d99174e", 0xb9}], 0x3, &(0x7f0000001340)=[@rights={{0x30, 0x1, 0x1, [r7, r6, r13, r14, r15, r0, r8, r8]}}], 0x30, 0x20000840}}, {{&(0x7f0000001380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000001400)="9db57b4167000b36763ba911f8b0c07c1a7395d5c8443eb620ae84be9295f9680968becdad64ee0b64ca99fe7844253643215008b42f130a211921be7f1ba8155cb1f4588721114ecc3af6c6b6ce2e24937df94d11d3cf16e32887ac1904dbd590d7af60413532e1b28db1013b5d4b49ed3d0a1609782750d08f", 0x7a}], 0x1, &(0x7f0000001500)=[@rights={{0x38, 0x1, 0x1, [r7, r16, r4, r4, r0, r7, r4, r0, r7, r6]}}, @rights={{0x24, 0x1, 0x1, [r12, r6, r17, r18, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r7, r6, r4, r12, r4, r8]}}], 0x90, 0x11}}], 0x2, 0x24000800) r19 = accept4$x25(r8, &(0x7f0000001640), &(0x7f0000001680)=0x12, 0x81800) getsockopt$sock_linger(r19, 0x1, 0xd, &(0x7f00000016c0), &(0x7f0000001700)=0x8) 4.429905274s ago: executing program 8 (id=8946): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvtap0\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fb7fd, 0x20005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x0, 0x7, 0x0, 0x5}, 0xc) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="000300001500a05268000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000000080000000500000000000000040900010073797a31000000000400048005000300060008000600024089060000"], 0x34}, 0x1, 0x0, 0x0, 0x20020810}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7c0100001a0001000000000000000000fc000000000000000000000000000000ff01000000000000000000000000000100000000000008000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000010000800330000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000440000f4ffffff00890001006d643500000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000802"], 0x17c}}, 0x0) 4.352283045s ago: executing program 3 (id=8948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xe5a4, 0x5, 0x6}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xe5a4, 0x5, 0x6}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, 0xfffffffffffffffe) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=']) 4.067288261s ago: executing program 3 (id=8950): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652", 0x8c}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42c", 0x12}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 3.975495203s ago: executing program 3 (id=8952): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1c2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000200)="8eb76f03bc38362163292f089b61b15da30c9c36130f5883f04ff72747250f352f6a653a7b14e31efd9460c841cd462e80a560ff2f47d833d838d490c641e27454883c46049d667c27fbde0c0efeab8bea217d454d28ce3e69bb3fbe48ccd8043d", &(0x7f00000000c0)=@tcp6=r1, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) (async) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) (async) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1c2, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r4, &(0x7f0000000200)="8eb76f03bc38362163292f089b61b15da30c9c36130f5883f04ff72747250f352f6a653a7b14e31efd9460c841cd462e80a560ff2f47d833d838d490c641e27454883c46049d667c27fbde0c0efeab8bea217d454d28ce3e69bb3fbe48ccd8043d", &(0x7f00000000c0)=@tcp6=r1, 0x1}, 0x20) (async) 3.551466451s ago: executing program 3 (id=8958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47d0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x10) (async) uname(0x0) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) (rerun: 64) 3.541732091s ago: executing program 0 (id=8959): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000001bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSETELEM={0x1908, 0xc, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x894, 0x3, 0x0, 0x1, [{0x78c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa6, 0x6, 0x1, 0x0, "657c680f4cc1491dfd4174e36091e4a98f209c3fc9ef14bd708fb32ab2a9b52683277336bab8df3df3b32e6dacd6cb623b1a305a853be6130024dbedab7a093faac3e22fa60979eb96168a4577c582f6c9c742eb197647a51836c404a0622b304911cfd8bdb2efd28a836f955d2d11982fbc84bfb7d0ef0d4609811c9609a108c3ab1d2dc7b10223860c6e31c73f07725d70326cced009b5b33549756388d67b7517"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @target={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x39c, 0xb, 0x0, 0x1, [{0x388, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x378, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DATA={0x144, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "b81b3aa2cff6f39a1ddf7c660b1900a57d41536cff0557b1e52810a3366df0afe44347c534e75292ad5d3bce7c12caf67fc27fdfdfd1ddd8f6cca573c0b29febfdc83158892ef259d1efd221a8af4e126b3336c751936340ceb426a8d5a1b47ebf97c398041866b7d0f67d72a850ec9b9aa30aceef14d5f6f67c60b0474707c7b96997f4a19a21ab597dab45cc8d1a753afb460dd3b186af6800db9680054370fb63a74369fba49fc50bb0944555fcd7005ac1ebf8cac5407f5f5bf75729097861b79a7664388e729ff5926455b8c852e1180fb5f40e80e726c6411399a7b3a25061c692a7d85937524b3b585b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "4ac1699a6c2a2d924dc7c0e603e206efeee9585099838754c2c61d0d278c70036fc662db0f16731b667da1e0b447e7f69241378349870e4cc1d091"}]}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x228, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "6a0800aeb2d3bc2ed478d1d1ba7e17b98f2971b02bbe5ef65a3ed95307480ef2ceae"}, @NFTA_DATA_VALUE={0x2b, 0x1, "09d495f908e6d264754de9992f7a7adb34e406663d2b9eeb76ca014c578728c18cf80615aa18b6"}, @NFTA_DATA_VALUE={0x5e, 0x1, "16cf043fa58594c2b400af8d5aed1f2228c638426b4c2492f08a2ec76ec2c42d005aafb9e1333d3c0a9c3ca445f16e7739358125386ecfa45f686c5e867a770449af69b25b89e04dcbd8146566f5d309a3492124f90b4a0353ae"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "cb7bd0437101d38c4641d7f22707c1ad35462fd48163241da42426b3f089e9fe2a974c99e6"}, @NFTA_DATA_VALUE={0x99, 0x1, "45602fc5d136e3bf1b1cc43afff448d0b23995e091d27737c06b268e2fc96210e76e9990abc902ec8b56b7029588843da049f585e75fef88a85244551fc6722546204ff497a5513af3d043fff9f3a62876fae335a75428164bed76303b02f829caf6ac15463a13824bc347917354d6f31e44abebbb39c02d9395fdb68297bb237dbb6001283b05f574343146df121ad0b7e1c7f1c5"}, @NFTA_DATA_VALUE={0x7d, 0x1, "323800266d4a8aff3360cd51482e8058cf619a72ceaffab6694e072204ad705a2d47b9e1afae0193a34fd55211da4e5de6c8d35e6821d7eeadac0da2cc60032607dcafdc817d02de89fdd86dcb320903a9ace67d93232e8062f2766146cef347f3bb3c8d3cb322ea748bdcd4fdb193216a44b18078c072f37d"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x10, 0x6, 0x1, 0x0, "ff0d4da9b733734c4944cc0b"}, @NFTA_SET_ELEM_KEY={0x238, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xde, 0x1, "06f2638508e7ba43ac3f9d478aeb9fa5335c5ed944aeabc762574a73b50662d340d0db16e8e166c1571f243585684d8222751a727d830297e51a271840e4c41f939209e3e750b11235ffb1a067676566a4e0eafe32923799429243d9cd0770a1fb8d395618ea9317f671892f85c8238152f7bcda45ee84c23807f265028ee1f7ad3375de1df274ba3c5e68e2c7e18cdfef4e7f934e54400d94ea46105d7c506d0b39bf8aa07ee1f88beb305d686a4ba446e0986ff97cb589c7b547278cadf5ca0fb503703b94ea8c33d90049b64f3bff88e4332367560edec602"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x77, 0x1, "ec13e6cdeff34f880d6f6219c1cf5fc0502198d838f77c799cec2a05877d9993abf66a46b14377a8c5b8b5e04f6b3a0e782c1d08060840372f0fad00a0d44dc7e5d65f02aec3d758554ea5380cb89f5a7524eaf7263860103d757981223086ede8046a911ae3bce1ed1d9e76bfdca6cd163e4d"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "969b4b71808a53a67ba5a6e2a8c22371b5eb77070e7d2b7f6f6b10fa01ecefabdeb601e25dd4bc307cd9d1b42944d1b4661d5dc31b8cbed756b49f034fb8c22ef9226d82c57661d411d505e6c5c603797adb402b6adf46bcf16f17f69dd891d8b1ecfcb84f6898a3ed9bb75ab02a80e3f67157c9ffec4bf8dc3adc0622a307c442fe1be789bcd15030aa920896f3c2e55be1a19425187c13c7e397e89926d170688b623e22b158aafab1a3084f80"}, @NFTA_DATA_VALUE={0x5, 0x1, "11"}]}]}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xe6, 0x6, 0x1, 0x0, "232cafb3f8a3173485256b919b5a6a906e2c47486146ad4e4264b27a7ef89e203caee211ebbb65f539d92fd7ce4a9b0dea656b21dfd3eca63f0478a5514fe2bc1e3e32ae7ea72b5e125f713dd0aa2b76d4395d366e286138b96884ef0fb6d2977d3b3f81881644dc67f234892d23c716685540ed4dce2087ed17aa775a041a2f64c9c8d193537d5aa7f13feec8531138ce3a0c797d8659b6996037723d1d5128a18f206737a485b6b2fe7d891d4d33459d8e70840095bb03f372fe5177480491c2d99068d9a2b59693963222c778f328c63feb1f39e68ed2338a10c201872919d791"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1060, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfff}]}, {0x228, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x20, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "e4d267f8e0e6b5419177f8c27fcdb367612e3583b2"}]}, @NFTA_SET_ELEM_DATA={0x1d0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "0f0e71724e31573ae4b8af0216d6be1faae4760c7a50f0c1bdc52dc2659f4302b399e1243fa3adb79bc2f9eea0ac8172817207a56cae85ae3e49c55f3f3a30ca2c066f07aae57695d4a9b45ccf45dfde929ef80afed6cc7889ec8ee0140d94bec9bdc0507c46fcc6b67a7ebdf26e464b06e204f7923f8508c1f80174cf09bac3bac58c2cdd8690a4c56149d011fa20d1e9554548a67ea33244f8d112a381ac30d930a32bb6a2afaf4d64142786ee0b1dab97d0ae31504e7cdd"}, @NFTA_DATA_VALUE={0x11, 0x1, "a133ae290345cb97adab098ded"}, @NFTA_DATA_VALUE={0x41, 0x1, "9aae61214da57615741344d6b72cb1e66825ee27327048989ff107603e50499fa248fe154e42475de190dea8d83a95dc63ef70ee6c23302ea542e8ccf9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "2f96336411e8e9e285c815079b5d2b76548f6729c06f2d9e238f2fa5b2d850655120db4c8bf64773758a48f5891e1c563d9114fa63c65d"}]}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, {0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x218, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x9a, 0x1, "9c21631a0ca7abfcb8efd19619ac4e1cd9d2b0bace49c65042c00f1c0c71374b64053e881bcf4ad1dae16079eb97bbacd7a51c3764003d6bafe0d3d3d17768d7d8f1f584c2dfc4017ec1f7dfafdc4b82e9ad6a36565d1c3d9991d110ba7208be9f84a47eb6b6b41cd0ace95b34d4d8461e6ce7e9ef6fe0e3a37d6cc1288631028c1b1d2ae6183a68fdaff5369b12d12f3ee6819d6219"}, @NFTA_DATA_VALUE={0xf8, 0x1, "be261e5967b8ec0f077daa45f11819170f2cad3beb7ee9573bd8d064e9bc0c3d5f7dd6f56a2aa98b54886afa338dda21f62f2e63577df6ff3816c81f632566f88a5b0e6312131888ace8171209df3d19d9b7a7d80c6aaae925cb3406e00bbce74c181862ac074b908db43719276e02083667155d3c1337d82e517d622969d539bc08d4818d226a4facd5aa04a08c5fb1650a86858eac622019f978220c70bec4695c8527cf07d4c1794dcc367b5a30d10c97d7d2fc4de227b14b4e515afea34e93d9a8c4143a8b979bbd4871339ac2f40f2ce5f109e490eb793a126491b52cadda2245188ea63c9987f165b2a704dc95f9a7243f"}, @NFTA_DATA_VALUE={0x2d, 0x1, "76527b655257312d3ac1d4487a781a5bb07af21064d259cf0f073bec800117a2dad5bc45a78141d09c"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x84c6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd31d}]}}}]}, {0xb70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x388, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xad, 0x1, "1fa084c9987fc779a5706a9a3500a7cd79b3c2ddabe9b6e608ef9a13cc94728db511384f31cab89011345be16ad1a6721af74c3afce9e236c51d2e74f46067efce5d4806402b95bcfbe2f68297c4f559e1620d8b3242b7cf6546784af7486dabbac30bed46f22f184495ce1cbeabdda199c55c14927bd8ae0c617efd3135e69cc6dd2af514724501337cb0236f3e7fd0d63799490bc3211f45618eae8ce06b37b8cbbeab82a5a0dc55"}, @NFTA_DATA_VALUE={0xfc, 0x1, "fd88ded1549e36fd056ebbec0138850b9b0abb47a33646a7ba02ed893571790461152a1a199ba08c5137ef4063c9c1b264206ff07f416235070435cb85e2b2ba6c8b8133daf45ace9dd90da749a8557ae04a6a614968782511bce55ae4cb526972bfe8c0e7effe7752d4b3d47cae4e8954b590c5cbbde8038f9db0c8a77d777e9758e918195bedb204a92a9707e9b6613426521073a8fef1199dda7a6a872b3895404cbf7170166551c5cf6383a40114a22f8b67ae1791f31cdaeccc07f6596986a432e6175e04b69974cabd9d24926c56ee66fcd86fc34de446e4347b4a135d98e8152e85f4b7c1d8dadc41c55efad61a8e1fa8cce3ceb8"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "c5a40d2a0072e52146f77c504ac3ca07fb45adc4e9e376d8a011a594f1cbb75b3ca1fe15d24258884e2a102a5d47fcbef1f1b2ba8767416bb270534bca4ef7d1f8b6c17f820f4939d1c4a9200cf14dff44b90ee9b5c08b1f3715920aae2a2f67492166aa9949e9b687a742f67478629a3c2dae77c38ba9102929d6d4c0d55836c51558f0378f0ac2306a99844bce8d55f1691298cd78fc0c75ff999b69e71e98dd8217e21794c8cdcfab286fcb04874e3ba0f8c152f91202745828dc"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x7d8, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x788, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x774, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x248, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "56688a64"}, @NFTA_DATA_VALUE={0x11, 0x1, "9f841e1bbd26fa9b5d15add41d"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x71, 0x1, "b98f94167af8293b62ce6adc83be95145b412472e641166fbc8ca7db3fbfe199482f756ad9f62764ae975ebf1972174ae7ff22f17f897c6ce29a4887a028a0f346c6150776a6e0c4d3c396bbdec30cdd4225a5e9bb010985430fa1b1770359bed3c5c89eb0973b29a6de5264cd"}, @NFTA_DATA_VALUE={0xfd, 0x1, "3d51d4f1f68d2ff785d82e9d770d039d87e554959564d29052e9107b76f2529939e803d1bf71226efcaddf6d14b4beae401c8fde41f9ffbe58bf7735048df7b72c8766b1c3358240cd24d85b9fc8d829a6dbba277c4dc366272b3b4968892916a0764f7ed2c699a7cd0956339a67060d250c825d7cbf1653b49f296d7d088e0d93c415209d69f6b8d84ea82d4c75acf6e38ee4ffc3ee09dd68d58b681e4a3ca7762d0fc1f70b0df6daa78745e34ffb39e6c4df5418e414b5838d42ebd6ca659f26f44db3e3340d70e8146d2994e791da318c1da7f43258e4298868af4970fe3d58973d3ef1918ab4e8fa04b8512945489a1be4da62b1d43b03"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0xa8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x44, 0x1, "19ad0a494db35ce2a2d5aba7b21f42fe44309930754295c3f40a98d586648b6df2253ccf86400288104a870bf16c79315247344296b138fec488740ed568d804"}]}, @NFTA_IMMEDIATE_DATA={0x35c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaa, 0x1, "8f1814934db82fdc315496ef59b07ac2dcc07f8923b4c1f4149d182820c6166079d46fc6612af65305de6fd3ef0a537ce24ef0fa53bb4197cd6f60ea1c7b0abcecb5a736496c4dd05744f8f5d572fc088a6404eae2e7963edd88a0ec8846af4a19d4061ee9dd9bed2a513a1a34f0e9db3e0df71b2d13b9ed5a2ee4b9f85ea4bc67bee34b9de727daec6de497a093961eac73cebf442eb9c4a023c3eca626cbf427d74ca62be2"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x92, 0x1, "f52391d9aeaca6684770fe32b229cb405499e6e190fc881c144d03b0ac2cdf411a264f2351b2f7ad3558e978943305528ff29900b63a5d6df037bb605ff2b45866186f14e12b340684bb16679a13dc2d20a5807b42c712b885aeb6d60ebfec726810cc337c0e304939aba4dc3dbdaeb38ae4284aa90ea8f8d2269908db838a0dbb01a092b614fafa10c7b71992bc"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xe2, 0x1, "ed7fe38832aab9f6cd30d96d243fe4124ed2e0d4d0a86f4ba7e976a738d2e0123f96b3660d7963f8bdcd89324485724babe71e00647a80b4a3e5f13e7c21786266dd6c34e78fd2a1a51da5c53c50d18d17a5ebd018bdae59a4ce32cfb7d17fc7ecef451b767799501a722284c963591e81f72b9e482b8dd0532baa1efa1ac44302d9bdfc3e6ffe4dab3643ef0b46dfd808c384e5337ce3950364666a66f2b4c64586fdfd05b43ba206465b464d20ffc099eb6193cd26e19d904204e971df4cfd61be2d868c15c51468518c81b5720cb56654fdcdad8372dffca0af751343"}, @NFTA_DATA_VALUE={0x8a, 0x1, "7995e8fa5b36e390e674f687ed54e7c7f9aaac330f8c408da1929504c304f0fd14f9767efb51d5ab042788d12ca5aec0b98741a84f7dab9b4ae4be6d350293d5e96ec0976b6effd7200d42a673698d076cece937e7c820051493756d9f6629b5cdd3da6bd11ef0ad2b32c9afabd22b3c8b2b87c777181aae50a054bc70fe3c2aaea05d9ae1ea"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x42, 0x1, "5bf228a1c8ac17649d18ea7ad486dc162351739a0d39356e529cc2f42db5b134e6e3434f2a0fa929121718fdb861f78d320589a5b0c45ab9cbc87534e27b"}]}, @NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "9615937a2bb32dbaf04d88fe1b63ed4d1ee727bb4dfab493050ab26d0b2b440807940634b0e39d6ef9e82c12052a4b3744174045687e0f3a6f4437e0fa971b7c11e239c706c17e46e1ef4879f536bfa03f8d990df7d5495a0809fe40cf95f5896fd92ca8efbc302edf9ad4"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1930}, 0x1, 0x0, 0x0, 0x2000001}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1000000000}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r3, 0x4b67, &(0x7f0000000180)) 3.440233143s ago: executing program 8 (id=8960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000bfa8de8f003a73fb000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000bfa8de8f003a73fb000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x24, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r6, r5, 0x4, r5}, 0x10) 3.439992023s ago: executing program 3 (id=8961): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r2 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000020000000000004000001800000000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r2], 0x64}}, 0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r7, 0x0, 0x0, 0x8, 0x365) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0104000000000000004d6d2c88d8c7378022e708a35b845269dcde2980100001800b00010065787468647200000900110073797a30000000000900020073797a320000000014000000110001000069a749632f731f80471bb3670427a93f5e2ad9676653f2add5523f086cfe91a4b4e6dc269477178beb31e1bca71956b6"], 0x68}}, 0x1) 3.439556133s ago: executing program 0 (id=8962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r4}, 0x18) fsopen(&(0x7f0000000440)='xfs\x00', 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#:#*-+((-}%$#\x00', 0x0) 2.332364085s ago: executing program 8 (id=8965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.231556297s ago: executing program 7 (id=8967): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r0) 2.081960389s ago: executing program 8 (id=8968): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000000daf41df7e01726e9f09b96071d00000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pipe(&(0x7f0000000380)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x1000000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0)=0x10089, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x749, &(0x7f00000008c0)="$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") r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES16=r6, @ANYRES8=r4, @ANYBLOB="0000000000000000b7048b352f226240d04866f79712d5d129000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000020000000000004000001800000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) 2.020329331s ago: executing program 0 (id=8970): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x3, 0x7, 0x1ff, 0x6, 0x35}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x4004, 0x894, 0x0, 0x2}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 1.985376541s ago: executing program 7 (id=8971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x9}}]}, 0x38}, 0x1, 0x7}, 0x0) (fail_nth: 2) 1.698148337s ago: executing program 5 (id=8972): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x2056, &(0x7f0000000000)={@broadcast, @random="4983121b85a1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x2020, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x200, "51689209c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc02733cd0d0698f44cdbd3f5d84ad37b5e7af38b258d90d4495f43100f47318f4bff0596d73f981a22fbb9e0efb5fd1fb8a580c161bc9cb5822a4233baf5b07941c6529c553e450a4d4f81ff19509fc97af68ed80ed63eb64e2ca76348c5a4f04b99b127e8e7425752a9d6a6a58a7643819048ae80b53e934528a999badd4d75f984b68459e765f34b540a1a46bf54a963aeefca5eb5019e35c8a00c8feefcb0cf6358ca9a99833f8a727c88ff20001684f46a22bb7ab0a45eaac8d58df93a42fcf329294e70f881baf99335f7986ce26e53c05f4b0bd98dd1053c85223004608e38f90bbca8fbdf8a13ca60a0aa6967ac86bdd32f71f93294e3b3549eff9fead2df9e4b7ce964dc37604b9db0add86e5eca23388574f3165844815a47b132653ddc7f13512a8056496c5f8f2296f2bb7c1dc5c0279dd8cb2ee2f5767fabbdc614be0ed94523de56cce4eb0820c68305b4cbad4077747e9b9893132e407945eaae83e609b97372b619d24754711bd67aaf8a6335b63713c5469a395bf1d8d77c8d2940c3e17c5ae6b927e9b23eb72420e469cd3993c701bdad0c7dd6ada16d6a1623a9845536c5cbba1e205d23f7b298bee155343b82f4bdf3fc40c57b9a2acad7950fc4f0679cbf169c939b80b217b263964a33f3738dd9039928395ecf89030d8d0e869360b1141c02aa70255a9d8a251159a831c65fdc25979de7fe65b8bff4261d9cef4a3db6cc8a926e7ae4141803a4459748270a3269b8c9884fb5739c4cb4863731559e57fa3a78320e3f5ef83ead3fec93e636653262b70b9441d8c7c2054e61c597ca11a584988ff3a06adeca96d80177e3bf8469127ebf9a34a2433cf888aa571068cb777c88eb7923f49465a20f1b974a57bc055cf2469bb29b2269a5214a754e4146c1008b1901fef880121dfaa2708e21ed00fb5ba4b7ff3065f736f61267e8c15f0d3f0b87273d7ae85094fbb85a93fd03f861816912c8e7fe2270193e2b8dda5757caa2f64fe1edac5b1043907a2efad1e7b0265e68de3811372a1a941b5976c93d1db36ef8b378ecb1fd476d4ba50ee6dcbc0f2a6f221b5cfd8ddbf431b505ea4e92209d17fe8c4da46e58c907affe8c6195602067b537110b2cdd841840b8b53bfcfeb110ac97e1f01d13d1331ad37f5d26bfaa6202afdd2127b8fc859fb5c0890cc357b60db9754e8fd86de3beda5ef558e9278f938b4dae58e254faecbff6e4b4a02f5d72a2f11d50211e2f4a26c10008c6d09cbb893260e4c560361790912864ec14ed8e6e17403f6548e84e097029c676fac4cfb51d4e20e73fc64ed4fec1fc038c7b4af4f52194876d96e68459f2106d4c007d28296c46aea52bcd5a16d63fb60284f943977895b5cf754f5320f19116a4cf175e6ac59be4350cd505b3f9d17265158cff2c7af453be5b2d1723d5aaf45110562d8f005b71aca40160c9050d19331211baca4e52b217772662f9e69f679c2732b963e2b4234930a45f0528f530f0d28f67aaa74550c1079619cc5e54264d80a9bf956efe93a741e42eff8207a6d4f50f9cc4ee8adfeac2e56beb6826f4c1cd7ecdadab5c1cb7b81175a6e997c7641b93ab9ee1f3f02a7c052f19afbe3cefd4d10effb5a3976273bd9220fb783ad50ffba3c7efa0d159466c8cd2f3df708056b656201c9e913ad0a26fbf04b2567a9b3f9e7fa426226f2375c34e0130ab9db11d8e21edba4ede8e0fa20bd68afbe67005019dcb7b5235ff73895f73c88651b5202bbd4c99e02b0dc68614317caa2893c7a76078b04e54b33eb216bf55763a5445f2e6637116cba71c8c1452e1321b9e8b3e8e240c03cc30a105692a96763c0c0a1fed4a5790ed95517dcab48985b78e04df14842654ad783b7646c55f5399cf1a90aec4c1e97c2a7e6f46da01b31f00f9866192b66bdf4c50db0bab913205f7006c9a42ca7f01afc8cfba7d88b40cc049bc621bf4252467a6add73c49b83f2942a4a6bbbf88086b34ca5b169e7f5d9c7cb2ff0cc974ca7d573cff47bb22ace7bfc8d4ff989d56f8fc3d15efc737269e103b94afe4fc74f9ab015507ede9d60e267d3cd8967b2d4bd37cb7f2b1500900541eab821ed86e28b4c0b2049d5b98920947727290db885d9014b1c45fdd63e013476becb1e2c8791736bfeab8677ef848d4f5815ff014a3982d7412b2d1e175593b247aeadeadb22b767e24b03d4298c6b4aac4c2b13f998ab7dba8e0990b254f919882f017062ce8826f5bdb2e54dedc7fa4b0685b51728def701847c46926be371ba3287044a9419244f1de62d3752e8896bd04531fe0bd19e018b4c45427b1daaaed04e1f62812b2a659e524db4f89ad9f263f3d55c8c6abd6dc6d4a9abe90ed4bfc1c808fae84f118af3cec0ff74c1221fda060b6beac46bef6ee8017ac7484b75fcf83604c64d7953cd48904955bbdd6f0ccaca4966f41eafcdf51f569a9b55f30c8c0f7226afd1c663fa134ea1f43c44f19714c2bcad5bc2a3f726b8445c1271343ea21f4ea73089134e0342a363353fa8decc37ad8c63b72312302ae86b8891bb3cf139a66d63eb4ce50930f037b28deb9c96cbd64374cf920a6ad579a54801616f8b0b312ea2ba42f324e3b50fcde32632b24dcb30cc3dc0603b21c764cf864febd0e9034a49ec58e7218bf19a4aa8cb9f427613555f52633f9f16ea3acac92c0d093b0e62634868ef0c05e47af25028de2774795ed773fdf9ca2e02e9e21b57adcb5814f0d7136300709a55f3fb20dd598bb0e0ddbdb2a625becf97dada4d8698fbd1789a7e25028f48728091ec781cec123291c1f552de0e1594e51bdd9cb15e1045b44468e34a50e8b481e50710eb8d12c2becb603bae59d3db19d1e508dc3d3fe9358ca1d675cec5a1b5d1ac0bfb0aad31e31f052cfc85b7e4455cae348f6f2d66e7c3dde295c1721291bc3811f96e10af7072ed8e014d760e72dbf0d37a727e2117e163bea54c948a69f1cd710f1af5650c7c4ae8b7193226172bcd980253ba43c0362f77c4384fbfaf16bde5855035096cdb8c751a77fe761fa4e1f956b67a652d7b38ab5538682c8135e616f54006a1e68c1cf151f9a161fffd0222529941f6fda0549425e246b8f5fc34e9a00cc5f3370bf15b8fa993dc7ec7ae2da8e1a41fc9052dda98d35d11b82146ab92b79607a2179b0a7148d1c4902b40bdc63b4f945ebc2793a52bc30d2fbe0d409087ba9db071b12fb7f3fbd1c355a4c9d9f387fb12d05654096e58489d3cf1bf0fe8a929aea17b10bf77498dea0147a904310f737f5d72d3758ccf0ca023ccbaff5ab9945b0672aad8b5180daee7af459d08e0375f41395189159b1803ae1fe16a8f343bce73a407b6cc04d8e67b6201afb13a430c3d055e36bb5bd58a4d6b7577ce8b68cf24ed528af562372b37a879217689dc77cfc6d85b23a7efaed131cd95ec8150a8a24bcbb5bf0de1d1c9364886804b37d089465ee576dc5770cce1295404e60c27c9de14f560040d1cc48284d471f6c93e81f84a43b0358576c96f7acdea57b7752957911938e9484b82ea72b89bf2a569065f04f97e4db53e827b689beeb0c9f2352f248c705ac5f712da65ee5ce0ce8d8784142f288e51c5be76822264a368d9cf82fc7ac83ef022778978570bb922c32cc67e9f08eac91ed67963951664a03575b051e18a21b4277dc07e180f9f6dd8c4e9bdfac06999f2b5f89ad2b0cb9f03bf7ce7aa5cf0b5eae8b7fc1fa9786ac7704919d57b6ebaaa93875d0c5de31e62126a02e3ee9fa1323981fbe5a435732cac068313fc08f4f36449a1e73126fa4e655ec826d13219ca9fa5ac3f140d99320b61f017494a76d29f3a45637be658b41b71fd77179cf4823e65e37c0f47a6425640a24d4420b324daa908d50a7b62a5caf713c14227552958c2c631484f8532aed4adc981646b7d3299e0b3be3dd93185f8b1fd9bdf4cb341a4cd01dce4ad6946ca5507d3294fc22cfb7b72b45018da7fe313bec3040d1873ec1e64c7836d6d06aa1bd0d7d9f61168231c2fee125c395f3738c671cc7af55e943f9fe5aac35d5d09557da498517235be5005d3ac4fdf89f3a0b1f6912cee977fd18e5aacdd6f5914865503a48df1dba7c7e4c8d3260b438009901e0858bbf23c8b8f1bd1637bd5e5df8fb2fa40c4fef381559e3890799f57de382b0ab6dca3aae7aac868853b88b6e7ddc1ea35c8ea81103b744fdc0cd61217bc1c2231f235a0eaf79ebef295ba79a8b9d3ed2741eeb4dcb1087717ca30a9ca98af7c4cebcd53ca7e5ee7f3326ca352366831d6275b2657b3b399f7287d798a6dd7633634b37b1f61fff60e6277e3dd28daf25019956af9d1e7e90c76485bc0b60ce0461445b0d0ed687e8e99d2ca26c4f4487bd688edb908bc7ef897c597c453ba202478fcdbdbb722937b62996331b714260bfd70c6302d4fae9cf98c8296c6d76a8f644d9aacade6a23ad7639e23c9404856eb651aa13532c385adf2568f4e93f3c7057a53ffd29dea9653d2c220127ae8262f3455d2a2f4bc07d82b26c76ab06622be857c0c90f50c1155635c519ea1c5fd6cd43e7d9776676b45b86f6044ce77d41d80e6a0bab4de174c56efe7932bd7cdc47993ad48dabc2105ffbc5d9658741f60c3e99a81e77ba3c4d1b3bdc7a0a470b0346e3afca55936589134c9236882fc75cc07666cc14ccb03896e91d3b74e36d56ef9de9a4757ab29d4755bf5c5ce758f7f78e709198e2b62b7eba805d6c00520be4d85db68cb235890e58b69ec4971d4984e1f015841b1a66b736145b7259d5611dd8f9af5fcc4015a4b61cd9761da4ca23ec80d12fd18e3c4e18969ef262cbb5fc80c61fdfe7cbabb775ce6ce4d60cad7837e69b9a0318b580d276727890530289683ede4f924f58b0b8891def5dd85c374f5b74cb71964e181a36b0202d9587cd682e03d45eb9a49040e4830ceb494eba6ccd74353d7c55a3fc463e95b68afc447cb698ddbea5acd5f7f069b8392bf000523c81a3d37f7ebdf4b109099391d54443f39ba77f5431bafebe9d15780145a1b1903642a94be0e78118a0d9d4ae6f6dc43dabc9d58a115a12baef6e8406c7659f07d593aed65a37d2e2ee2ec1064435c2aef8031585b0c8283578222abd27488cce4c25bfd8ffce21cf49ac271ccfaf002d29b506a2e20f5e038a9ee5a51d2313e8e91035f3ce438733bbfe77a6fb79c10aff61e74603e84979649353b716c30b575df8b974e84e13c512e4924e8b8908c3ae7b137f7231c60e1874b02010c034ea680605cbe59bcc29db8eaf34d4cf3a14565e9b0a5e677487ad5916626f229836882781d4f396ccd4e9087b919ae8ddbff9bc901ca1be98d5857b161e303c41a6954232fbd1ced71faeec2b2c715d3a717842116631db249fc77b357be9a60d53545cbcd589f6d4e8daecec35452d7b38f6ad06f4d2d6fbddf01e2bbcacd9796f8b8d3e9ae91fd345685c3adbaff23a1cb397b40ed21001387a3024cd44ededd116b24f5290fc94923fcf2d3e041af84713df8b48ec3c506857697383ed4605cc31e6653f39db2c99886e0c3c94ab1cc86e63c2d33b2402e380a3576f9e79ea5293d21812b4be6896e564f56f9bef10b1e4003e428340f4b289ba01ebc37d792e57c9858a36a8462180724a214de9b9e44a24561b709ba8a59fe9237958c1400b4427dcc748770e037a1024dc6efff8a8066fe32d8c795539b9bf151909d2df6959fcc5559d74250b4e25ce1897987b1"}, {0x0, 0x200, "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"}, {0x4, 0x1, "a22d4ba30d6b"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='task\x00') getdents(r4, &(0x7f0000000340)=""/35, 0x23) recvmsg$can_j1939(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000002080)=""/173, 0xad}, {&(0x7f0000002140)=""/59, 0x3b}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, &(0x7f00000031c0)=""/118, 0x76}, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r10 = inotify_init1(0x800) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) inotify_add_watch(r10, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.407131063s ago: executing program 7 (id=8973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) unshare(0x20000400) r4 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.309045974s ago: executing program 5 (id=8974): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef", 0x96}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42c", 0x12}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.308504384s ago: executing program 0 (id=8975): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1}, 0x48) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents64(r6, &(0x7f0000000000)=""/38, 0x26) getdents(r6, 0xffffffffffffffff, 0x5a) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x1, 0x191, &(0x7f00000002c0)="$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") rmdir(&(0x7f0000000000)='./file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r7, 0x0, 0x1, 0x4}}, 0x20) 1.232582076s ago: executing program 5 (id=8976): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (fail_nth: 18) 766.026805ms ago: executing program 7 (id=8977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) 765.477255ms ago: executing program 0 (id=8978): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRES8], 0xc) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{0x1}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 649.540897ms ago: executing program 5 (id=8979): r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6_vti0\x00'}}, 0x1e) close(r0) 649.103318ms ago: executing program 0 (id=8980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4010000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850007000c000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 618.716188ms ago: executing program 8 (id=8981): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='ext4_insert_range\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={0x0, @l2tp={0x2, 0x0, @multicast2, 0x4}, @nfc={0x27, r6, 0x0, 0x2}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2d}, 0x1, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)='wg0\x00', 0x8, 0x6, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r7}, 0x10) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) futimesat(r8, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r9) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854) 491.404461ms ago: executing program 5 (id=8982): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010049000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64, @ANYRES64, @ANYBLOB="00000000010000"], 0x48}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7008fedbdf25080003000100000008004a0001000000080001000000000008004b00130063"], 0x30}, 0x1, 0x0, 0x0, 0x200448a6}, 0xc094) 437.318291ms ago: executing program 5 (id=8983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000200000000000000090000009c30", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085c429f581bdb74a000000862000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x98, &(0x7f0000000580)=""/152, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[r1], &(0x7f0000000380)=[{0xfffffffe, 0x2, 0x4, 0x7}, {0x4, 0x1, 0x10, 0x4}], 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r2, 0x0, 0x54, 0x1000, &(0x7f00000004c0)="4fffb541e59d5f72cef3b0b8488d4e5ebf484ad4b64a2a2925a3d353b0b228d4bffa7e9c1b055edb84626d0b74205a0526d7aea55d7446b73458e7edd8352abd8877d3fa3f7e225c17a45c68b38a8a982eaca115", &(0x7f0000001e00)=""/4096, 0x6, 0x0, 0x85, 0xa4, &(0x7f0000000800)="8e369dc6e3a618319dc1f34f9d66559072a0870adee7056db3eef416903d095c3e7287176bf48473ba3e136d7f353730e3aa1ecc68196b52b11746ee8a1ef72366c8a0981e5d5d4e293bdbdfb460d41dcf362b2f18a4c71cd283e0a2a4e6605e030658cdbe648ab84bc7b062eddd61b75deef50e59f3985250f4045dc2a861b03bf4bb53ce", &(0x7f00000008c0)="2ecd4fdb86f26fef7437caa542a7745e36c0951cf83df1f4032e355565fcd53db5e5be647f22c057b3c066f4c23790b7d381d6a919565461c927c779cab34e18fc6f907e70288f67fd99df753db50242050cf4454cf2446acd8693f1934f1aed29a18427553802504330cdf91ed5382fd2a0a38b7328f94b7649d4328c493131cc78421e53524bc1e451d4ada190e905a22de8046a803bf80342e94f5ef4eb6d78289611", 0x4, 0x0, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000cf00000000000000ff0000", @ANYRES32=r1, @ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0xffffffe5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1a2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x1010401, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2}) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TCSBRKP(r8, 0x5425, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff15, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x48) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 256.3µs ago: executing program 7 (id=8984): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000600)={0x0, 0xf07d, 0x2000, 0x3ffff, 0x307}, &(0x7f0000000400)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/4099, 0x1000}, {&(0x7f0000000440)=""/107}, {&(0x7f0000000500)=""/193}, {&(0x7f00000003c0)=""/18}, {&(0x7f0000000700)=""/148}, {&(0x7f0000002840)=""/245}, {&(0x7f0000002940)=""/226}], 0x11b, 0x1d}) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_enter(r1, 0x8aa, 0xeffd, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000000)=0x9, 0x0, 0x4) 0s ago: executing program 7 (id=8985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) (fail_nth: 5) kernel console output (not intermixed with test programs): [ 661.487786][T30539] program syz.5.8508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.498419][ T29] audit: type=1326 audit(2000000010.000:34455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30551 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b4f0ceba9 code=0x7ffc0000 [ 661.498451][ T29] audit: type=1326 audit(2000000010.000:34456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30551 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7b4f0ceba9 code=0x7ffc0000 [ 661.553480][T30559] loop8: detected capacity change from 0 to 512 [ 661.607588][T30559] EXT4-fs error (device loop8): ext4_orphan_get:1392: comm syz.8.8515: inode #15: comm syz.8.8515: iget: illegal inode # [ 661.663049][T30559] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.8515: couldn't read orphan inode 15 (err -117) [ 661.695901][T30559] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.736670][T30565] loop5: detected capacity change from 0 to 1024 [ 661.767965][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.789250][T30565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.806690][T30575] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8521'. [ 661.849099][T30581] lo speed is unknown, defaulting to 1000 [ 661.881357][T29998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.004077][T30581] lo speed is unknown, defaulting to 1000 [ 662.147534][T30602] loop3: detected capacity change from 0 to 2048 [ 662.182963][T30602] EXT4-fs (loop3): failed to initialize system zone (-117) [ 662.204199][T30602] EXT4-fs (loop3): mount failed [ 662.209369][T30607] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8527'. [ 662.423386][T30607] loop8: detected capacity change from 0 to 2048 [ 662.480895][T30607] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.8527: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 662.514147][T30607] EXT4-fs (loop8): get root inode failed [ 662.519828][T30607] EXT4-fs (loop8): mount failed [ 662.712424][T30623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8533'. [ 662.722101][T30623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8533'. [ 662.745587][T30623] lo speed is unknown, defaulting to 1000 [ 662.811973][T30623] lo speed is unknown, defaulting to 1000 [ 663.050936][T30627] bpf: Bad value for 'gid' [ 663.151907][T30631] loop5: detected capacity change from 0 to 512 [ 663.255618][T30629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.265013][T30629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.270586][T30633] vlan0: entered allmulticast mode [ 663.282631][T30633] dummy0: entered allmulticast mode [ 663.396978][T30634] loop5: detected capacity change from 0 to 2048 [ 663.424356][T30634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 663.538145][T30633] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:169: inode #12: comm syz.5.8537: inline data xattr refers to an external xattr inode [ 663.906893][T30654] IPv4: Oversized IP packet from 127.202.26.0 [ 664.107885][T30635] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 664.188034][T30635] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 664.200559][T30635] EXT4-fs (loop5): This should not happen!! Data will be lost [ 664.200559][T30635] [ 664.210227][T30635] EXT4-fs (loop5): Total free blocks count 0 [ 664.216365][T30635] EXT4-fs (loop5): Free/Dirty block details [ 664.222270][T30635] EXT4-fs (loop5): free_blocks=2415919104 [ 664.228125][T30635] EXT4-fs (loop5): dirty_blocks=8208 [ 664.233442][T30635] EXT4-fs (loop5): Block reservation details [ 664.239460][T30635] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 664.295209][ T48] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 664.566231][T30658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8544'. [ 664.794483][T30674] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8550'. [ 665.211752][T30677] loop8: detected capacity change from 0 to 2048 [ 665.252527][T30677] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.8550: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 665.347330][T30677] EXT4-fs (loop8): get root inode failed [ 665.353006][T30677] EXT4-fs (loop8): mount failed [ 666.489414][T30719] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8566'. [ 667.215902][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 667.215988][ T29] audit: type=1326 audit(2000000015.519:35030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.271039][ T29] audit: type=1326 audit(2000000015.519:35031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.294745][ T29] audit: type=1326 audit(2000000015.556:35032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.318382][ T29] audit: type=1326 audit(2000000015.556:35033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.342132][ T29] audit: type=1326 audit(2000000015.556:35034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.365806][ T29] audit: type=1326 audit(2000000015.556:35035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.389342][ T29] audit: type=1326 audit(2000000015.556:35036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.412917][ T29] audit: type=1326 audit(2000000015.556:35037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30736 comm="syz.5.8571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 667.649983][T30720] loop3: detected capacity change from 0 to 2048 [ 667.704011][T30720] EXT4-fs (loop3): failed to initialize system zone (-117) [ 667.718613][T30720] EXT4-fs (loop3): mount failed [ 667.776258][T30749] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8575'. [ 667.785368][T30749] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8575'. [ 667.857089][T30754] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8574'. [ 667.940553][T30759] loop8: detected capacity change from 0 to 256 [ 668.003724][T30759] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30759 comm=syz.8.8577 [ 668.042382][ T29] audit: type=1400 audit(2000000016.305:35038): avc: denied { audit_write } for pid=30758 comm="syz.8.8577" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 668.093327][ T29] audit: type=1107 audit(2000000016.305:35039): pid=30758 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 668.120465][T30755] loop5: detected capacity change from 0 to 2048 [ 668.152605][T30755] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.8574: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 668.170844][T30755] EXT4-fs (loop5): get root inode failed [ 668.176522][T30755] EXT4-fs (loop5): mount failed [ 668.198991][T30763] loop3: detected capacity change from 0 to 256 [ 668.234542][ T48] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 668.242457][ T48] FAT-fs (loop8): Filesystem has been set read-only [ 668.265301][ T48] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 668.281996][ T48] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 668.299308][ T48] FAT-fs (loop8): error, corrupted file size (i_pos 196, 2097152) [ 668.360413][T30774] loop3: detected capacity change from 0 to 512 [ 668.595122][T30796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8588'. [ 695.384616][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8593'. [ 695.400574][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 695.400591][ T29] audit: type=1400 audit(2000000041.889:35079): avc: denied { ioctl } for pid=30802 comm="syz.8.8589" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95387 ioctlcmd=0x9412 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 695.403222][T30806] loop3: detected capacity change from 0 to 128 [ 695.432862][ T29] audit: type=1400 audit(2000000041.899:35080): avc: denied { ioctl } for pid=30802 comm="syz.8.8589" path="socket:[95388]" dev="sockfs" ino=95388 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 695.463904][ T29] audit: type=1400 audit(2000000041.899:35081): avc: denied { remount } for pid=30802 comm="syz.8.8589" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 695.486387][ T29] audit: type=1400 audit(2000000041.927:35082): avc: denied { execute_no_trans } for pid=30800 comm="syz.5.8593" path="/58/file1" dev="tmpfs" ino=330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 695.513614][ T29] audit: type=1326 audit(2000000041.983:35083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.537277][ T29] audit: type=1326 audit(2000000041.983:35084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.560910][ T29] audit: type=1326 audit(2000000041.983:35085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.585029][ T29] audit: type=1326 audit(2000000041.983:35086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.608665][ T29] audit: type=1326 audit(2000000041.983:35087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.632354][ T29] audit: type=1326 audit(2000000041.983:35088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30804 comm="syz.3.8592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 695.658063][T30810] IPv6: Can't replace route, no match found [ 695.704065][T30818] loop7: detected capacity change from 0 to 1024 [ 695.710866][T30818] EXT4-fs: Ignoring removed oldalloc option [ 695.716907][T30818] EXT4-fs: Ignoring removed bh option [ 695.722563][T30812] loop5: detected capacity change from 0 to 164 [ 695.730623][T30818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 695.800389][T30812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8595'. [ 695.901674][T30825] lo speed is unknown, defaulting to 1000 [ 696.017338][T30825] lo speed is unknown, defaulting to 1000 [ 696.186529][T30818] EXT4-fs (loop7): shut down requested (2) [ 696.192880][T30818] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 696.203121][T30818] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 696.218221][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8595'. [ 696.231183][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8595'. [ 696.231511][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.250108][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8595'. [ 696.309571][T30812] rock: directory entry would overflow storage [ 696.315967][T30812] rock: sig=0x4f50, size=4, remaining=3 [ 696.321544][T30812] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 696.333518][T30836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8600'. [ 696.343340][ T3393] IPVS: starting estimator thread 0... [ 696.367862][T30834] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8601'. [ 696.376980][T30842] netlink: 'syz.7.8604': attribute type 6 has an invalid length. [ 696.401598][T30844] syz_tun: entered allmulticast mode [ 696.418434][T30844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8605'. [ 696.428961][T30846] netlink: 'syz.7.8606': attribute type 6 has an invalid length. [ 696.454624][T30837] IPVS: using max 2928 ests per chain, 146400 per kthread [ 696.483058][T30850] netlink: 'syz.0.8608': attribute type 6 has an invalid length. [ 696.552219][T30862] netlink: 277 bytes leftover after parsing attributes in process `syz.8.8613'. [ 696.609339][T30866] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 696.617928][T30866] mroute: pending queue full, dropping entries [ 696.654211][T30858] loop7: detected capacity change from 0 to 512 [ 696.661355][T30858] EXT4-fs: Ignoring removed nobh option [ 696.680828][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8612: corrupted inode contents [ 696.692953][T30858] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8612: mark_inode_dirty error [ 696.706027][T30874] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8616'. [ 696.706277][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8612: corrupted inode contents [ 696.727129][T30858] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8612: mark_inode_dirty error [ 696.742196][T30858] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8612: Failed to acquire dquot type 0 [ 696.759959][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8612: corrupted inode contents [ 696.772335][T30858] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8612: mark_inode_dirty error [ 696.798436][T30879] FAULT_INJECTION: forcing a failure. [ 696.798436][T30879] name failslab, interval 1, probability 0, space 0, times 0 [ 696.811184][T30879] CPU: 0 UID: 0 PID: 30879 Comm: syz.5.8617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 696.811296][T30879] Tainted: [W]=WARN [ 696.811304][T30879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 696.811318][T30879] Call Trace: [ 696.811325][T30879] [ 696.811335][T30879] __dump_stack+0x1d/0x30 [ 696.811361][T30879] dump_stack_lvl+0xe8/0x140 [ 696.811385][T30879] dump_stack+0x15/0x1b [ 696.811485][T30879] should_fail_ex+0x265/0x280 [ 696.811512][T30879] ? __pfx_cond_bools_destroy+0x10/0x10 [ 696.811559][T30879] should_failslab+0x8c/0xb0 [ 696.811581][T30879] kmem_cache_alloc_noprof+0x50/0x310 [ 696.811608][T30879] ? hashtab_duplicate+0xfe/0x360 [ 696.811630][T30879] ? __pfx_cond_bools_destroy+0x10/0x10 [ 696.811685][T30879] hashtab_duplicate+0xfe/0x360 [ 696.811708][T30879] ? __pfx_cond_bools_copy+0x10/0x10 [ 696.811739][T30879] cond_policydb_dup+0xd2/0x4e0 [ 696.811803][T30879] security_set_bools+0xa0/0x340 [ 696.811832][T30879] sel_commit_bools_write+0x1ea/0x270 [ 696.811857][T30879] vfs_writev+0x403/0x8b0 [ 696.811927][T30879] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 696.811961][T30879] ? mutex_lock+0xd/0x30 [ 696.811984][T30879] do_writev+0xe7/0x210 [ 696.812054][T30879] __x64_sys_writev+0x45/0x50 [ 696.812076][T30879] x64_sys_call+0x1e9a/0x2ff0 [ 696.812095][T30879] do_syscall_64+0xd2/0x200 [ 696.812127][T30879] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 696.812221][T30879] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 696.812254][T30879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.812280][T30879] RIP: 0033:0x7f8bdfc2eba9 [ 696.812296][T30879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.812354][T30879] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 696.812383][T30879] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 696.812398][T30879] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 696.812413][T30879] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 696.812427][T30879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 696.812441][T30879] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 696.812462][T30879] [ 696.827709][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8612: corrupted inode contents [ 696.946948][T30882] loop5: detected capacity change from 0 to 2048 [ 696.954565][T30858] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8612: mark_inode_dirty error [ 696.969609][T30882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 696.973661][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8612: corrupted inode contents [ 697.097960][T30858] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 697.106832][T30858] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8612: corrupted inode contents [ 697.120052][T30858] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8612: mark_inode_dirty error [ 697.128423][T29998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.149741][T30858] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 697.166152][T30858] EXT4-fs (loop7): 1 truncate cleaned up [ 697.180295][T30858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.196966][T30858] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.222333][T30891] loop5: detected capacity change from 0 to 512 [ 697.321708][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.349872][T30895] SELinux: failed to load policy [ 697.385720][T30910] loop5: detected capacity change from 0 to 128 [ 697.402833][T30912] loop7: detected capacity change from 0 to 1024 [ 697.412352][T30903] loop3: detected capacity change from 0 to 1024 [ 697.428462][T30912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 697.441498][T30903] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 697.449329][T30912] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.452482][T30903] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 697.466827][T30912] netlink: 'syz.7.8630': attribute type 6 has an invalid length. [ 697.495008][T30903] JBD2: no valid journal superblock found [ 697.500778][T30903] EXT4-fs (loop3): Could not load journal inode [ 697.529005][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 697.561100][T30920] bio_check_eod: 10811 callbacks suppressed [ 697.561116][T30920] syz.5.8629: attempt to access beyond end of device [ 697.561116][T30920] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 697.607104][T30923] loop7: detected capacity change from 0 to 1024 [ 697.621546][T30898] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 697.622707][T30925] syz.5.8629: attempt to access beyond end of device [ 697.622707][T30925] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 697.654562][T30920] syz.5.8629: attempt to access beyond end of device [ 697.654562][T30920] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 697.668421][T30925] syz.5.8629: attempt to access beyond end of device [ 697.668421][T30925] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 697.681502][T30929] loop8: detected capacity change from 0 to 128 [ 697.683956][T30920] syz.5.8629: attempt to access beyond end of device [ 697.683956][T30920] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 697.702133][T30925] syz.5.8629: attempt to access beyond end of device [ 697.702133][T30925] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 697.702598][T30923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 697.716120][T30920] syz.5.8629: attempt to access beyond end of device [ 697.716120][T30920] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 697.731096][T30923] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.753418][T30920] syz.5.8629: attempt to access beyond end of device [ 697.753418][T30920] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 697.767188][T30920] syz.5.8629: attempt to access beyond end of device [ 697.767188][T30920] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 697.786966][T30929] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 697.827162][T30925] syz.5.8629: attempt to access beyond end of device [ 697.827162][T30925] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 697.827175][T30929] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 697.872667][T30937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=30937 comm=syz.3.8635 [ 697.897858][T30923] netlink: 'syz.7.8632': attribute type 6 has an invalid length. [ 697.927326][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 697.942112][T30941] msdos: Unknown parameter 'ÿ' [ 697.969588][T30945] FAULT_INJECTION: forcing a failure. [ 697.969588][T30945] name failslab, interval 1, probability 0, space 0, times 0 [ 697.982328][T30945] CPU: 0 UID: 0 PID: 30945 Comm: syz.7.8637 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 697.982362][T30945] Tainted: [W]=WARN [ 697.982392][T30945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.982475][T30945] Call Trace: [ 697.982484][T30945] [ 697.982493][T30945] __dump_stack+0x1d/0x30 [ 697.982518][T30945] dump_stack_lvl+0xe8/0x140 [ 697.982540][T30945] dump_stack+0x15/0x1b [ 697.982568][T30945] should_fail_ex+0x265/0x280 [ 697.982625][T30945] should_failslab+0x8c/0xb0 [ 697.982652][T30945] __kmalloc_noprof+0xa5/0x3e0 [ 697.982742][T30945] ? nfc_llcp_build_tlv+0xac/0x100 [ 697.982813][T30945] ? _raw_spin_unlock+0x26/0x50 [ 697.982837][T30945] nfc_llcp_build_tlv+0xac/0x100 [ 697.982931][T30945] nfc_llcp_build_gb+0xb0/0x2f0 [ 697.982956][T30945] nfc_llcp_general_bytes+0xd9/0x1e0 [ 697.983043][T30945] nfc_dep_link_up+0xdd/0x260 [ 697.983148][T30945] nfc_genl_dep_link_up+0xdd/0x120 [ 697.983167][T30945] genl_family_rcv_msg_doit+0x140/0x1b0 [ 697.983205][T30945] genl_rcv_msg+0x422/0x460 [ 697.983261][T30945] ? __pfx_nfc_genl_dep_link_up+0x10/0x10 [ 697.983281][T30945] netlink_rcv_skb+0x123/0x220 [ 697.983302][T30945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.983339][T30945] genl_rcv+0x28/0x40 [ 697.983373][T30945] netlink_unicast+0x5bd/0x690 [ 697.983398][T30945] netlink_sendmsg+0x58b/0x6b0 [ 697.983424][T30945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.983453][T30945] __sock_sendmsg+0x142/0x180 [ 697.983481][T30945] ____sys_sendmsg+0x31e/0x4e0 [ 697.983506][T30945] ___sys_sendmsg+0x17b/0x1d0 [ 697.983544][T30945] __x64_sys_sendmsg+0xd4/0x160 [ 697.983623][T30945] x64_sys_call+0x191e/0x2ff0 [ 697.983646][T30945] do_syscall_64+0xd2/0x200 [ 697.983680][T30945] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 697.983734][T30945] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 697.983788][T30945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.983809][T30945] RIP: 0033:0x7fcac984eba9 [ 697.983826][T30945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.983846][T30945] RSP: 002b:00007fcac82b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.983943][T30945] RAX: ffffffffffffffda RBX: 00007fcac9a95fa0 RCX: 00007fcac984eba9 [ 697.983958][T30945] RDX: 0000000000040040 RSI: 0000200000000d40 RDI: 0000000000000004 [ 697.984043][T30945] RBP: 00007fcac82b7090 R08: 0000000000000000 R09: 0000000000000000 [ 697.984055][T30945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.984067][T30945] R13: 00007fcac9a96038 R14: 00007fcac9a95fa0 R15: 00007ffff858dd68 [ 697.984139][T30945] [ 697.986331][T24562] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 698.102517][T30953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30953 comm=syz.5.8642 [ 698.288265][T30960] loop8: detected capacity change from 0 to 1024 [ 698.402848][T30960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 698.431053][T30960] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.447910][T30960] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.8640: lblock 0 mapped to illegal pblock 0 (length 1) [ 698.462428][T30960] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 698.474836][T30960] EXT4-fs (loop8): This should not happen!! Data will be lost [ 698.474836][T30960] [ 698.507310][T30985] FAULT_INJECTION: forcing a failure. [ 698.507310][T30985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.520458][T30985] CPU: 0 UID: 0 PID: 30985 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 698.520496][T30985] Tainted: [W]=WARN [ 698.520504][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.520569][T30985] Call Trace: [ 698.520577][T30985] [ 698.520585][T30985] __dump_stack+0x1d/0x30 [ 698.520606][T30985] dump_stack_lvl+0xe8/0x140 [ 698.520625][T30985] dump_stack+0x15/0x1b [ 698.520649][T30985] should_fail_ex+0x265/0x280 [ 698.520675][T30985] should_fail+0xb/0x20 [ 698.520697][T30985] should_fail_usercopy+0x1a/0x20 [ 698.520740][T30985] _copy_from_user+0x1c/0xb0 [ 698.520775][T30985] ___sys_recvmsg+0xaa/0x370 [ 698.520799][T30985] ? _parse_integer+0x27/0x40 [ 698.520826][T30985] do_recvmmsg+0x1ef/0x540 [ 698.520866][T30985] ? fput+0x8f/0xc0 [ 698.520892][T30985] __x64_sys_recvmmsg+0xe5/0x170 [ 698.520917][T30985] x64_sys_call+0x27a6/0x2ff0 [ 698.520938][T30985] do_syscall_64+0xd2/0x200 [ 698.520996][T30985] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 698.521018][T30985] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 698.521043][T30985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.521113][T30985] RIP: 0033:0x7f8bdfc2eba9 [ 698.521131][T30985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.521150][T30985] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 698.521171][T30985] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 698.521185][T30985] RDX: 0000000000000002 RSI: 0000200000000380 RDI: 0000000000000006 [ 698.521200][T30985] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 698.521268][T30985] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 698.521281][T30985] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 698.521310][T30985] [ 698.723245][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 698.801695][T31002] loop5: detected capacity change from 0 to 512 [ 698.815456][T31005] netlink: 'syz.8.8653': attribute type 30 has an invalid length. [ 698.837869][T31002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.865071][T31002] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 698.887033][T31013] loop8: detected capacity change from 0 to 512 [ 698.943140][T31013] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.988990][T31013] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.020574][T31023] lo speed is unknown, defaulting to 1000 [ 699.027077][T31023] lo speed is unknown, defaulting to 1000 [ 699.032992][T31023] lo speed is unknown, defaulting to 1000 [ 699.066641][T31023] infiniband sz1: set down [ 699.071180][T31023] infiniband sz1: added lo [ 699.075757][T14238] lo speed is unknown, defaulting to 1000 [ 699.089404][T31026] FAULT_INJECTION: forcing a failure. [ 699.089404][T31026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.102564][T31026] CPU: 1 UID: 0 PID: 31026 Comm: syz.3.8667 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 699.102634][T31026] Tainted: [W]=WARN [ 699.102642][T31026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.102656][T31026] Call Trace: [ 699.102664][T31026] [ 699.102673][T31026] __dump_stack+0x1d/0x30 [ 699.102698][T31026] dump_stack_lvl+0xe8/0x140 [ 699.102735][T31026] dump_stack+0x15/0x1b [ 699.102750][T31026] should_fail_ex+0x265/0x280 [ 699.102774][T31026] should_fail+0xb/0x20 [ 699.102824][T31026] should_fail_usercopy+0x1a/0x20 [ 699.102852][T31026] _copy_from_user+0x1c/0xb0 [ 699.102886][T31026] ___sys_sendmsg+0xc1/0x1d0 [ 699.103005][T31026] __x64_sys_sendmsg+0xd4/0x160 [ 699.103031][T31026] x64_sys_call+0x191e/0x2ff0 [ 699.103055][T31026] do_syscall_64+0xd2/0x200 [ 699.103111][T31026] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 699.103139][T31026] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 699.103170][T31026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.103253][T31026] RIP: 0033:0x7fda9ae5eba9 [ 699.103272][T31026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.103293][T31026] RSP: 002b:00007fda998bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.103337][T31026] RAX: ffffffffffffffda RBX: 00007fda9b0a5fa0 RCX: 00007fda9ae5eba9 [ 699.103391][T31026] RDX: 0000000020000010 RSI: 0000200000001000 RDI: 0000000000000003 [ 699.103405][T31026] RBP: 00007fda998bf090 R08: 0000000000000000 R09: 0000000000000000 [ 699.103420][T31026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.103431][T31026] R13: 00007fda9b0a6038 R14: 00007fda9b0a5fa0 R15: 00007fffb68c4bd8 [ 699.103448][T31026] [ 699.103830][T31023] RDS/IB: sz1: added [ 699.294979][T31023] smc: adding ib device sz1 with port count 1 [ 699.351739][T31023] smc: ib device sz1 port 1 has pnetid [ 699.357706][T14238] lo speed is unknown, defaulting to 1000 [ 699.369291][T31023] lo speed is unknown, defaulting to 1000 [ 699.433570][T31023] lo speed is unknown, defaulting to 1000 [ 699.435609][ T4647] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 699.472547][ T4647] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 2048 with error 28 [ 699.482779][T31043] loop3: detected capacity change from 0 to 512 [ 699.485068][ T4647] EXT4-fs (loop5): This should not happen!! Data will be lost [ 699.485068][ T4647] [ 699.501049][ T4647] EXT4-fs (loop5): Total free blocks count 0 [ 699.506897][T31023] lo speed is unknown, defaulting to 1000 [ 699.507045][ T4647] EXT4-fs (loop5): Free/Dirty block details [ 699.518715][ T4647] EXT4-fs (loop5): free_blocks=65280 [ 699.524248][ T4647] EXT4-fs (loop5): dirty_blocks=8189 [ 699.529585][ T4647] EXT4-fs (loop5): Block reservation details [ 699.535719][ T4647] EXT4-fs (loop5): i_reserved_data_blocks=8189 [ 699.596244][ T4647] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 2054 with max blocks 2048 with error 28 [ 699.633265][T31023] lo speed is unknown, defaulting to 1000 [ 699.651882][T31045] loop7: detected capacity change from 0 to 512 [ 699.668856][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.682946][T31045] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 699.720918][T31023] lo speed is unknown, defaulting to 1000 [ 699.734543][T31045] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 699.777249][T31057] loop3: detected capacity change from 0 to 1024 [ 699.785164][T31052] team_slave_0: entered promiscuous mode [ 699.792200][T31056] loop5: detected capacity change from 0 to 512 [ 699.800253][T31052] ipvlan0: entered promiscuous mode [ 699.801073][T31057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.806106][T31052] ipvlan0: left promiscuous mode [ 699.823060][T31052] team_slave_0: left promiscuous mode [ 699.848685][T31023] lo speed is unknown, defaulting to 1000 [ 699.964961][T31068] loop8: detected capacity change from 0 to 512 [ 699.975962][T31023] lo speed is unknown, defaulting to 1000 [ 699.984778][T31068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.036228][T27625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.043457][T31068] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 700.264984][T31086] netlink: 'syz.7.8686': attribute type 4 has an invalid length. [ 700.706547][T31094] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.755020][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 700.755040][ T29] audit: type=1326 audit(2000000046.903:35377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 700.841942][T31094] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.880991][T31098] __nla_validate_parse: 9 callbacks suppressed [ 700.881017][T31098] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.8689'. [ 700.983788][ T29] audit: type=1326 audit(2000000046.931:35378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.008167][ T29] audit: type=1326 audit(2000000046.931:35379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.032494][ T29] audit: type=1326 audit(2000000046.931:35380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.056767][ T29] audit: type=1326 audit(2000000046.931:35381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.080996][ T29] audit: type=1326 audit(2000000046.931:35382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.105321][ T29] audit: type=1326 audit(2000000046.931:35383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.129572][ T29] audit: type=1326 audit(2000000046.931:35384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.153940][ T29] audit: type=1326 audit(2000000046.931:35385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.178156][ T29] audit: type=1326 audit(2000000047.044:35386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31093 comm="syz.5.8689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bdfc2eba9 code=0x7ffc0000 [ 701.308130][T31094] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.334398][ T4618] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 701.349557][ T4618] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 513 with error 28 [ 701.362263][ T4618] EXT4-fs (loop8): This should not happen!! Data will be lost [ 701.362263][ T4618] [ 701.372202][ T4618] EXT4-fs (loop8): Total free blocks count 0 [ 701.378376][ T4618] EXT4-fs (loop8): Free/Dirty block details [ 701.384604][ T4618] EXT4-fs (loop8): free_blocks=65280 [ 701.390125][ T4618] EXT4-fs (loop8): dirty_blocks=513 [ 701.395552][ T4618] EXT4-fs (loop8): Block reservation details [ 701.401704][ T4618] EXT4-fs (loop8): i_reserved_data_blocks=513 [ 701.416607][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.445247][T31100] FAULT_INJECTION: forcing a failure. [ 701.445247][T31100] name failslab, interval 1, probability 0, space 0, times 0 [ 701.458402][T31100] CPU: 0 UID: 0 PID: 31100 Comm: syz.0.8693 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 701.458493][T31100] Tainted: [W]=WARN [ 701.458501][T31100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 701.458544][T31100] Call Trace: [ 701.458552][T31100] [ 701.458560][T31100] __dump_stack+0x1d/0x30 [ 701.458581][T31100] dump_stack_lvl+0xe8/0x140 [ 701.458616][T31100] dump_stack+0x15/0x1b [ 701.458636][T31100] should_fail_ex+0x265/0x280 [ 701.458663][T31100] should_failslab+0x8c/0xb0 [ 701.458692][T31100] kmem_cache_alloc_noprof+0x50/0x310 [ 701.458717][T31100] ? skb_clone+0x151/0x1f0 [ 701.458839][T31100] skb_clone+0x151/0x1f0 [ 701.458866][T31100] __netlink_deliver_tap+0x2c9/0x500 [ 701.458936][T31100] __netlink_sendskb+0xc3/0xd0 [ 701.459028][T31100] netlink_dump+0x72b/0x8a0 [ 701.459055][T31100] __netlink_dump_start+0x43e/0x520 [ 701.459076][T31100] inet_diag_rcv_msg_compat+0x10b/0x1d0 [ 701.459171][T31100] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 701.459200][T31100] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 701.459235][T31100] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 701.459345][T31100] sock_diag_rcv_msg+0x186/0x2c0 [ 701.459451][T31100] netlink_rcv_skb+0x123/0x220 [ 701.459483][T31100] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 701.459537][T31100] sock_diag_rcv+0x1c/0x30 [ 701.459563][T31100] netlink_unicast+0x5bd/0x690 [ 701.459588][T31100] netlink_sendmsg+0x58b/0x6b0 [ 701.459671][T31100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 701.459693][T31100] __sock_sendmsg+0x142/0x180 [ 701.459732][T31100] ____sys_sendmsg+0x31e/0x4e0 [ 701.459763][T31100] ___sys_sendmsg+0x17b/0x1d0 [ 701.459803][T31100] __x64_sys_sendmsg+0xd4/0x160 [ 701.459836][T31100] x64_sys_call+0x191e/0x2ff0 [ 701.459929][T31100] do_syscall_64+0xd2/0x200 [ 701.459955][T31100] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 701.460027][T31100] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 701.460106][T31100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.460130][T31100] RIP: 0033:0x7f7b4f0ceba9 [ 701.460148][T31100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.460194][T31100] RSP: 002b:00007f7b4db2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.460277][T31100] RAX: ffffffffffffffda RBX: 00007f7b4f315fa0 RCX: 00007f7b4f0ceba9 [ 701.460292][T31100] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 701.460307][T31100] RBP: 00007f7b4db2f090 R08: 0000000000000000 R09: 0000000000000000 [ 701.460321][T31100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.460409][T31100] R13: 00007f7b4f316038 R14: 00007f7b4f315fa0 R15: 00007ffdbc65b1f8 [ 701.460430][T31100] [ 701.463499][T31094] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.987577][T31123] loop8: detected capacity change from 0 to 1024 [ 702.003573][T31123] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.027326][T31123] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8703'. [ 702.075663][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.088074][T31138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8706'. [ 702.103596][T31136] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8700'. [ 702.113994][T31138] veth0_to_bond: entered allmulticast mode [ 702.174744][T31153] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.217706][T31153] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.236637][T31118] loop5: detected capacity change from 0 to 2048 [ 702.249302][T31118] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.8700: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 702.267466][T31118] EXT4-fs (loop5): get root inode failed [ 702.272848][T31154] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.8709'. [ 702.273291][T31118] EXT4-fs (loop5): mount failed [ 702.293189][T31153] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.345555][T31153] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.359659][T31138] loop3: detected capacity change from 0 to 512 [ 702.374104][T31138] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 702.389376][T31138] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8706: Failed to acquire dquot type 1 [ 702.401325][T31138] EXT4-fs (loop3): 1 truncate cleaned up [ 702.407387][T31138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.423383][T31160] FAULT_INJECTION: forcing a failure. [ 702.423383][T31160] name failslab, interval 1, probability 0, space 0, times 0 [ 702.436398][T31160] CPU: 0 UID: 0 PID: 31160 Comm: syz.5.8710 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 702.436431][T31160] Tainted: [W]=WARN [ 702.436442][T31160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.436507][T31160] Call Trace: [ 702.436514][T31160] [ 702.436522][T31160] __dump_stack+0x1d/0x30 [ 702.436549][T31160] dump_stack_lvl+0xe8/0x140 [ 702.436570][T31160] dump_stack+0x15/0x1b [ 702.436591][T31160] should_fail_ex+0x265/0x280 [ 702.436684][T31160] should_failslab+0x8c/0xb0 [ 702.436789][T31160] kmem_cache_alloc_node_noprof+0x57/0x320 [ 702.436820][T31160] ? __alloc_skb+0x101/0x320 [ 702.436842][T31160] __alloc_skb+0x101/0x320 [ 702.436863][T31160] netlink_dump+0x10d/0x8a0 [ 702.436941][T31160] ? genl_start+0x117/0x390 [ 702.436989][ T48] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.436969][T31160] ? should_failslab+0x8c/0xb0 [ 702.437077][T31160] __netlink_dump_start+0x43e/0x520 [ 702.437103][T31160] genl_family_rcv_msg_dumpit+0x115/0x180 [ 702.437201][T31160] ? __pfx_genl_start+0x10/0x10 [ 702.437228][T31160] ? __pfx_genl_dumpit+0x10/0x10 [ 702.437254][T31160] ? __pfx_genl_done+0x10/0x10 [ 702.437327][T31160] genl_rcv_msg+0x3f0/0x460 [ 702.437386][T31160] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 702.437418][T31160] netlink_rcv_skb+0x123/0x220 [ 702.437440][T31160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.437527][T31160] genl_rcv+0x28/0x40 [ 702.437596][T31160] netlink_unicast+0x5bd/0x690 [ 702.437619][T31160] netlink_sendmsg+0x58b/0x6b0 [ 702.437645][T31160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.437669][T31160] __sock_sendmsg+0x142/0x180 [ 702.437732][T31160] ____sys_sendmsg+0x31e/0x4e0 [ 702.437783][T31160] ___sys_sendmsg+0x17b/0x1d0 [ 702.437818][T31160] __x64_sys_sendmsg+0xd4/0x160 [ 702.437846][T31160] x64_sys_call+0x191e/0x2ff0 [ 702.437867][T31160] do_syscall_64+0xd2/0x200 [ 702.437926][T31160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 702.437954][T31160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.437975][T31160] RIP: 0033:0x7f8bdfc2eba9 [ 702.437992][T31160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.438009][T31160] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.438155][T31160] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 702.438168][T31160] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 702.438180][T31160] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 702.438193][T31160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.438205][T31160] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 702.438223][T31160] [ 702.709677][ T48] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.718109][ T48] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.726293][ T48] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.749021][T31170] loop8: detected capacity change from 0 to 512 [ 702.758418][T31170] EXT4-fs: Ignoring removed bh option [ 702.764152][T31170] EXT4-fs: Ignoring removed mblk_io_submit option [ 702.773598][T31170] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 702.784815][T31170] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 702.806707][T31170] EXT4-fs (loop8): orphan cleanup on readonly fs [ 702.816065][T31170] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 1 [ 702.830367][T31176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8716'. [ 702.839494][T31176] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8716'. [ 702.850009][T31170] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 702.865584][T31170] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 702.879826][T31170] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm gtp: Invalid block bitmap block 0 in block_group 0 [ 702.893243][T31170] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 1 [ 702.905148][T31170] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm gtp: Failed to acquire dquot type 1 [ 702.924432][T31170] EXT4-fs (loop8): 1 orphan inode deleted [ 702.932216][T31170] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.983442][T27625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.996437][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.055384][T31190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8723'. [ 703.082252][T31204] tc_dump_action: action bad kind [ 703.104346][T31190] team0 (unregistering): Port device team_slave_0 removed [ 703.122884][T31190] team0 (unregistering): Port device team_slave_1 removed [ 703.188618][ T4618] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 703.212298][T31199] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8726'. [ 703.277997][T31213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.302931][T31213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.488404][T31222] loop3: detected capacity change from 0 to 8192 [ 703.829097][T31240] FAULT_INJECTION: forcing a failure. [ 703.829097][T31240] name failslab, interval 1, probability 0, space 0, times 0 [ 703.842194][T31240] CPU: 0 UID: 0 PID: 31240 Comm: syz.0.8736 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 703.842315][T31240] Tainted: [W]=WARN [ 703.842321][T31240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 703.842332][T31240] Call Trace: [ 703.842338][T31240] [ 703.842346][T31240] __dump_stack+0x1d/0x30 [ 703.842368][T31240] dump_stack_lvl+0xe8/0x140 [ 703.842390][T31240] dump_stack+0x15/0x1b [ 703.842409][T31240] should_fail_ex+0x265/0x280 [ 703.842449][T31240] ? sctp_add_bind_addr+0x71/0x1e0 [ 703.842557][T31240] should_failslab+0x8c/0xb0 [ 703.842585][T31240] __kmalloc_cache_noprof+0x4c/0x320 [ 703.842643][T31240] ? sctp_add_bind_addr+0x162/0x1e0 [ 703.842668][T31240] sctp_add_bind_addr+0x71/0x1e0 [ 703.842697][T31240] sctp_copy_local_addr_list+0x199/0x220 [ 703.842757][T31240] sctp_copy_one_addr+0x7f/0x280 [ 703.842842][T31240] sctp_bind_addr_copy+0x79/0x290 [ 703.842872][T31240] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 703.842902][T31240] sctp_connect_new_asoc+0x1c3/0x3a0 [ 703.842951][T31240] sctp_sendmsg+0xf10/0x18d0 [ 703.842972][T31240] ? selinux_socket_sendmsg+0x141/0x1b0 [ 703.843050][T31240] ? __pfx_sctp_sendmsg+0x10/0x10 [ 703.843071][T31240] inet_sendmsg+0xc5/0xd0 [ 703.843099][T31240] __sock_sendmsg+0x102/0x180 [ 703.843149][T31240] __sys_sendto+0x268/0x330 [ 703.843189][T31240] __x64_sys_sendto+0x76/0x90 [ 703.843212][T31240] x64_sys_call+0x2d05/0x2ff0 [ 703.843236][T31240] do_syscall_64+0xd2/0x200 [ 703.843339][T31240] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 703.843369][T31240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.843392][T31240] RIP: 0033:0x7f7b4f0ceba9 [ 703.843431][T31240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.843448][T31240] RSP: 002b:00007f7b4db2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 703.843545][T31240] RAX: ffffffffffffffda RBX: 00007f7b4f315fa0 RCX: 00007f7b4f0ceba9 [ 703.843611][T31240] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 703.843626][T31240] RBP: 00007f7b4db2f090 R08: 000020000005ffe4 R09: 000000000000001c [ 703.843640][T31240] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 703.843655][T31240] R13: 00007f7b4f316038 R14: 00007f7b4f315fa0 R15: 00007ffdbc65b1f8 [ 703.843676][T31240] [ 704.134960][T31244] loop8: detected capacity change from 0 to 1024 [ 704.185943][T31253] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8742'. [ 704.199101][T31248] macvtap0: refused to change device tx_queue_len [ 704.332610][T31244] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 704.472503][ T4618] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.550049][ T4618] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.598746][ T4618] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.638902][T31266] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 704.648630][ T4618] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.736165][T31244] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.764785][ T4618] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 704.822899][ T4618] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 704.835654][ T4618] EXT4-fs (loop8): This should not happen!! Data will be lost [ 704.835654][ T4618] [ 704.845629][ T4618] EXT4-fs (loop8): Total free blocks count 0 [ 704.851795][ T4618] EXT4-fs (loop8): Free/Dirty block details [ 704.857870][ T4618] EXT4-fs (loop8): free_blocks=4293918720 [ 704.863749][ T4618] EXT4-fs (loop8): dirty_blocks=16 [ 704.869033][ T4618] EXT4-fs (loop8): Block reservation details [ 704.875203][ T4618] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 704.939964][ T4611] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 4) [ 704.988745][ T4611] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 705.056865][T31277] loop3: detected capacity change from 0 to 512 [ 705.110737][T31279] loop8: detected capacity change from 0 to 512 [ 705.139889][T31277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.177062][T31277] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 705.227402][T31285] loop5: detected capacity change from 0 to 256 [ 705.286715][ T4611] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 705.335182][T31293] openvswitch: netlink: Message has 6 unknown bytes. [ 705.351701][ T4611] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 155 with error 28 [ 705.364460][ T4611] EXT4-fs (loop3): This should not happen!! Data will be lost [ 705.364460][ T4611] [ 705.374516][ T4611] EXT4-fs (loop3): Total free blocks count 0 [ 705.380866][ T4611] EXT4-fs (loop3): Free/Dirty block details [ 705.386950][ T4611] EXT4-fs (loop3): free_blocks=65280 [ 705.392410][ T4611] EXT4-fs (loop3): dirty_blocks=745 [ 705.397814][ T4611] EXT4-fs (loop3): Block reservation details [ 705.404546][ T4611] EXT4-fs (loop3): i_reserved_data_blocks=745 [ 705.424394][ T4611] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 160 with max blocks 882 with error 28 [ 705.451114][T31295] loop5: detected capacity change from 0 to 8192 [ 705.490072][T31295] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 705.498004][T31295] FAT-fs (loop5): Filesystem has been set read-only [ 705.639192][T31305] SELinux: Context system_u:object_r:xserver_misc_device_t:s0 is not valid (left unmapped). [ 705.827196][T31302] netlink: 'syz.0.8755': attribute type 10 has an invalid length. [ 706.020766][T31302] batman_adv: batadv0: Adding interface: macvlan0 [ 706.027484][T31302] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.058316][T31302] batman_adv: batadv0: Interface activated: macvlan0 [ 706.111033][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 706.111061][ T29] audit: type=1400 audit(2000000051.908:35702): avc: denied { create } for pid=31323 comm="syz.0.8761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.143809][ T29] audit: type=1400 audit(2000000051.936:35703): avc: denied { open } for pid=31323 comm="syz.0.8761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 706.163904][ T29] audit: type=1400 audit(2000000051.936:35704): avc: denied { kernel } for pid=31323 comm="syz.0.8761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 706.184239][ T29] audit: type=1400 audit(2000000051.936:35705): avc: denied { recv } for pid=31310 comm="syz.8.8759" saddr=10.128.0.163 src=30036 daddr=10.128.1.172 dest=56908 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 706.251501][T31326] loop8: detected capacity change from 0 to 764 [ 706.267738][T31326] iso9660: Unknown parameter 'GPL' [ 706.286939][T31326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.298478][ T29] audit: type=1400 audit(2000000052.011:35706): avc: denied { read write } for pid=24562 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 706.323485][ T29] audit: type=1400 audit(2000000052.011:35707): avc: denied { open } for pid=24562 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 706.348655][ T29] audit: type=1400 audit(2000000052.011:35708): avc: denied { ioctl } for pid=24562 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 706.375079][ T29] audit: type=1400 audit(2000000052.011:35709): avc: denied { unmount } for pid=27625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 706.395444][ T29] audit: type=1400 audit(2000000052.039:35710): avc: denied { connect } for pid=31323 comm="syz.0.8761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 706.415742][ T29] audit: type=1400 audit(2000000052.058:35711): avc: denied { mounton } for pid=31325 comm="syz.8.8762" path="/394/file1" dev="tmpfs" ino=2119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 706.485330][T31335] __nla_validate_parse: 4 callbacks suppressed [ 706.485346][T31335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8763'. [ 706.535107][T31340] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8767'. [ 706.544225][T31340] 0ªX¹¦À: renamed from caif0 [ 706.553506][T31340] 0ªX¹¦À: entered allmulticast mode [ 706.558796][T31340] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 706.609881][T31348] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8770'. [ 706.691578][T31351] netlink: 'syz.3.8772': attribute type 13 has an invalid length. [ 706.750642][T31351] gretap0: refused to change device tx_queue_len [ 706.782937][T31351] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 706.932908][T31351] random: crng reseeded on system resumption [ 706.944360][T31344] loop7: detected capacity change from 0 to 32768 [ 706.960596][T31351] Restarting kernel threads ... [ 707.012367][T31359] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8773'. [ 707.025069][T31351] Done restarting kernel threads. [ 707.540723][T31368] netlink: 'syz.7.8777': attribute type 4 has an invalid length. [ 707.579155][T31368] netlink: 'syz.7.8777': attribute type 4 has an invalid length. [ 707.606046][T31368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8777'. [ 707.763164][T31371] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 707.770344][T31370] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 707.774889][T31373] FAULT_INJECTION: forcing a failure. [ 707.774889][T31373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.790484][T31373] CPU: 1 UID: 0 PID: 31373 Comm: syz.0.8778 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 707.790519][T31373] Tainted: [W]=WARN [ 707.790525][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.790536][T31373] Call Trace: [ 707.790543][T31373] [ 707.790551][T31373] __dump_stack+0x1d/0x30 [ 707.790571][T31373] dump_stack_lvl+0xe8/0x140 [ 707.790637][T31373] dump_stack+0x15/0x1b [ 707.790654][T31373] should_fail_ex+0x265/0x280 [ 707.790681][T31373] should_fail_alloc_page+0xf2/0x100 [ 707.790711][T31373] __alloc_frozen_pages_noprof+0xff/0x360 [ 707.790818][T31373] alloc_pages_mpol+0xb3/0x250 [ 707.790853][T31373] vma_alloc_folio_noprof+0x1aa/0x300 [ 707.790963][T31373] handle_mm_fault+0xec2/0x2c20 [ 707.791066][T31373] do_user_addr_fault+0x636/0x1090 [ 707.791179][T31373] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 707.791216][T31373] exc_page_fault+0x62/0xa0 [ 707.791271][T31373] asm_exc_page_fault+0x26/0x30 [ 707.791368][T31373] RIP: 0033:0x7f7b4ef90ba3 [ 707.791384][T31373] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 707.791400][T31373] RSP: 002b:00007f7b4db2e4a0 EFLAGS: 00010202 [ 707.791417][T31373] RAX: 0000000000013002 RBX: 00007f7b4db2e540 RCX: 00007f7b4570f000 [ 707.791432][T31373] RDX: 00007f7b4db2e6e0 RSI: 0000000000000001 RDI: 00007f7b4db2e5e0 [ 707.791445][T31373] RBP: 00000000000000dd R08: 0000000000000007 R09: 000000000000003a [ 707.791459][T31373] R10: 000000000000004c R11: 00007f7b4db2e540 R12: 0000000000000001 [ 707.791522][T31373] R13: 00007f7b4f16da20 R14: 0000000000000002 R15: 00007f7b4db2e5e0 [ 707.791542][T31373] [ 707.791553][T31373] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 708.108132][T31387] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8782'. [ 708.290811][T31396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8784'. [ 708.299866][T31396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8784'. [ 708.471937][T31414] loop7: detected capacity change from 0 to 512 [ 708.502181][T31414] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.522657][T31414] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.568485][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.621355][T31422] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8792'. [ 708.773702][T31425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8793'. [ 708.898003][T31432] netlink: 'syz.8.8795': attribute type 7 has an invalid length. [ 708.931701][T31434] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 709.119901][T31441] netlink: 'syz.0.8799': attribute type 6 has an invalid length. [ 709.152203][T31443] loop7: detected capacity change from 0 to 512 [ 709.184588][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8800: corrupted inode contents [ 709.222774][T31450] loop5: detected capacity change from 0 to 512 [ 709.226013][T31443] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8800: mark_inode_dirty error [ 709.262651][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8800: corrupted inode contents [ 709.281847][T31450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.315324][T31443] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8800: mark_inode_dirty error [ 709.333951][T31450] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.354754][T31443] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8800: Failed to acquire dquot type 0 [ 709.395517][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8800: corrupted inode contents [ 709.425292][ T48] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 709.428306][T31443] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8800: mark_inode_dirty error [ 709.465741][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8800: corrupted inode contents [ 709.480798][T31443] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8800: mark_inode_dirty error [ 709.480866][ T48] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 5 with max blocks 647 with error 28 [ 709.504579][ T48] EXT4-fs (loop5): This should not happen!! Data will be lost [ 709.504579][ T48] [ 709.515054][ T48] EXT4-fs (loop5): Total free blocks count 0 [ 709.521173][ T48] EXT4-fs (loop5): Free/Dirty block details [ 709.527097][ T48] EXT4-fs (loop5): free_blocks=65280 [ 709.532467][ T48] EXT4-fs (loop5): dirty_blocks=648 [ 709.537835][ T48] EXT4-fs (loop5): Block reservation details [ 709.544000][ T48] EXT4-fs (loop5): i_reserved_data_blocks=648 [ 709.573388][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8800: corrupted inode contents [ 709.596282][T31431] loop3: detected capacity change from 0 to 2048 [ 709.625606][T31443] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 709.645234][T31443] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8800: corrupted inode contents [ 709.659785][T31443] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8800: mark_inode_dirty error [ 709.673247][T31443] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 709.714794][ T48] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 652 with max blocks 1534 with error 28 [ 709.744423][T31443] EXT4-fs (loop7): 1 truncate cleaned up [ 709.767755][T31443] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.802406][T31443] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.842316][T31443] EXT4-fs error (device loop7): ext4_find_dest_de:2052: inode #2: block 3: comm syz.7.8800: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 709.948587][T31460] loop8: detected capacity change from 0 to 764 [ 709.962223][T31460] iso9660: Unknown parameter '€' [ 710.014720][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.031865][ T4624] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:26: Failed to release dquot type 0 [ 710.044453][ T4624] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:26: Failed to release dquot type 1 [ 710.245127][T31481] netlink: 'syz.7.8813': attribute type 6 has an invalid length. [ 710.326391][T31488] loop8: detected capacity change from 0 to 2048 [ 710.345873][T31485] pim6reg1: entered promiscuous mode [ 710.351467][T31485] pim6reg1: entered allmulticast mode [ 710.372354][T31488] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.8807: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 710.393006][T31488] EXT4-fs (loop8): get root inode failed [ 710.398959][T31488] EXT4-fs (loop8): mount failed [ 710.419825][T31487] loop5: detected capacity change from 0 to 8192 [ 710.518356][T31496] syz_tun: entered allmulticast mode [ 710.528789][T31496] dvmrp8: entered allmulticast mode [ 710.537174][T31496] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 710.545766][T31496] mroute: pending queue full, dropping entries [ 710.552788][T31494] syz_tun: left allmulticast mode [ 710.746377][T31505] loop8: detected capacity change from 0 to 128 [ 711.101240][T31501] loop7: detected capacity change from 0 to 2048 [ 711.134025][T31501] EXT4-fs (loop7): failed to initialize system zone (-117) [ 711.136037][T31510] loop8: detected capacity change from 0 to 256 [ 711.148820][T31501] EXT4-fs (loop7): mount failed [ 711.154031][T31514] FAULT_INJECTION: forcing a failure. [ 711.154031][T31514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.167168][T31514] CPU: 1 UID: 0 PID: 31514 Comm: syz.3.8822 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 711.167293][T31514] Tainted: [W]=WARN [ 711.167301][T31514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.167315][T31514] Call Trace: [ 711.167322][T31514] [ 711.167361][T31514] __dump_stack+0x1d/0x30 [ 711.167387][T31514] dump_stack_lvl+0xe8/0x140 [ 711.167426][T31514] dump_stack+0x15/0x1b [ 711.167441][T31514] should_fail_ex+0x265/0x280 [ 711.167463][T31514] should_fail+0xb/0x20 [ 711.167485][T31514] should_fail_usercopy+0x1a/0x20 [ 711.167553][T31514] _copy_from_user+0x1c/0xb0 [ 711.167579][T31514] bpf_test_init+0xdf/0x160 [ 711.167600][T31514] bpf_prog_test_run_skb+0x144/0xbd0 [ 711.167630][T31514] ? __rcu_read_unlock+0x4f/0x70 [ 711.167683][T31514] ? __fget_files+0x184/0x1c0 [ 711.167709][T31514] ? __rcu_read_unlock+0x4f/0x70 [ 711.167782][T31514] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 711.167802][T31514] bpf_prog_test_run+0x22a/0x390 [ 711.167835][T31514] __sys_bpf+0x4b9/0x7b0 [ 711.167941][T31514] __x64_sys_bpf+0x41/0x50 [ 711.168011][T31514] x64_sys_call+0x2aea/0x2ff0 [ 711.168033][T31514] do_syscall_64+0xd2/0x200 [ 711.168066][T31514] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 711.168141][T31514] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 711.168178][T31514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.168264][T31514] RIP: 0033:0x7fda9ae5eba9 [ 711.168281][T31514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.168301][T31514] RSP: 002b:00007fda998bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.168420][T31514] RAX: ffffffffffffffda RBX: 00007fda9b0a5fa0 RCX: 00007fda9ae5eba9 [ 711.168435][T31514] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 711.168449][T31514] RBP: 00007fda998bf090 R08: 0000000000000000 R09: 0000000000000000 [ 711.168463][T31514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.168477][T31514] R13: 00007fda9b0a6038 R14: 00007fda9b0a5fa0 R15: 00007fffb68c4bd8 [ 711.168498][T31514] [ 711.415717][T31516] FAULT_INJECTION: forcing a failure. [ 711.415717][T31516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.428964][T31516] CPU: 1 UID: 0 PID: 31516 Comm: syz.3.8824 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 711.429041][T31516] Tainted: [W]=WARN [ 711.429047][T31516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 711.429058][T31516] Call Trace: [ 711.429065][T31516] [ 711.429072][T31516] __dump_stack+0x1d/0x30 [ 711.429112][T31516] dump_stack_lvl+0xe8/0x140 [ 711.429133][T31516] dump_stack+0x15/0x1b [ 711.429151][T31516] should_fail_ex+0x265/0x280 [ 711.429198][T31516] should_fail+0xb/0x20 [ 711.429216][T31516] should_fail_usercopy+0x1a/0x20 [ 711.429268][T31516] _copy_from_user+0x1c/0xb0 [ 711.429299][T31516] memdup_user+0x5e/0xd0 [ 711.429326][T31516] strndup_user+0x68/0xb0 [ 711.429361][T31516] perf_ioctl+0x58a/0x12e0 [ 711.429395][T31516] ? ioctl_has_perm+0x289/0x2a0 [ 711.429420][T31516] ? do_vfs_ioctl+0x866/0xe10 [ 711.429465][T31516] ? selinux_file_ioctl+0x308/0x3a0 [ 711.429487][T31516] ? __fget_files+0x184/0x1c0 [ 711.429516][T31516] ? __pfx_perf_ioctl+0x10/0x10 [ 711.429545][T31516] __se_sys_ioctl+0xcb/0x140 [ 711.429644][T31516] __x64_sys_ioctl+0x43/0x50 [ 711.429663][T31516] x64_sys_call+0x1816/0x2ff0 [ 711.429708][T31516] do_syscall_64+0xd2/0x200 [ 711.429785][T31516] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 711.429812][T31516] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 711.429840][T31516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.429863][T31516] RIP: 0033:0x7fda9ae5eba9 [ 711.429931][T31516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.429990][T31516] RSP: 002b:00007fda998bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.430013][T31516] RAX: ffffffffffffffda RBX: 00007fda9b0a5fa0 RCX: 00007fda9ae5eba9 [ 711.430032][T31516] RDX: 0000200000000340 RSI: 0000000040082406 RDI: 0000000000000006 [ 711.430091][T31516] RBP: 00007fda998bf090 R08: 0000000000000000 R09: 0000000000000000 [ 711.430103][T31516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.430117][T31516] R13: 00007fda9b0a6038 R14: 00007fda9b0a5fa0 R15: 00007fffb68c4bd8 [ 711.430137][T31516] [ 711.836740][T31536] __nla_validate_parse: 6 callbacks suppressed [ 711.836802][T31536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8826'. [ 711.866534][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 711.866554][ T29] audit: type=1326 audit(2000000057.277:36233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 711.897641][ T29] audit: type=1326 audit(2000000057.277:36234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 711.921902][ T29] audit: type=1326 audit(2000000057.277:36235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 711.946130][ T29] audit: type=1326 audit(2000000057.277:36236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 711.970416][ T29] audit: type=1326 audit(2000000057.277:36237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 711.994662][ T29] audit: type=1326 audit(2000000057.277:36238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 712.018957][ T29] audit: type=1326 audit(2000000057.277:36239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 712.043276][ T29] audit: type=1326 audit(2000000057.277:36240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 712.067310][ T29] audit: type=1326 audit(2000000057.277:36241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31535 comm="syz.3.8829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9ae5eba9 code=0x7ffc0000 [ 712.159705][T31546] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8831'. [ 712.396006][T31553] vcan0: tx drop: invalid sa for name 0x0000000000000004 [ 712.569691][T31541] loop8: detected capacity change from 0 to 2048 [ 712.589396][ T29] audit: type=1400 audit(2000000057.792:36242): avc: denied { bind } for pid=31550 comm="syz.3.8830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 712.628247][T31541] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.8831: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 712.655727][T31541] EXT4-fs (loop8): get root inode failed [ 712.661463][T31541] EXT4-fs (loop8): mount failed [ 712.796018][T31567] loop5: detected capacity change from 0 to 1024 [ 712.834956][T31567] loop5: detected capacity change from 0 to 764 [ 712.853300][T31567] iso9660: Unknown parameter 'kfree' [ 712.867027][T31567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=289 sclass=netlink_route_socket pid=31567 comm=syz.5.8836 [ 712.951721][T31574] FAULT_INJECTION: forcing a failure. [ 712.951721][T31574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.964892][T31574] CPU: 1 UID: 0 PID: 31574 Comm: syz.5.8839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 712.964928][T31574] Tainted: [W]=WARN [ 712.964935][T31574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 712.964946][T31574] Call Trace: [ 712.965026][T31574] [ 712.965035][T31574] __dump_stack+0x1d/0x30 [ 712.965058][T31574] dump_stack_lvl+0xe8/0x140 [ 712.965077][T31574] dump_stack+0x15/0x1b [ 712.965095][T31574] should_fail_ex+0x265/0x280 [ 712.965160][T31574] should_fail+0xb/0x20 [ 712.965180][T31574] should_fail_usercopy+0x1a/0x20 [ 712.965258][T31574] strncpy_from_user+0x25/0x230 [ 712.965291][T31574] ? kmem_cache_alloc_noprof+0x186/0x310 [ 712.965339][T31574] ? getname_flags+0x80/0x3b0 [ 712.965368][T31574] getname_flags+0xae/0x3b0 [ 712.965397][T31574] __x64_sys_link+0x33/0x70 [ 712.965434][T31574] x64_sys_call+0x12a7/0x2ff0 [ 712.965457][T31574] do_syscall_64+0xd2/0x200 [ 712.965601][T31574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 712.965628][T31574] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 712.965656][T31574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.965679][T31574] RIP: 0033:0x7f8bdfc2eba9 [ 712.965708][T31574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.965728][T31574] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 712.965750][T31574] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 712.965764][T31574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000680 [ 712.965776][T31574] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 712.965789][T31574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.965802][T31574] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 712.965896][T31574] [ 713.276924][T31580] netlink: 'syz.5.8841': attribute type 6 has an invalid length. [ 713.334462][T31583] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8842'. [ 713.655124][T31614] FAULT_INJECTION: forcing a failure. [ 713.655124][T31614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.668706][T31614] CPU: 0 UID: 0 PID: 31614 Comm: syz.8.8852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 713.668750][T31614] Tainted: [W]=WARN [ 713.668832][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.668842][T31614] Call Trace: [ 713.668850][T31614] [ 713.668857][T31614] __dump_stack+0x1d/0x30 [ 713.668878][T31614] dump_stack_lvl+0xe8/0x140 [ 713.668899][T31614] dump_stack+0x15/0x1b [ 713.668936][T31614] should_fail_ex+0x265/0x280 [ 713.668957][T31614] should_fail+0xb/0x20 [ 713.668975][T31614] should_fail_usercopy+0x1a/0x20 [ 713.669002][T31614] _copy_from_user+0x1c/0xb0 [ 713.669068][T31614] ___sys_sendmsg+0xc1/0x1d0 [ 713.669101][T31614] __x64_sys_sendmsg+0xd4/0x160 [ 713.669162][T31614] x64_sys_call+0x191e/0x2ff0 [ 713.669188][T31614] do_syscall_64+0xd2/0x200 [ 713.669254][T31614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 713.669282][T31614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 713.669308][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.669331][T31614] RIP: 0033:0x7f36fe21eba9 [ 713.669350][T31614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.669416][T31614] RSP: 002b:00007f36fcc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.669440][T31614] RAX: ffffffffffffffda RBX: 00007f36fe465fa0 RCX: 00007f36fe21eba9 [ 713.669456][T31614] RDX: 0000000004008040 RSI: 0000200000000340 RDI: 0000000000000003 [ 713.669471][T31614] RBP: 00007f36fcc87090 R08: 0000000000000000 R09: 0000000000000000 [ 713.669528][T31614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.669539][T31614] R13: 00007f36fe466038 R14: 00007f36fe465fa0 R15: 00007fff47e9f8d8 [ 713.669555][T31614] [ 713.917832][T31623] msdos: Unknown parameter 'ÿ' [ 713.936384][T31625] FAULT_INJECTION: forcing a failure. [ 713.936384][T31625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 713.949652][T31625] CPU: 1 UID: 0 PID: 31625 Comm: syz.8.8856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 713.949699][T31625] Tainted: [W]=WARN [ 713.949705][T31625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.949716][T31625] Call Trace: [ 713.949724][T31625] [ 713.949732][T31625] __dump_stack+0x1d/0x30 [ 713.949756][T31625] dump_stack_lvl+0xe8/0x140 [ 713.949837][T31625] dump_stack+0x15/0x1b [ 713.949852][T31625] should_fail_ex+0x265/0x280 [ 713.949872][T31625] should_fail_alloc_page+0xf2/0x100 [ 713.949903][T31625] __alloc_frozen_pages_noprof+0xff/0x360 [ 713.949976][T31625] alloc_pages_mpol+0xb3/0x250 [ 713.950012][T31625] vma_alloc_folio_noprof+0x1aa/0x300 [ 713.950100][T31625] handle_mm_fault+0xec2/0x2c20 [ 713.950129][T31625] ? __rcu_read_lock+0x37/0x50 [ 713.950152][T31625] ? __pte_offset_map_lock+0x1d4/0x230 [ 713.950335][T31625] __get_user_pages+0x102e/0x1fa0 [ 713.950409][T31625] __gup_longterm_locked+0x2fb/0xe60 [ 713.950440][T31625] ? try_get_folio+0x379/0x3c0 [ 713.950468][T31625] ? mod_node_page_state+0x1c/0xa0 [ 713.950517][T31625] gup_fast_fallback+0x1f5/0x1420 [ 713.950551][T31625] pin_user_pages_fast+0x5f/0x90 [ 713.950579][T31625] io_pin_pages+0xb5/0x170 [ 713.950636][T31625] io_region_pin_pages+0x58/0xf0 [ 713.950669][T31625] io_create_region+0x2d3/0x330 [ 713.950699][T31625] io_allocate_scq_urings+0x14d/0x3b0 [ 713.950729][T31625] io_uring_create+0x3b3/0x610 [ 713.950865][T31625] __se_sys_io_uring_setup+0x1f7/0x210 [ 713.950897][T31625] __x64_sys_io_uring_setup+0x31/0x40 [ 713.950924][T31625] x64_sys_call+0x2b21/0x2ff0 [ 713.950949][T31625] do_syscall_64+0xd2/0x200 [ 713.951032][T31625] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 713.951073][T31625] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 713.951103][T31625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.951122][T31625] RIP: 0033:0x7f36fe21eba9 [ 713.951140][T31625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.951202][T31625] RSP: 002b:00007f36fcc86fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 713.951220][T31625] RAX: ffffffffffffffda RBX: 00007f36fe465fa0 RCX: 00007f36fe21eba9 [ 713.951232][T31625] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 713.951311][T31625] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 713.951323][T31625] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 713.951335][T31625] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 713.951354][T31625] [ 714.351766][T31635] netlink: 'syz.3.8859': attribute type 6 has an invalid length. [ 714.441715][T31645] IPv6: Can't replace route, no match found [ 714.592067][T31662] loop3: detected capacity change from 0 to 128 [ 714.605962][T31662] FAT-fs (loop3): bogus number of reserved sectors [ 714.612593][T31662] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 714.622023][T31662] FAT-fs (loop3): Can't find a valid FAT filesystem [ 714.623118][T31660] Â: renamed from pim6reg1 [ 714.664663][T31662] loop3: detected capacity change from 0 to 1024 [ 714.671316][T31662] EXT4-fs: Ignoring removed orlov option [ 714.682636][T31662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.725291][T31662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8871'. [ 714.747442][T31662] lo speed is unknown, defaulting to 1000 [ 714.868162][T31675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8874'. [ 714.877699][T31675] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8874'. [ 715.007804][T31662] lo speed is unknown, defaulting to 1000 [ 715.039950][T31682] loop5: detected capacity change from 0 to 8192 [ 715.047277][T31662] lo speed is unknown, defaulting to 1000 [ 715.226501][T27625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.299489][T31687] lo speed is unknown, defaulting to 1000 [ 715.415957][T31687] lo speed is unknown, defaulting to 1000 [ 715.422462][T31687] lo speed is unknown, defaulting to 1000 [ 715.525646][T31690] loop8: detected capacity change from 0 to 736 [ 715.568051][T31692] pimreg: entered allmulticast mode [ 715.663925][T31698] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8882'. [ 716.059612][T31709] ALSA: seq fatal error: cannot create timer (-22) [ 716.144024][T31712] 9pnet_fd: Insufficient options for proto=fd [ 716.255597][T31712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 716.336787][T31715] 9pnet_fd: Insufficient options for proto=fd [ 716.848759][T31720] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8890'. [ 717.030890][T31729] FAULT_INJECTION: forcing a failure. [ 717.030890][T31729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.044567][T31729] CPU: 0 UID: 0 PID: 31729 Comm: syz.8.8894 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 717.044597][T31729] Tainted: [W]=WARN [ 717.044604][T31729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.044691][T31729] Call Trace: [ 717.044696][T31729] [ 717.044704][T31729] __dump_stack+0x1d/0x30 [ 717.044730][T31729] dump_stack_lvl+0xe8/0x140 [ 717.044812][T31729] dump_stack+0x15/0x1b [ 717.044828][T31729] should_fail_ex+0x265/0x280 [ 717.044918][T31729] should_fail+0xb/0x20 [ 717.044951][T31729] should_fail_usercopy+0x1a/0x20 [ 717.044979][T31729] strncpy_from_user+0x25/0x230 [ 717.045005][T31729] ? kmem_cache_alloc_noprof+0x186/0x310 [ 717.045030][T31729] ? getname_flags+0x80/0x3b0 [ 717.045134][T31729] getname_flags+0xae/0x3b0 [ 717.045165][T31729] user_path_at+0x28/0x130 [ 717.045196][T31729] __se_sys_name_to_handle_at+0xff/0x630 [ 717.045302][T31729] ? ksys_write+0x192/0x1a0 [ 717.045329][T31729] __x64_sys_name_to_handle_at+0x67/0x80 [ 717.045359][T31729] x64_sys_call+0x1552/0x2ff0 [ 717.045380][T31729] do_syscall_64+0xd2/0x200 [ 717.045438][T31729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 717.045463][T31729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 717.045488][T31729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.045509][T31729] RIP: 0033:0x7f36fe21eba9 [ 717.045603][T31729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.045619][T31729] RSP: 002b:00007f36fcc87038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 717.045639][T31729] RAX: ffffffffffffffda RBX: 00007f36fe465fa0 RCX: 00007f36fe21eba9 [ 717.045655][T31729] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 717.045704][T31729] RBP: 00007f36fcc87090 R08: 0000000000001200 R09: 0000000000000000 [ 717.045716][T31729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.045728][T31729] R13: 00007f36fe466038 R14: 00007f36fe465fa0 R15: 00007fff47e9f8d8 [ 717.045744][T31729] [ 717.328823][T31701] loop3: detected capacity change from 0 to 2048 [ 717.362575][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 717.362591][ T29] audit: type=1400 audit(2000000062.432:36279): avc: denied { create } for pid=31737 comm="syz.7.8898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 717.392352][ T29] audit: type=1326 audit(2000000062.460:36280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.417101][ T29] audit: type=1326 audit(2000000062.460:36281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.441453][ T29] audit: type=1326 audit(2000000062.460:36282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.465635][ T29] audit: type=1326 audit(2000000062.460:36283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.489880][ T29] audit: type=1326 audit(2000000062.460:36284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.514035][ T29] audit: type=1326 audit(2000000062.460:36285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.538365][ T29] audit: type=1326 audit(2000000062.460:36286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.562662][ T29] audit: type=1326 audit(2000000062.460:36287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.562888][T31738] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 717.617543][T31740] 8021q: adding VLAN 0 to HW filter on device bond1 [ 717.645218][T31740] bond0: (slave bond1): Enslaving as an active interface with an up link [ 717.651767][T31701] EXT4-fs (loop3): failed to initialize system zone (-117) [ 717.653803][T31739] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8897'. [ 717.665158][T31701] EXT4-fs (loop3): mount failed [ 717.700683][T31752] loop8: detected capacity change from 0 to 512 [ 717.703455][ T29] audit: type=1326 audit(2000000062.460:36288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.7.8898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fcac984eba9 code=0x7ffc0000 [ 717.738258][T31754] pim6reg1: entered promiscuous mode [ 717.743598][T31754] pim6reg1: entered allmulticast mode [ 717.758023][T31752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 717.770837][T31756] serio: Serial port ptm0 [ 717.789770][T31752] ext4 filesystem being mounted at /425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.806627][T31762] FAULT_INJECTION: forcing a failure. [ 717.806627][T31762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.820141][T31762] CPU: 0 UID: 0 PID: 31762 Comm: syz.5.8903 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 717.820180][T31762] Tainted: [W]=WARN [ 717.820255][T31762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.820265][T31762] Call Trace: [ 717.820272][T31762] [ 717.820280][T31762] __dump_stack+0x1d/0x30 [ 717.820303][T31762] dump_stack_lvl+0xe8/0x140 [ 717.820375][T31762] dump_stack+0x15/0x1b [ 717.820394][T31762] should_fail_ex+0x265/0x280 [ 717.820422][T31762] should_fail+0xb/0x20 [ 717.820446][T31762] should_fail_usercopy+0x1a/0x20 [ 717.820500][T31762] strncpy_from_user+0x25/0x230 [ 717.820597][T31762] ? kmem_cache_alloc_noprof+0x186/0x310 [ 717.820629][T31762] ? getname_flags+0x80/0x3b0 [ 717.820690][T31762] getname_flags+0xae/0x3b0 [ 717.820714][T31762] user_path_at+0x28/0x130 [ 717.820743][T31762] __x64_sys_umount+0x85/0xe0 [ 717.820766][T31762] x64_sys_call+0xdd2/0x2ff0 [ 717.820806][T31762] do_syscall_64+0xd2/0x200 [ 717.820833][T31762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 717.820867][T31762] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 717.820900][T31762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.820926][T31762] RIP: 0033:0x7f8bdfc2eba9 [ 717.820944][T31762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.820961][T31762] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 717.821058][T31762] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 717.821070][T31762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 717.821081][T31762] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 717.821091][T31762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.821102][T31762] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 717.821118][T31762] [ 718.039644][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.123477][T31770] FAULT_INJECTION: forcing a failure. [ 718.123477][T31770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.137022][T31770] CPU: 0 UID: 0 PID: 31770 Comm: syz.5.8907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 718.137053][T31770] Tainted: [W]=WARN [ 718.137063][T31770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.137083][T31770] Call Trace: [ 718.137090][T31770] [ 718.137100][T31770] __dump_stack+0x1d/0x30 [ 718.137124][T31770] dump_stack_lvl+0xe8/0x140 [ 718.137223][T31770] dump_stack+0x15/0x1b [ 718.137295][T31770] should_fail_ex+0x265/0x280 [ 718.137355][T31770] should_fail+0xb/0x20 [ 718.137374][T31770] should_fail_usercopy+0x1a/0x20 [ 718.137475][T31770] _copy_from_user+0x1c/0xb0 [ 718.137504][T31770] get_timespec64+0x4c/0x100 [ 718.137529][T31770] __io_timeout_prep+0x25c/0x440 [ 718.137573][T31770] io_timeout_prep+0x1f/0x30 [ 718.137593][T31770] io_submit_sqes+0x5ef/0x1060 [ 718.137621][T31770] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 718.137683][T31770] ? 0xffffffff81000000 [ 718.137759][T31770] ? __rcu_read_unlock+0x4f/0x70 [ 718.137781][T31770] ? get_pid_task+0x96/0xd0 [ 718.137849][T31770] ? proc_fail_nth_write+0x13b/0x160 [ 718.137917][T31770] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 718.137940][T31770] ? vfs_write+0x7e8/0x960 [ 718.137960][T31770] ? __rcu_read_unlock+0x4f/0x70 [ 718.138068][T31770] ? __fget_files+0x184/0x1c0 [ 718.138091][T31770] ? fput+0x8f/0xc0 [ 718.138126][T31770] __x64_sys_io_uring_enter+0x78/0x90 [ 718.138221][T31770] x64_sys_call+0x2de1/0x2ff0 [ 718.138242][T31770] do_syscall_64+0xd2/0x200 [ 718.138277][T31770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 718.138335][T31770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 718.138361][T31770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.138385][T31770] RIP: 0033:0x7f8bdfc2eba9 [ 718.138453][T31770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.138473][T31770] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 718.138496][T31770] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 718.138512][T31770] RDX: 000000000000c88d RSI: 0000000000000628 RDI: 0000000000000006 [ 718.138527][T31770] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 718.138539][T31770] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001 [ 718.138550][T31770] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 718.138642][T31770] [ 718.661163][T31779] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8910'. [ 718.689832][T31779] hsr_slave_0: left promiscuous mode [ 718.698451][T31779] hsr_slave_1: left promiscuous mode [ 718.779160][T31787] FAULT_INJECTION: forcing a failure. [ 718.779160][T31787] name failslab, interval 1, probability 0, space 0, times 0 [ 718.792273][T31787] CPU: 0 UID: 0 PID: 31787 Comm: syz.0.8912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 718.792303][T31787] Tainted: [W]=WARN [ 718.792308][T31787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.792353][T31787] Call Trace: [ 718.792359][T31787] [ 718.792365][T31787] __dump_stack+0x1d/0x30 [ 718.792384][T31787] dump_stack_lvl+0xe8/0x140 [ 718.792400][T31787] dump_stack+0x15/0x1b [ 718.792414][T31787] should_fail_ex+0x265/0x280 [ 718.792481][T31787] should_failslab+0x8c/0xb0 [ 718.792579][T31787] kmem_cache_alloc_node_noprof+0x57/0x320 [ 718.792603][T31787] ? __alloc_skb+0x101/0x320 [ 718.792622][T31787] __alloc_skb+0x101/0x320 [ 718.792640][T31787] netlink_alloc_large_skb+0xba/0xf0 [ 718.792735][T31787] netlink_sendmsg+0x3cf/0x6b0 [ 718.792783][T31787] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.792803][T31787] __sock_sendmsg+0x142/0x180 [ 718.792924][T31787] ____sys_sendmsg+0x31e/0x4e0 [ 718.792946][T31787] ___sys_sendmsg+0x17b/0x1d0 [ 718.793013][T31787] __x64_sys_sendmsg+0xd4/0x160 [ 718.793039][T31787] x64_sys_call+0x191e/0x2ff0 [ 718.793056][T31787] do_syscall_64+0xd2/0x200 [ 718.793090][T31787] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 718.793126][T31787] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 718.793149][T31787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.793348][T31787] RIP: 0033:0x7f7b4f0ceba9 [ 718.793362][T31787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.793378][T31787] RSP: 002b:00007f7b4db0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.793420][T31787] RAX: ffffffffffffffda RBX: 00007f7b4f316090 RCX: 00007f7b4f0ceba9 [ 718.793431][T31787] RDX: 000000002000c094 RSI: 0000200000000000 RDI: 0000000000000004 [ 718.793442][T31787] RBP: 00007f7b4db0e090 R08: 0000000000000000 R09: 0000000000000000 [ 718.793490][T31787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.793500][T31787] R13: 00007f7b4f316128 R14: 00007f7b4f316090 R15: 00007ffdbc65b1f8 [ 718.793517][T31787] [ 719.088788][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8913'. [ 719.098085][T31794] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8913'. [ 719.145458][T31797] loop8: detected capacity change from 0 to 1024 [ 719.175108][T31797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 719.186194][T31803] loop5: detected capacity change from 0 to 512 [ 719.192825][T31797] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 719.431393][T31816] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.8916: lblock 0 mapped to illegal pblock 0 (length 1) [ 719.488458][T31797] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.8916: lblock 0 mapped to illegal pblock 0 (length 1) [ 719.535012][T31797] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.8916: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 719.574133][T31831] netlink: 'syz.7.8930': attribute type 6 has an invalid length. [ 719.631931][T31835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8929'. [ 719.640996][T31835] tc_dump_action: action bad kind [ 719.659256][T31844] netlink: 'syz.0.8931': attribute type 1 has an invalid length. [ 719.703368][T24562] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 719.716663][T31849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8931'. [ 719.743053][T31852] loop5: detected capacity change from 0 to 512 [ 719.788804][T31852] EXT4-fs: Ignoring removed nobh option [ 719.815502][T31863] FAULT_INJECTION: forcing a failure. [ 719.815502][T31863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 719.818171][T31859] loop7: detected capacity change from 0 to 512 [ 719.829280][T31863] CPU: 0 UID: 0 PID: 31863 Comm: syz.3.8938 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 719.829314][T31863] Tainted: [W]=WARN [ 719.829321][T31863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 719.829408][T31863] Call Trace: [ 719.829415][T31863] [ 719.829424][T31863] __dump_stack+0x1d/0x30 [ 719.829447][T31863] dump_stack_lvl+0xe8/0x140 [ 719.829467][T31863] dump_stack+0x15/0x1b [ 719.829483][T31863] should_fail_ex+0x265/0x280 [ 719.829525][T31863] should_fail_alloc_page+0xf2/0x100 [ 719.829552][T31863] __alloc_frozen_pages_noprof+0xff/0x360 [ 719.829586][T31863] alloc_pages_mpol+0xb3/0x250 [ 719.829632][T31863] vma_alloc_folio_noprof+0x1aa/0x300 [ 719.829727][T31863] handle_mm_fault+0xec2/0x2c20 [ 719.829751][T31863] ? __rcu_read_lock+0x37/0x50 [ 719.829772][T31863] ? __pte_offset_map_lock+0x1d4/0x230 [ 719.829807][T31863] __get_user_pages+0x102e/0x1fa0 [ 719.829866][T31863] __gup_longterm_locked+0x2fb/0xe60 [ 719.829921][T31863] ? gup_fast_fallback+0xcf8/0x1420 [ 719.829946][T31863] gup_fast_fallback+0x1f5/0x1420 [ 719.829978][T31863] pin_user_pages_fast+0x5f/0x90 [ 719.830076][T31863] io_pin_pages+0xb5/0x170 [ 719.830173][T31863] io_region_pin_pages+0x58/0xf0 [ 719.830201][T31863] io_create_region+0x2d3/0x330 [ 719.830231][T31863] io_allocate_scq_urings+0x14d/0x3b0 [ 719.830285][T31863] io_uring_create+0x3b3/0x610 [ 719.830377][T31863] __se_sys_io_uring_setup+0x1f7/0x210 [ 719.830406][T31863] __x64_sys_io_uring_setup+0x31/0x40 [ 719.830462][T31863] x64_sys_call+0x2b21/0x2ff0 [ 719.830483][T31863] do_syscall_64+0xd2/0x200 [ 719.830510][T31863] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 719.830534][T31863] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 719.830591][T31863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.830625][T31863] RIP: 0033:0x7fda9ae5eba9 [ 719.830642][T31863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.830734][T31863] RSP: 002b:00007fda998befc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 719.830755][T31863] RAX: ffffffffffffffda RBX: 00007fda9b0a5fa0 RCX: 00007fda9ae5eba9 [ 719.830768][T31863] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 719.830876][T31863] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 719.830888][T31863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 719.830900][T31863] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 719.830918][T31863] [ 719.849986][T31844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.884429][T31852] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 719.922821][T31857] loop8: detected capacity change from 0 to 764 [ 720.018854][T31859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 720.118697][T31852] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.8935: attempt to clear invalid blocks 2 len 1 [ 720.132929][T31852] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 720.148208][T31852] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8935: invalid indirect mapped block 1819239214 (level 0) [ 720.166284][T31849] bond0 (unregistering): Released all slaves [ 720.175513][T31852] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.8935: invalid indirect mapped block 1819239214 (level 1) [ 720.196274][T31857] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 720.217335][T31852] EXT4-fs (loop5): 1 truncate cleaned up [ 720.224088][T31859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.240394][T31852] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.254625][T31859] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.274668][T31872] netlink: 196 bytes leftover after parsing attributes in process `syz.8.8941'. [ 720.300126][T31852] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.8935: corrupted in-inode xattr: e_value out of bounds [ 720.530067][T31859] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8936: corrupted xattr block 19: overlapping e_value [ 720.546630][T31852] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.8935: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 720.577632][T31859] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 720.594326][T31878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8942'. [ 720.608528][T31859] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8936: corrupted xattr block 19: overlapping e_value [ 720.627128][T29998] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.667703][T31859] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 720.685140][T31859] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8936: corrupted xattr block 19: overlapping e_value [ 720.748957][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.838018][T31893] 9pnet: Could not find request transport: ÿÿ· [ 720.869763][T31900] FAULT_INJECTION: forcing a failure. [ 720.869763][T31900] name failslab, interval 1, probability 0, space 0, times 0 [ 720.882481][T31900] CPU: 1 UID: 0 PID: 31900 Comm: syz.7.8947 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 720.882514][T31900] Tainted: [W]=WARN [ 720.882520][T31900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.882532][T31900] Call Trace: [ 720.882539][T31900] [ 720.882549][T31900] __dump_stack+0x1d/0x30 [ 720.882581][T31900] dump_stack_lvl+0xe8/0x140 [ 720.882604][T31900] dump_stack+0x15/0x1b [ 720.882623][T31900] should_fail_ex+0x265/0x280 [ 720.882644][T31900] should_failslab+0x8c/0xb0 [ 720.882666][T31900] kmem_cache_alloc_node_noprof+0x57/0x320 [ 720.882775][T31900] ? __alloc_skb+0x101/0x320 [ 720.882839][T31900] ? avc_has_perm+0x171/0x180 [ 720.882867][T31900] __alloc_skb+0x101/0x320 [ 720.882891][T31900] sock_wmalloc+0x7e/0xc0 [ 720.882915][T31900] pppol2tp_sendmsg+0xfb/0x440 [ 720.882954][T31900] ? __pfx_pppol2tp_sendmsg+0x10/0x10 [ 720.882990][T31900] __sock_sendmsg+0x142/0x180 [ 720.883024][T31900] ____sys_sendmsg+0x345/0x4e0 [ 720.883122][T31900] ___sys_sendmsg+0x17b/0x1d0 [ 720.883206][T31900] __sys_sendmmsg+0x178/0x300 [ 720.883267][T31900] __x64_sys_sendmmsg+0x57/0x70 [ 720.883295][T31900] x64_sys_call+0x1c4a/0x2ff0 [ 720.883320][T31900] do_syscall_64+0xd2/0x200 [ 720.883348][T31900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 720.883383][T31900] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 720.883415][T31900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.883438][T31900] RIP: 0033:0x7fcac984eba9 [ 720.883459][T31900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.883504][T31900] RSP: 002b:00007fcac82b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 720.883524][T31900] RAX: ffffffffffffffda RBX: 00007fcac9a95fa0 RCX: 00007fcac984eba9 [ 720.883616][T31900] RDX: 04000000000001ce RSI: 0000200000005f80 RDI: 0000000000000007 [ 720.883628][T31900] RBP: 00007fcac82b7090 R08: 0000000000000000 R09: 0000000000000000 [ 720.883639][T31900] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000001 [ 720.883688][T31900] R13: 00007fcac9a96038 R14: 00007fcac9a95fa0 R15: 00007ffff858dd68 [ 720.883707][T31900] [ 721.171518][T31906] pim6reg1: entered promiscuous mode [ 721.176869][T31906] pim6reg1: entered allmulticast mode [ 721.187395][T31910] ref_ctr increment failed for inode: 0x54b offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810b088b80 [ 721.200552][T31910] ref_ctr increment failed for inode: 0x54b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810b088b80 [ 721.300286][T31915] loop7: detected capacity change from 0 to 2048 [ 721.300785][T31919] lo speed is unknown, defaulting to 1000 [ 721.322792][T31915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 721.355448][T31923] vhci_hcd: invalid port number 241 [ 721.360797][T31923] vhci_hcd: default hub control req: 000d va6ed i00f1 l0 [ 721.374705][T29499] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.384491][T31925] FAULT_INJECTION: forcing a failure. [ 721.384491][T31925] name failslab, interval 1, probability 0, space 0, times 0 [ 721.385131][T31923] blktrace: Concurrent blktraces are not allowed on loop11 [ 721.397588][T31925] CPU: 0 UID: 0 PID: 31925 Comm: syz.0.8956 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 721.397625][T31925] Tainted: [W]=WARN [ 721.397632][T31925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.397700][T31925] Call Trace: [ 721.397708][T31925] [ 721.397717][T31925] __dump_stack+0x1d/0x30 [ 721.397741][T31925] dump_stack_lvl+0xe8/0x140 [ 721.397761][T31925] dump_stack+0x15/0x1b [ 721.397778][T31925] should_fail_ex+0x265/0x280 [ 721.397808][T31925] should_failslab+0x8c/0xb0 [ 721.397832][T31925] __kvmalloc_node_noprof+0x123/0x4e0 [ 721.397860][T31925] ? vmemdup_user+0x26/0xd0 [ 721.397884][T31925] ? cred_has_capability+0x210/0x280 [ 721.397912][T31925] vmemdup_user+0x26/0xd0 [ 721.397938][T31925] con_set_unimap+0x3f/0x6f0 [ 721.397964][T31925] ? selinux_capable+0x31/0x40 [ 721.397990][T31925] ? should_fail_ex+0xdb/0x280 [ 721.398013][T31925] vt_ioctl+0xfbb/0x1880 [ 721.398104][T31925] ? tty_jobctrl_ioctl+0x29e/0x810 [ 721.398132][T31925] tty_ioctl+0x7db/0xb80 [ 721.398150][T31925] ? __pfx_tty_ioctl+0x10/0x10 [ 721.398237][T31925] __se_sys_ioctl+0xcb/0x140 [ 721.398298][T31925] __x64_sys_ioctl+0x43/0x50 [ 721.398317][T31925] x64_sys_call+0x1816/0x2ff0 [ 721.398394][T31925] do_syscall_64+0xd2/0x200 [ 721.398477][T31925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 721.398500][T31925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 721.398647][T31925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.398667][T31925] RIP: 0033:0x7f7b4f0ceba9 [ 721.398685][T31925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.398703][T31925] RSP: 002b:00007f7b4db2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.398723][T31925] RAX: ffffffffffffffda RBX: 00007f7b4f315fa0 RCX: 00007f7b4f0ceba9 [ 721.398737][T31925] RDX: 0000200000000180 RSI: 0000000000004b67 RDI: 0000000000000006 [ 721.398830][T31925] RBP: 00007f7b4db2f090 R08: 0000000000000000 R09: 0000000000000000 [ 721.398843][T31925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.398855][T31925] R13: 00007f7b4f316038 R14: 00007f7b4f315fa0 R15: 00007ffdbc65b1f8 [ 721.398875][T31925] [ 721.419389][T31919] lo speed is unknown, defaulting to 1000 [ 721.644593][T31919] lo speed is unknown, defaulting to 1000 [ 721.657085][T31930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=31930 comm=syz.0.8959 [ 721.722471][T31940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8961'. [ 721.860709][T31939] lo speed is unknown, defaulting to 1000 [ 721.883468][T31938] lo speed is unknown, defaulting to 1000 [ 722.339774][T31939] lo speed is unknown, defaulting to 1000 [ 722.374755][T31939] lo speed is unknown, defaulting to 1000 [ 722.474787][T31938] lo speed is unknown, defaulting to 1000 [ 722.546725][T31938] lo speed is unknown, defaulting to 1000 [ 722.841237][T31958] pim6reg1: entered promiscuous mode [ 722.846616][T31958] pim6reg1: entered allmulticast mode [ 722.957888][ T29] kauditd_printk_skb: 5632 callbacks suppressed [ 722.957904][ T29] audit: type=1400 audit(2000000067.670:41918): avc: denied { append } for pid=31960 comm="syz.5.8966" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 723.029408][T31963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8967'. [ 723.038401][T31963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8967'. [ 723.047389][T31963] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8967'. [ 723.122015][ T29] audit: type=1400 audit(2000000067.727:41919): avc: denied { write } for pid=31962 comm="syz.7.8967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 723.202151][ T29] audit: type=1400 audit(2000000067.895:41920): avc: denied { create } for pid=31966 comm="syz.8.8968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 723.222478][ T29] audit: type=1400 audit(2000000067.895:41921): avc: denied { setopt } for pid=31966 comm="syz.8.8968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 723.248916][T31972] FAULT_INJECTION: forcing a failure. [ 723.248916][T31972] name failslab, interval 1, probability 0, space 0, times 0 [ 723.261758][T31972] CPU: 1 UID: 0 PID: 31972 Comm: syz.7.8971 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 723.261864][T31972] Tainted: [W]=WARN [ 723.261871][T31972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.261890][T31972] Call Trace: [ 723.261896][T31972] [ 723.261904][T31972] __dump_stack+0x1d/0x30 [ 723.262004][T31972] dump_stack_lvl+0xe8/0x140 [ 723.262026][T31972] dump_stack+0x15/0x1b [ 723.262045][T31972] should_fail_ex+0x265/0x280 [ 723.262069][T31972] should_failslab+0x8c/0xb0 [ 723.262094][T31972] kmem_cache_alloc_node_noprof+0x57/0x320 [ 723.262157][T31972] ? __alloc_skb+0x101/0x320 [ 723.262228][T31972] __alloc_skb+0x101/0x320 [ 723.262250][T31972] ? xfd_validate_state+0x45/0xf0 [ 723.262287][T31972] pfkey_sendmsg+0xd7/0x900 [ 723.262318][T31972] ? avc_has_perm+0xf7/0x180 [ 723.262348][T31972] ? selinux_socket_sendmsg+0x175/0x1b0 [ 723.262434][T31972] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 723.262463][T31972] __sock_sendmsg+0x142/0x180 [ 723.262494][T31972] ____sys_sendmsg+0x31e/0x4e0 [ 723.262551][T31972] ___sys_sendmsg+0x17b/0x1d0 [ 723.262592][T31972] __x64_sys_sendmsg+0xd4/0x160 [ 723.262624][T31972] x64_sys_call+0x191e/0x2ff0 [ 723.262649][T31972] do_syscall_64+0xd2/0x200 [ 723.262738][T31972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 723.262767][T31972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.262791][T31972] RIP: 0033:0x7fcac984eba9 [ 723.262809][T31972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.262830][T31972] RSP: 002b:00007fcac82b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 723.262914][T31972] RAX: ffffffffffffffda RBX: 00007fcac9a95fa0 RCX: 00007fcac984eba9 [ 723.262929][T31972] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 723.262943][T31972] RBP: 00007fcac82b7090 R08: 0000000000000000 R09: 0000000000000000 [ 723.262956][T31972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.262970][T31972] R13: 00007fcac9a96038 R14: 00007fcac9a95fa0 R15: 00007ffff858dd68 [ 723.262999][T31972] [ 723.580356][T31975] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8968'. [ 723.656640][T31976] netlink: 'syz.5.8972': attribute type 2 has an invalid length. [ 723.664896][T31976] netlink: 'syz.5.8972': attribute type 1 has an invalid length. [ 723.672908][T31976] netlink: 176372 bytes leftover after parsing attributes in process `syz.5.8972'. [ 723.777124][ T29] audit: type=1400 audit(2000000068.428:41922): avc: denied { relabelto } for pid=31974 comm="syz.5.8972" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 723.804182][ T29] audit: type=1400 audit(2000000068.428:41923): avc: denied { associate } for pid=31974 comm="syz.5.8972" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 723.864227][T31977] loop8: detected capacity change from 0 to 2048 [ 723.878241][ T29] audit: type=1400 audit(2000000068.531:41924): avc: denied { unmount } for pid=29998 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 723.880730][T31940] loop3: detected capacity change from 0 to 2048 [ 723.910457][T31940] EXT4-fs (loop3): failed to initialize system zone (-117) [ 723.910501][T31940] EXT4-fs (loop3): mount failed [ 723.928884][T31977] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.8968: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 723.932796][T31977] EXT4-fs (loop8): get root inode failed [ 723.932811][T31977] EXT4-fs (loop8): mount failed [ 723.961459][T31990] FAULT_INJECTION: forcing a failure. [ 723.961459][T31990] name failslab, interval 1, probability 0, space 0, times 0 [ 724.039438][T31990] CPU: 0 UID: 0 PID: 31990 Comm: syz.5.8976 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 724.039478][T31990] Tainted: [W]=WARN [ 724.039486][T31990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.039553][T31990] Call Trace: [ 724.039561][T31990] [ 724.039571][T31990] __dump_stack+0x1d/0x30 [ 724.039626][T31990] dump_stack_lvl+0xe8/0x140 [ 724.039644][T31990] dump_stack+0x15/0x1b [ 724.039661][T31990] should_fail_ex+0x265/0x280 [ 724.039683][T31990] ? __pfx_cond_bools_destroy+0x10/0x10 [ 724.039774][T31990] should_failslab+0x8c/0xb0 [ 724.039802][T31990] kmem_cache_alloc_noprof+0x50/0x310 [ 724.039833][T31990] ? hashtab_duplicate+0xfe/0x360 [ 724.039855][T31990] ? __pfx_cond_bools_destroy+0x10/0x10 [ 724.039928][T31990] hashtab_duplicate+0xfe/0x360 [ 724.039950][T31990] ? __pfx_cond_bools_copy+0x10/0x10 [ 724.039979][T31990] cond_policydb_dup+0xd2/0x4e0 [ 724.040019][T31990] security_set_bools+0xa0/0x340 [ 724.040100][T31990] sel_commit_bools_write+0x1ea/0x270 [ 724.040136][T31990] vfs_writev+0x403/0x8b0 [ 724.040168][T31990] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 724.040213][T31990] ? mutex_lock+0xd/0x30 [ 724.040306][T31990] do_writev+0xe7/0x210 [ 724.040331][T31990] __x64_sys_writev+0x45/0x50 [ 724.040358][T31990] x64_sys_call+0x1e9a/0x2ff0 [ 724.040452][T31990] do_syscall_64+0xd2/0x200 [ 724.040478][T31990] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 724.040727][T31990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.040751][T31990] RIP: 0033:0x7f8bdfc2eba9 [ 724.040770][T31990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.040791][T31990] RSP: 002b:00007f8bde68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 724.040814][T31990] RAX: ffffffffffffffda RBX: 00007f8bdfe75fa0 RCX: 00007f8bdfc2eba9 [ 724.040826][T31990] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000005 [ 724.040838][T31990] RBP: 00007f8bde68f090 R08: 0000000000000000 R09: 0000000000000000 [ 724.040877][T31990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.040891][T31990] R13: 00007f8bdfe76038 R14: 00007f8bdfe75fa0 R15: 00007ffc62539228 [ 724.040912][T31990] [ 724.310078][ T29] audit: type=1400 audit(2000000068.933:41925): avc: denied { create } for pid=31991 comm="syz.0.8975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 724.463750][ T29] audit: type=1400 audit(2000000069.083:41926): avc: denied { ioctl } for pid=31993 comm="syz.7.8977" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 724.543986][ T29] audit: type=1400 audit(2000000069.111:41927): avc: denied { create } for pid=31998 comm="syz.0.8978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.028281][T32006] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8981'. [ 725.197322][T32016] FAULT_INJECTION: forcing a failure. [ 725.197322][T32016] name failslab, interval 1, probability 0, space 0, times 0 [ 725.210119][T32016] CPU: 1 UID: 0 PID: 32016 Comm: syz.7.8985 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 725.210154][T32016] Tainted: [W]=WARN [ 725.210162][T32016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.210175][T32016] Call Trace: [ 725.210182][T32016] [ 725.210191][T32016] __dump_stack+0x1d/0x30 [ 725.210215][T32016] dump_stack_lvl+0xe8/0x140 [ 725.210361][T32016] dump_stack+0x15/0x1b [ 725.210380][T32016] should_fail_ex+0x265/0x280 [ 725.210406][T32016] ? sctp_add_bind_addr+0x71/0x1e0 [ 725.210437][T32016] should_failslab+0x8c/0xb0 [ 725.210508][T32016] __kmalloc_cache_noprof+0x4c/0x320 [ 725.210538][T32016] sctp_add_bind_addr+0x71/0x1e0 [ 725.210568][T32016] sctp_do_bind+0x427/0x4b0 [ 725.210598][T32016] sctp_connect_new_asoc+0x153/0x3a0 [ 725.210622][T32016] sctp_sendmsg+0xf10/0x18d0 [ 725.210646][T32016] ? selinux_socket_sendmsg+0x141/0x1b0 [ 725.210679][T32016] ? __pfx_sctp_sendmsg+0x10/0x10 [ 725.210700][T32016] inet_sendmsg+0xc5/0xd0 [ 725.210803][T32016] __sock_sendmsg+0x102/0x180 [ 725.210836][T32016] ____sys_sendmsg+0x31e/0x4e0 [ 725.210866][T32016] ___sys_sendmsg+0x17b/0x1d0 [ 725.210918][T32016] __x64_sys_sendmsg+0xd4/0x160 [ 725.210944][T32016] x64_sys_call+0x191e/0x2ff0 [ 725.210963][T32016] do_syscall_64+0xd2/0x200 [ 725.211025][T32016] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 725.211051][T32016] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 725.211082][T32016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.211164][T32016] RIP: 0033:0x7fcac984eba9 [ 725.211182][T32016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.211201][T32016] RSP: 002b:00007fcac82b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.211224][T32016] RAX: ffffffffffffffda RBX: 00007fcac9a95fa0 RCX: 00007fcac984eba9 [ 725.211258][T32016] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000008 [ 725.211274][T32016] RBP: 00007fcac82b7090 R08: 0000000000000000 R09: 0000000000000000 [ 725.211330][T32016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.211343][T32016] R13: 00007fcac9a96038 R14: 00007fcac9a95fa0 R15: 00007ffff858dd68 [ 725.211364][T32016] [ 725.605115][T27625] ================================================================== [ 725.613243][T27625] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 725.623074][T27625] [ 725.625398][T27625] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 725.633464][T27625] tick_do_update_jiffies64+0x113/0x1c0 [ 725.639023][T27625] tick_nohz_handler+0x7f/0x2d0 [ 725.643892][T27625] __hrtimer_run_queues+0x20c/0x5a0 [ 725.649101][T27625] hrtimer_interrupt+0x21a/0x460 [ 725.654061][T27625] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 725.660059][T27625] sysvec_apic_timer_interrupt+0x6f/0x80 [ 725.665711][T27625] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.671715][T27625] native_apic_msr_write+0x3d/0x60 [ 725.676843][T27625] x2apic_send_IPI_self+0x10/0x20 [ 725.681889][T27625] arch_irq_work_raise+0x46/0x50 [ 725.686837][T27625] __irq_work_queue_local+0x10f/0x2c0 [ 725.692230][T27625] irq_work_queue+0x70/0x100 [ 725.696844][T27625] bpf_send_signal_common+0x280/0x300 [ 725.702239][T27625] bpf_send_signal+0x1d/0x30 [ 725.706841][T27625] bpf_prog_1cbd440197ae952e+0x2c/0x5b [ 725.712307][T27625] bpf_trace_run2+0x107/0x1c0 [ 725.716985][T27625] __traceiter_kfree+0x2b/0x50 [ 725.721762][T27625] kfree+0x27b/0x320 [ 725.725666][T27625] ___sys_recvmsg+0x135/0x370 [ 725.730358][T27625] do_recvmmsg+0x1ef/0x540 [ 725.734836][T27625] __x64_sys_recvmmsg+0xe5/0x170 [ 725.739799][T27625] x64_sys_call+0x27a6/0x2ff0 [ 725.744481][T27625] do_syscall_64+0xd2/0x200 [ 725.748999][T27625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.754902][T27625] [ 725.757232][T27625] read to 0xffffffff868099c0 of 8 bytes by task 27625 on cpu 1: [ 725.764866][T27625] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 725.771116][T27625] count_shadow_nodes+0x6a/0x230 [ 725.776325][T27625] do_shrink_slab+0x63/0x680 [ 725.780936][T27625] shrink_slab+0x448/0x760 [ 725.785357][T27625] shrink_node+0x6c3/0x2120 [ 725.789867][T27625] do_try_to_free_pages+0x3f6/0xcd0 [ 725.795157][T27625] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 725.801141][T27625] try_charge_memcg+0x358/0x9e0 [ 725.805991][T27625] charge_memcg+0x51/0xc0 [ 725.810408][T27625] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 725.816388][T27625] __read_swap_cache_async+0x1df/0x350 [ 725.821855][T27625] swap_cluster_readahead+0x277/0x3e0 [ 725.827277][T27625] swapin_readahead+0xde/0x6f0 [ 725.832052][T27625] do_swap_page+0x301/0x2430 [ 725.836644][T27625] handle_mm_fault+0x9a5/0x2c20 [ 725.841503][T27625] do_user_addr_fault+0x636/0x1090 [ 725.846622][T27625] exc_page_fault+0x62/0xa0 [ 725.851128][T27625] asm_exc_page_fault+0x26/0x30 [ 725.855979][T27625] [ 725.858298][T27625] value changed: 0x0000000100009361 -> 0x0000000100009362 [ 725.865399][T27625] [ 725.867721][T27625] Reported by Kernel Concurrency Sanitizer on: [ 725.873888][T27625] CPU: 1 UID: 0 PID: 27625 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 725.885434][T27625] Tainted: [W]=WARN [ 725.889235][T27625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.899288][T27625] ================================================================== [ 726.125444][T31948] syz.3.8961 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 726.139748][T31948] CPU: 1 UID: 0 PID: 31948 Comm: syz.3.8961 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 726.139786][T31948] Tainted: [W]=WARN [ 726.139793][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.139869][T31948] Call Trace: [ 726.139877][T31948] [ 726.139909][T31948] __dump_stack+0x1d/0x30 [ 726.139935][T31948] dump_stack_lvl+0xe8/0x140 [ 726.139957][T31948] dump_stack+0x15/0x1b [ 726.139973][T31948] dump_header+0x81/0x220 [ 726.140067][T31948] oom_kill_process+0x342/0x400 [ 726.140096][T31948] out_of_memory+0x979/0xb80 [ 726.140180][T31948] try_charge_memcg+0x5e6/0x9e0 [ 726.140279][T31948] obj_cgroup_charge_pages+0xa6/0x150 [ 726.140307][T31948] __memcg_kmem_charge_page+0x9f/0x170 [ 726.140396][T31948] __alloc_frozen_pages_noprof+0x188/0x360 [ 726.140432][T31948] alloc_pages_mpol+0xb3/0x250 [ 726.140492][T31948] alloc_pages_noprof+0x90/0x130 [ 726.140602][T31948] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 726.140709][T31948] __kvmalloc_node_noprof+0x30f/0x4e0 [ 726.140736][T31948] ? ip_set_alloc+0x1f/0x30 [ 726.140756][T31948] ? ip_set_alloc+0x1f/0x30 [ 726.140829][T31948] ? __kmalloc_cache_noprof+0x189/0x320 [ 726.140873][T31948] ip_set_alloc+0x1f/0x30 [ 726.140894][T31948] hash_netiface_create+0x282/0x740 [ 726.140919][T31948] ? __pfx_hash_netiface_create+0x10/0x10 [ 726.140979][T31948] ip_set_create+0x3c9/0x960 [ 726.141011][T31948] ? __nla_parse+0x40/0x60 [ 726.141081][T31948] nfnetlink_rcv_msg+0x4c3/0x590 [ 726.141113][T31948] netlink_rcv_skb+0x123/0x220 [ 726.141138][T31948] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 726.141212][T31948] nfnetlink_rcv+0x16b/0x1690 [ 726.141241][T31948] ? nlmon_xmit+0x4f/0x60 [ 726.141308][T31948] ? consume_skb+0x49/0x150 [ 726.141333][T31948] ? nlmon_xmit+0x4f/0x60 [ 726.141362][T31948] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 726.141467][T31948] ? __local_bh_enable_ip+0x70/0x80 [ 726.141491][T31948] ? __dev_queue_xmit+0x1200/0x2000 [ 726.141517][T31948] ? __dev_queue_xmit+0x182/0x2000 [ 726.141546][T31948] ? ref_tracker_free+0x37d/0x3e0 [ 726.141578][T31948] ? __netlink_deliver_tap+0x4dc/0x500 [ 726.141607][T31948] netlink_unicast+0x5bd/0x690 [ 726.141668][T31948] netlink_sendmsg+0x58b/0x6b0 [ 726.141726][T31948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.141772][T31948] __sock_sendmsg+0x142/0x180 [ 726.141804][T31948] ____sys_sendmsg+0x31e/0x4e0 [ 726.141831][T31948] ___sys_sendmsg+0x17b/0x1d0 [ 726.141940][T31948] __x64_sys_sendmsg+0xd4/0x160 [ 726.141972][T31948] x64_sys_call+0x191e/0x2ff0 [ 726.141998][T31948] do_syscall_64+0xd2/0x200 [ 726.142031][T31948] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 726.142087][T31948] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 726.142170][T31948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.142190][T31948] RIP: 0033:0x7fda9ae5eba9 [ 726.142250][T31948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.142267][T31948] RSP: 002b:00007fda9989e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 726.142289][T31948] RAX: ffffffffffffffda RBX: 00007fda9b0a6090 RCX: 00007fda9ae5eba9 [ 726.142305][T31948] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 726.142320][T31948] RBP: 00007fda9aee1e19 R08: 0000000000000000 R09: 0000000000000000 [ 726.142335][T31948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.142349][T31948] R13: 00007fda9b0a6128 R14: 00007fda9b0a6090 R15: 00007fffb68c4bd8 [ 726.142369][T31948] [ 726.142379][T31948] memory: usage 307200kB, limit 307200kB, failcnt 4508 [ 726.490432][T31948] memory+swap: usage 307492kB, limit 9007199254740988kB, failcnt 0 [ 726.498355][T31948] kmem: usage 301888kB, limit 9007199254740988kB, failcnt 0 [ 726.505660][T31948] Memory cgroup stats for /syz3: [ 726.506017][T31948] cache 0 [ 726.514170][T31948] rss 5431296 [ 726.517498][T31948] shmem 0 [ 726.520463][T31948] mapped_file 0 [ 726.523980][T31948] dirty 0 [ 726.527155][T31948] writeback 0 [ 726.530540][T31948] workingset_refault_anon 1231 [ 726.535489][T31948] workingset_refault_file 5248 [ 726.540362][T31948] swap 299008 [ 726.543784][T31948] swapcached 0 [ 726.547229][T31948] pgpgin 371339 [ 726.550792][T31948] pgpgout 370011 [ 726.554368][T31948] pgfault 411627 [ 726.557975][T31948] pgmajfault 877 [ 726.561567][T31948] inactive_anon 0 [ 726.565264][T31948] active_anon 0 [ 726.568861][T31948] inactive_file 5439488 [ 726.573245][T31948] active_file 0 [ 726.576726][T31948] unevictable 0 [ 726.580228][T31948] hierarchical_memory_limit 314572800 [ 726.585654][T31948] hierarchical_memsw_limit 9223372036854771712 [ 726.591896][T31948] total_cache 0 [ 726.595392][T31948] total_rss 5431296 [ 726.599272][T31948] total_shmem 0 [ 726.602843][T31948] total_mapped_file 0 [ 726.606899][T31948] total_dirty 0 [ 726.610414][T31948] total_writeback 0 [ 726.614263][T31948] total_workingset_refault_anon 1231 [ 726.619595][T31948] total_workingset_refault_file 5248 [ 726.624934][T31948] total_swap 299008 [ 726.628878][T31948] total_swapcached 0 [ 726.632847][T31948] total_pgpgin 371339 [ 726.636900][T31948] total_pgpgout 370011 [ 726.640995][T31948] total_pgfault 411627 [ 726.645245][T31948] total_pgmajfault 877 [ 726.649483][T31948] total_inactive_anon 0 [ 726.653760][T31948] total_active_anon 0 [ 726.657812][T31948] total_inactive_file 5439488 [ 726.662569][T31948] total_active_file 0 [ 726.666632][T31948] total_unevictable 0 [ 726.670719][T31948] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8961,pid=31937,uid=0 [ 726.685804][T31948] Memory cgroup out of memory: Killed process 31937 (syz.3.8961) total-vm:94024kB, anon-rss:6320kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000