last executing test programs: 1m26.383383092s ago: executing program 1 (id=1270): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1011}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40)}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{0x0}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1m26.172608272s ago: executing program 1 (id=1274): syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x88f, 0x0, 0x0, &(0x7f0000000280)) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r3, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 1m26.124674717s ago: executing program 1 (id=1275): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m26.037337876s ago: executing program 1 (id=1278): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000a40)=ANY=[@ANYBLOB='dots,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="089369643de970f2b7108a3a5ed4ea838720a7e9c91b92cd687b1a69292cef7f2e93b1588014be89ed206d32032a7747ce6d27169040eda57bda85bf94db20bd4078985f5c7e60850f1ee56a7f95bba3cf1fd4499f37", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,dots,time_offset=0x00000000000000e5,nodots,nodots,nodots,check=relaxed,nodots,nfs,nodots,showexec,flush,nfs,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008054) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c00"/12, @ANYBLOB="11"], 0x20) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") syz_clone(0x40000, &(0x7f0000000340)="266b303e8e3ba6f1c5dee0351ec1923c56e1823838f3b2c6dd291eb670118889a1ce3d801992399896b40758ab9b764a8beca6c8e79cf1149d14b57b1b7e60b19d1060d95bb6bb9ba3af6b562d5bbded8cbc6548cba511c37981645144fc20646dbcd261ff6501ac1599fa827350d9d587000fad7c43ec05ed8470241b478c8888de9a3a7b584936aa907d91708a41b278e826fde9e18f3ef0b9584c0717f6e95895df7bfd524c78a841b203ccaf76f271c76369cf50dfea49e5cee14689f7c2e60a1275477a4d8cc14a3298b524863c5a0478f1b9f78379cd30c4885a577543294a819f5f", 0xe5, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="8d7cbd2242fb6827c5337f6dab71199567fe06e68a295ae58f36790136ace2f37a05408ac22d4dfbf6d7983664814b3388233f66") 1m24.953991802s ago: executing program 1 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x400, 0x14, 0x2}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x77c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e21, 0x4e22, 0x764, 0x0, @wg=@data={0x4, 0x6, 0xff, "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"}}}}, 0x78a) 1m24.065875129s ago: executing program 1 (id=1296): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 1m24.016835014s ago: executing program 32 (id=1296): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 2.020819862s ago: executing program 3 (id=2614): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1011}, {0x0}], 0x6, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40)}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.917758302s ago: executing program 3 (id=2619): r0 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) fcntl$notify(r0, 0x402, 0x5) fcntl$notify(r0, 0x402, 0x8000003d) 1.825519581s ago: executing program 5 (id=2620): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r0, r0, 0x0, 0x101) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.796009504s ago: executing program 3 (id=2621): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r4, &(0x7f0000000200)}, 0x20) 1.795023054s ago: executing program 0 (id=2622): syz_open_pts(0xffffffffffffffff, 0x101000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r3}, &(0x7f0000000bc0), &(0x7f0000000c00)=r4}, 0x20) syz_clone(0x80000100, &(0x7f00000001c0)="e3d7a0562554c97a3e1c5fede725d5984ebe46a2b5d739f9ca49c0cbd5c94e334b91d6acac3490d2a2ff558123e8f72c5c1ac0d4f10547444495fcf5f0f28dea6eef3d5aa33630dbfdbda3d9327bc0644f8d01d4f44d48a1987e40fb648ceb7287e09a6cf37142e7", 0x68, &(0x7f0000000340), &(0x7f0000000400), &(0x7f00000005c0)="616dfa94ed110908efc4b11d713b630e602e36c01337a667280e9084fc") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20048850) 1.704100633s ago: executing program 5 (id=2623): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x2}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000580)) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000002a00)={0x89, 0x201, '\x00', [@generic={0x2, 0x1000, "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"}, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x1018) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f00000001c0)) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r6, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@map=r0, r0, 0x14, 0x200c, 0x0, @value=r3}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) connect$netlink(r10, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0x0, 0x2}, {0x0, 0xffef}, {0xfff3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8008014}, 0x4000) 1.668332727s ago: executing program 2 (id=2624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0x7005, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r6, 0x402, 0x29) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x24, 0x2004}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 1.667089167s ago: executing program 0 (id=2634): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}, {0x0}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000018110000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x406, r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0xffffffffffffffcf, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x1ea6b, 0x5922b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030328af7000000000000a00000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$USBDEVFS_GETDRIVER(r9, 0x41045508, 0x0) 1.435725399s ago: executing program 4 (id=2626): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.4284239s ago: executing program 2 (id=2627): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f00000001c0)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x7f}}], [{@permit_directio}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000e7e61c7255d079ea1b7df3fb0b7c300d27cd04cae9af8e63b07dd3831516702542c882c89aaada53ba682596b74e659faeecfa6267c14816eee4bd2130508493ab12", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!#\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001005}, 0x4c010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) close_range(r3, r4, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 1.384414214s ago: executing program 0 (id=2628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) 1.342419699s ago: executing program 4 (id=2629): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1011}, {0x0}], 0x6, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40)}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.3240392s ago: executing program 0 (id=2630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a31000000001000"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1.198393342s ago: executing program 0 (id=2631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32=r6, @ANYBLOB="16ad96be3d1f91c65a2aba53fca0b35197582b2d8686e7fd91a30300000000000000fc66f1bd2b9963220023664723dc66b19d92e78603ba0a983b455e9e5f2b59ebb2a8120e9364c3df4ec724ec08ce71e8bd519710e0295592d498cb68bd14519c55ec2cd6e6af6a2275793fe2b4559278a08274c30b7f4dc1219bbf09c552dcb8738e77d24d8c9e129006cdaecec151ad5c5f084079a00a7d693b35cf1865f07e93f619af62159ff5632df0431225c7dd5f7a1232378f7938d5be8f8d79b1c48f67646d3e6c0be4a6f3b010b4dfcca33b564327c6843e878a9dda71f9559c7ec79cec398fa07594f1434a24"], 0x28}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[], 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) 1.196992333s ago: executing program 4 (id=2632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x9, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x27, 0xe, 0x0, &(0x7f0000000200)="f802040000000000000000000800", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000b00)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=r0, 0x1f, 0x554446120900450d, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$VT_SETMODE(r9, 0x5602, &(0x7f0000000280)={0x8, 0x1, 0x7, 0x2580, 0x4}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000005addfb3368fbc800000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000006c21000000d5002020207b1af8ff000000febea100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000181100"/84, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r11}, 0xc) 1.152470747s ago: executing program 3 (id=2633): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24f12d43f9c49ce2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)={0x101000, 0x4, 0x24}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xa, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x800000, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070000000c000000ffffffff00000000", @ANYRES32], 0x50) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010010f3b2d8d337a60e79c0c1bfd6"], 0x28}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r4, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) r5 = openat(r0, &(0x7f0000000100)='./file0\x00', 0xbeb60ffd437a907a, 0x36370b7959b827de) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xffffffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000340)={r6, 0x80000001}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e21, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x84) syz_usbip_server_init(0x3) 1.036763998s ago: executing program 2 (id=2635): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x201) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 1.030487949s ago: executing program 4 (id=2636): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) close_range(r0, 0xffffffffffffffff, 0x0) 847.852947ms ago: executing program 2 (id=2637): socket(0x80000000000000a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 761.618916ms ago: executing program 5 (id=2638): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 734.034248ms ago: executing program 2 (id=2639): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)}], 0x1, 0x0, 0x480}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x223d, &(0x7f00000002c0)={0x0, 0x6e7c, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x33, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu~\'\'\t|\t') io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32], 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 714.0665ms ago: executing program 5 (id=2640): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 679.094963ms ago: executing program 5 (id=2641): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000480)=[0x8, 0x7, 0x5, 0x5]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006:\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 431.229468ms ago: executing program 4 (id=2642): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x3018, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2fcc, 0x3, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4a, 0x6, 0x1, 0x0, "e3b3008a7049079252f4818cc79c6161e7f0656c2f8a047f2a6192b4836e760391fb905c24cab91f5b35f4effb63bb59df2f9a51faff02f3d19b66b5c908c6c0c6ac8094abdd"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x244, 0xb, 0x0, 0x1, [{0xe0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xd0, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}, @NFTA_MATCH_INFO={0xb8, 0x3, "d1f4c30eaf699fe9e33a298888ca74aaf9f51743d5fe1a14ec310e8596fe8cd61fec172c0a9b3eaa20379fe7b08844f469d546120462d83445000bd2d8bd6bbcef66c89fa43d3d3c4376198cdfcbe013c1c63939734fc91ac0b7d45e4bf734a249590e29ff0f19a1b36d7ee2616241b15ab9484af53699dce9910aed175da77172af9fa3fed74d4fda575ec1396da490763284a698d02621634831e175b67adabf85d7e4d215240b56ac7ba3671896cfb66c28fb"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x45}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0xd0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xc0, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5d, 0x3, "fdaa29fb5f284ee0e7a0f40f77bda422b102e4ee6a95a4994fd2f431573030513625bcceeaf629c8d0f101496ddade7b50c78ba20109182b815c7ef2cf4987d645193dfb612c290a13f0da8a084974aba0199bd6a10abad71d"}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'SECMARK\x00'}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_INFO={0x36, 0x3, "94c3b298ffb65ab277f3f694b95a1080a98f78fe2317267c8a6634c07e9c1411f52188138d76d864ffb929421bab5f6ddd89"}]}}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x5d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_DATA={0x2a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "e9d6da2d3781a6ef6a1242bc59ea7d6987ca06b118cc9fb5167d1fc61c5560ca98fab424af9fb8ad90994e095eae7f5101a7c66af8e9a4dd2159514091d3b31177f82af16d38aac8c8"}, @NFTA_DATA_VALUE={0x9c, 0x1, "42324e1ba71927c468b0b88681e079c855bd0770233ce8d88634d3e90891e8f9f51fd3e4250d9ea764e24d71816850cb8cb443c5ace1dc9f9f6a654e890a6769d329886d6753d54af0d3d597d5321945facf422b06de2feed7bce04e183047c7bb73451e6ce14aab904b54dc879ea6716d281b01289dc615fdc9d9418b1e3fd682b58597bb98340fa98b211d7174fd2115e8b84893dee7d8"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f0084c5dc59598470656d7b5aa3d092d9bb74f1783856db81a9899203a02f6764022101ead04d3edd6c12c0a888d316d901e92375f2eb690d0c264c4453d6b6967e50b669ffb95b99b4891b4101ea0013c3f00c4d98d5b36b95a216fc"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xaa, 0x1, "22c10bd31cea4b16894c0b3279189afacacde88964c0974df156201f8b3062a52c389e317e8fe40ee5b1edefa74005ed805206429981250ef6da8a5156be6aee8923a78c068a4a764b0667e8d4c82517a08dd14f619e22a637c40ca90ee253c3bcccb05b7a6eeff8436e343e23fff33f08dcca1c1526884a2e569f3291393eca81a97fd86b7698c1f795884e82a68a17521538fc74b69195477774580fde22dc6172ee5c2aa3"}, @NFTA_DATA_VALUE={0x60, 0x1, "6d01fd33f0c6c31ecc7c75f8428afd5dc317416ccce9eaa47e7647de73317cf5f10b538866af250f6f22c58bf3a3c4740899161c4f0a7e3023582ac0522c04b86e015e6a02e18c35c3c221156535764163852cb1995751ef366044ab"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x23c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "837ffab1d39bbdf307dc29129f197eb2f2b0706803239b667e707e46f8a02e69433b7205db66e355a3ba6f6e303dfa8d029c1083800592142383ffc60d3151e25ea3fe2b7ed9459591d2c1cd8eea5a5ea2a08c3097bcc45bdccac2be0efdbf826f70a68b674cfc49e46e069176f2da1109dfcd1c388b82e039188bf06da211f39ac5e423ff3583b51fd098ec5a222a68c9384a6721f0a0ae92c109dfc877183ebda7cd6b4c0ff7cc5487bae06c9604d75bfbd41ee68d8d74849dd224800551be0730c0fba411f381986ed91e62bb9057abe36571"}, @NFTA_DATA_VALUE={0xeb, 0x1, "c049dcb3e2c17251e569548aeea2bc6ba81927d412f924cfa98598993b754aaa5c736faf5fcda89055e0562af8c25620b01fb0ab990056a88df18c5ded13b172cbb23547a5843c3c27bc6e6b0c702fa4881fd3c9ef900765e1a9c9e80ff238f67e2c3be19974fbf29554f1b543b61317c208a3d84d6709e7ee2c821e0cd7cfd09c42760dc2c5d53a6183c51f0a460167e114d447f933390105ee02dca50b28074a6704654e05b46445d187afe8efe2364b7bb731c1dd6f10be26adfd9246cc603d64d544c7a9de1017bd989ee591b9e649708eee8788618333c00e118400656ba309ebebc62830"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x2c, 0x7, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "970fdd1e7efe73a8682d27eb9ba75bc5b30257"}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "45bbf696d15d0cca5e79b275675e0aacd1e70398c1c83f1113b3f8e23c5bf4c0b47646a265a7618589b780aed9b502b03d6fab06e054e63248c697767ba5fef251a1c5e7c5d619c30b72e2fd59ac08131f816e3c3c00f39324198d2ecb4e30a3694a6a40ae795df9c25b7ca5586e4d70f6f9080e9b0c0a5b686e6cfd19fcc5fcd008fda3f4b2cdcb7f1401d476771700d5d9654b465bb4d072279f"}]}, {0x2748, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x21f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x21, 0x1, "8eee7e5091f57b273c988bebb5ffd6834eee226926a59d42fc38879930"}, @NFTA_DATA_VALUE={0x9b, 0x1, "2647bb6151f695213ff501294d0105f39c3fb957a2d511d7edfb56cf217e29d22612f70a037a74f5251eb553c2857eab18830079fcf19e0211d0b3d2b52d3f9f81a3a493b8a35155d0c964d96b3f45c4b15d3e73ee443719d97a1ad0d62234eaa031fa701c066f9abe5a0dcb62f5b6cfa4d911f679a3abee06cd84a4fb293d91799f6881aaf8fff61177b2168370b9d4017e4bcab0344d"}, @NFTA_DATA_VALUE={0x1004, 0x1, "b6607c8ba738f570e5988cf944edfb9cd3650487bf5c4bfa8416c0ef50395797c9bc248122e22d041be5cca1938a9ff805ec974eee995f06fe02d79f3972c8441aea4c83bb9c57280fdbe576abc13b82e1ae61f4043dbc3317ccfbb21905af8097bad2aece00b0dc69322f2e5f75280d4edf03cb2563063d885e345f98a845cea63061e5841e1e57ebc16dc8e68077e4806cff374b8f503c1d7a5ff934211c819b12f16df352abcc1a36447ba8df90f0332bb248ead1cb7f544bad1b84cbbb82eb6cd41e3b57842ee5da0877e645784989989c49aadecb57209f3063fe6b207e5bd7f22b9999c66dc046109667530d5b7bd717467c50a5f155fee04bf8aafadd1be73479ff719c6c761c13a64466a63090b3b92994ba5876de21d48dedd712152a013053b763c59564c5c4394d4afbb3136e1493cf93d9270c2a80d9aceef30e6502059413ea696704a1f68a6d05f2dc45ee60c39bbb71318e5b21402a7b3463229329f69621b1bb356e7e4f78f7e8223489ee2e53719862e8fcb435cef20f719bb2e2d602fbda4ceedcad612b66df274624dfc2292b05b3173051dcac629d05d2febc912cc6b68dd5a86515f90aa56a70bd7c17129095a805a1cf75e2e2acd9b6cb52f9034c22c214758ba31cad19bd88de0813d893fa593fbcc704ceb667f6735bbeae41b5e145cc15c54f18512ea6fd06ef762b1296b70cc257e0493a083a9b1b59bbeb0f094943aacfa9b0d2153922df9892b87260e0a390f68dc0143dc8657a54eb2304d75fe679e02f9ab83a07cbfaa60a64aedc694153cc91bef14525f0a5e8b4fb503dd126033bf88bc27264c7390384dfde9b9eb5d3cb9a252ab3a83cc27a08fc912c57c91a55662e261807c8261ae853e11b36d2f55dce88d08eb1de590b11108176b348b49d47bf6dea145d3300d06f6202d94ec57ce6d3f3abfa1292a79a5f8053158ffca6fd9ee8e47fb433f3c1cee8face59d05b7f1aa98b3c24436b4a18c26cfeda34d02eeb0af0fab8ba96775c0989aa2048d5244b617cc0edeac48c32f6eae61aad85ae85459ae7627392093d91f2fec02c0ffa7034d3cab9ef74e3c9d7deb0ee503e00c0da2a3b664d63438cb78e5d94f0c654756c5500a6f7fdd4e93ca045bbac07ddd3385ec66001c3ffc9ef5cf7ff16dcde9bbb3796dfbe253fa32a1b9caf51e934e5cc4dc1fd08eb6404a04293d0064f34a285a08d4bfcb302f67c4b12bac8790f00cb5b435cf5eb0ec254080a799da8423e413b4209f979d14b187780fc962faa188484a11ff2ecdaa5eaa882ddc98d4a36b27b4f1763c714bbd8ca067a444feaebc5cff0e973564356d0b1e270b13dd178d24b0712de2a8ae380a42f3cd820d47602cbbfc61371bfbcb02555fb8e699e20fb7b8bad9a90987237567887cdaa018b2a89c2e4cdacedb838aa01166c893210234b6de61f04bed0f41fc7a726410805169f4387360786745e80e452bdc620e36cb4e107b947678faf79a3d31f93e2028e29dddfae0ad668e496e00283b1d6933a2fd1221fb005b4ab35280dc465f42fc962349ccf3451513ae2275f0732336eed07e8dc56c3d7740dea853e9fafff06b7bfc26de48e6b74565defa2b1563a243e94c0beb0e10f1399b4ee8359cc42fa7849073caf03dd7f2782b8d3c828ee9c5eaa754707a6e72be3bbcf8619c1180da91743881ae8a7f357767fda46de74159e6e0cb3637b53d582287afcc5176cf791da132d2cc67d6cfeb6762599a6a9a504b3a918d124824032646e0999d6290c0b0fd9bfad6bfffb7411a43d04b47df436249b558c670c6e0b4d3afebc69281af5a200a0dae1d3a7cac2799802a65bb19053c486f3811f49e15c5b1822ebb12bd4676c9b9d30a471195a9aeca844df447e4e17c7a43b3dcd53cab18d8732361b2d229244b529ed96a6a9f6541cbfd62902941c2311b2fd2930ebd0789d08f30e98296e36409a4f8e036b7e7604f4256b5bb866b96bb878a8159c189caa8e2a738204f5c182afaaff6f91b305603867fe310f29c662eea7089bc4320abdfc0dbae920a77d336cab886d768cd6d54d649ead3762403c1dde233f6931475356df4070e2ca019f723ea8dd8da218a50855ae33d3e40da6fe1196e37fb20c5544bf2d29a6d39c05acca6ce9b5423796e30ddc885a273c87c227d8c57b8ce98deea043c4270d0eaccfbedd1fedbdeb3c8de2fb66fcb5decb64c4534bfafe51b8d71c5e7c5019d7f7b23dd06f3657e982c10caca76014072c36a3dcc791e16896a9cf09ce4133e47491f3757754e01d17b94359669a08b24973f9e2b56d511c9524c4edc8461c522b97275ba9143d8e3ebeec5fc27a31277ea82afe08a63e9e09e7f6b395389714c441215c3ff69f9c4d802164a25427147287635634979e786b5467316066acf8fbb340e2ebc224393df06bfbc1d2fdfe400ae0b972f2b52c86d5531b5e6fa446cea89235802e0ce39d8e7a1ed431a07ae3af86d85ccc10fbe5e803cef73b109311847e38189c537b3543e01ed79eeddb43ecd7ad28b83b5cf8aff0b6f3cbe341242eb57f4f4455d2c802033fb2d0da718affa441059aea8303a98573d57a2ae1a449d0c30ac11f98f8617c21122669ebfc79f37035dd3ff0c0abcd17bc801fc2732b3118ed6ccfe61d149e052e6997bf4c8000ffc2b1539c873fd438fc673be3931c1bc3a42e0554c2f1d655408dcc10d34be108b8042d5f79f0eac0c72f15ce5723194459a393e6e2e82c7402ac003b50010e7427f08426ce849b4f873498dc3d5f1d0aff2becba37427d6ac57c8abdabf9dd70cdbc3bc14230fe03252f093d999099e324f169ba20ab40afd3c4290fff4750a7d199cbb671c701fd22c9f3232a8eaef56910d170334de635dd20017382b88d19fd4ba6107743feca3e7f1c2048ee744424b48e11a95c4d9ded550c1f5e0252f5e8818ca929a74374217cd279e4c8a782cea7b2908b5857b947ba87d0e0b5e0b342bcce74dcb78fa6c8e6c26e97c6e6dc257714d6d4ce875572e3bda6849a04f69379555dd4bd58622c3c78438e0a5d1fed809d902a6a3a3a35b1450747587066bda380be2bdf4f53a55a64c4c3111b503f10eeaf20859c9120dc364105faffe1d63a0b2a8fb1f2fab6359175cd437785c9070e9be011de02ea90e7e2503742d377514782dffc2f46b0e2cfb554d25586850a4a79802e90c17d565787e6c38fa18a628f73a1165ed5e76bd9ed5020a4909e70361836932ca3514ade65aa8de4e38d07883cc59b7e479b8919fd27c39a79dc2184e301e23ec09c3b7d5c2b28a8e737d9e014e6fd78ab0d929cdac7f138d324f5642a37a3c517a5c2f7b5286aa0044edfa398788e274ff4584e98555eeef84f963804b8bdd66745b6c1055b6e740e9461d30d85c4857b215525e1d53a1a533be84c1d60d8fc0a3307ae0343334c63bad804a039b0de10b45f93e950171c7a28dd3c7820a80162790e45613db681502d7f01af5aee9d59113f9eaa6d3612ed4da621283e2eb721644df5ddf6cd433a371ca495dbb44ada6926737afe6bfbe7027da50a73b6516fd37df2a30036db0d8bb269c46a6aee57f09324aeaaff08e8451e49725bcd8b6182e8a629ef5f94cb802297059dd1e3b4d8ea261cc4c897e40e7ac2c07f430644c42647c5f60433673517e3c71300e663efa67917edc40cccd8a09400bf27ac4c7036a19b221898096defabd5f238a1e8e198e52144d7600a142050d7e55ec3056ff6ccd051e377eb44f6a6b047b68714e761d609f3cfb398c323727d6ad36173d02d7584e4283002d4c79175c5a34d1e86068192cbebb61a0b6c688ff9906925ca3b30739f30cb5e37f7521830b04ec9483b7cdd282492a6c84255d57de2440f3ccee62345712da567a303f6e69691e35edc9184e854ed30bbd5accfff16ee808bae2dbad36fd2b98a823cd1e9c309f6c93841b5b41c861b1e7a618a4a06fb0e3327d52aa9aae1de235048d9244ec84197135e736d66e55dd28ebe77177bd3cd44bfcc7653079c0f3555fca2bcae8ab72693db9b974b8bb872809163f5a3c164b9472d5fda7c66972f681336171efd94b74923f2bbc6a8367aa308e1691edcf333c0fd8faf28baed129d5d167364a65f8f89f3f394eb5c540dc8d9a7938576244f65be02329cb7ea72a337597be37e6f056d083d751cfb54f838f2c9198bbbf2e07ebcaafc6cef04faae05e01e20df5d7e18d386d18e291bf46ffb0ad50618937f0940d74c9c3327089c4fdb99025e656462b0bc5e5fc4698eb3c064cfe2a1c4ea0ce0d4b734b8a708bf75e57fdd27a3df1e987ed2efe9fa96c7fa5c79ea2582040f997f6b356db49a1f29bc78e75f0d4ed1d24361bb972e8444798607db702c8f8cf05541b0a11c7a7724992c61553df4b73acbe24fee9e8ddb606f580e1e5d351936dcd27359176adc44fbcee3fbb2f8def5d85ee364abb578da6f03a2807f7d5e7213515091295912a8a5b34cd3b5dd59dcc258460cc867d45ddc597aa86b85d64ee9f7c753926bf08feda879e966cac87cabc63f688f8a06a4f781282fefa5a7082b550e266843a30ee401bb749c8ac59f00815c7703254a86ea3fe2254f544ae9256949796d119b1f42c15d1afff5561334a7ff35f64a7b1abaaefb752e93dae695e48e629931202986071c0028cb6b9eacbf6d4fc314714e6e76e803f1de109138af9d4e21f1e8df2a0dc8b36dbd81edc1a3fedc35f6eff4a79fbcf69cdc35f517b48e61fed1883a5f1d98bece082011d9a92ee05cf2274624b01be1e0ec22720e3ab4087921caac49336104e89676ceebf9588e7791cc668e02caf22edace089e8340c188fcfd51febdcbe41793dcd2df7937ae64b8178abf20871a1774aad030c9f456411e63771a8be332cfff6172e6358380c512fd54859169dea3adf82756282dd698f79e3cbc157ebde738c99ac4f1fe45a10c4b847703deaea75c88554e283c4a89a08260f94ee541b4d8483e7d10c69d8736eb43b2c737816a64b35846d05eeaa79982d4969d2d6a7b9c9c175cb1e0e25ad123e94311c30ee1a687169b18ae72497219516d8f5546820ab29663c6d8b84391ecf3b531255c3377fe59395ed625e4d246cb8ea9fd225bfe8df2537679f8f0b292ec0942bf5da9dae9f5c90d61d5e91b670cc501d7bec1ff84a044fd24ae9f401b27263458e409f82ff63920660d2897ba88df7561d84100ac116a5a1a6f46cc768359da2ef773a4843113901b5328dbdcb0b62175c40eceaf75b37fb892e41c7ed3cf28a94167e8363e44598e9aeba157f823698c1cd781a3d1863a8dd98b11d20d405e95fe3b45aadceb1482289eb3b5f037c4d6938c01394aae953404b25efe5eba74f750c78a2731354564580978c6d8eb2cb09e4c33e05f1f8539ee75ae3e7955becd1c1022a4c76d6ad84925fde008ebfe866099a6458897f790b29794f803904fb4a49accf4d700ad4046cadeb02eb4124b2551898b32013993cc705fec017a8a1f2cb635e522d7e1d8132910dc18f42543e728157995b4365c25e95a6ad682ae05c99cd291bd4fe24c45a088204634eee8c6a18be5f19938fd9c03188c61289c6cfeb477f5c3c6f8bc1941cf07d6a1f198fc0094b55ddb417177454f220061d10356b03141bdb0678831b3aec9c806302d92d7ddb721379de8062bb708e5faed5bbbf6a58a4154c6fb15d68863d1cb0c43ad9117178a5622c2e7e0b53d7510bedeed0836d26914a2ec762316d519ea9ea6c75028fc0d67b9c62a6b07cc4b6a550a534b445a37"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xb9, 0x1, "1ad53d7a2d4deab8a9eec45707f77aa9ac4994e070a842832cdb06838c0cc7aba6da37ef154d7162f83d66885c47c8fd1d4988f810ce2ac4f8c8916941998bba9d246f1ded602b5925976b95dbe5575e0279086c8ea2360daf1b80e58c0b970d18a3f48211de3f79a95787a146578483edfd4693213b90a671bbcf6f510db34683528ea5ea1fe45282ef2185e271c1aea483fabe9effb7804a89eb630f8d57601e126aca69442dbd1eb9fe4fa5d0097a21593149f7"}]}, @NFTA_SET_ELEM_KEY_END={0xa8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x75, 0x1, "288403b7f1378d63321eee6108766ff5991e8f76ae2a3d62d0f5e820b4fe3a0a21ee20806f2b3e4f12eaaabc8887a0df91fe5e218b7112f3d6b00f9ee1cdb9eebd4b59bc71ffbaa46cb2d015afd87f6871a4b70a790fdd40ad63f50b1c156ff1dff1fed2e471f1625de1f5ce5844a547db"}]}, @NFTA_SET_ELEM_KEY={0x2d4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4e, 0x1, "22fd27ba3d734b7f92469413f023182074237e174cec88106e47668326a2c6f2aa26d3a6a95d7f2f46f0ab3e2a452e7b05f13110344b71fd028b2fb12a7c301489f7336439be192f4913"}, @NFTA_DATA_VALUE={0xe2, 0x1, "348c9df67f41ed350db2f3c9284255c4a85be6f3b83a6d7369bafbf7949b750dfa34e148590469035e82cd88af4bf2159405a5b462128582b664fd485cd702605e64d00ef66664c50fac9717ea7fffe8899088108c7ebdf16206b3ea004763837f17cc605ccf985a57079121b6ab755b5c3890e2a33b8cb5631572daf983de2434e4121e78456e4659012d713a7059d9b6f8808f54ddec6645cddebc1bf23c7f0d0b88ff462fdd8a2ee0870133699fe3b66b4a9fe8a5816c100182dd3f0cb9ad56eaa9cd94746261cc04a98c5056ac75673d209c61d5e499df990b5e4bb7"}, @NFTA_DATA_VALUE={0x74, 0x1, "cb197b6d8f714ad0d595da09615c50338a3cb7ffa03998deccab61bc1f21054b082e412a0d888cd3155516f336b8108bf3c5d40f719e586585f8b2a7d15ba2694547df58924e0d7de7b621587ebce386cb53c20702150317119aae01a2eb66c4c6ccdcefc7e3211c015b27a73167def1"}, @NFTA_DATA_VALUE={0xb, 0x1, "11a978c2310760"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "19c73ce05d007c36c64f58198847b76727e1c568fe0542dd5c92be56900bf1ce3cccfd58126ac8e96371002733767cdc28f4c2fb6380e14dfedc0e39daa4fbae7b502ba80ad970a7d2d328fa713be8b6ef18b154cbaa54fa61d485a576fe519d9f15edf584ba47db42be53add371a19b7cf62e768b16b5d05c777cd64356d7227f074beb5ccea4024cc7c47625483e8c37c31531264aafcc17d13c51c59231c72d9342af37f8d5509f83e0fb2602f0a1ef90ae395b34ce5e5e33555ebe0e40d139ecce87d963466736c95e32"}, @NFTA_DATA_VALUE={0x8, 0x1, "70ae29d3"}]}, @NFTA_SET_ELEM_KEY_END={0xa0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9a, 0x1, "fe148012fa0db73f36831ec96af6e52f774e836646ac341306e67073093f78621c65bd1779d875af3daf1635dc3ae4cd602abf5f74ccdd9296e7b2718fd8d91dd35721c536962480981e73baa57dccc8bfab218df77ce761a9e0478035a3ed17994d9bb15b0171a2dbc9747ea883b8ca6d8caab5156270ed02b1b32951c3eae959b7950a37f4f4e20655f2b577812eddacce9b4c6e63"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x12c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x64, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xf0}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb5}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x9f}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x10001}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJREF_SET_ID={0x8}]}}}]}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x30ac}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x26054051, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 428.127778ms ago: executing program 0 (id=2652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x40, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000a00)={0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) close_range(r0, 0xffffffffffffffff, 0x0) 427.434698ms ago: executing program 3 (id=2643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a31000000001000"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 340.690167ms ago: executing program 3 (id=2644): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r5, r1, 0x1}, 0x50) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2082}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x6}}], 0x10}, 0x1c7a50772457362a) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="2bad7b266840cc541fd3cb8eb6ab9630d237312bb1744699eb3ed0d07326daa510ab69ded7977008e7201590267b6c1e629bddb039a7dfaef5220f3b1cb3a4b1735356573225a75484090f81381588e9b43322355aabfa4074d941c7c174", @ANYRES64=r3, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x6) ioctl$TCSBRKP(r8, 0x5425, 0x80000000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) setgroups(0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e24, 0x1000000, @loopback, 0x7}, 0x1c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 250.552215ms ago: executing program 2 (id=2645): sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x201) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x22842, 0x8d) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 90.340991ms ago: executing program 5 (id=2646): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f00000001c0)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x7f}}], [{@permit_directio}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000e7e61c7255d079ea1b7df3fb0b7c300d27cd04cae9af8e63b07dd3831516702542c882c89aaada53ba682596b74e659faeecfa6267c14816eee4bd2130508493ab12", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '!#\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}]}, 0x64}, 0x1, 0x0, 0x0, 0x20001005}, 0x4c010) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) close_range(r3, r4, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 4 (id=2647): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x8000005, 0x4) recvmmsg(r0, &(0x7f0000003440)=[{{&(0x7f00000000c0)=@xdp, 0x80, &(0x7f0000002980)=[{&(0x7f0000000680)=""/198, 0xc6}], 0x1, &(0x7f0000000180)=""/140, 0x8c}, 0xfffffff6}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/133, 0x85}], 0x1, &(0x7f0000000840)=""/181, 0xb5}, 0x5}, {{&(0x7f00000004c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/191, 0xbf}, {&(0x7f0000000540)=""/17, 0xb}, {&(0x7f0000000ac0)=""/129, 0x81}], 0x3, &(0x7f0000000940)=""/33, 0x21}, 0x1}, {{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000003680)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/125, 0x7d}, {0x0}, {&(0x7f0000000e80)=""/77, 0x4d}, {&(0x7f0000000f00)=""/248, 0xf8}, {&(0x7f0000004fc0)=""/4113, 0x1009}, {0x0}], 0x7, &(0x7f0000002140)=""/205, 0xcd}, 0x3}, {{&(0x7f0000002240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000022c0)=""/113, 0x71}, {&(0x7f0000002340)=""/224, 0xe0}, {&(0x7f0000002440)=""/84, 0x54}, {&(0x7f0000002000)=""/183, 0xb7}], 0x4, &(0x7f0000000d80)=""/188, 0xbc}, 0x5}, {{0x0, 0x0, &(0x7f0000002d40), 0x58}, 0x95}, {{&(0x7f0000002e00)=@vsock, 0x80, &(0x7f0000002f00)}, 0x5}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000003080)=""/53, 0x35}], 0x1, &(0x7f0000003100)=""/239, 0xef}, 0x5}], 0x8, 0x10022, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) kernel console output (not intermixed with test programs): ed filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.283450][ T8625] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 133.295004][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.304533][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.313044][ T8633] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 133.322651][ T8633] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.330837][ T8633] loop7: unable to read partition table [ 133.376172][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.413692][ T8633] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 133.502546][ T8655] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1790'. [ 133.553586][ T8662] loop4: detected capacity change from 0 to 512 [ 133.594706][ T8662] ext4: Unknown parameter 'permit_directio' [ 133.595890][ T8660] netlink: 'syz.3.1794': attribute type 3 has an invalid length. [ 133.629970][ T8664] SELinux: failed to load policy [ 133.697237][ T8678] loop3: detected capacity change from 0 to 512 [ 133.697308][ T8680] loop2: detected capacity change from 0 to 512 [ 133.704272][ T8678] ext4: Unknown parameter 'permit_directio' [ 133.726884][ T8680] EXT4-fs: Ignoring removed nobh option [ 133.752281][ T8678] loop3: detected capacity change from 0 to 512 [ 133.758859][ T8680] ext3: Unknown parameter 'fowner>00000000000000000000' [ 133.778407][ T8680] xt_TCPMSS: Only works on TCP SYN packets [ 133.790606][ T8678] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 133.838683][ T8678] EXT4-fs (loop3): 1 truncate cleaned up [ 133.856497][ T8568] syz.5.1765 (8568) used greatest stack depth: 6056 bytes left [ 133.865388][ T8678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.929688][ T8697] loop4: detected capacity change from 0 to 512 [ 133.938075][ T8678] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 133.970975][ T8697] ext4: Unknown parameter 'permit_directio' [ 133.982604][ T8703] loop7: detected capacity change from 0 to 7 [ 133.990738][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.035793][ T8703] loop7: unable to read partition table [ 134.049755][ T8703] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 134.502952][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 134.502967][ T30] audit: type=1326 audit(1761475907.593:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8705 comm="syz.4.1815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc31befc9 code=0x7ffc0000 [ 134.580499][ T30] audit: type=1326 audit(1761475907.633:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.605177][ T30] audit: type=1326 audit(1761475907.633:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.629189][ T30] audit: type=1326 audit(1761475907.633:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.653698][ T30] audit: type=1326 audit(1761475907.633:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.677171][ T30] audit: type=1326 audit(1761475907.633:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.701776][ T30] audit: type=1326 audit(1761475907.633:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.725587][ T30] audit: type=1326 audit(1761475907.633:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.750656][ T30] audit: type=1326 audit(1761475907.633:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 134.774403][ T30] audit: type=1326 audit(1761475907.633:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.2.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 135.004096][ T8755] loop3: detected capacity change from 0 to 512 [ 135.031659][ T8755] ext4: Unknown parameter 'permit_directio' [ 135.065823][ T8755] loop3: detected capacity change from 0 to 512 [ 135.102587][ T8755] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 135.107052][ T8758] loop7: detected capacity change from 0 to 7 [ 135.152810][ T8755] EXT4-fs (loop3): 1 truncate cleaned up [ 135.157981][ T82] blk_print_req_error: 2 callbacks suppressed [ 135.158036][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.159076][ T8755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.164703][ T82] buffer_io_error: 2 callbacks suppressed [ 135.164716][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 135.201644][ T8758] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 135.210855][ T8758] Buffer I/O error on dev loop7, logical block 0, async page read [ 135.218902][ T8758] loop7: unable to read partition table [ 135.261086][ T8758] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 135.393564][ T8755] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 135.510020][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.610106][ T8776] netlink: 'syz.5.1838': attribute type 3 has an invalid length. [ 135.829602][ T8785] netem: incorrect gi model size [ 135.836401][ T8785] netem: change failed [ 136.323876][ T8798] loop4: detected capacity change from 0 to 512 [ 136.351088][ T8798] ext4: Unknown parameter 'permit_directio' [ 136.376923][ T8798] loop4: detected capacity change from 0 to 512 [ 136.389540][ T8801] loop5: detected capacity change from 0 to 512 [ 136.396893][ T8798] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 136.422592][ T8798] EXT4-fs (loop4): 1 truncate cleaned up [ 136.433164][ T8801] ext4: Unknown parameter 'permit_directio' [ 136.433353][ T8798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.467863][ T8798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 136.493165][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.563025][ T8801] loop5: detected capacity change from 0 to 512 [ 136.597885][ T8807] FAULT_INJECTION: forcing a failure. [ 136.597885][ T8807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.611595][ T8807] CPU: 1 UID: 0 PID: 8807 Comm: syz.4.1848 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.611648][ T8807] Tainted: [W]=WARN [ 136.611657][ T8807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.611671][ T8807] Call Trace: [ 136.611678][ T8807] [ 136.611743][ T8807] __dump_stack+0x1d/0x30 [ 136.611767][ T8807] dump_stack_lvl+0xe8/0x140 [ 136.611788][ T8807] dump_stack+0x15/0x1b [ 136.611804][ T8807] should_fail_ex+0x265/0x280 [ 136.611884][ T8807] should_fail+0xb/0x20 [ 136.611905][ T8807] should_fail_usercopy+0x1a/0x20 [ 136.611962][ T8807] strncpy_from_user+0x25/0x230 [ 136.611989][ T8807] ? kmem_cache_alloc_noprof+0x242/0x480 [ 136.612026][ T8807] ? getname_flags+0x80/0x3b0 [ 136.612068][ T8807] getname_flags+0xae/0x3b0 [ 136.612107][ T8807] start_creating_user_path+0x27/0x130 [ 136.612153][ T8807] bpf_obj_pin_user+0xe0/0x230 [ 136.612237][ T8807] bpf_obj_pin+0xac/0xd0 [ 136.612258][ T8807] __sys_bpf+0x6d6/0x7c0 [ 136.612338][ T8807] __x64_sys_bpf+0x41/0x50 [ 136.612377][ T8807] x64_sys_call+0x2aee/0x3000 [ 136.612403][ T8807] do_syscall_64+0xd2/0x200 [ 136.612421][ T8807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.612537][ T8807] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.612571][ T8807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.612595][ T8807] RIP: 0033:0x7f1bc31befc9 [ 136.612610][ T8807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.612639][ T8807] RSP: 002b:00007f1bc1c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 136.612663][ T8807] RAX: ffffffffffffffda RBX: 00007f1bc3415fa0 RCX: 00007f1bc31befc9 [ 136.612679][ T8807] RDX: 0000000000000018 RSI: 00002000000003c0 RDI: 0000000000000006 [ 136.612695][ T8807] RBP: 00007f1bc1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.612748][ T8807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.612763][ T8807] R13: 00007f1bc3416038 R14: 00007f1bc3415fa0 R15: 00007fff7cfc5208 [ 136.612789][ T8807] [ 136.839806][ T8801] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 136.934013][ T8801] EXT4-fs (loop5): 1 truncate cleaned up [ 136.978723][ T8801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.164148][ T8801] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 137.319848][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.532246][ T8832] netem: incorrect gi model size [ 137.538200][ T8832] netem: change failed [ 137.671463][ T8827] netlink: 'syz.5.1856': attribute type 3 has an invalid length. [ 137.824244][ T8833] netem: incorrect gi model size [ 137.829255][ T8833] netem: change failed [ 139.485211][ T8920] loop4: detected capacity change from 0 to 512 [ 139.517816][ T8920] ext4: Unknown parameter 'permit_directio' [ 139.517971][ T8922] loop2: detected capacity change from 0 to 512 [ 139.546643][ T8920] loop4: detected capacity change from 0 to 512 [ 139.561116][ T8922] ext4: Unknown parameter 'permit_directio' [ 139.576298][ T8920] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 139.585173][ T8920] EXT4-fs (loop4): 1 truncate cleaned up [ 139.593807][ T8920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.611162][ T8920] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 139.623483][ T8928] loop2: detected capacity change from 0 to 512 [ 139.686524][ T8928] EXT4-fs: Ignoring removed nobh option [ 139.710575][ T8928] ext3: Unknown parameter 'fowner>00000000000000000000' [ 139.739267][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.758207][ T8932] loop7: detected capacity change from 0 to 7 [ 139.759399][ T8928] xt_TCPMSS: Only works on TCP SYN packets [ 139.832768][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.842034][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.850314][ T8932] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 139.859892][ T8932] Buffer I/O error on dev loop7, logical block 0, async page read [ 139.867917][ T8932] loop7: unable to read partition table [ 139.880471][ T8932] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 139.962349][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 139.962369][ T30] audit: type=1400 audit(1761475913.053:1742): avc: denied { accept } for pid=8923 comm="syz.5.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 140.058632][ T8956] loop2: detected capacity change from 0 to 512 [ 140.112762][ T8956] EXT4-fs: Ignoring removed nobh option [ 140.147522][ T8956] ext3: Unknown parameter 'fowner>00000000000000000000' [ 140.179001][ T8956] xt_TCPMSS: Only works on TCP SYN packets [ 140.302138][ T8983] loop5: detected capacity change from 0 to 512 [ 140.338189][ T8986] loop7: detected capacity change from 0 to 7 [ 140.432226][ T8983] ext4: Unknown parameter 'permit_directio' [ 140.454795][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.464976][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.473459][ T8986] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 140.482716][ T8986] Buffer I/O error on dev loop7, logical block 0, async page read [ 140.491315][ T8986] loop7: unable to read partition table [ 140.523691][ T8986] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 140.545944][ T8983] loop5: detected capacity change from 0 to 512 [ 140.630171][ T8989] SELinux: failed to load policy [ 140.652623][ T8983] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 140.679958][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 140.697337][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 140.706716][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'. [ 140.751057][ T8983] EXT4-fs (loop5): 1 truncate cleaned up [ 140.753799][ T9008] loop3: detected capacity change from 0 to 512 [ 140.757259][ T8983] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.781015][ T9008] ext4: Unknown parameter 'permit_directio' [ 140.915117][ T8983] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 140.950822][ T30] audit: type=1326 audit(1761475914.033:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc31befc9 code=0x7ffc0000 [ 141.042708][ T30] audit: type=1326 audit(1761475914.063:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1bc31befc9 code=0x7ffc0000 [ 141.066804][ T30] audit: type=1326 audit(1761475914.063:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc31befc9 code=0x7ffc0000 [ 141.151961][ T9031] netlink: 'syz.4.1923': attribute type 1 has an invalid length. [ 141.201440][ T30] audit: type=1326 audit(1761475914.203:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9021 comm="syz.3.1920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x0 [ 141.213923][ T9033] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1924'. [ 141.261754][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.267617][ T9031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 141.356181][ T30] audit: type=1400 audit(1761475914.443:1747): avc: denied { create } for pid=9032 comm="syz.2.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.376692][ T30] audit: type=1400 audit(1761475914.443:1748): avc: denied { ioctl } for pid=9032 comm="syz.2.1924" path="socket:[23633]" dev="sockfs" ino=23633 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.410974][ T9037] bond2: entered allmulticast mode [ 141.465228][ T9040] loop7: detected capacity change from 0 to 7 [ 141.671804][ T9034] veth3: entered promiscuous mode [ 141.678086][ T9040] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.687313][ T9040] Buffer I/O error on dev loop7, logical block 0, async page read [ 141.698375][ T9034] bond2: (slave veth3): Enslaving as an active interface with a down link [ 141.757458][ T9040] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 141.767602][ T9040] Buffer I/O error on dev loop7, logical block 0, async page read [ 141.775746][ T9040] loop7: unable to read partition table [ 141.795314][ T9036] veth2: entered allmulticast mode [ 141.903643][ T9040] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 142.058067][ T9068] loop5: detected capacity change from 0 to 512 [ 142.080665][ T9068] EXT4-fs: Ignoring removed nobh option [ 142.096899][ T9068] ext3: Unknown parameter 'fowner>00000000000000000000' [ 142.111032][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'. [ 142.120224][ T9078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1938'. [ 142.137706][ T9068] xt_TCPMSS: Only works on TCP SYN packets [ 142.163829][ T9078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=9078 comm=syz.0.1938 [ 142.201487][ T30] audit: type=1400 audit(1761475915.293:1749): avc: denied { block_suspend } for pid=9075 comm="syz.0.1938" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.246663][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 142.252961][ T30] audit: type=1400 audit(1761475915.293:1750): avc: denied { write } for pid=9076 comm="syz.3.1941" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.285255][ T9077] loop3: detected capacity change from 0 to 512 [ 142.292156][ T30] audit: type=1400 audit(1761475915.373:1751): avc: denied { create } for pid=9076 comm="syz.3.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 142.334444][ T9077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.375192][ T9095] netem: incorrect gi model size [ 142.380311][ T9095] netem: change failed [ 142.389271][ T9094] loop7: detected capacity change from 0 to 7 [ 142.441879][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.451147][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 142.459428][ T9094] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.469509][ T9094] Buffer I/O error on dev loop7, logical block 0, async page read [ 142.477584][ T9094] loop7: unable to read partition table [ 142.483708][ T9094] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 142.485863][ T9077] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.545898][ T9077] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 142.968733][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.030510][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 143.102019][ T9127] loop5: detected capacity change from 0 to 512 [ 143.131209][ T9127] EXT4-fs: Ignoring removed nobh option [ 143.137093][ T9127] ext3: Unknown parameter 'fowner>00000000000000000000' [ 143.149155][ T9127] xt_TCPMSS: Only works on TCP SYN packets [ 143.277765][ T9149] syzkaller0: entered promiscuous mode [ 143.284502][ T9149] syzkaller0: entered allmulticast mode [ 143.364097][ T9150] netem: incorrect gi model size [ 143.369261][ T9150] netem: change failed [ 143.576416][ T9166] loop5: detected capacity change from 0 to 512 [ 143.594428][ T9166] EXT4-fs: Ignoring removed nobh option [ 143.600368][ T9166] ext3: Unknown parameter 'fowner>00000000000000000000' [ 143.613471][ T9166] xt_TCPMSS: Only works on TCP SYN packets [ 143.640583][ T9170] loop5: detected capacity change from 0 to 512 [ 143.647694][ T9170] ext4: Unknown parameter 'permit_directio' [ 143.659952][ T9170] loop5: detected capacity change from 0 to 512 [ 143.669447][ T9170] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 143.696152][ T9170] EXT4-fs (loop5): 1 truncate cleaned up [ 143.703387][ T9170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.731283][ T9170] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 143.752259][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.838803][ T9181] FAULT_INJECTION: forcing a failure. [ 143.838803][ T9181] name failslab, interval 1, probability 0, space 0, times 0 [ 143.851598][ T9181] CPU: 0 UID: 0 PID: 9181 Comm: syz.2.1981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.851640][ T9181] Tainted: [W]=WARN [ 143.851649][ T9181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.851666][ T9181] Call Trace: [ 143.851722][ T9181] [ 143.851732][ T9181] __dump_stack+0x1d/0x30 [ 143.851766][ T9181] dump_stack_lvl+0xe8/0x140 [ 143.851799][ T9181] dump_stack+0x15/0x1b [ 143.851822][ T9181] should_fail_ex+0x265/0x280 [ 143.851893][ T9181] should_failslab+0x8c/0xb0 [ 143.851940][ T9181] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 143.852046][ T9181] ? __alloc_skb+0x101/0x320 [ 143.852108][ T9181] __alloc_skb+0x101/0x320 [ 143.852142][ T9181] ? audit_log_start+0x342/0x720 [ 143.852184][ T9181] audit_log_start+0x3a0/0x720 [ 143.852212][ T9181] ? kstrtouint+0x76/0xc0 [ 143.852322][ T9181] audit_seccomp+0x48/0x100 [ 143.852485][ T9181] ? __seccomp_filter+0x82d/0x1250 [ 143.852522][ T9181] __seccomp_filter+0x83e/0x1250 [ 143.852561][ T9181] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.852603][ T9181] ? vfs_write+0x7e8/0x960 [ 143.852669][ T9181] ? __rcu_read_unlock+0x4f/0x70 [ 143.852704][ T9181] ? __fget_files+0x184/0x1c0 [ 143.852755][ T9181] __secure_computing+0x82/0x150 [ 143.852791][ T9181] syscall_trace_enter+0xcf/0x1e0 [ 143.852878][ T9181] do_syscall_64+0xac/0x200 [ 143.852910][ T9181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.852943][ T9181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.853007][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.853079][ T9181] RIP: 0033:0x7fcc3ee4efc9 [ 143.853100][ T9181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.853123][ T9181] RSP: 002b:00007fcc3d8af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 143.853150][ T9181] RAX: ffffffffffffffda RBX: 00007fcc3f0a5fa0 RCX: 00007fcc3ee4efc9 [ 143.853167][ T9181] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.853193][ T9181] RBP: 00007fcc3d8af090 R08: 0000000000000000 R09: 0000000000000000 [ 143.853207][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.853254][ T9181] R13: 00007fcc3f0a6038 R14: 00007fcc3f0a5fa0 R15: 00007ffde2a20548 [ 143.853281][ T9181] [ 144.271200][ T9196] loop3: detected capacity change from 0 to 512 [ 144.278123][ T9196] EXT4-fs: Ignoring removed nobh option [ 144.288593][ T9196] ext3: Unknown parameter 'fowner>00000000000000000000' [ 144.301479][ T9196] xt_TCPMSS: Only works on TCP SYN packets [ 144.310745][ T4911] Bluetooth: hci0: command 0x1003 tx timeout [ 144.317607][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.476633][ T9184] netem: incorrect gi model size [ 144.481766][ T9184] netem: change failed [ 144.490988][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1988'. [ 144.500094][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1988'. [ 144.520273][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1988'. [ 144.581623][ T9220] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1995'. [ 144.764537][ T9228] netem: change failed [ 144.972000][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 144.972017][ T30] audit: type=1400 audit(1761475918.063:1819): avc: denied { watch } for pid=9241 comm="syz.0.2003" path="/396/file0" dev="tmpfs" ino=2046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 145.047413][ T30] audit: type=1400 audit(1761475918.133:1820): avc: denied { wake_alarm } for pid=9246 comm="syz.0.2004" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.091237][ T30] audit: type=1326 audit(1761475918.173:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.5.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 145.115145][ T30] audit: type=1326 audit(1761475918.173:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.5.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 145.142372][ T9248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.171975][ T9248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.202094][ T9248] bond0 (unregistering): Released all slaves [ 145.322014][ T30] audit: type=1400 audit(1761475918.413:1823): avc: denied { read } for pid=9253 comm="syz.3.2007" path="socket:[24771]" dev="sockfs" ino=24771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.350211][ T9252] loop2: detected capacity change from 0 to 512 [ 145.357485][ T9252] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 145.379202][ T30] audit: type=1400 audit(1761475918.463:1824): avc: denied { getopt } for pid=9253 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.380014][ T9252] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.2006: bad orphan inode 14 [ 145.399755][ T30] audit: type=1400 audit(1761475918.463:1825): avc: denied { bind } for pid=9253 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.430074][ T30] audit: type=1400 audit(1761475918.463:1826): avc: denied { accept } for pid=9253 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.450620][ T30] audit: type=1400 audit(1761475918.463:1827): avc: denied { setopt } for pid=9253 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 145.452503][ T9252] ext4_test_bit(bit=13, block=18) = 1 [ 145.470500][ T30] audit: type=1400 audit(1761475918.463:1828): avc: denied { ioctl } for pid=9253 comm="syz.3.2007" path="socket:[24769]" dev="sockfs" ino=24769 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.502404][ T9252] is_bad_inode(inode)=0 [ 145.507590][ T9252] NEXT_ORPHAN(inode)=0 [ 145.511742][ T9252] max_ino=32 [ 145.514967][ T9252] i_nlink=1 [ 145.532813][ T9252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.547425][ T9252] ext2 filesystem being mounted at /408/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.575536][ T9263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.612417][ T9268] FAULT_INJECTION: forcing a failure. [ 145.612417][ T9268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.625775][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.5.2011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 145.625814][ T9268] Tainted: [W]=WARN [ 145.625822][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.625839][ T9268] Call Trace: [ 145.625846][ T9268] [ 145.625935][ T9268] __dump_stack+0x1d/0x30 [ 145.625965][ T9268] dump_stack_lvl+0xe8/0x140 [ 145.625993][ T9268] dump_stack+0x15/0x1b [ 145.626019][ T9268] should_fail_ex+0x265/0x280 [ 145.626040][ T9268] should_fail+0xb/0x20 [ 145.626056][ T9268] should_fail_usercopy+0x1a/0x20 [ 145.626160][ T9268] _copy_from_user+0x1c/0xb0 [ 145.626198][ T9268] io_submit_one+0x52/0x11d0 [ 145.626251][ T9268] __se_sys_io_submit+0xfb/0x280 [ 145.626325][ T9268] __x64_sys_io_submit+0x43/0x50 [ 145.626398][ T9268] x64_sys_call+0x2d6c/0x3000 [ 145.626492][ T9268] do_syscall_64+0xd2/0x200 [ 145.626515][ T9268] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 145.626619][ T9268] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 145.626659][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.626698][ T9268] RIP: 0033:0x7f3b7351efc9 [ 145.626715][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.626740][ T9268] RSP: 002b:00007f3b71f7f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 145.626765][ T9268] RAX: ffffffffffffffda RBX: 00007f3b73775fa0 RCX: 00007f3b7351efc9 [ 145.626794][ T9268] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f3b71f3b000 [ 145.626806][ T9268] RBP: 00007f3b71f7f090 R08: 0000000000000000 R09: 0000000000000000 [ 145.626818][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.626907][ T9268] R13: 00007f3b73776038 R14: 00007f3b73775fa0 R15: 00007ffc6f1c7c98 [ 145.626931][ T9268] [ 145.831055][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.851741][ T9263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.931471][ T9263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.985675][ T9263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.083682][ T4645] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.123400][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.132497][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.143646][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.309326][ T9306] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.357845][ T9312] : renamed from vlan1 (while UP) [ 146.382830][ T9306] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.472904][ T9306] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.523927][ T9306] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.602581][ T9320] __nla_validate_parse: 3 callbacks suppressed [ 146.602597][ T9320] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2032'. [ 146.641782][ T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.672552][ T9320] veth3: entered promiscuous mode [ 146.677875][ T9320] veth3: entered allmulticast mode [ 146.698527][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.727624][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.770792][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.815558][ T9327] netlink: 'syz.2.2034': attribute type 1 has an invalid length. [ 146.875262][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 146.891495][ T9327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.957364][ T9331] bond1 (unregistering): Released all slaves [ 147.261994][ T9349] loop3: detected capacity change from 0 to 512 [ 147.309167][ T9349] ext4: Unknown parameter 'permit_directio' [ 147.368696][ T9349] loop3: detected capacity change from 0 to 512 [ 147.436323][ T9349] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 147.460646][ T9349] EXT4-fs (loop3): 1 truncate cleaned up [ 147.491014][ T9349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.550457][ T9349] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 147.622403][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.633485][ T9356] netem: incorrect gi model size [ 147.639537][ T9356] netem: change failed [ 147.896802][ T9372] netem: incorrect gi model size [ 147.902616][ T9372] netem: change failed [ 148.442849][ T9391] netem: incorrect gi model size [ 149.019432][ T9433] loop4: detected capacity change from 0 to 512 [ 149.041490][ T9433] ext4: Unknown parameter 'permit_directio' [ 149.084939][ T9431] netem: incorrect gi model size [ 149.087274][ T9436] loop5: detected capacity change from 0 to 512 [ 149.092611][ T9431] netem: change failed [ 149.150068][ T9443] loop2: detected capacity change from 0 to 512 [ 149.176508][ T9443] ext4: Unknown parameter 'permit_directio' [ 149.191592][ T9436] ext4: Unknown parameter 'permit_directio' [ 149.205808][ T9443] loop2: detected capacity change from 0 to 512 [ 149.216553][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.226115][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.234155][ T9443] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 149.252227][ T9443] EXT4-fs (loop2): 1 truncate cleaned up [ 149.258429][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.360942][ T9443] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.379207][ T9436] loop5: detected capacity change from 0 to 512 [ 149.406747][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 149.429954][ T9436] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 149.455306][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.484196][ T9456] loop4: detected capacity change from 0 to 512 [ 149.523318][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.532667][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.625922][ T9456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.640126][ T9436] EXT4-fs (loop5): 1 truncate cleaned up [ 149.660593][ T9456] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.682576][ T9456] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.683001][ T9436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.706516][ T9467] loop7: detected capacity change from 0 to 7 [ 149.784300][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.793619][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 149.801635][ T9467] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 149.811044][ T9467] Buffer I/O error on dev loop7, logical block 0, async page read [ 149.819489][ T9467] loop7: unable to read partition table [ 149.850547][ T9467] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 149.902291][ T9472] loop4: detected capacity change from 0 to 512 [ 149.909124][ T9472] EXT4-fs: Ignoring removed mblk_io_submit option [ 149.916409][ T9472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 149.929645][ T9472] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.939848][ T9436] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.952294][ T9472] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2088: iget: bogus i_mode (2355) [ 149.970927][ T9472] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2088: couldn't read orphan inode 15 (err -117) [ 150.011428][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.041357][ T9472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.071407][ T9472] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.115737][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 150.115757][ T30] audit: type=1326 audit(1761475923.173:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.154743][ T30] audit: type=1326 audit(1761475923.203:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.318865][ T30] audit: type=1326 audit(1761475923.403:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.342564][ T30] audit: type=1326 audit(1761475923.403:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.368698][ T30] audit: type=1326 audit(1761475923.403:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.393543][ T30] audit: type=1326 audit(1761475923.403:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.417714][ T30] audit: type=1326 audit(1761475923.403:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcc3ee81885 code=0x7ffc0000 [ 150.441417][ T30] audit: type=1326 audit(1761475923.403:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.517049][ T9501] xt_TCPMSS: Only works on TCP SYN packets [ 150.540053][ T9502] loop3: detected capacity change from 0 to 512 [ 150.549449][ T9502] ext4: Unknown parameter 'permit_directio' [ 150.555550][ T30] audit: type=1326 audit(1761475923.403:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.579280][ T30] audit: type=1326 audit(1761475923.553:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.2.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 150.609811][ T9502] loop3: detected capacity change from 0 to 512 [ 150.641948][ T9502] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 150.650654][ T9502] EXT4-fs (loop3): 1 truncate cleaned up [ 150.656801][ T9502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.682326][ T9507] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.706277][ T9502] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 150.717664][ T9512] tipc: Enabled bearer , priority 0 [ 150.730858][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 150.764548][ T9512] syzkaller0: entered promiscuous mode [ 150.770268][ T9512] syzkaller0: entered allmulticast mode [ 150.812416][ T9512] FAULT_INJECTION: forcing a failure. [ 150.812416][ T9512] name failslab, interval 1, probability 0, space 0, times 0 [ 150.825476][ T9512] CPU: 0 UID: 0 PID: 9512 Comm: syz.2.2103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.825516][ T9512] Tainted: [W]=WARN [ 150.825525][ T9512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 150.825539][ T9512] Call Trace: [ 150.825546][ T9512] [ 150.825556][ T9512] __dump_stack+0x1d/0x30 [ 150.825584][ T9512] dump_stack_lvl+0xe8/0x140 [ 150.825608][ T9512] dump_stack+0x15/0x1b [ 150.825661][ T9512] should_fail_ex+0x265/0x280 [ 150.825685][ T9512] should_failslab+0x8c/0xb0 [ 150.825717][ T9512] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 150.825747][ T9512] ? __alloc_skb+0x101/0x320 [ 150.825850][ T9512] __alloc_skb+0x101/0x320 [ 150.825881][ T9512] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 150.825919][ T9512] ? __rcu_read_unlock+0x4f/0x70 [ 150.825957][ T9512] ? __pfx_rtnetlink_event+0x10/0x10 [ 150.826030][ T9512] rtnetlink_event+0x18c/0x200 [ 150.826088][ T9512] raw_notifier_call_chain+0x6f/0x1b0 [ 150.826114][ T9512] ? call_netdevice_notifiers_info+0x9c/0x100 [ 150.826167][ T9512] call_netdevice_notifiers_info+0xae/0x100 [ 150.826200][ T9512] netif_set_mtu_ext+0x356/0x470 [ 150.826232][ T9512] netif_set_mtu+0x4a/0xf0 [ 150.826324][ T9512] dev_set_mtu+0xc1/0x170 [ 150.826357][ T9512] dev_ifsioc+0x474/0xaa0 [ 150.826379][ T9512] ? __rcu_read_unlock+0x4f/0x70 [ 150.826407][ T9512] dev_ioctl+0x70a/0x960 [ 150.826428][ T9512] sock_do_ioctl+0x197/0x220 [ 150.826460][ T9512] sock_ioctl+0x41b/0x610 [ 150.826592][ T9512] ? __pfx_sock_ioctl+0x10/0x10 [ 150.826671][ T9512] __se_sys_ioctl+0xce/0x140 [ 150.826697][ T9512] __x64_sys_ioctl+0x43/0x50 [ 150.826716][ T9512] x64_sys_call+0x1816/0x3000 [ 150.826817][ T9512] do_syscall_64+0xd2/0x200 [ 150.826837][ T9512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.826934][ T9512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.827041][ T9512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.827070][ T9512] RIP: 0033:0x7fcc3ee4efc9 [ 150.827088][ T9512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.827254][ T9512] RSP: 002b:00007fcc3d8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.827276][ T9512] RAX: ffffffffffffffda RBX: 00007fcc3f0a5fa0 RCX: 00007fcc3ee4efc9 [ 150.827292][ T9512] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 150.827355][ T9512] RBP: 00007fcc3d8af090 R08: 0000000000000000 R09: 0000000000000000 [ 150.827367][ T9512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.827379][ T9512] R13: 00007fcc3f0a6038 R14: 00007fcc3f0a5fa0 R15: 00007ffde2a20548 [ 150.827397][ T9512] [ 150.829819][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.883096][ T9512] tipc: Resetting bearer [ 151.233348][ T9508] tipc: Resetting bearer [ 151.256116][ T9508] tipc: Disabling bearer [ 151.405224][ T9536] loop7: detected capacity change from 0 to 7 [ 151.422288][ T9534] xt_TCPMSS: Only works on TCP SYN packets [ 151.461806][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.471206][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.482940][ T9536] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.492594][ T9536] Buffer I/O error on dev loop7, logical block 0, async page read [ 151.501103][ T9536] loop7: unable to read partition table [ 151.552901][ T9536] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 151.622787][ T9545] netem: incorrect gi model size [ 152.300181][ T9582] FAULT_INJECTION: forcing a failure. [ 152.300181][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 152.313404][ T9582] CPU: 0 UID: 0 PID: 9582 Comm: syz.2.2120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.313457][ T9582] Tainted: [W]=WARN [ 152.313466][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 152.313493][ T9582] Call Trace: [ 152.313500][ T9582] [ 152.313515][ T9582] __dump_stack+0x1d/0x30 [ 152.313544][ T9582] dump_stack_lvl+0xe8/0x140 [ 152.313570][ T9582] dump_stack+0x15/0x1b [ 152.313593][ T9582] should_fail_ex+0x265/0x280 [ 152.313671][ T9582] should_failslab+0x8c/0xb0 [ 152.313701][ T9582] kmem_cache_alloc_noprof+0x50/0x480 [ 152.313770][ T9582] ? vm_area_alloc+0x2c/0xb0 [ 152.313801][ T9582] vm_area_alloc+0x2c/0xb0 [ 152.313829][ T9582] create_init_stack_vma+0x28/0x390 [ 152.313985][ T9582] alloc_bprm+0x2b9/0x350 [ 152.314016][ T9582] do_execveat_common+0x12e/0x750 [ 152.314041][ T9582] ? getname_flags+0x154/0x3b0 [ 152.314166][ T9582] __x64_sys_execveat+0x73/0x90 [ 152.314198][ T9582] x64_sys_call+0x1fec/0x3000 [ 152.314227][ T9582] do_syscall_64+0xd2/0x200 [ 152.314251][ T9582] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 152.314340][ T9582] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 152.314379][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.314406][ T9582] RIP: 0033:0x7fcc3ee4efc9 [ 152.314484][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.314508][ T9582] RSP: 002b:00007fcc3d8af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 152.314539][ T9582] RAX: ffffffffffffffda RBX: 00007fcc3f0a5fa0 RCX: 00007fcc3ee4efc9 [ 152.314552][ T9582] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 152.314567][ T9582] RBP: 00007fcc3d8af090 R08: 0000000000001000 R09: 0000000000000000 [ 152.314583][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.314621][ T9582] R13: 00007fcc3f0a6038 R14: 00007fcc3f0a5fa0 R15: 00007ffde2a20548 [ 152.314640][ T9582] [ 152.541913][ T9584] loop9: detected capacity change from 0 to 7 [ 152.558115][ T9584] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.580030][ T9584] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.588060][ T9584] loop9: unable to read partition table [ 152.648063][ T9584] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.648063][ T9584] ) failed (rc=-5) [ 152.663056][ T9589] macvtap1: entered allmulticast mode [ 152.668670][ T9589] veth0_macvtap: entered allmulticast mode [ 152.694899][ T9592] netem: incorrect gi model size [ 152.700264][ T9592] netem: change failed [ 152.744351][ T9595] xt_TCPMSS: Only works on TCP SYN packets [ 152.893747][ T9609] loop7: detected capacity change from 0 to 7 [ 152.901712][ T9612] cgroup: Invalid name [ 152.944870][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.954229][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.963836][ T9609] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 152.973664][ T9609] Buffer I/O error on dev loop7, logical block 0, async page read [ 152.981850][ T9609] loop7: unable to read partition table [ 153.026039][ T9609] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 153.145010][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2133'. [ 153.469314][ T9635] loop2: detected capacity change from 0 to 512 [ 153.482856][ T9635] ext4: Unknown parameter 'permit_directio' [ 153.582232][ T9635] loop2: detected capacity change from 0 to 512 [ 153.707516][ T9635] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 153.718969][ T9635] EXT4-fs (loop2): 1 truncate cleaned up [ 153.726159][ T9635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.788539][ T9635] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 153.879637][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.890110][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2141'. [ 153.900015][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2141'. [ 153.925075][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 153.988480][ T9657] loop7: detected capacity change from 0 to 7 [ 153.996092][ T9654] syzkaller0: entered promiscuous mode [ 154.001955][ T9654] syzkaller0: entered allmulticast mode [ 154.041426][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.052663][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.071181][ T9657] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.077157][ T9655] FAULT_INJECTION: forcing a failure. [ 154.077157][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 154.080710][ T9657] Buffer I/O error on dev loop7, logical block 0, async page read [ 154.094058][ T9655] CPU: 1 UID: 0 PID: 9655 Comm: syz.4.2146 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.094108][ T9655] Tainted: [W]=WARN [ 154.094116][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.094132][ T9655] Call Trace: [ 154.094141][ T9655] [ 154.094150][ T9655] __dump_stack+0x1d/0x30 [ 154.094238][ T9655] dump_stack_lvl+0xe8/0x140 [ 154.094277][ T9655] dump_stack+0x15/0x1b [ 154.094326][ T9655] should_fail_ex+0x265/0x280 [ 154.094432][ T9655] should_failslab+0x8c/0xb0 [ 154.094471][ T9655] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 154.094514][ T9655] ? __d_alloc+0x3d/0x340 [ 154.094596][ T9655] __d_alloc+0x3d/0x340 [ 154.094638][ T9655] d_alloc_parallel+0x58/0xc70 [ 154.094668][ T9655] ? __rcu_read_unlock+0x4f/0x70 [ 154.094729][ T9655] ? __d_lookup+0x316/0x340 [ 154.094752][ T9655] ? default_pointer+0xf2/0x5e0 [ 154.094812][ T9655] __lookup_slow+0x8c/0x250 [ 154.094840][ T9655] lookup_noperm+0xc9/0x180 [ 154.094866][ T9655] simple_start_creating+0x97/0x120 [ 154.094906][ T9655] debugfs_start_creating+0xe9/0x160 [ 154.094939][ T9655] __debugfs_create_file+0x6b/0x330 [ 154.095050][ T9655] debugfs_create_file_full+0x3f/0x60 [ 154.095078][ T9655] ? __pfx_veth_setup+0x10/0x10 [ 154.095112][ T9655] ref_tracker_dir_debugfs+0x100/0x1e0 [ 154.095173][ T9655] alloc_netdev_mqs+0x1a7/0xa50 [ 154.095335][ T9655] rtnl_create_link+0x239/0x710 [ 154.095382][ T9655] rtnl_newlink_create+0x14c/0x620 [ 154.095417][ T9655] ? __list_del_entry_valid_or_report+0x65/0x130 [ 154.095456][ T9655] ? __mutex_lock+0x25d/0xcc0 [ 154.095507][ T9655] rtnl_newlink+0xf29/0x12d0 [ 154.095575][ T9655] ? __pfx_rtnl_newlink+0x10/0x10 [ 154.095605][ T9655] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 154.095717][ T9655] netlink_rcv_skb+0x123/0x220 [ 154.095818][ T9655] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 154.095857][ T9655] rtnetlink_rcv+0x1c/0x30 [ 154.095884][ T9655] netlink_unicast+0x5c0/0x690 [ 154.095928][ T9655] netlink_sendmsg+0x58b/0x6b0 [ 154.096008][ T9655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.096035][ T9655] __sock_sendmsg+0x145/0x180 [ 154.096068][ T9655] ____sys_sendmsg+0x31e/0x4e0 [ 154.096119][ T9655] ___sys_sendmsg+0x17b/0x1d0 [ 154.096190][ T9655] __x64_sys_sendmsg+0xd4/0x160 [ 154.096241][ T9655] x64_sys_call+0x191e/0x3000 [ 154.096351][ T9655] do_syscall_64+0xd2/0x200 [ 154.096396][ T9655] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.096434][ T9655] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.096519][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.096548][ T9655] RIP: 0033:0x7f1bc31befc9 [ 154.096569][ T9655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.096658][ T9655] RSP: 002b:00007f1bc1c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.096683][ T9655] RAX: ffffffffffffffda RBX: 00007f1bc3415fa0 RCX: 00007f1bc31befc9 [ 154.096700][ T9655] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 154.096718][ T9655] RBP: 00007f1bc1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.096735][ T9655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.096752][ T9655] R13: 00007f1bc3416038 R14: 00007f1bc3415fa0 R15: 00007fff7cfc5208 [ 154.096779][ T9655] [ 154.433768][ T9657] loop7: unable to read partition table [ 154.440062][ T9657] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 154.484161][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2148'. [ 154.493955][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2148'. [ 154.533776][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 154.624524][ T9674] cgroup: Invalid name [ 154.660935][ T9677] xt_ecn: cannot match TCP bits for non-tcp packets [ 154.669340][ T9677] syz.5.2155 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 154.694219][ T9679] FAULT_INJECTION: forcing a failure. [ 154.694219][ T9679] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 154.709555][ T9679] CPU: 1 UID: 0 PID: 9679 Comm: syz.0.2156 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.709595][ T9679] Tainted: [W]=WARN [ 154.709602][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.709617][ T9679] Call Trace: [ 154.709626][ T9679] [ 154.709636][ T9679] __dump_stack+0x1d/0x30 [ 154.709738][ T9679] dump_stack_lvl+0xe8/0x140 [ 154.709782][ T9679] dump_stack+0x15/0x1b [ 154.709802][ T9679] should_fail_ex+0x265/0x280 [ 154.709825][ T9679] should_fail_alloc_page+0xf2/0x100 [ 154.709892][ T9679] __alloc_frozen_pages_noprof+0xff/0x360 [ 154.709943][ T9679] alloc_pages_mpol+0xb3/0x260 [ 154.709978][ T9679] alloc_pages_noprof+0x90/0x130 [ 154.710040][ T9679] pte_alloc_one+0x1e/0xd0 [ 154.710126][ T9679] __pte_alloc+0x32/0x290 [ 154.710197][ T9679] handle_mm_fault+0x1c18/0x2be0 [ 154.710250][ T9679] ? mt_find+0x208/0x320 [ 154.710281][ T9679] do_user_addr_fault+0x3fe/0x1080 [ 154.710309][ T9679] exc_page_fault+0x62/0xa0 [ 154.710343][ T9679] asm_exc_page_fault+0x26/0x30 [ 154.710427][ T9679] RIP: 0010:__put_user_4+0xd/0x20 [ 154.710517][ T9679] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 154.710596][ T9679] RSP: 0018:ffffc90001517e40 EFLAGS: 00050206 [ 154.710612][ T9679] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000001c0 [ 154.710628][ T9679] RDX: 000000000000031c RSI: 0000000000000000 RDI: ffffffff86a1de38 [ 154.710643][ T9679] RBP: 0000000000005424 R08: 0001ffff86a1de3b R09: 0000000000000000 [ 154.710655][ T9679] R10: 0000000080045440 R11: 0000000000000000 R12: ffff888119b4d400 [ 154.710671][ T9679] R13: 0000000000005424 R14: ffff88811b6c4d10 R15: ffffffff86a1de30 [ 154.710740][ T9679] tiocgetd+0x45/0x70 [ 154.710769][ T9679] tty_ioctl+0x25d/0xb80 [ 154.710795][ T9679] ? __pfx_tty_ioctl+0x10/0x10 [ 154.710821][ T9679] __se_sys_ioctl+0xce/0x140 [ 154.710842][ T9679] __x64_sys_ioctl+0x43/0x50 [ 154.710897][ T9679] x64_sys_call+0x1816/0x3000 [ 154.710925][ T9679] do_syscall_64+0xd2/0x200 [ 154.710948][ T9679] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.710999][ T9679] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 154.711096][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.711170][ T9679] RIP: 0033:0x7f6eeaaeefc9 [ 154.711189][ T9679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.711216][ T9679] RSP: 002b:00007f6ee954f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.711234][ T9679] RAX: ffffffffffffffda RBX: 00007f6eead45fa0 RCX: 00007f6eeaaeefc9 [ 154.711302][ T9679] RDX: 00002000000001c0 RSI: 0000000000005424 RDI: 0000000000000003 [ 154.711317][ T9679] RBP: 00007f6ee954f090 R08: 0000000000000000 R09: 0000000000000000 [ 154.711331][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.711373][ T9679] R13: 00007f6eead46038 R14: 00007f6eead45fa0 R15: 00007ffff8dcff98 [ 154.711397][ T9679] [ 155.104867][ T9696] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 155.111477][ T9696] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 155.119386][ T9696] vhci_hcd vhci_hcd.0: Device attached [ 155.140710][ T9698] vhci_hcd: connection closed [ 155.141085][ T25] vhci_hcd: stop threads [ 155.150578][ T25] vhci_hcd: release socket [ 155.155234][ T25] vhci_hcd: disconnect device [ 155.193788][ T9705] loop2: detected capacity change from 0 to 512 [ 155.203319][ T9707] xt_TCPMSS: Only works on TCP SYN packets [ 155.211048][ T9705] ext4: Unknown parameter 'permit_directio' [ 155.268825][ T9712] process 'syz.4.2168' launched './file1' with NULL argv: empty string added [ 155.284691][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 155.284712][ T30] audit: type=1400 audit(1761475928.373:2317): avc: denied { execute_no_trans } for pid=9711 comm="syz.4.2168" path="/444/file1" dev="tmpfs" ino=2313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 155.379101][ T30] audit: type=1400 audit(1761475928.463:2318): avc: denied { audit_read } for pid=9708 comm="syz.2.2167" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.465563][ T9722] loop2: detected capacity change from 0 to 256 [ 155.523145][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 155.594991][ T9734] loop3: detected capacity change from 0 to 512 [ 155.606378][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2170'. [ 155.614389][ T9734] ext4: Unknown parameter 'permit_directio' [ 155.615419][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2170'. [ 155.636234][ T9725] netlink: 'syz.0.2172': attribute type 1 has an invalid length. [ 155.660743][ T9725] bond0: entered promiscuous mode [ 155.664379][ T9736] loop7: detected capacity change from 0 to 7 [ 155.665836][ T9725] bond0: entered allmulticast mode [ 155.667334][ T9725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.713744][ T9725] bridge1: entered promiscuous mode [ 155.719552][ T9725] bridge1: entered allmulticast mode [ 155.731683][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.740943][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.749430][ T9736] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 155.759019][ T9736] Buffer I/O error on dev loop7, logical block 0, async page read [ 155.765681][ T9725] bond0: (slave bridge1): Enslaving as a backup interface with an up link [ 155.768121][ T9736] loop7: unable to read partition table [ 155.781938][ T25] net_ratelimit: 10 callbacks suppressed [ 155.781955][ T25] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 155.803203][ T9736] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 155.818038][ T9734] loop3: detected capacity change from 0 to 512 [ 155.854591][ T9740] xt_TCPMSS: Only works on TCP SYN packets [ 155.868704][ T9734] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 155.888972][ T9734] EXT4-fs (loop3): 1 truncate cleaned up [ 155.896855][ T9745] loop2: detected capacity change from 0 to 512 [ 155.903330][ T25] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 155.904104][ T9734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.924918][ T9745] ext4: Unknown parameter 'permit_directio' [ 155.947737][ T9734] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 155.959883][ T30] audit: type=1326 audit(1761475929.053:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 155.983568][ T30] audit: type=1326 audit(1761475929.053:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 156.057155][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.084476][ T9753] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 156.091236][ T9753] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 156.099932][ T9753] vhci_hcd vhci_hcd.0: Device attached [ 156.111036][ T30] audit: type=1326 audit(1761475929.053:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 156.134957][ T30] audit: type=1326 audit(1761475929.053:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 156.158565][ T30] audit: type=1326 audit(1761475929.053:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9749 comm="syz.5.2180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7351efc9 code=0x7ffc0000 [ 156.182728][ T30] audit: type=1326 audit(1761475929.093:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 156.206322][ T30] audit: type=1326 audit(1761475929.093:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 156.230146][ T30] audit: type=1326 audit(1761475929.093:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.0.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 156.341335][ T1027] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 156.361191][ T9758] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 156.406551][ T9758] rdma_op ffff88814fff4180 conn xmit_rdma 0000000000000000 [ 156.692069][ T9775] netem: incorrect gi model size [ 156.697591][ T9775] netem: change failed [ 156.992428][ T9756] vhci_hcd: connection reset by peer [ 156.998835][ T4645] vhci_hcd: stop threads [ 157.003204][ T4645] vhci_hcd: release socket [ 157.007702][ T4645] vhci_hcd: disconnect device [ 157.397460][ T9778] loop5: detected capacity change from 0 to 512 [ 157.404569][ T9778] ext4: Unknown parameter 'permit_directio' [ 157.415906][ T9778] loop5: detected capacity change from 0 to 512 [ 157.445773][ T9778] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 157.460284][ T9778] EXT4-fs (loop5): 1 truncate cleaned up [ 157.485342][ T9778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.513113][ T9778] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 157.533186][ T9784] xt_TCPMSS: Only works on TCP SYN packets [ 157.599524][ T9789] loop2: detected capacity change from 0 to 512 [ 157.607097][ T9789] ext4: Unknown parameter 'permit_directio' [ 157.618569][ T9789] loop2: detected capacity change from 0 to 512 [ 157.626629][ T9789] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 157.635327][ T9789] EXT4-fs (loop2): 1 truncate cleaned up [ 157.641724][ T9789] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.721449][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.731357][ T9789] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 157.783567][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.810168][ T9795] FAULT_INJECTION: forcing a failure. [ 157.810168][ T9795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.823443][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.4.2196 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.823476][ T9795] Tainted: [W]=WARN [ 157.823483][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.823520][ T9795] Call Trace: [ 157.823529][ T9795] [ 157.823540][ T9795] __dump_stack+0x1d/0x30 [ 157.823600][ T9795] dump_stack_lvl+0xe8/0x140 [ 157.823627][ T9795] dump_stack+0x15/0x1b [ 157.823645][ T9795] should_fail_ex+0x265/0x280 [ 157.823664][ T9795] should_fail+0xb/0x20 [ 157.823718][ T9795] should_fail_usercopy+0x1a/0x20 [ 157.823745][ T9795] _copy_to_user+0x20/0xa0 [ 157.823777][ T9795] simple_read_from_buffer+0xb5/0x130 [ 157.823810][ T9795] proc_fail_nth_read+0x10e/0x150 [ 157.823863][ T9795] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.823934][ T9795] vfs_read+0x1a8/0x770 [ 157.823964][ T9795] ? __rcu_read_unlock+0x4f/0x70 [ 157.824109][ T9795] ? __fget_files+0x184/0x1c0 [ 157.824160][ T9795] ksys_read+0xda/0x1a0 [ 157.824193][ T9795] __x64_sys_read+0x40/0x50 [ 157.824223][ T9795] x64_sys_call+0x27c0/0x3000 [ 157.824250][ T9795] do_syscall_64+0xd2/0x200 [ 157.824268][ T9795] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.824328][ T9795] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.824362][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.824423][ T9795] RIP: 0033:0x7f1bc31bd9dc [ 157.824441][ T9795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.824493][ T9795] RSP: 002b:00007f1bc1c1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.824518][ T9795] RAX: ffffffffffffffda RBX: 00007f1bc3415fa0 RCX: 00007f1bc31bd9dc [ 157.824573][ T9795] RDX: 000000000000000f RSI: 00007f1bc1c1f0a0 RDI: 0000000000000004 [ 157.824586][ T9795] RBP: 00007f1bc1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 157.824610][ T9795] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 157.824626][ T9795] R13: 00007f1bc3416038 R14: 00007f1bc3415fa0 R15: 00007fff7cfc5208 [ 157.824650][ T9795] [ 158.061019][ T9797] loop4: detected capacity change from 0 to 256 [ 158.119758][ T9797] FAULT_INJECTION: forcing a failure. [ 158.119758][ T9797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.133013][ T9797] CPU: 0 UID: 0 PID: 9797 Comm: syz.4.2197 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.133048][ T9797] Tainted: [W]=WARN [ 158.133078][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.133095][ T9797] Call Trace: [ 158.133103][ T9797] [ 158.133114][ T9797] __dump_stack+0x1d/0x30 [ 158.133137][ T9797] dump_stack_lvl+0xe8/0x140 [ 158.133157][ T9797] dump_stack+0x15/0x1b [ 158.133177][ T9797] should_fail_ex+0x265/0x280 [ 158.133272][ T9797] should_fail+0xb/0x20 [ 158.133293][ T9797] should_fail_usercopy+0x1a/0x20 [ 158.133352][ T9797] _copy_to_user+0x20/0xa0 [ 158.133386][ T9797] copy_siginfo_to_user+0x22/0xb0 [ 158.133417][ T9797] x64_setup_rt_frame+0x2b5/0x580 [ 158.133448][ T9797] arch_do_signal_or_restart+0x23e/0x440 [ 158.133567][ T9797] exit_to_user_mode_loop+0x77/0x110 [ 158.133595][ T9797] do_syscall_64+0x1d6/0x200 [ 158.133688][ T9797] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.133722][ T9797] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.133798][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.133820][ T9797] RIP: 0033:0x7f1bc31befc9 [ 158.133835][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.133988][ T9797] RSP: 002b:00007f1bc1c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 158.134012][ T9797] RAX: fffffffffffffffc RBX: 00007f1bc3415fa0 RCX: 00007f1bc31befc9 [ 158.134028][ T9797] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000040 [ 158.134044][ T9797] RBP: 00007f1bc1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.134085][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.134097][ T9797] R13: 00007f1bc3416038 R14: 00007f1bc3415fa0 R15: 00007fff7cfc5208 [ 158.134116][ T9797] [ 158.342629][ T9802] __nla_validate_parse: 1 callbacks suppressed [ 158.342650][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 158.458175][ T9807] netem: incorrect gi model size [ 158.463284][ T9807] netem: change failed [ 158.522954][ T9811] loop5: detected capacity change from 0 to 512 [ 158.558123][ T9811] ext4: Unknown parameter 'permit_directio' [ 158.672694][ T9819] loop5: detected capacity change from 0 to 1024 [ 158.702373][ T9819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.732785][ T9815] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.2202: missing EA_INODE flag [ 158.764258][ T9825] loop2: detected capacity change from 0 to 512 [ 158.773185][ T9815] EXT4-fs (loop5): Remounting filesystem read-only [ 158.785830][ T9825] ext4: Unknown parameter 'permit_directio' [ 158.804781][ T9825] loop2: detected capacity change from 0 to 512 [ 158.821030][ T9827] ip6t_rpfilter: unknown options [ 158.840688][ T9825] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 158.870336][ T9825] EXT4-fs (loop2): 1 truncate cleaned up [ 158.883503][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.901793][ T9825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.962103][ T9825] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.039580][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.333152][ T9847] loop4: detected capacity change from 0 to 512 [ 159.347789][ T9847] ext4: Unknown parameter 'permit_directio' [ 159.380609][ T9841] atomic_op ffff888118934d28 conn xmit_atomic 0000000000000000 [ 159.402589][ T9849] loop7: detected capacity change from 0 to 7 [ 159.425582][ T9841] loop5: detected capacity change from 0 to 1024 [ 159.455891][ T9841] EXT4-fs: Ignoring removed nobh option [ 159.461879][ T9841] EXT4-fs: Ignoring removed nobh option [ 159.467773][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.477089][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.485843][ T9849] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 159.490963][ T9841] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 159.496212][ T9849] Buffer I/O error on dev loop7, logical block 0, async page read [ 159.505662][ T9841] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.2207: inode #4294967295: comm syz.5.2207: iget: illegal inode # [ 159.513169][ T9849] loop7: unable to read partition table [ 159.527278][ T9841] EXT4-fs (loop5): no journal found [ 159.527300][ T9841] EXT4-fs (loop5): can't get journal size [ 159.552918][ T9841] EXT4-fs (loop5): failed to initialize system zone (-22) [ 159.560120][ T9841] EXT4-fs (loop5): mount failed [ 159.601776][ T9849] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.657027][ T9855] xt_TCPMSS: Only works on TCP SYN packets [ 159.699694][ T9857] loop3: detected capacity change from 0 to 512 [ 159.725294][ T9857] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 159.747158][ T9857] EXT4-fs (loop3): 1 truncate cleaned up [ 159.767526][ T9857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.791906][ T9864] loop5: detected capacity change from 0 to 512 [ 159.799044][ T9864] ext4: Unknown parameter 'permit_directio' [ 159.809131][ T9857] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.811374][ T9864] loop5: detected capacity change from 0 to 512 [ 159.827871][ T9864] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 159.829669][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'. [ 159.849621][ T9864] EXT4-fs (loop5): 1 truncate cleaned up [ 159.856724][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.868281][ T9864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.887548][ T9864] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 159.978936][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2222'. [ 159.998520][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.013012][ T9875] loop3: detected capacity change from 0 to 512 [ 160.026565][ T9875] ext4: Unknown parameter 'permit_directio' [ 160.064243][ T9882] loop7: detected capacity change from 0 to 7 [ 160.074206][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2227'. [ 160.135398][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.144932][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.152959][ T9882] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.162437][ T9882] Buffer I/O error on dev loop7, logical block 0, async page read [ 160.171362][ T9882] loop7: unable to read partition table [ 160.177161][ T9882] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 160.191017][ T9894] loop3: detected capacity change from 0 to 256 [ 160.244277][ T9900] FAULT_INJECTION: forcing a failure. [ 160.244277][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 160.257249][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.0.2233 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.257301][ T9900] Tainted: [W]=WARN [ 160.257308][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.257320][ T9900] Call Trace: [ 160.257327][ T9900] [ 160.257335][ T9900] __dump_stack+0x1d/0x30 [ 160.257441][ T9900] dump_stack_lvl+0xe8/0x140 [ 160.257467][ T9900] dump_stack+0x15/0x1b [ 160.257489][ T9900] should_fail_ex+0x265/0x280 [ 160.257514][ T9900] should_failslab+0x8c/0xb0 [ 160.257548][ T9900] kmem_cache_alloc_noprof+0x50/0x480 [ 160.257642][ T9900] ? alloc_empty_file+0x76/0x200 [ 160.257685][ T9900] alloc_empty_file+0x76/0x200 [ 160.257741][ T9900] path_openat+0x68/0x2170 [ 160.257770][ T9900] ? path_openat+0x1bf8/0x2170 [ 160.257797][ T9900] ? _parse_integer_limit+0x170/0x190 [ 160.257842][ T9900] ? _parse_integer+0x27/0x40 [ 160.257891][ T9900] ? kstrtoull+0x111/0x140 [ 160.257925][ T9900] do_filp_open+0x109/0x230 [ 160.257956][ T9900] file_open_name+0xfa/0x120 [ 160.257976][ T9900] __se_sys_acct+0xeb/0x530 [ 160.258015][ T9900] __x64_sys_acct+0x1f/0x30 [ 160.258128][ T9900] x64_sys_call+0x2f3a/0x3000 [ 160.258157][ T9900] do_syscall_64+0xd2/0x200 [ 160.258183][ T9900] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.258246][ T9900] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.258338][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.258359][ T9900] RIP: 0033:0x7f6eeaaeefc9 [ 160.258374][ T9900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.258397][ T9900] RSP: 002b:00007f6ee954f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 160.258427][ T9900] RAX: ffffffffffffffda RBX: 00007f6eead45fa0 RCX: 00007f6eeaaeefc9 [ 160.258444][ T9900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 160.258459][ T9900] RBP: 00007f6ee954f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.258548][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.258562][ T9900] R13: 00007f6eead46038 R14: 00007f6eead45fa0 R15: 00007ffff8dcff98 [ 160.258652][ T9900] [ 160.480977][ T9902] loop2: detected capacity change from 0 to 512 [ 160.488063][ T9902] ext4: Unknown parameter 'permit_directio' [ 160.506228][ T9902] loop2: detected capacity change from 0 to 512 [ 160.514733][ T9902] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 160.523575][ T9902] EXT4-fs (loop2): 1 truncate cleaned up [ 160.529776][ T9902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.545022][ T9902] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 160.557156][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2236'. [ 160.567565][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.585908][ T9909] xt_TCPMSS: Only works on TCP SYN packets [ 160.618619][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 160.618639][ T30] audit: type=1326 audit(1761475933.703:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.649497][ T30] audit: type=1326 audit(1761475933.703:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.674217][ T30] audit: type=1326 audit(1761475933.703:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.698039][ T30] audit: type=1326 audit(1761475933.703:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.722588][ T30] audit: type=1326 audit(1761475933.703:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.746239][ T30] audit: type=1326 audit(1761475933.703:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.770670][ T30] audit: type=1326 audit(1761475933.703:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.794228][ T30] audit: type=1326 audit(1761475933.703:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.818539][ T30] audit: type=1326 audit(1761475933.703:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.842546][ T30] audit: type=1326 audit(1761475933.703:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9910 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eeaaeefc9 code=0x7ffc0000 [ 160.869499][ T9915] loop2: detected capacity change from 0 to 512 [ 160.878524][ T9915] ext4: Unknown parameter 'permit_directio' [ 160.888198][ T9920] pimreg: entered allmulticast mode [ 160.897786][ T9921] x_tables: ip_tables: osf match: only valid for protocol 6 [ 160.908926][ T9920] pimreg: left allmulticast mode [ 160.966319][ T9929] loop5: detected capacity change from 0 to 512 [ 160.973783][ T9929] ext4: Unknown parameter 'permit_directio' [ 160.985645][ T9929] loop5: detected capacity change from 0 to 512 [ 160.994746][ T9930] Driver unsupported XDP return value 0 on prog (id 715) dev N/A, expect packet loss! [ 161.005338][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2248'. [ 161.016384][ T9929] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 161.016576][ T9934] xt_TCPMSS: Only works on TCP SYN packets [ 161.026125][ T9929] EXT4-fs (loop5): 1 truncate cleaned up [ 161.037019][ T9929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.059014][ T9929] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.099886][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.154047][ T9948] loop2: detected capacity change from 0 to 512 [ 161.161937][ T9948] ext4: Unknown parameter 'permit_directio' [ 161.173125][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2251'. [ 161.193078][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2251'. [ 161.204894][ T9956] FAULT_INJECTION: forcing a failure. [ 161.204894][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 161.217941][ T9956] CPU: 1 UID: 0 PID: 9956 Comm: syz.4.2258 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.217985][ T9956] Tainted: [W]=WARN [ 161.217994][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 161.218009][ T9956] Call Trace: [ 161.218018][ T9956] [ 161.218028][ T9956] __dump_stack+0x1d/0x30 [ 161.218053][ T9956] dump_stack_lvl+0xe8/0x140 [ 161.218126][ T9956] dump_stack+0x15/0x1b [ 161.218150][ T9956] should_fail_ex+0x265/0x280 [ 161.218176][ T9956] should_failslab+0x8c/0xb0 [ 161.218211][ T9956] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 161.218288][ T9956] ? trace_probe_init+0x1a2/0x280 [ 161.218321][ T9956] ? should_failslab+0x8c/0xb0 [ 161.218357][ T9956] kstrdup+0x3e/0xd0 [ 161.218388][ T9956] trace_probe_init+0x1a2/0x280 [ 161.218500][ T9956] alloc_trace_uprobe+0x8b/0x1e0 [ 161.218536][ T9956] create_local_trace_uprobe+0xb5/0x2c0 [ 161.218574][ T9956] perf_uprobe_init+0xc0/0x150 [ 161.218671][ T9956] perf_uprobe_event_init+0xc4/0x140 [ 161.218703][ T9956] perf_try_init_event+0xd9/0x540 [ 161.218735][ T9956] ? perf_event_alloc+0xb1c/0x1740 [ 161.218874][ T9956] perf_event_alloc+0xb27/0x1740 [ 161.218917][ T9956] __se_sys_perf_event_open+0x615/0x11c0 [ 161.218946][ T9956] ? __rcu_read_unlock+0x4f/0x70 [ 161.218977][ T9956] __x64_sys_perf_event_open+0x67/0x80 [ 161.219087][ T9956] x64_sys_call+0x7bd/0x3000 [ 161.219112][ T9956] do_syscall_64+0xd2/0x200 [ 161.219131][ T9956] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.219183][ T9956] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.219252][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.219280][ T9956] RIP: 0033:0x7f1bc31befc9 [ 161.219307][ T9956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.219328][ T9956] RSP: 002b:00007f1bc1c1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 161.219360][ T9956] RAX: ffffffffffffffda RBX: 00007f1bc3415fa0 RCX: 00007f1bc31befc9 [ 161.219376][ T9956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 161.219391][ T9956] RBP: 00007f1bc1c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.219438][ T9956] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 161.219454][ T9956] R13: 00007f1bc3416038 R14: 00007f1bc3415fa0 R15: 00007fff7cfc5208 [ 161.219478][ T9956] [ 161.219494][ T9956] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 161.238366][ T9962] xt_TCPMSS: Only works on TCP SYN packets [ 161.317101][ T9967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2262'. [ 161.353395][ T9969] loop2: detected capacity change from 0 to 512 [ 161.353752][ T9969] ext4: Unknown parameter 'permit_directio' [ 161.359743][ T9969] loop2: detected capacity change from 0 to 512 [ 161.421586][ T9973] loop4: detected capacity change from 0 to 512 [ 161.424968][ T9969] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 161.431020][ T1027] vhci_hcd: vhci_device speed not set [ 161.439677][ T9969] EXT4-fs (loop2): 1 truncate cleaned up [ 161.506840][ T9973] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 161.514519][ T9969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.528135][ T9973] EXT4-fs (loop4): 1 truncate cleaned up [ 161.556498][ T9969] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.556989][ T9973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.581860][ T9973] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 161.597302][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.607723][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.856788][T10004] loop5: detected capacity change from 0 to 1024 [ 161.863786][T10004] EXT4-fs: Ignoring removed orlov option [ 161.872609][T10004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.898391][T10004] pimreg: entered allmulticast mode [ 161.904609][T10004] pimreg: left allmulticast mode [ 161.975229][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.997341][T10010] loop5: detected capacity change from 0 to 512 [ 162.004224][T10010] ext4: Unknown parameter 'permit_directio' [ 162.016592][T10010] loop5: detected capacity change from 0 to 512 [ 162.031333][T10010] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 162.051265][T10010] EXT4-fs (loop5): 1 truncate cleaned up [ 162.058925][T10010] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.082712][T10010] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.104836][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.256843][T10031] loop5: detected capacity change from 0 to 512 [ 162.263777][T10031] ext4: Unknown parameter 'permit_directio' [ 162.276379][T10031] loop5: detected capacity change from 0 to 512 [ 162.290788][T10031] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 162.310740][T10031] EXT4-fs (loop5): 1 truncate cleaned up [ 162.317048][T10031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.338036][T10031] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.348914][T10037] futex_wake_op: syz.0.2288 tries to shift op by 144; fix this program [ 162.369436][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.491421][T10042] loop5: detected capacity change from 0 to 1024 [ 162.509781][T10042] EXT4-fs: Ignoring removed orlov option [ 162.532391][T10042] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.594686][T10046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2290'. [ 162.637925][T10048] loop2: detected capacity change from 0 to 512 [ 162.668871][T10048] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 162.685577][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.701465][T10048] EXT4-fs (loop2): 1 truncate cleaned up [ 162.707903][T10048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.753523][T10053] loop5: detected capacity change from 0 to 512 [ 162.762376][T10053] ext4: Unknown parameter 'permit_directio' [ 162.772624][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.787645][T10053] loop5: detected capacity change from 0 to 512 [ 162.829462][T10053] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 162.868620][T10053] EXT4-fs (loop5): 1 truncate cleaned up [ 162.906781][T10053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.922510][T10053] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 162.962033][T10066] loop2: detected capacity change from 0 to 512 [ 162.980208][T10066] ext4: Unknown parameter 'permit_directio' [ 162.985920][T10068] loop3: detected capacity change from 0 to 1024 [ 162.996478][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.011531][T10066] loop2: detected capacity change from 0 to 512 [ 163.022784][T10068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.054633][T10066] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 163.065166][T10068] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 163.102021][T10066] EXT4-fs (loop2): 1 truncate cleaned up [ 163.108444][T10066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.109454][T10068] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.133972][T10068] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.133972][T10068] [ 163.143695][T10068] EXT4-fs (loop3): Total free blocks count 0 [ 163.150049][T10068] EXT4-fs (loop3): Free/Dirty block details [ 163.157010][T10068] EXT4-fs (loop3): free_blocks=68451041280 [ 163.163278][T10068] EXT4-fs (loop3): dirty_blocks=80 [ 163.168605][T10068] EXT4-fs (loop3): Block reservation details [ 163.174642][T10068] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 163.233225][T10066] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 163.305216][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.381460][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 68 with error 28 [ 163.417183][T10089] __nla_validate_parse: 1 callbacks suppressed [ 163.417200][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2304'. [ 163.462977][T10094] loop3: detected capacity change from 0 to 512 [ 163.505801][T10094] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 163.532535][T10094] EXT4-fs (loop3): 1 truncate cleaned up [ 163.538728][T10094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.602814][ T3335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.640290][T10099] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 163.676012][T10099] SELinux: failed to load policy [ 163.719968][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2313'. [ 163.850228][T10125] xt_TCPMSS: Only works on TCP SYN packets [ 163.943875][T10135] loop2: detected capacity change from 0 to 512 [ 163.973561][T10135] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 164.035195][T10135] EXT4-fs (loop2): 1 truncate cleaned up [ 164.061754][T10141] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 164.083291][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.107864][T10135] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 164.113289][T10145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2327'. [ 164.130046][T10141] team0: Port device dummy0 added [ 164.167978][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.178940][T10141] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 164.213033][T10141] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.248025][T10151] loop5: detected capacity change from 0 to 512 [ 164.260911][T10141] team0: Failed to send options change via netlink (err -105) [ 164.279893][T10151] ext4: Unknown parameter 'permit_directio' [ 164.283418][T10141] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.310678][T10141] team0: Port device dummy0 removed [ 164.322821][T10141] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.356046][T10151] loop5: detected capacity change from 0 to 512 [ 164.380940][T10151] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 164.401224][T10160] xt_TCPMSS: Only works on TCP SYN packets [ 164.416381][T10151] EXT4-fs (loop5): 1 truncate cleaned up [ 164.455461][T10151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.543598][T10151] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 164.593825][T10172] loop2: detected capacity change from 0 to 512 [ 164.620927][T10172] ext4: Unknown parameter 'permit_directio' [ 164.632886][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.718706][T10181] loop2: detected capacity change from 0 to 1024 [ 164.747636][T10181] EXT4-fs: Ignoring removed orlov option [ 164.782344][T10181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.829380][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2343'. [ 164.923289][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.096264][T10202] loop2: detected capacity change from 0 to 512 [ 165.121079][T10206] loop3: detected capacity change from 0 to 512 [ 165.127858][T10202] ext4: Unknown parameter 'permit_directio' [ 165.134468][T10206] ext4: Unknown parameter 'permit_directio' [ 165.156033][T10202] loop2: detected capacity change from 0 to 512 [ 165.183942][T10202] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 165.209857][T10202] EXT4-fs (loop2): 1 truncate cleaned up [ 165.220865][T10202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.253567][T10202] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 165.358482][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.732553][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 165.732571][ T30] audit: type=1326 audit(1761475938.823:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 165.763710][ T30] audit: type=1326 audit(1761475938.823:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 165.788207][ T30] audit: type=1326 audit(1761475938.823:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 165.812201][ T30] audit: type=1326 audit(1761475938.823:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 165.826219][T10245] loop5: detected capacity change from 0 to 512 [ 165.836693][ T30] audit: type=1326 audit(1761475938.823:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 165.836730][ T30] audit: type=1326 audit(1761475938.823:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc3ee50ee7 code=0x7ffc0000 [ 165.836789][ T30] audit: type=1326 audit(1761475938.823:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcc3ee50e5c code=0x7ffc0000 [ 165.836820][ T30] audit: type=1326 audit(1761475938.823:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc3ee50d94 code=0x7ffc0000 [ 165.836921][ T30] audit: type=1326 audit(1761475938.823:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc3ee50d94 code=0x7ffc0000 [ 165.836953][ T30] audit: type=1326 audit(1761475938.823:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10239 comm="syz.2.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc3ee4dc2a code=0x7ffc0000 [ 166.062410][T10250] loop7: detected capacity change from 0 to 7 [ 166.124788][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.134046][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.142330][T10250] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.151681][T10250] Buffer I/O error on dev loop7, logical block 0, async page read [ 166.159725][T10250] loop7: unable to read partition table [ 166.210905][T10245] ext4: Unknown parameter 'permit_directio' [ 166.219657][T10250] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 166.405346][T10267] netem: incorrect gi model size [ 166.411145][T10267] netem: change failed [ 166.934037][T10286] loop3: detected capacity change from 0 to 512 [ 166.952522][T10286] ext4: Unknown parameter 'permit_directio' [ 167.051912][T10293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'. [ 167.072293][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'. [ 167.175966][T10305] FAULT_INJECTION: forcing a failure. [ 167.175966][T10305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.189482][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.0.2389 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.189520][T10305] Tainted: [W]=WARN [ 167.189529][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 167.189545][T10305] Call Trace: [ 167.189577][T10305] [ 167.189586][T10305] __dump_stack+0x1d/0x30 [ 167.189615][T10305] dump_stack_lvl+0xe8/0x140 [ 167.189668][T10305] dump_stack+0x15/0x1b [ 167.189691][T10305] should_fail_ex+0x265/0x280 [ 167.189717][T10305] should_fail+0xb/0x20 [ 167.189736][T10305] should_fail_usercopy+0x1a/0x20 [ 167.189755][T10305] _copy_from_user+0x1c/0xb0 [ 167.189881][T10305] proc_submiturb+0x43/0xa0 [ 167.189944][T10305] usbdev_ioctl+0xcb6/0x1700 [ 167.189972][T10305] ? __pfx_usbdev_ioctl+0x10/0x10 [ 167.190043][T10305] __se_sys_ioctl+0xce/0x140 [ 167.190067][T10305] __x64_sys_ioctl+0x43/0x50 [ 167.190093][T10305] x64_sys_call+0x1816/0x3000 [ 167.190122][T10305] do_syscall_64+0xd2/0x200 [ 167.190205][T10305] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.190232][T10305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.190262][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.190298][T10305] RIP: 0033:0x7f6eeaaeefc9 [ 167.190318][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.190342][T10305] RSP: 002b:00007f6ee954f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.190411][T10305] RAX: ffffffffffffffda RBX: 00007f6eead45fa0 RCX: 00007f6eeaaeefc9 [ 167.190426][T10305] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000004 [ 167.190441][T10305] RBP: 00007f6ee954f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.190456][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.190471][T10305] R13: 00007f6eead46038 R14: 00007f6eead45fa0 R15: 00007ffff8dcff98 [ 167.190493][T10305] [ 167.647530][T10327] netem: incorrect gi model size [ 167.652612][T10327] netem: change failed [ 167.725733][T10331] netem: incorrect gi model size [ 167.731206][T10331] netem: change failed [ 167.874425][T10333] xt_TCPMSS: Only works on TCP SYN packets [ 168.463751][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2406'. [ 168.530796][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2408'. [ 168.543284][T10362] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2408'. [ 168.553786][T10362] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2408'. [ 168.576978][T10364] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2409'. [ 168.581062][T10366] xt_TCPMSS: Only works on TCP SYN packets [ 168.658423][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 168.854429][T10393] xt_TCPMSS: Only works on TCP SYN packets [ 169.245239][T10413] loop2: detected capacity change from 0 to 512 [ 169.252191][T10413] ext4: Unknown parameter 'permit_directio' [ 169.263576][T10413] loop2: detected capacity change from 0 to 512 [ 169.272416][T10413] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 169.281001][T10413] EXT4-fs (loop2): 1 truncate cleaned up [ 169.287249][T10413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.301037][T10413] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.502276][T10423] xt_TCPMSS: Only works on TCP SYN packets [ 169.505855][T10422] loop2: detected capacity change from 0 to 512 [ 169.515304][T10422] ext4: Unknown parameter 'permit_directio' [ 169.533799][T10425] pimreg: entered allmulticast mode [ 169.541335][T10425] pimreg: left allmulticast mode [ 169.546521][T10427] loop7: detected capacity change from 0 to 7 [ 169.578476][T10429] sd 0:0:1:0: device reset [ 169.604119][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.613385][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 169.621457][T10427] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.630773][T10427] Buffer I/O error on dev loop7, logical block 0, async page read [ 169.638641][T10427] loop7: unable to read partition table [ 169.652407][T10427] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 169.691540][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 169.732309][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 169.776318][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 169.854242][T10448] netem: incorrect gi model size [ 169.859465][T10448] netem: change failed [ 169.986275][T10455] loop5: detected capacity change from 0 to 512 [ 169.993822][T10455] ext4: Unknown parameter 'permit_directio' [ 170.079603][T10459] pimreg: entered allmulticast mode [ 170.104404][T10457] netem: incorrect gi model size [ 170.111672][T10457] netem: change failed [ 170.117529][T10459] pimreg: left allmulticast mode [ 170.149210][T10461] xt_TCPMSS: Only works on TCP SYN packets [ 170.400845][T10467] loop5: detected capacity change from 0 to 1024 [ 170.423143][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2451'. [ 170.738905][T10491] pimreg: entered allmulticast mode [ 170.766555][T10491] pimreg: left allmulticast mode [ 170.784340][T10494] tap0: tun_chr_ioctl cmd 1074025673 [ 170.813789][T10487] netem: incorrect gi model size [ 170.819649][T10487] netem: change failed [ 170.920854][T10512] loop7: detected capacity change from 0 to 7 [ 170.953357][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 170.953376][ T30] audit: type=1400 audit(1761475944.043:2795): avc: denied { connect } for pid=10516 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 170.980520][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 170.980810][T10520] sd 0:0:1:0: device reset [ 170.989810][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.003118][T10512] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 171.012413][T10512] Buffer I/O error on dev loop7, logical block 0, async page read [ 171.020782][T10512] loop7: unable to read partition table [ 171.026487][T10512] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 171.041067][ T30] audit: type=1400 audit(1761475944.043:2796): avc: denied { setattr } for pid=10516 comm="syz.3.2468" name="RDS" dev="sockfs" ino=28265 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.063870][ T30] audit: type=1400 audit(1761475944.043:2797): avc: denied { getopt } for pid=10516 comm="syz.3.2468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 171.394050][T10533] pimreg: entered allmulticast mode [ 171.420093][T10533] pimreg: left allmulticast mode [ 171.750870][T10538] capability: warning: `syz.5.2475' uses deprecated v2 capabilities in a way that may be insecure [ 171.768706][T10539] loop5: detected capacity change from 0 to 256 [ 171.802668][T10505] delete_channel: no stack [ 171.830530][T10549] loop5: detected capacity change from 0 to 164 [ 171.850932][T10549] iso9660: Unknown parameter 'showassoc-session' [ 171.927970][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.951785][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.976082][T10549] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.001778][T10554] xt_TCPMSS: Only works on TCP SYN packets [ 172.182177][T10571] sd 0:0:1:0: device reset [ 172.290493][ T30] audit: type=1326 audit(1761475945.373:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.315140][ T30] audit: type=1326 audit(1761475945.373:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.338819][ T30] audit: type=1326 audit(1761475945.373:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.363036][ T30] audit: type=1326 audit(1761475945.373:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.386902][ T30] audit: type=1326 audit(1761475945.373:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.411222][ T30] audit: type=1326 audit(1761475945.373:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.435085][ T30] audit: type=1326 audit(1761475945.373:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 172.965348][T10604] loop2: detected capacity change from 0 to 164 [ 172.971849][T10605] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 172.979929][T10605] batman_adv: batadv0: Interface deactivated: dummy0 [ 172.988616][T10605] batman_adv: batadv0: Removing interface: dummy0 [ 172.998166][T10605] team0: Port device dummy0 added [ 173.004495][T10604] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 173.018158][T10604] team0: Port device dummy0 removed [ 173.032182][T10604] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 173.293886][T10622] pimreg: entered allmulticast mode [ 173.302207][T10622] pimreg: left allmulticast mode [ 173.448540][T10627] netem: incorrect gi model size [ 173.453678][T10627] netem: change failed [ 173.736081][T10639] loop2: detected capacity change from 0 to 164 [ 173.745824][T10639] rock: directory entry would overflow storage [ 173.752168][T10639] rock: sig=0x5252, size=5, remaining=3 [ 173.757952][T10639] isofs_fill_super: root inode is not a directory. Corrupted media? [ 173.773830][T10643] pimreg: entered allmulticast mode [ 173.780476][T10643] pimreg: left allmulticast mode [ 173.810937][T10647] xt_TCPMSS: Only works on TCP SYN packets [ 173.846704][T10648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.866714][T10648] __nla_validate_parse: 7 callbacks suppressed [ 173.866734][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 173.902497][T10654] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2513'. [ 173.912120][T10654] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2513'. [ 173.921220][T10654] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2513'. [ 173.935950][T10648] bond1 (unregistering): Released all slaves [ 173.960696][T10655] netem: incorrect gi model size [ 173.965731][T10655] netem: change failed [ 174.289392][T10669] loop2: detected capacity change from 0 to 512 [ 174.296418][T10669] ext4: Unknown parameter 'permit_directio' [ 174.307909][T10669] loop2: detected capacity change from 0 to 512 [ 174.316875][T10669] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 174.325659][T10669] EXT4-fs (loop2): 1 truncate cleaned up [ 174.334048][T10669] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 174.590891][T10685] pimreg: entered allmulticast mode [ 174.597479][T10685] pimreg: left allmulticast mode [ 174.674729][T10693] FAULT_INJECTION: forcing a failure. [ 174.674729][T10693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.687914][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.0.2528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.688018][T10693] Tainted: [W]=WARN [ 174.688024][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.688035][T10693] Call Trace: [ 174.688041][T10693] [ 174.688048][T10693] __dump_stack+0x1d/0x30 [ 174.688069][T10693] dump_stack_lvl+0xe8/0x140 [ 174.688087][T10693] dump_stack+0x15/0x1b [ 174.688102][T10693] should_fail_ex+0x265/0x280 [ 174.688134][T10693] should_fail+0xb/0x20 [ 174.688149][T10693] should_fail_usercopy+0x1a/0x20 [ 174.688174][T10693] strncpy_from_user+0x25/0x230 [ 174.688201][T10693] strncpy_from_user_nofault+0x68/0xf0 [ 174.688259][T10693] bpf_probe_read_user_str+0x2a/0x70 [ 174.688297][T10693] bpf_prog_ae70b281e0595c0a+0x46/0x4e [ 174.688313][T10693] bpf_trace_run3+0x10f/0x1d0 [ 174.688350][T10693] ? kstrtouint+0x76/0xc0 [ 174.688381][T10693] __bpf_trace_itimer_state+0x2a/0x40 [ 174.688412][T10693] set_cpu_itimer+0x3ba/0x410 [ 174.688447][T10693] do_setitimer+0x68/0x3c0 [ 174.688489][T10693] ? __rcu_read_unlock+0x4f/0x70 [ 174.688614][T10693] __se_sys_setitimer+0xeb/0x300 [ 174.688645][T10693] ? ksys_write+0x192/0x1a0 [ 174.688678][T10693] __x64_sys_setitimer+0x43/0x50 [ 174.688719][T10693] x64_sys_call+0x2be0/0x3000 [ 174.688741][T10693] do_syscall_64+0xd2/0x200 [ 174.688831][T10693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.688870][T10693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.688903][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.688922][T10693] RIP: 0033:0x7f6eeaaeefc9 [ 174.688936][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.688979][T10693] RSP: 002b:00007f6ee954f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000026 [ 174.689001][T10693] RAX: ffffffffffffffda RBX: 00007f6eead45fa0 RCX: 00007f6eeaaeefc9 [ 174.689012][T10693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 174.689024][T10693] RBP: 00007f6ee954f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.689035][T10693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.689046][T10693] R13: 00007f6eead46038 R14: 00007f6eead45fa0 R15: 00007ffff8dcff98 [ 174.689062][T10693] [ 175.418822][T10727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.429647][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2537'. [ 175.444338][T10727] bond3 (unregistering): Released all slaves [ 176.097894][ T30] kauditd_printk_skb: 182 callbacks suppressed [ 176.097911][ T30] audit: type=1326 audit(1761475949.183:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.128808][ T30] audit: type=1326 audit(1761475949.183:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.270444][ T30] audit: type=1326 audit(1761475949.343:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.294040][ T30] audit: type=1326 audit(1761475949.343:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.318104][ T30] audit: type=1326 audit(1761475949.343:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.342288][ T30] audit: type=1326 audit(1761475949.353:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.361632][T10757] pimreg: entered allmulticast mode [ 176.366507][ T30] audit: type=1326 audit(1761475949.353:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.390586][T10757] pimreg: left allmulticast mode [ 176.395601][ T30] audit: type=1326 audit(1761475949.353:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10741 comm="syz.3.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eda9efc9 code=0x7ffc0000 [ 176.424245][ T30] audit: type=1326 audit(1761475949.353:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10743 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 176.448243][ T30] audit: type=1326 audit(1761475949.353:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10743 comm="syz.2.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3ee4efc9 code=0x7ffc0000 [ 176.582352][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 176.615815][T10770] $H: renamed from bond0 (while UP) [ 176.632069][T10770] $H: entered promiscuous mode [ 176.637201][T10770] bond_slave_0: entered promiscuous mode [ 176.643166][T10770] bond_slave_1: entered promiscuous mode [ 176.650239][T10770] dummy0: entered promiscuous mode [ 176.656069][T10775] loop7: detected capacity change from 0 to 7 [ 176.707020][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.716314][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.727716][T10775] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 176.737859][T10775] Buffer I/O error on dev loop7, logical block 0, async page read [ 176.745784][T10775] loop7: unable to read partition table [ 176.757022][T10775] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 176.850960][T10794] loop2: detected capacity change from 0 to 512 [ 176.866197][T10795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.885953][T10794] EXT4-fs mount: 3 callbacks suppressed [ 176.885974][T10794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.912447][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2559'. [ 176.921656][T10794] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.937410][T10795] bond0 (unregistering): Released all slaves [ 177.030053][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.124852][T10811] netem: incorrect gi model size [ 177.129860][T10811] netem: change failed [ 177.144290][T10812] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 177.150873][T10812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.158560][T10812] vhci_hcd vhci_hcd.0: Device attached [ 177.198740][T10814] vhci_hcd: connection closed [ 177.198963][ T4745] vhci_hcd: stop threads [ 177.208891][ T4745] vhci_hcd: release socket [ 177.213407][ T4745] vhci_hcd: disconnect device [ 177.463333][T10826] loop7: detected capacity change from 0 to 7 [ 177.513858][ T24] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.523311][ T24] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.532693][T10826] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 177.542007][T10826] Buffer I/O error on dev loop7, logical block 0, async page read [ 177.550079][T10826] loop7: unable to read partition table [ 177.555877][T10826] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 177.922705][T10861] xt_TCPMSS: Only works on TCP SYN packets [ 178.027673][T10865] loop7: detected capacity change from 0 to 7 [ 178.085862][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.095455][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.104680][T10865] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.113914][T10865] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.122554][T10865] loop7: unable to read partition table [ 178.188460][T10865] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 178.456312][T10838] delete_channel: no stack [ 178.504018][T10880] xt_TCPMSS: Only works on TCP SYN packets [ 178.644969][T10887] xt_TCPMSS: Only works on TCP SYN packets [ 178.722760][T10895] loop7: detected capacity change from 0 to 7 [ 178.741473][T10898] rdma_op ffff88814d9f6180 conn xmit_rdma 0000000000000000 [ 178.790595][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.799816][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.808097][T10895] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.818355][T10895] Buffer I/O error on dev loop7, logical block 0, async page read [ 178.826438][T10895] loop7: unable to read partition table [ 178.896283][T10895] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.017941][T10915] xt_TCPMSS: Only works on TCP SYN packets [ 179.032303][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2606'. [ 179.085336][T10922] xt_TCPMSS: Only works on TCP SYN packets [ 179.236868][T10936] loop7: detected capacity change from 0 to 7 [ 179.292945][ T82] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.302731][ T82] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.311399][T10936] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 179.321469][T10936] Buffer I/O error on dev loop7, logical block 0, async page read [ 179.329390][T10936] loop7: unable to read partition table [ 179.417187][T10936] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 179.632093][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2623'. [ 179.669045][T10957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.692515][T10964] xt_TCPMSS: Only works on TCP SYN packets [ 179.718477][T10960] bond1 (unregistering): Released all slaves [ 179.757474][T10968] loop2: detected capacity change from 0 to 512 [ 179.803588][T10968] ext4: Unknown parameter 'permit_directio' [ 179.853888][T10968] loop2: detected capacity change from 0 to 512 [ 179.899989][T10968] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 179.921716][T10968] EXT4-fs (loop2): 1 truncate cleaned up [ 179.962349][T10968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.995359][T10980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 180.001944][T10980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.009662][T10980] vhci_hcd vhci_hcd.0: Device attached [ 180.032081][T10968] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 180.063713][T10985] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 180.070476][T10985] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.078451][T10985] vhci_hcd vhci_hcd.0: Device attached [ 180.105294][T10987] vhci_hcd: connection closed [ 180.105645][ T4645] vhci_hcd: stop threads [ 180.114882][ T4645] vhci_hcd: release socket [ 180.119322][ T4645] vhci_hcd: disconnect device [ 180.138209][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.153079][T10982] vhci_hcd: connection closed [ 180.163318][ T4645] vhci_hcd: stop threads [ 180.172398][ T4645] vhci_hcd: release socket [ 180.176854][ T4645] vhci_hcd: disconnect device [ 180.190481][ T23] vhci_hcd: vhci_device speed not set [ 180.204313][T10994] loop7: detected capacity change from 0 to 7 [ 180.255095][T10994] loop7: unable to read partition table [ 180.261078][T10994] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 180.414546][T10999] xt_TCPMSS: Only works on TCP SYN packets [ 180.807264][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2642'. [ 181.026780][T11010] $H: renamed from bond0 (while UP) [ 181.034622][T11010] $H: entered promiscuous mode [ 181.039719][T11010] bond_slave_0: entered promiscuous mode [ 181.045975][T11010] bond_slave_1: entered promiscuous mode [ 181.092227][T11025] loop5: detected capacity change from 0 to 512 [ 181.104479][T11010] dummy0: entered promiscuous mode [ 181.119961][T11025] ext4: Unknown parameter 'permit_directio' [ 181.157063][T11023] loop7: detected capacity change from 0 to 7 [ 181.179719][T11025] loop5: detected capacity change from 0 to 512 [ 181.202170][ T24] ================================================================== [ 181.207122][T11025] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 181.210325][ T24] BUG: KCSAN: data-race in lo_ioctl / loop_queue_rq [ 181.224921][ T24] [ 181.227271][ T24] write to 0xffff8881023cdc80 of 4 bytes by task 11028 on cpu 0: [ 181.235002][ T24] lo_ioctl+0xa66/0x12b0 [ 181.237078][T11025] EXT4-fs (loop5): 1 truncate cleaned up [ 181.239280][ T24] blkdev_ioctl+0x356/0x440 [ 181.239308][ T24] __se_sys_ioctl+0xce/0x140 [ 181.247630][T11025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.249566][ T24] __x64_sys_ioctl+0x43/0x50 [ 181.249596][ T24] x64_sys_call+0x1816/0x3000 [ 181.276243][ T24] do_syscall_64+0xd2/0x200 [ 181.280858][ T24] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.286770][ T24] [ 181.289137][ T24] read to 0xffff8881023cdc80 of 4 bytes by task 24 on cpu 1: [ 181.296524][ T24] loop_queue_rq+0x4f/0x680 [ 181.301159][ T24] blk_mq_dispatch_rq_list+0x2a6/0xf80 [ 181.306680][ T24] __blk_mq_sched_dispatch_requests+0xb83/0xc60 [ 181.312958][ T24] blk_mq_sched_dispatch_requests+0x86/0x120 [ 181.319075][ T24] blk_mq_run_hw_queue+0x17e/0x220 [ 181.324214][ T24] blk_mq_run_hw_queues+0x180/0x250 [ 181.329518][ T24] blk_mq_requeue_work+0x3b9/0x3f0 [ 181.334656][ T24] process_scheduled_works+0x4ce/0x9d0 [ 181.340147][ T24] worker_thread+0x582/0x770 [ 181.344752][ T24] kthread+0x489/0x510 [ 181.348846][ T24] ret_from_fork+0x122/0x1b0 [ 181.353543][ T24] ret_from_fork_asm+0x1a/0x30 [ 181.358593][ T24] [ 181.360944][ T24] value changed: 0x00000001 -> 0x00000002 [ 181.366814][ T24] [ 181.369141][ T24] Reported by Kernel Concurrency Sanitizer on: [ 181.375301][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0H Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.386775][ T24] Tainted: [W]=WARN [ 181.390586][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.400834][ T24] Workqueue: kblockd blk_mq_requeue_work [ 181.406509][ T24] ================================================================== [ 181.425205][T11023] loop7: unable to read partition table [ 181.435161][T11023] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 181.568005][T11025] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 181.604145][ T7038] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.