last executing test programs: 7m3.676909606s ago: executing program 3 (id=145): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xff, 0x9, 0x6, 0xb, 0x10, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e23, 0x1, @mcast2, 0x9}}, 0x7, 0xfffffff9, 0x8, 0x0, 0xa84}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)={r0, 0x38, "94bf45791cf03fcbe837b63fa58a8d92e1992c5c9a87a5442c4357a53f04cac31e4ca6f3abd4abdf997a24d10ddbcc56df2984f5930b5dad"}, &(0x7f00000001c0)=0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) (async) pwrite64(r1, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) 7m3.033725385s ago: executing program 3 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250a00000018000480"], 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x4028050) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x3e494fa79bd4056, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000c1}, 0x80) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sync_file_range(r2, 0x6, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x84}}, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x80181}], 0x1, 0x10000, 0x0) 7m2.766874428s ago: executing program 3 (id=163): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00", 0x53}], 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 7m2.663118019s ago: executing program 3 (id=165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sys_enter\x00', r3}, 0x10) inotify_init1(0x0) r4 = creat(&(0x7f0000000280)='./bus\x00', 0xa) pwritev2(r4, &(0x7f0000000040)=[{&(0x7f0000000b80)="ca", 0x1}], 0x1, 0x8001, 0xffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = timerfd_create(0x4, 0x80000) timerfd_gettime(r9, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r10}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000012c0)={0x38, r6, 0xc4fc9e906872338b, 0x2000020, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x32}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 7m2.383615063s ago: executing program 3 (id=176): time(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c000000000400000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0xfffffffffffffcfa, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0xfffffffffffffc86, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) r11 = dup(r9) socket$inet_smc(0x2b, 0x1, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r13 = dup(r12) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, r13, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r11]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x3, 0x100007ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0xff, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 7m1.578899863s ago: executing program 3 (id=188): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) getitimer(0x2, &(0x7f00000002c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x10, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) 7m1.578610273s ago: executing program 32 (id=188): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) getitimer(0x2, &(0x7f00000002c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x8}, {}, {}, @raw32={[0x0, 0x0, 0x2]}}, {0x0, 0x10, 0x0, 0x0, @time={0x7, 0x5}, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, &(0x7f00000018c0)) 6m16.34468481s ago: executing program 1 (id=1165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) 6m16.344410621s ago: executing program 1 (id=1166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x3, r1}) 6m15.511122051s ago: executing program 1 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setpriority(0x2, 0x0, 0x6) lstat(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 6m15.419067722s ago: executing program 1 (id=1185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 6m15.401509522s ago: executing program 1 (id=1186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf4f3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1408e, &(0x7f0000000780)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) statx(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x6000, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002dc0)=@newtfilter={0xd9c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd6c, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1ff}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_ACT={0x234, 0x1, [@m_vlan={0x230, 0x20, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x2, 0xbd, 0xfffffffa}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb30}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x26f}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x193}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x33d}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x8, 0xe7, 0x7be}, 0x2}}]}, {0x189, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_EMATCHES={0x3b4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xdc9}}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x1}, {0x6, 0x40, 0x1, 0x1, 0x8, 0x2}}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x7f, 0x0, 0xe8e}, "b072b6fe218bfc34b6de285280913641ab060fad4ec904d8d97e8d6da029abe481ec5c996088b72bf42b37dc7ec3998ecb5904e84557c508c697f0912e12afecf479391fd141cbd296c1ef09f74f1cdbe198ff8cfab03331752e9f1300c54046f8b0da80af3b05f1a2ce2630690b7ee36d179a0b32784568336ec5a5e77bfa2bbd291ee652c29388881d58fff0090d8c763a304ae67d161c1e7c7ce20d59ee661ae21a977c92aa129d839e691eeb653ac7146d2f7066985cc08d00746c1f0b3ea98d782bb7"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x592, 0x7, 0x4}, {{0x1, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x101}, {0x7, 0x2, 0x1, "100c"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0xff, 0x7, 0x2, "bfed12821f25d1"}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x4, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x7, 0x4, 0x80}, [@TCA_EM_META_RVALUE={0x9, 0x3, [@TCF_META_TYPE_VAR="e65373ff", @TCF_META_TYPE_VAR="01"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xfffa, 0x3, 0x2}, {0x9, 0x7}}}]}}]}, @TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc8, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x9}, "1592be7bd255be9e8876c2ffc5eb87e091b4ea9446799ec412e02cb4592e2c6c6b821a0d5062695d8714386c824d3a1285cba0b798487e16563d031edf37eb5dd42b7681aa4483756330e72b1285d5e4830fbdf8214829af3854926075d45709853a566804b4b7b0f86af4500a403386efb15eb2c9b3b3bbb0686ac4c1af37df3e86ca6050969ade892ab6b0aa95da02f027ef7b2898160c84c7e618c8a968d1f92a9e77ccbc21854ea71ea1837c00cbb9e8ff8eeba957f9624c9c79"}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0xb4, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0x4, 0xb}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_INT=0x4a, @TCF_META_TYPE_VAR="2e97442093", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="a4a704e862af25710e1c", @TCF_META_TYPE_VAR="d686d710", @TCF_META_TYPE_VAR=' J(>#%', @TCF_META_TYPE_VAR="fd02"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x57e4, 0x7}, {0x3, 0x8, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="9402f30d9e", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="3273518d1beb7706", @TCF_META_TYPE_VAR='1', @TCF_META_TYPE_VAR='T']}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="eb36098a581d175da6", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="98739d67c04c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="05c8c12f07a1de1e769f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x6}, {0x6, 0x9, 0x1}}}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x2, 0x7, 0xffff}, {{0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xffff, 0x8, 0x4}, {0x3, 0x6, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x7ff, 0x3, 0x9}, {0x8, 0xfff, 0x9, 0x2}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfd57}, {{0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd, 0x1, 0x2}, {0x6d8a, 0x7f, 0x8, 0x0, 0x8, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x9}, {0x4979, 0x8, 0x0, "23c4cc0e1e253f9b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}]}, @TCA_CGROUP_EMATCHES={0x164, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x158, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x744, 0x2, 0x6}, {0xe484, 0xa, 0x2, "934b8c5b2bdb144b740d"}}}, @TCF_EM_IPT={0x10c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x7fff}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf0}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "a0966d71c97608a0c2caa9bf790ea346e897983862bb6081d9ce92c8ceb59681fe1c02ca85914a1790fec72788dea9d6431820bbd6345a29d696832e9414ea4331575cf76e57f930f05182e1bf3ad29a969e4cab6a99ad5ea7ae921d829ca28624ed22c8edc46babdbb5359c820d9c007d4c7bfd03bd9ccd8d4cc377a2a68b43e1f286d6200426d8ccf451d0bb86891b2ce808c87a458ac17ed5d8a1e96ba0313ff710875c1a3a2b04322366ac14fd8ebcb16f0bc6da5abb0d1ee83a925881cbe66a8ce1ce15f395981b090a8ac557544a9b17d5893005c1db5b9e1b6bb38ad66a335f906e1b04c82c"}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x971f}, {0x4, 0x5, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x3}, {0x5, 0xa, 0x0, "8435c6042601312b86ef"}}}]}]}, @TCA_CGROUP_ACT={0x5fc, 0x1, [@m_nat={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0x1000, 0x10000000, 0x8, 0x7}, @loopback, @multicast2, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x2, 0xffffffffffffffff, 0x6, 0x3}, @multicast2, @private=0xa010101, 0xff000000}}]}, {0x27, 0x6, "ce5783ae2e4bc9e7b7c72d54929b013dea7dad053da96fca467bfab20495f4e432a4d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x558, 0x0, 0x0, 0x0, {{0xb}, {0x514, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffe}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x66}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x5, 0xffffffff, 0x7, {0x0, 0x2, 0x2, 0x2, 0xff, 0x1}, {0x6a, 0x0, 0xbb45, 0x3, 0x5, 0x8001}, 0x7, 0xa1, 0x1}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x966a, 0xfffffffa, 0x2, 0x118, 0xb2d, 0x800000, 0x3, 0x40, 0xfffffff8, 0x3ff, 0x5, 0x9, 0x1, 0xa598, 0x2, 0x7, 0x6, 0xc, 0x4, 0x2, 0x6, 0xfffffeff, 0x9, 0x4, 0x8, 0xbc6e, 0x0, 0xfef, 0x10, 0x80, 0xffff8001, 0xc6, 0x1c9a, 0x9, 0x4, 0x6, 0x329a, 0x421, 0x0, 0x8, 0x1, 0x1ff, 0xfffffffd, 0x5, 0x4, 0x3, 0x4, 0xfffffc01, 0x1, 0x9, 0x5269, 0x10001, 0x5, 0x2, 0x5db7, 0xffffffff, 0x4, 0x5, 0x7ff, 0x635b, 0x4, 0x5, 0x2, 0x598d, 0x3, 0xd6a, 0xc, 0x3, 0xee49, 0xb3f, 0x6, 0x100, 0x7, 0x7, 0x81, 0x0, 0x5f81821, 0xfffffffb, 0xffff0000, 0x6, 0x4, 0x5, 0x8000, 0x1000000, 0x800, 0x7, 0x1, 0x8, 0x89c3, 0x4c, 0x1, 0x2, 0x10000, 0x5, 0x89b0, 0x9, 0xfffffffc, 0xfffff212, 0x2, 0x1, 0x3, 0x100, 0x8, 0x7fffffff, 0x1, 0x1, 0xffffffff, 0x1, 0x9, 0x3, 0x5af1, 0x4, 0x9, 0x9, 0x9, 0x7, 0x2, 0x3, 0x80000001, 0x10000, 0x7, 0x10000, 0x80, 0x3, 0x8, 0x401, 0x7, 0xffff, 0x0, 0x7, 0x1, 0x0, 0x10001, 0xfffffffd, 0x9, 0x2, 0xfffffffa, 0x800, 0x7, 0x9, 0x8001, 0x9, 0x0, 0x80, 0x3, 0x7f, 0xf54, 0x8001, 0x7, 0x7, 0xffffffff, 0x5, 0x80, 0x9, 0x2, 0x1, 0x6, 0x8, 0x5, 0x2, 0xa1, 0x53, 0xfffffffc, 0x5, 0x3, 0x8, 0xff, 0xfffffff8, 0x7, 0x200, 0x24, 0xa642, 0x0, 0x3, 0x2, 0x1, 0x2, 0x3, 0x6, 0x9, 0x32, 0xa, 0x6, 0x3, 0xffffffff, 0xc3, 0x3, 0xfffff2dc, 0x7fffffff, 0xffff, 0x2, 0x1, 0x9, 0x5, 0x6cb, 0x6, 0x3, 0x80000000, 0x0, 0x4, 0x0, 0x3, 0xcc80, 0x6, 0x7, 0x4, 0x9, 0x2, 0xf, 0xfffeffff, 0x3, 0x3ff, 0xcb0a, 0x5, 0x9, 0x40, 0x8001, 0x5000000, 0x5, 0x7, 0x6, 0x1ede, 0x4710, 0x1, 0x5, 0x400, 0x3, 0x4, 0xfffffffc, 0xddb2, 0x6, 0x1, 0x1, 0x3, 0x1, 0x8, 0x7f, 0xffffffff, 0x4, 0xd2, 0x39e8, 0x0, 0x9, 0x0, 0xcb4, 0x3, 0x3, 0x8, 0x4, 0x2, 0xd, 0x6, 0x47, 0x3, 0x1, 0x10001]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xa7b7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x1, 0x7, 0x240, {0x2, 0x2, 0xfff6, 0x80, 0x3ff, 0xf90d}, {0xb, 0x2, 0x8, 0x8, 0x4, 0x9}, 0x3, 0x8, 0xffffffff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4400}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1d5}]]}, {0x1b, 0x6, "86695d3fd1cd8974c4004012bc0ddcffb8a5c9b73021e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd9c}}, 0x200400d4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x800, 0x1) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r7, 0x2, {0x3042cd76385de883, 0x1, 0x4}, 0x1}, 0x18, &(0x7f00000002c0)={&(0x7f0000000240)="21a9a32b72e3ef041e06022d7fff0875a318271cc953c7cdd4c99b67e1bd17abb7ca8a7e05464258baf03bc50413dd156f1d77590b0003091eb3b06c11c83ebcd33b12a94345e15136aeec1b0d97500b244e10af965b0497bd8dcda39bf9", 0x5e}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r9, &(0x7f0000000580)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/122, 0x7a}, {&(0x7f0000000bc0)=""/231, 0xe7}], 0x5, &(0x7f0000000cc0)=""/237, 0xed}, 0x1) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b000000000000040000000000000000000025896d4fa5e171ced1b58ee0f8adb2779229e0dbad32d8b43951612ec5d053bc59e103ba069450c066f71d7432671ac61b31d1b67cd8cc43024765b5b05e01004021139dfa9dc73c6ed3833f9cae2990eeb6e97ba4fa76e6a7", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES16=r8, @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x0, 0x0) mq_timedreceive(r13, 0x0, 0xfffffffffffffee3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r14}, 0x10) 6m14.545299384s ago: executing program 1 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000006d8be7a353f96df2507a97bf17c21437286dd2eba4ad87dd12a5fcac128c9f129ee5f4a89c0f6efc58683fea65340d97eb1a61ac0d55ebecd877751a9ac61d7474640835", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="97f5e1fe47058c08a6980e2c3e7ccfcbc0e7d99f7e67a5f9df7527ccbaee", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m59.523633877s ago: executing program 33 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000006d8be7a353f96df2507a97bf17c21437286dd2eba4ad87dd12a5fcac128c9f129ee5f4a89c0f6efc58683fea65340d97eb1a61ac0d55ebecd877751a9ac61d7474640835", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="97f5e1fe47058c08a6980e2c3e7ccfcbc0e7d99f7e67a5f9df7527ccbaee", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m49.636704081s ago: executing program 5 (id=5337): syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x48e01) r0 = syz_io_uring_setup(0x3c3d, &(0x7f0000000780)={0x0, 0xfffffffe, 0x10100, 0x1, 0x179}, &(0x7f0000000100)=0x0, &(0x7f0000000700)=0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r3 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) fallocate(r3, 0x10, 0x2, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x82, 0x0, &(0x7f0000001080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xe4, &(0x7f0000000300)=[@in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e22, 0x2, @mcast1, 0xe}, @in6={0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e21, 0xfffeffff, @rand_addr=' \x01\x00', 0x7f}, @in6={0xa, 0x4e22, 0x4, @empty, 0x9e}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0xeab, @private2, 0x9}, @in6={0xa, 0x4e21, 0x4, @local, 0xb29}]}, &(0x7f0000000400)=0x10) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000680)=0x60, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) acct(0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd24, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107442, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000240)={0x3920e, r6, 0x18, 0x0, 0x2}) 3m49.588520442s ago: executing program 5 (id=5339): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2, 0x100}, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a0001002abd7000ffdbdf25008100000000000008000100"], 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x204002, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$sock_ifreq(r3, 0x8937, &(0x7f0000000240)={'dvmrp1\x00', @ifru_ivalue=0x100}) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x5, 0x4, 0x1, 0xffb9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0), 0x5c3901, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x20, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001f40)='GPL\x00', 0x200009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x6, 0x3, 0x3}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) sendmsg$tipc(r9, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 3m49.319241025s ago: executing program 5 (id=5348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setpriority(0x2, 0x0, 0x6) lstat(0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 3m48.993403429s ago: executing program 5 (id=5354): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a030000000000000000000200000a0900030073797a30000000000c00024000000000000000010900010073797a30"], 0x60}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3m48.263381128s ago: executing program 5 (id=5369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x800, 0x5) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xaee, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$eJzs3DFrE38cx/FP0/zbNKVNhr+CgvhFF12ONj4ACdKCGFBqI+ogXO1FQ85cyYVKRGw3FwcfR3F0E9Qn0MXN3a2L4FJQjCRNTdKmitr0onm/oHff5pdP8rvkEr53kNu6+fxBqRA6BbeqWMIUk9a1LaUbVctIax1r1mPqtK7zk5/en7p+6/aVbC43t2A2n128kDGz6dOvHz5+ceZtdfLGy+lX49pM39n6mPmweXzzxNbXxfvF0IqhlYOqubYUBFV3yfdsuRiWHLNrvueGnhXLoVfpGi/4wcpKzdzy8lRypeKFobnlmpW8mlUDq1Zq5t5zi2VzHMemksLP5DcWFtxs1LNA38Qbi0ol645Kmtg3nN+IYlIAACBanf2/Bq7/b3QtP+7/1+n//wD9/zBo9P/J1ue3G/0/AAAAAAAAAAAAAAAAAAAAAAB/g+16PVWv11O7692/cUkJSbv/Rz1P9Afv/3Dr+OFeQvKfruZX85I/0lg2ZAsqypenGaX0pbk/tOzU85dzczPWlNYbf62VX1vNj3bnZ5VSund+didv3fn/lOzMZ5TS/73zmZ75MZ0725F3lNK7uwrka7m5X7fzT2bNLl3N7clPNO8HAAAAAMC/wLHveh6/O85B4zv5Xzg/sOf4Oq6T8Wi3HQAAAACAYRHWHpVc3/cq0RSfWycLIp7GgBfHJP1W/GLHVV/bQ/F9txx28SwYlJduAIuEpEN9wAn1Y6oRfikBAAAA6It20x/1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF5HccGzA546dsSbCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAETuWwAAAP//AmwlzQ==") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x23) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) unlink(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYBLOB="0000000000000000abfd554760c9a1051078d1495349a11e5ec6554ce2b22603f884ad00372a8e1705ca5062ad84d5adafd7281948ff01ff6d6c4d33cb84a9772785b42864d37d81130ae1cd1f7105b89990ba99316bffc03e394d9b62e2c66800ba0be8399049f7d667d288d8d4c81185e25fb35097354d44e87b3c158fb57269acd23451614cf871395af7cf0d2243e069f47b923d346c80b2097eb438c09c7ae41510f5e321d60cc6ebea3057f08ee947a07fd5af86e5e8cd7db9c74ec814009d6cfd3123cd8a1effa3d08fd0f0d4238afeaaf193c413516b1f074636ac323abff412aeb229017384cef4c9e16d7374"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lseek(0xffffffffffffffff, 0x3, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 3m48.1098797s ago: executing program 5 (id=5376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000002480)={{0x107, 0xfa, 0x1, 0x2fa, 0x14d, 0xfffffe1a, 0x128, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3m48.069829531s ago: executing program 34 (id=5376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000002480)={{0x107, 0xfa, 0x1, 0x2fa, 0x14d, 0xfffffe1a, 0x128, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") socket$netlink(0x10, 0x3, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.236667611s ago: executing program 7 (id=11523): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6bdd48fede6e8102433e7596b6845cceb51d4cbc0f5eac593fa57de8c28f1dfbf407c63d273a24ae5ec0736f5b"]) 2.155827672s ago: executing program 7 (id=11527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 2.131338642s ago: executing program 7 (id=11530): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.581997499s ago: executing program 6 (id=11542): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.49373917s ago: executing program 6 (id=11543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) 1.49321025s ago: executing program 6 (id=11545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a"], 0x14}}, 0x0) 1.457735991s ago: executing program 6 (id=11547): socket(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mq_open(&(0x7f0000000040)='\x00', 0x80, 0x4, &(0x7f0000000100)={0x4, 0x1, 0xa567, 0xfffffffffffffffc}) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x40801) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 1.206035804s ago: executing program 7 (id=11554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 1.115005036s ago: executing program 7 (id=11555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') setpriority(0x2, 0x0, 0x6) lstat(0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 728.31718ms ago: executing program 7 (id=11564): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) 719.32246ms ago: executing program 4 (id=11567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) 630.950541ms ago: executing program 4 (id=11568): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 612.215022ms ago: executing program 4 (id=11569): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6bdd48fede6e8102433e7596b6845cceb51d4cbc0f5eac593fa57de8c28f1dfbf407c63d273a24ae5ec0736f5b"]) 573.191782ms ago: executing program 6 (id=11570): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365cfe54a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) io_uring_setup(0x66d0, &(0x7f0000000140)={0x0, 0x49fa, 0x10003, 0x20002, 0x185}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000010c0)="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", 0x47b, 0x800, &(0x7f0000000000)={0xa, 0x4e22, 0x7ff, @remote, 0x7}, 0x1c) 503.026303ms ago: executing program 0 (id=11571): getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000600)=""/95, 0x5f}], 0x1, 0x4, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) socket(0x11, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 502.557323ms ago: executing program 4 (id=11572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) 470.470933ms ago: executing program 4 (id=11573): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000c995081dc3096a93b36eddb6a4e9474ac12963345b451053d5e66e98876134ec1c40dde99e562cc06c7d1366324ec2fa0ed76569e30380e7bfb94048e4c2243c77a180df31fcfd8048ab12ae39c901862ba90b0afa73872cfd9b585615e28e7b0bc17ea6bee6e29f53fe64226791b0a1cc6ffd5b4e21b002b72f005764efac17a76f452e1c21f2d83f30fed0bc6b9aa8ea4f9dddbdfe739752649919c31fd5ab121236c34e7adece103952ed22501865d42f8c12c48960d2566a0af02230b23d5043e6ebc24c41cf1199", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) sysinfo(&(0x7f0000000080)=""/98) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x20, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @dev, @local}, {0x14, 0x0, 0x0, @rand_addr=0x64010102, "2fd1e616d0ada887e40ae9898efd19c0e9f24099"}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 416.268954ms ago: executing program 0 (id=11574): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="160000000400000008000000017c000080000000440dccfe785df234ae95f081095abe020920408583a474f6a4309553d9bc8f958d812a517e1d6fd7d2ad03203db0e0cd2df69cb28b00", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ee0000000000000000005725a17c000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$eJzs3b1rLFUUAPAzyX6pxW5hJYIDWlg9Xl5rs0HyILiVsoVa6MP3Hkh2ERII+IFrKlsbS/8CQbDzn7CxsBdsBTtTBEZmZya7ibObTHATP36/Jjd3zrn3zOQmYYs9+/6L04PHaTw9+eyX6PWS2BrGME6TGMRWVL6IC4ZfBQDwb3aaZfF7VmiSl0REb3NlAQAb1Pj///cbLwkA2LC33n7njd3RaO/NNO3Fw+mXx+P8lX3+tbi++zQ+jEk8ifvRj7OI7Fwxfphl2ayV5gbxynR2PM4zp+/9WK6/+1vEPH8n+jGYT13M3x/t7aSFpfxZXsez5f7DPP9B9OP5mv33R3sPavJj3IlXX16q/17046cP4qOYxON5EYv8z3fS9PXs6z8+fTcvL89PZsfj7jxuIdu+5R8NAAAAAAAAAAAAAAAAAAAAAAD/YffK3jndmPfvyafK/jvbZ/k37Ugrg4v9eYr8pFroUn+gWRbfVP117qdpmpWBi/xWvNCK1t3cNQAAAAAAAAAAAAAAAAAAAPyzHH38ycGjyeTJ4d8yqLoBVG/rv+k6w6WZl6ImZhDnM93FllvltmtWju0qJolYW0a+YqPi21fvvmLwzKqsb79r+uh6V8e0b1Bhw0F1ug4eJfXPsBvVTK86JD8sx3Timnt1Vl3KGh2/Tu2lfuN77zw3H8zWxESyrrDXfi2eXDmTXL6Lzvyp1qa3y0Hxu1B3Nhqd57/+rUh06wAAAAAAAAAAAAAAAAAAgI1avOm35uLJiqSf94sP+Y/BhqsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNux+Pz/BoNZmXyN4E4cHt3xLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/8GcAAAD//wrtYeE=") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000380)=0x9, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000080007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xfffffffffffff73d}, 0x18) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f00000008c0)={0x0, 0x4}, 0x19f, 0x0, 0xffffffffffffffff, 0x24, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x44400) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], 0x48) 409.086124ms ago: executing program 4 (id=11575): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 271.843856ms ago: executing program 2 (id=11577): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) 271.348796ms ago: executing program 2 (id=11578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x9, 0x43, 0x0, 0x0, 0x7, 0xc}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}]}, 0x4c}}, 0x0) 234.803427ms ago: executing program 2 (id=11579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x8c, 0x100, @val=0x80}}}}}}}, 0x0) 231.081626ms ago: executing program 6 (id=11580): socket(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mq_open(&(0x7f0000000040)='\x00', 0x80, 0x4, &(0x7f0000000100)={0x4, 0x1, 0xa567, 0xfffffffffffffffc}) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc0033d6402c34aa96940474", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x40801) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) sendfile(r2, r3, 0x0, 0x7ffff004) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) 226.583137ms ago: executing program 0 (id=11581): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000040, 0x8, 0x1b, 0xfe, &(0x7f00000000c0)="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"}) 200.751377ms ago: executing program 0 (id=11582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 200.286637ms ago: executing program 2 (id=11583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_delrule={0x4c, 0x21, 0x1, 0x70bd28, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x9, 0x43, 0x0, 0x0, 0x7, 0xc}, [@FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}]}, 0x4c}}, 0x0) 174.102427ms ago: executing program 2 (id=11584): getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000600)=""/95, 0x5f}], 0x1, 0x4, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000ffffffff00"/28], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) socket(0x11, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 159.021577ms ago: executing program 0 (id=11585): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x28541, 0x14b) 126.976628ms ago: executing program 2 (id=11586): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0xe000000, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 0 (id=11587): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7", 0x3}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) kernel console output (not intermixed with test programs): removed i_version option [ 436.565364][T32005] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 436.586209][T32011] __nla_validate_parse: 8 callbacks suppressed [ 436.586227][T32011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10894'. [ 436.604010][T32005] EXT4-fs (loop6): 1 truncate cleaned up [ 436.610542][T32005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.630587][T32011] hsr_slave_1 (unregistering): left promiscuous mode [ 436.644406][T32018] netlink: 'GPL': attribute type 10 has an invalid length. [ 436.654491][T32019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32019 comm=syz.7.10894 [ 436.667536][T32018] team0: left allmulticast mode [ 436.672525][T32018] team_slave_0: left allmulticast mode [ 436.678044][T32018] team_slave_1: left allmulticast mode [ 436.683549][T32018] team0: left promiscuous mode [ 436.688386][T32018] team_slave_0: left promiscuous mode [ 436.693910][T32018] team_slave_1: left promiscuous mode [ 436.699487][T32018] bridge0: port 3(team0) entered disabled state [ 436.708185][T32005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10890'. [ 436.718256][T32018] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.726434][T32018] bond0: (slave team0): Enslaving as an active interface with an up link [ 436.737876][T32024] bond0: (slave team0): Releasing backup interface [ 436.747515][T32024] bridge0: port 3(team0) entered blocking state [ 436.754046][T32024] bridge0: port 3(team0) entered disabled state [ 436.760801][T32024] team0: entered allmulticast mode [ 436.766021][T32024] team_slave_0: entered allmulticast mode [ 436.772075][T32024] team_slave_1: entered allmulticast mode [ 436.778396][T32024] team0: entered promiscuous mode [ 436.783491][T32024] team_slave_0: entered promiscuous mode [ 436.789313][T32024] team_slave_1: entered promiscuous mode [ 436.811411][T32028] loop4: detected capacity change from 0 to 8192 [ 436.843518][T32027] dummy0 speed is unknown, defaulting to 1000 [ 436.888287][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.977717][T32037] loop6: detected capacity change from 0 to 8192 [ 437.041569][T32042] loop9: detected capacity change from 0 to 5 [ 437.050220][T32042] buffer_io_error: 10 callbacks suppressed [ 437.050299][T32042] Buffer I/O error on dev loop9, logical block 0, async page read [ 437.075547][T32042] Buffer I/O error on dev loop9, logical block 0, async page read [ 437.083481][T32042] loop9: unable to read partition table [ 437.136548][T32042] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 437.136548][T32042] U) failed (rc=-5) [ 437.198598][T32050] loop9: detected capacity change from 0 to 5 [ 437.205754][T32050] Buffer I/O error on dev loop9, logical block 0, async page read [ 437.240610][T32050] Buffer I/O error on dev loop9, logical block 0, async page read [ 437.248669][T32050] loop9: unable to read partition table [ 437.260679][T32050] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 437.260679][T32050] U) failed (rc=-5) [ 437.293897][T32053] serio: Serial port ptm0 [ 437.363808][T32060] team0: left allmulticast mode [ 437.368758][T32060] team_slave_0: left allmulticast mode [ 437.374612][T32060] team_slave_1: left allmulticast mode [ 437.380393][T32060] team0: left promiscuous mode [ 437.385273][T32060] team_slave_0: left promiscuous mode [ 437.390883][T32060] team_slave_1: left promiscuous mode [ 437.396548][T32060] bridge0: port 3(team0) entered disabled state [ 437.422599][T32063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10911'. [ 437.432424][T32063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10911'. [ 437.442820][T32060] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.450955][T32060] bond0: (slave team0): Enslaving as an active interface with an up link [ 437.468416][T32062] bond0: (slave team0): Releasing backup interface [ 437.479006][T32063] loop0: detected capacity change from 0 to 164 [ 437.487338][T32062] bridge0: port 3(team0) entered blocking state [ 437.493763][T32062] bridge0: port 3(team0) entered disabled state [ 437.504032][T32062] team0: entered allmulticast mode [ 437.509221][T32062] team_slave_0: entered allmulticast mode [ 437.515072][T32062] team_slave_1: entered allmulticast mode [ 437.537523][T32062] team0: entered promiscuous mode [ 437.542656][T32062] team_slave_0: entered promiscuous mode [ 437.548533][T32062] team_slave_1: entered promiscuous mode [ 437.583322][T32056] loop7: detected capacity change from 0 to 512 [ 437.629126][T32067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10913'. [ 437.651711][T32067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10913'. [ 437.683378][T32069] loop2: detected capacity change from 0 to 164 [ 437.687430][T32056] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 437.906713][T32056] EXT4-fs (loop7): 1 truncate cleaned up [ 437.933984][T32056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.985917][T32076] dummy0 speed is unknown, defaulting to 1000 [ 438.007498][T32056] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=32056 comm=syz.7.10909 [ 438.053386][T32074] loop2: detected capacity change from 0 to 8192 [ 438.123138][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.157254][T32081] loop9: detected capacity change from 0 to 5 [ 438.189152][T32084] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.207655][T32084] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.215600][T32084] loop9: unable to read partition table [ 438.226620][T32081] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.245088][T32081] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.253078][T32081] loop9: unable to read partition table [ 438.260750][T32081] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 438.260750][T32081] U) failed (rc=-5) [ 438.277117][T32089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10921'. [ 438.316008][T32091] 9pnet: p9_errstr2errno: server reported unknown error @ [ 438.408134][T32098] loop4: detected capacity change from 0 to 512 [ 438.474418][T32098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.492320][ T29] kauditd_printk_skb: 642 callbacks suppressed [ 438.492337][ T29] audit: type=1400 audit(1745977313.577:27460): avc: denied { mount } for pid=32097 comm="syz.4.10925" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 438.492340][T32098] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.508624][T32106] audit: audit_backlog=65 > audit_backlog_limit=64 [ 438.537581][T32106] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 438.545454][T32106] audit: backlog limit exceeded [ 438.550398][ T29] audit: type=1326 audit(1745977313.577:27461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42620d2d0 code=0x7ffc0000 [ 438.574192][ T29] audit: type=1326 audit(1745977313.577:27462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc42620d6b7 code=0x7ffc0000 [ 438.597808][ T29] audit: type=1326 audit(1745977313.577:27463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42620d2d0 code=0x7ffc0000 [ 438.621571][ T29] audit: type=1326 audit(1745977313.577:27464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42620e969 code=0x7ffc0000 [ 438.645307][ T29] audit: type=1326 audit(1745977313.577:27465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42620e969 code=0x7ffc0000 [ 438.669094][ T29] audit: type=1326 audit(1745977313.577:27466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32097 comm="syz.4.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc42620e969 code=0x7ffc0000 [ 438.696584][T32110] loop7: detected capacity change from 0 to 512 [ 438.727313][T32110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.798181][T32110] ext4 filesystem being mounted at /473/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.835754][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.860052][T32108] bridge0: entered promiscuous mode [ 438.870424][T32108] bridge0: left promiscuous mode [ 438.893501][T32125] loop9: detected capacity change from 0 to 5 [ 438.899885][T32125] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.935848][T32125] Buffer I/O error on dev loop9, logical block 0, async page read [ 438.943861][T32125] loop9: unable to read partition table [ 438.971328][T32127] loop6: detected capacity change from 0 to 8192 [ 438.978881][T32125] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 438.978881][T32125] U) failed (rc=-5) [ 438.994482][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.040607][T32131] loop7: detected capacity change from 0 to 512 [ 439.059188][T32131] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.068412][T32131] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 439.092579][T32136] dummy0 speed is unknown, defaulting to 1000 [ 439.109767][T32131] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 439.130533][T32131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 439.147114][T32131] System zones: 0-2, 18-18, 34-34 [ 439.160116][T32131] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 439.195306][T32131] EXT4-fs (loop7): 1 truncate cleaned up [ 439.205698][T32131] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.369135][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.443833][T32155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10946'. [ 439.469189][T32158] loop7: detected capacity change from 0 to 512 [ 439.486361][T32155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10946'. [ 439.512449][T32162] loop0: detected capacity change from 0 to 164 [ 439.532444][T32163] loop4: detected capacity change from 0 to 1024 [ 439.542776][T32158] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.571925][T32158] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.576982][T32163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 439.606855][T32158] bridge0: entered promiscuous mode [ 439.634619][T32158] bridge0: left promiscuous mode [ 439.661172][T32163] xt_hashlimit: max too large, truncated to 1048576 [ 439.677524][T32143] loop2: detected capacity change from 0 to 1024 [ 439.692572][T32143] EXT4-fs: dax option not supported [ 439.789389][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.840708][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 439.973863][T32187] loop4: detected capacity change from 0 to 512 [ 439.978598][T32174] dummy0 speed is unknown, defaulting to 1000 [ 439.993500][T32187] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.002611][T32187] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 440.035338][T32187] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 440.069241][T32187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 440.102284][T32187] System zones: 0-2, 18-18, 34-34 [ 440.106653][T32174] chnl_net:caif_netlink_parms(): no params data found [ 440.114555][T32194] loop2: detected capacity change from 0 to 512 [ 440.120994][T32187] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 440.146927][T32201] loop9: detected capacity change from 0 to 5 [ 440.147164][T32187] EXT4-fs (loop4): 1 truncate cleaned up [ 440.153330][T32201] loop9: unable to read partition table [ 440.164675][T32201] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 440.164675][T32201] U) failed (rc=-5) [ 440.170553][T32187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.201017][T32194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.214392][T32174] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.221725][T32174] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.229040][T32194] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.233437][T32174] bridge_slave_0: entered allmulticast mode [ 440.246081][T32174] bridge_slave_0: entered promiscuous mode [ 440.253192][T32174] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.260273][T32174] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.267537][T32174] bridge_slave_1: entered allmulticast mode [ 440.274316][T32174] bridge_slave_1: entered promiscuous mode [ 440.298256][T32174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.309729][T32174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.335721][T32194] bridge0: entered promiscuous mode [ 440.343403][T32194] bridge0: left promiscuous mode [ 440.350248][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.363163][T32215] loop7: detected capacity change from 0 to 2048 [ 440.377746][T32174] team0: Port device team_slave_0 added [ 440.384544][T32215] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.398815][T32174] team0: Port device team_slave_1 added [ 440.407390][T32215] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.432216][T32174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.439216][T32174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.440638][T32216] loop6: detected capacity change from 0 to 8192 [ 440.465151][T32174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.503470][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.513701][T32174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.520652][T32174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.542074][T32224] 9pnet_fd: Insufficient options for proto=fd [ 440.546703][T32174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.597176][T32174] hsr_slave_0: entered promiscuous mode [ 440.605313][T32174] hsr_slave_1: entered promiscuous mode [ 440.611375][T32174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.619454][T32174] Cannot create hsr debugfs directory [ 440.702866][T32234] loop9: detected capacity change from 0 to 5 [ 440.718752][T32234] loop9: unable to read partition table [ 440.728875][T32174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.737132][T32234] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 440.737132][T32234] U) failed (rc=-5) [ 440.799725][T32240] 9pnet_fd: Insufficient options for proto=fd [ 440.809721][T32174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.827680][T32242] loop2: detected capacity change from 0 to 512 [ 440.835972][T32242] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 440.845148][T32242] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 440.854340][T32242] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 440.863602][T32242] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 440.873608][T32242] System zones: 0-2, 18-18, 34-34 [ 440.880243][T32242] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 440.897087][T32174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.897666][T32242] EXT4-fs (loop2): 1 truncate cleaned up [ 440.921122][T32242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.967598][T32174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.014335][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.063314][T32174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 441.078511][T32174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 441.098248][T32174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 441.101542][T32251] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10978'. [ 441.118145][T32174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 441.130464][T32251] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.150025][T32250] loop2: detected capacity change from 0 to 164 [ 441.155031][T32251] bridge_slave_1 (unregistering): left allmulticast mode [ 441.160972][T32252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=32252 comm=syz.4.10978 [ 441.163346][T32251] bridge_slave_1 (unregistering): left promiscuous mode [ 441.183310][T32251] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.256657][T32174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.264275][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.273017][T32174] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.294596][T29043] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.301691][T29043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.315118][T29043] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.322216][T29043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.385480][T32260] loop6: detected capacity change from 0 to 164 [ 441.410622][T32252] loop4: detected capacity change from 0 to 128 [ 441.433057][T32251] dummy0 speed is unknown, defaulting to 1000 [ 441.441988][T32252] vfat: Unknown parameter 'vfat' [ 441.444753][T32267] 9pnet: p9_errstr2errno: server reported unknown error @ [ 441.464569][T32272] 9pnet_fd: Insufficient options for proto=fd [ 441.472065][T32174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.526479][T32276] loop6: detected capacity change from 0 to 512 [ 441.548820][T32276] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 441.558259][T32276] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 441.585046][T32174] veth0_vlan: entered promiscuous mode [ 441.599709][T32174] veth1_vlan: entered promiscuous mode [ 441.612592][T32276] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 441.622440][T32174] veth0_macvtap: entered promiscuous mode [ 441.631793][T32174] veth1_macvtap: entered promiscuous mode [ 441.643482][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.654072][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.664025][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.674524][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.684503][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.685538][T32276] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 441.695048][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.713021][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.723499][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.733439][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.741933][T32276] System zones: [ 441.743886][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.747450][T32276] 0-2, 18-18, 34-34 [ 441.758893][T32174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.769497][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.780029][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.790038][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.800575][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.810470][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.820964][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.830817][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.841258][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.851211][T32174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.861818][T32174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.873030][T32174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.881216][T32276] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 441.904204][T32276] EXT4-fs (loop6): 1 truncate cleaned up [ 441.910875][T32276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.917735][T32292] loop2: detected capacity change from 0 to 2048 [ 441.931542][T32284] bond1: entered promiscuous mode [ 441.941044][T32284] bond1: entered allmulticast mode [ 441.948740][T32284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.959491][T32284] bond1 (unregistering): Released all slaves [ 441.996521][T32174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.005380][T32174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.014231][T32174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.023003][T32174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.046312][T32292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.060277][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.089733][T32292] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.116197][T32295] dummy0 speed is unknown, defaulting to 1000 [ 442.195288][T32306] 9pnet_fd: Insufficient options for proto=fd [ 442.201835][T32304] validate_nla: 3 callbacks suppressed [ 442.201851][T32304] netlink: 'GPL': attribute type 10 has an invalid length. [ 442.244225][T32304] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.251462][T32309] netlink: 'syz.0.10952': attribute type 10 has an invalid length. [ 442.276338][T32304] bond0: (slave team0): Enslaving as an active interface with an up link [ 442.278585][T32311] 9pnet_fd: Insufficient options for proto=fd [ 442.295190][T32309] bond0: (slave team0): Releasing backup interface [ 442.323889][T32309] bridge0: port 3(team0) entered blocking state [ 442.330221][T32309] bridge0: port 3(team0) entered disabled state [ 442.342338][T32309] team0: entered allmulticast mode [ 442.347519][T32309] team_slave_0: entered allmulticast mode [ 442.353411][T32309] team_slave_1: entered allmulticast mode [ 442.360313][T32309] team0: entered promiscuous mode [ 442.365713][T32309] team_slave_0: entered promiscuous mode [ 442.371626][T32309] team_slave_1: entered promiscuous mode [ 442.403094][T32317] netlink: 'GPL': attribute type 10 has an invalid length. [ 442.410755][T32317] team0: left allmulticast mode [ 442.415763][T32317] team_slave_0: left allmulticast mode [ 442.421259][T32317] team_slave_1: left allmulticast mode [ 442.421276][T32317] team0: left promiscuous mode [ 442.421293][T32317] team_slave_0: left promiscuous mode [ 442.421416][T32317] team_slave_1: left promiscuous mode [ 442.421686][T32317] bridge0: port 3(team0) entered disabled state [ 442.434096][T32289] loop4: detected capacity change from 0 to 1024 [ 442.441129][T32319] FAULT_INJECTION: forcing a failure. [ 442.441129][T32319] name failslab, interval 1, probability 0, space 0, times 0 [ 442.441241][T32319] CPU: 0 UID: 0 PID: 32319 Comm: syz.7.11000 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 442.441283][T32319] Tainted: [W]=WARN [ 442.441292][T32319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 442.441309][T32319] Call Trace: [ 442.441317][T32319] [ 442.441333][T32319] __dump_stack+0x1d/0x30 [ 442.441412][T32319] dump_stack_lvl+0xe8/0x140 [ 442.441432][T32319] dump_stack+0x15/0x1b [ 442.441518][T32319] should_fail_ex+0x265/0x280 [ 442.441555][T32319] should_failslab+0x8c/0xb0 [ 442.441585][T32319] kmem_cache_alloc_noprof+0x50/0x310 [ 442.441626][T32319] ? skb_clone+0x151/0x1f0 [ 442.441652][T32319] skb_clone+0x151/0x1f0 [ 442.441676][T32319] nfnetlink_rcv+0x305/0x1690 [ 442.441706][T32319] ? __kfree_skb+0x109/0x150 [ 442.441759][T32319] ? nlmon_xmit+0x4f/0x60 [ 442.441863][T32319] ? nlmon_xmit+0x4f/0x60 [ 442.441882][T32319] ? dev_hard_start_xmit+0x39e/0x3d0 [ 442.441931][T32319] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 442.442005][T32319] ? __dev_queue_xmit+0x182/0x1fb0 [ 442.442049][T32319] ? ref_tracker_free+0x37d/0x3e0 [ 442.442094][T32319] netlink_unicast+0x59e/0x670 [ 442.442125][T32319] netlink_sendmsg+0x58b/0x6b0 [ 442.442199][T32319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.442231][T32319] __sock_sendmsg+0x142/0x180 [ 442.442293][T32319] ____sys_sendmsg+0x31e/0x4e0 [ 442.442337][T32319] ___sys_sendmsg+0x17b/0x1d0 [ 442.442380][T32319] __x64_sys_sendmsg+0xd4/0x160 [ 442.442405][T32319] x64_sys_call+0x2999/0x2fb0 [ 442.442460][T32319] do_syscall_64+0xd0/0x1a0 [ 442.442482][T32319] ? clear_bhb_loop+0x25/0x80 [ 442.442599][T32319] ? clear_bhb_loop+0x25/0x80 [ 442.442620][T32319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.442670][T32319] RIP: 0033:0x7fbe5e42e969 [ 442.442684][T32319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.442703][T32319] RSP: 002b:00007fbe5ca97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.442727][T32319] RAX: ffffffffffffffda RBX: 00007fbe5e655fa0 RCX: 00007fbe5e42e969 [ 442.442740][T32319] RDX: 00000000200000d4 RSI: 0000200000000080 RDI: 0000000000000003 [ 442.442752][T32319] RBP: 00007fbe5ca97090 R08: 0000000000000000 R09: 0000000000000000 [ 442.442771][T32319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.442826][T32319] R13: 0000000000000000 R14: 00007fbe5e655fa0 R15: 00007fff2b51ad78 [ 442.442846][T32319] [ 442.451090][T32289] EXT4-fs: dax option not supported [ 442.453957][T32317] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.454911][T32317] team0: entered allmulticast mode [ 442.454931][T32317] team_slave_0: entered allmulticast mode [ 442.454958][T32317] team_slave_1: entered allmulticast mode [ 442.455549][T32317] bond0: (slave team0): Enslaving as an active interface with an up link [ 442.462506][T32317] netlink: 'GPL': attribute type 10 has an invalid length. [ 442.483476][T32317] bond0: (slave team0): Releasing backup interface [ 442.484509][T32317] team0: left allmulticast mode [ 442.484550][T32317] team_slave_0: left allmulticast mode [ 442.484568][T32317] team_slave_1: left allmulticast mode [ 442.486156][T32317] bridge0: port 3(team0) entered blocking state [ 442.486183][T32317] bridge0: port 3(team0) entered disabled state [ 442.486419][T32317] team0: entered allmulticast mode [ 442.486437][T32317] team_slave_0: entered allmulticast mode [ 442.486454][T32317] team_slave_1: entered allmulticast mode [ 442.487119][T32317] team0: entered promiscuous mode [ 442.487137][T32317] team_slave_0: entered promiscuous mode [ 442.487205][T32317] team_slave_1: entered promiscuous mode [ 442.547947][T32327] loop6: detected capacity change from 0 to 1024 [ 442.580965][T32327] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 442.581052][T32327] System zones: 0-1, 3-12 [ 442.581720][T32327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.584804][T32323] loop7: detected capacity change from 0 to 8192 [ 442.680081][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.909154][T32338] loop0: detected capacity change from 0 to 8192 [ 443.031954][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.089959][T32347] 9pnet: p9_errstr2errno: server reported unknown error @ [ 443.129358][T32349] 9pnet_fd: Insufficient options for proto=fd [ 443.190194][T32355] netlink: 'syz.4.11013': attribute type 21 has an invalid length. [ 443.237908][T32358] loop6: detected capacity change from 0 to 512 [ 443.276522][T32358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.311048][T32358] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.343733][T32358] bridge0: entered promiscuous mode [ 443.372642][T32358] bridge0: left promiscuous mode [ 443.414275][T32369] loop2: detected capacity change from 0 to 1024 [ 443.423894][T32372] FAULT_INJECTION: forcing a failure. [ 443.423894][T32372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.437016][T32372] CPU: 0 UID: 0 PID: 32372 Comm: syz.4.11019 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 443.437093][T32372] Tainted: [W]=WARN [ 443.437101][T32372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 443.437116][T32372] Call Trace: [ 443.437142][T32372] [ 443.437151][T32372] __dump_stack+0x1d/0x30 [ 443.437183][T32372] dump_stack_lvl+0xe8/0x140 [ 443.437206][T32372] dump_stack+0x15/0x1b [ 443.437224][T32372] should_fail_ex+0x265/0x280 [ 443.437260][T32372] should_fail+0xb/0x20 [ 443.437340][T32372] should_fail_usercopy+0x1a/0x20 [ 443.437361][T32372] _copy_from_user+0x1c/0xb0 [ 443.437385][T32372] tls_setsockopt+0x3ec/0xce0 [ 443.437492][T32372] sock_common_setsockopt+0x66/0x80 [ 443.437523][T32372] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 443.437554][T32372] __sys_setsockopt+0x181/0x200 [ 443.437654][T32372] __x64_sys_setsockopt+0x64/0x80 [ 443.437691][T32372] x64_sys_call+0x2bd5/0x2fb0 [ 443.437716][T32372] do_syscall_64+0xd0/0x1a0 [ 443.437816][T32372] ? clear_bhb_loop+0x25/0x80 [ 443.437840][T32372] ? clear_bhb_loop+0x25/0x80 [ 443.437864][T32372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.437920][T32372] RIP: 0033:0x7fc42620e969 [ 443.437939][T32372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.437960][T32372] RSP: 002b:00007fc424877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 443.437981][T32372] RAX: ffffffffffffffda RBX: 00007fc426435fa0 RCX: 00007fc42620e969 [ 443.437996][T32372] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 443.438046][T32372] RBP: 00007fc424877090 R08: 0000000000000028 R09: 0000000000000000 [ 443.438060][T32372] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 443.438074][T32372] R13: 0000000000000000 R14: 00007fc426435fa0 R15: 00007fffd30ca518 [ 443.438098][T32372] [ 443.663802][ T29] kauditd_printk_skb: 748 callbacks suppressed [ 443.663818][ T29] audit: type=1400 audit(1745977318.737:28215): avc: denied { unmount } for pid=25428 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 443.690255][ T29] audit: type=1326 audit(1745977318.747:28216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32357 comm="syz.6.11014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20321e969 code=0x7ffc0000 [ 443.714019][ T29] audit: type=1326 audit(1745977318.747:28217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32357 comm="syz.6.11014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20321e969 code=0x7ffc0000 [ 443.762675][T32369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 443.765662][ T29] audit: type=1400 audit(1745977318.807:28218): avc: denied { allowed } for pid=32374 comm="syz.4.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 443.794425][ T29] audit: type=1400 audit(1745977318.827:28219): avc: denied { create } for pid=32374 comm="syz.4.11021" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.815989][ T29] audit: type=1400 audit(1745977318.827:28220): avc: denied { map } for pid=32374 comm="syz.4.11021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.840662][ T29] audit: type=1400 audit(1745977318.827:28221): avc: denied { read write } for pid=32374 comm="syz.4.11021" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102170 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 443.866271][ T29] audit: type=1400 audit(1745977318.837:28222): avc: denied { create } for pid=32374 comm="syz.4.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 443.887232][ T29] audit: type=1400 audit(1745977318.837:28223): avc: denied { create } for pid=32374 comm="syz.4.11021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 443.912825][ T29] audit: type=1400 audit(1745977318.927:28224): avc: denied { unmount } for pid=31448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 443.922481][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.943583][T32378] 9pnet_fd: Insufficient options for proto=fd [ 443.972841][T32380] FAULT_INJECTION: forcing a failure. [ 443.972841][T32380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.985953][T32380] CPU: 0 UID: 0 PID: 32380 Comm: syz.7.11020 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 443.985988][T32380] Tainted: [W]=WARN [ 443.985995][T32380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 443.986007][T32380] Call Trace: [ 443.986018][T32380] [ 443.986028][T32380] __dump_stack+0x1d/0x30 [ 443.986054][T32380] dump_stack_lvl+0xe8/0x140 [ 443.986077][T32380] dump_stack+0x15/0x1b [ 443.986097][T32380] should_fail_ex+0x265/0x280 [ 443.986142][T32380] should_fail+0xb/0x20 [ 443.986300][T32380] should_fail_usercopy+0x1a/0x20 [ 443.986380][T32380] _copy_from_iter+0xcf/0xdd0 [ 443.986402][T32380] ? __build_skb_around+0x1a0/0x200 [ 443.986442][T32380] ? __alloc_skb+0x223/0x320 [ 443.986482][T32380] netlink_sendmsg+0x471/0x6b0 [ 443.986564][T32380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.986604][T32380] __sock_sendmsg+0x142/0x180 [ 443.986629][T32380] ____sys_sendmsg+0x31e/0x4e0 [ 443.986721][T32380] ___sys_sendmsg+0x17b/0x1d0 [ 443.986754][T32380] __x64_sys_sendmsg+0xd4/0x160 [ 443.986784][T32380] x64_sys_call+0x2999/0x2fb0 [ 443.986806][T32380] do_syscall_64+0xd0/0x1a0 [ 443.986826][T32380] ? clear_bhb_loop+0x25/0x80 [ 443.986934][T32380] ? clear_bhb_loop+0x25/0x80 [ 443.986955][T32380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.986975][T32380] RIP: 0033:0x7fbe5e42e969 [ 443.986991][T32380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.987076][T32380] RSP: 002b:00007fbe5ca97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.987099][T32380] RAX: ffffffffffffffda RBX: 00007fbe5e655fa0 RCX: 00007fbe5e42e969 [ 443.987116][T32380] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 443.987135][T32380] RBP: 00007fbe5ca97090 R08: 0000000000000000 R09: 0000000000000000 [ 443.987225][T32380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.987335][T32380] R13: 0000000000000000 R14: 00007fbe5e655fa0 R15: 00007fff2b51ad78 [ 443.987357][T32380] [ 444.216153][T32384] __nla_validate_parse: 4 callbacks suppressed [ 444.216251][T32384] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11022'. [ 444.226473][T32369] xt_hashlimit: max too large, truncated to 1048576 [ 444.249881][T32384] ucma_write: process 15 (syz.0.11022) changed security contexts after opening file descriptor, this is not allowed. [ 444.261354][T32386] 9pnet: p9_errstr2errno: server reported unknown error @ [ 444.263216][T32384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11022'. [ 444.298183][T32390] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11027'. [ 444.313542][T32390] netlink: 'GPL': attribute type 10 has an invalid length. [ 444.321226][T32390] netlink: 'GPL': attribute type 10 has an invalid length. [ 444.331742][T32390] bond0: (slave team0): Releasing backup interface [ 444.353659][T32398] 9pnet_fd: Insufficient options for proto=fd [ 444.360457][T32390] team0: left allmulticast mode [ 444.365474][T32390] team_slave_0: left allmulticast mode [ 444.371004][T32390] team_slave_1: left allmulticast mode [ 444.390523][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 444.395509][T32390] bridge0: port 3(team0) entered blocking state [ 444.405993][T32390] bridge0: port 3(team0) entered disabled state [ 444.433240][T32390] team0: entered allmulticast mode [ 444.438477][T32390] team_slave_0: entered allmulticast mode [ 444.444262][T32390] team_slave_1: entered allmulticast mode [ 444.453835][T32390] team0: entered promiscuous mode [ 444.458901][T32390] team_slave_0: entered promiscuous mode [ 444.464800][T32390] team_slave_1: entered promiscuous mode [ 444.474016][T32400] loop6: detected capacity change from 0 to 8192 [ 444.480604][T32406] loop2: detected capacity change from 0 to 512 [ 444.488004][T32406] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.497334][T32406] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 444.513425][T32406] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 444.523670][T32406] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 444.531869][T32406] System zones: 0-2, 18-18, 34-34 [ 444.553634][T32406] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 444.580143][T32406] EXT4-fs (loop2): 1 truncate cleaned up [ 444.593301][T32411] loop7: detected capacity change from 0 to 512 [ 444.600078][T32406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.614574][T32413] loop0: detected capacity change from 0 to 2048 [ 444.621267][T32403] loop4: detected capacity change from 0 to 8192 [ 444.644914][T32413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.660448][T32411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.675114][T32413] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.686102][T32411] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.769731][T32411] bridge0: entered promiscuous mode [ 444.792961][T32411] bridge0: left promiscuous mode [ 444.814225][T32428] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 444.930998][T32436] 9pnet: p9_errstr2errno: server reported unknown error @ [ 444.962768][T32440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11045'. [ 444.982508][T32440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11045'. [ 445.027668][T32443] loop2: detected capacity change from 0 to 164 [ 445.029506][T32442] loop7: detected capacity change from 0 to 512 [ 445.074749][T32442] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.103415][T32442] bridge0: entered promiscuous mode [ 445.111898][T32451] loop0: detected capacity change from 0 to 512 [ 445.124276][T32442] bridge0: left promiscuous mode [ 445.139516][T32451] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 445.148859][T32451] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 445.162023][T32451] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 445.162742][T32453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11050'. [ 445.180968][T32451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 445.236466][T32451] System zones: 0-2, 18-18, 34-34 [ 445.240401][T32456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11050'. [ 445.250775][T32451] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 445.266282][T32451] EXT4-fs (loop0): 1 truncate cleaned up [ 445.332219][T32458] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11051'. [ 445.451826][T18424] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 445.469891][T32463] bond1: entered promiscuous mode [ 445.475056][T32463] bond1: entered allmulticast mode [ 445.508878][T32463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.524610][T32463] bond1 (unregistering): Released all slaves [ 445.547850][T32470] dummy0 speed is unknown, defaulting to 1000 [ 445.561892][T32474] 9pnet: p9_errstr2errno: server reported unknown error @ [ 445.639791][T32486] loop6: detected capacity change from 0 to 512 [ 445.645831][T32484] loop2: detected capacity change from 0 to 512 [ 445.672851][T32486] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 445.681226][T32486] EXT4-fs (loop6): orphan cleanup on readonly fs [ 445.692538][T32486] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.11060: Failed to acquire dquot type 1 [ 445.699757][T32484] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 445.709353][T32496] loop4: detected capacity change from 0 to 512 [ 445.728876][T32486] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11060: bg 0: block 40: padding at end of block bitmap is not set [ 445.753489][T32484] bridge0: entered promiscuous mode [ 445.760347][T32484] bridge0: left promiscuous mode [ 445.767175][T32496] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 445.776364][T32496] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 445.787964][T32486] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 445.788315][T32486] EXT4-fs (loop6): 1 truncate cleaned up [ 445.801666][T32500] loop7: detected capacity change from 0 to 512 [ 445.805006][T32500] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 445.815899][T32496] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 445.816038][T32496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 445.816074][T32496] System zones: 0-2, 18-18, 34-34 [ 445.817197][T32500] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.11062: corrupted xattr entries [ 445.817503][T32500] EXT4-fs (loop7): 1 truncate cleaned up [ 445.818271][T32496] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 445.818585][T32496] EXT4-fs (loop4): 1 truncate cleaned up [ 445.895445][T32511] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 3: comm syz.4.11064: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 445.921197][T32502] loop0: detected capacity change from 0 to 8192 [ 446.115868][T32527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11072'. [ 446.117849][T32528] FAULT_INJECTION: forcing a failure. [ 446.117849][T32528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.138207][T32528] CPU: 1 UID: 0 PID: 32528 Comm: syz.6.11073 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 446.138285][T32528] Tainted: [W]=WARN [ 446.138294][T32528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 446.138310][T32528] Call Trace: [ 446.138361][T32528] [ 446.138370][T32528] __dump_stack+0x1d/0x30 [ 446.138397][T32528] dump_stack_lvl+0xe8/0x140 [ 446.138423][T32528] dump_stack+0x15/0x1b [ 446.138444][T32528] should_fail_ex+0x265/0x280 [ 446.138487][T32528] should_fail+0xb/0x20 [ 446.138521][T32528] should_fail_usercopy+0x1a/0x20 [ 446.138545][T32528] _copy_from_iter+0xcf/0xdd0 [ 446.138649][T32528] ? __build_skb_around+0x1a0/0x200 [ 446.138696][T32528] ? __alloc_skb+0x223/0x320 [ 446.138770][T32528] netlink_sendmsg+0x471/0x6b0 [ 446.138843][T32528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.138884][T32528] __sock_sendmsg+0x142/0x180 [ 446.138960][T32528] ____sys_sendmsg+0x31e/0x4e0 [ 446.139014][T32528] ___sys_sendmsg+0x17b/0x1d0 [ 446.139053][T32528] __x64_sys_sendmsg+0xd4/0x160 [ 446.139156][T32528] x64_sys_call+0x2999/0x2fb0 [ 446.139184][T32528] do_syscall_64+0xd0/0x1a0 [ 446.139211][T32528] ? clear_bhb_loop+0x25/0x80 [ 446.139237][T32528] ? clear_bhb_loop+0x25/0x80 [ 446.139338][T32528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.139358][T32528] RIP: 0033:0x7fc20321e969 [ 446.139372][T32528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.139390][T32528] RSP: 002b:00007fc201887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.139409][T32528] RAX: ffffffffffffffda RBX: 00007fc203445fa0 RCX: 00007fc20321e969 [ 446.139424][T32528] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 446.139473][T32528] RBP: 00007fc201887090 R08: 0000000000000000 R09: 0000000000000000 [ 446.139486][T32528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.139500][T32528] R13: 0000000000000000 R14: 00007fc203445fa0 R15: 00007ffe3826ac68 [ 446.139555][T32528] [ 446.149769][T32527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11072'. [ 446.389838][T32536] netlink: 'GPL': attribute type 10 has an invalid length. [ 446.418885][T32536] team0: left allmulticast mode [ 446.423905][T32536] team_slave_0: left allmulticast mode [ 446.429529][T32536] team_slave_1: left allmulticast mode [ 446.435151][T32536] team0: left promiscuous mode [ 446.439931][T32536] team_slave_0: left promiscuous mode [ 446.441040][T32539] netlink: 'syz.7.11076': attribute type 10 has an invalid length. [ 446.445487][T32536] team_slave_1: left promiscuous mode [ 446.458862][T32536] bridge0: port 3(team0) entered disabled state [ 446.477244][T32536] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.485099][T32536] team0: entered allmulticast mode [ 446.490255][T32536] team_slave_0: entered allmulticast mode [ 446.496315][T32536] team_slave_1: entered allmulticast mode [ 446.499786][T32540] loop6: detected capacity change from 0 to 512 [ 446.505018][T32536] bond0: (slave team0): Enslaving as an active interface with an up link [ 446.518284][T32539] bond0: (slave team0): Releasing backup interface [ 446.528626][T32539] team0: left allmulticast mode [ 446.533692][T32539] team_slave_0: left allmulticast mode [ 446.534343][T32543] loop4: detected capacity change from 0 to 512 [ 446.539193][T32539] team_slave_1: left allmulticast mode [ 446.555230][T32540] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.569826][T32539] bridge0: port 3(team0) entered blocking state [ 446.576455][T32539] bridge0: port 3(team0) entered disabled state [ 446.585280][T32539] team0: entered allmulticast mode [ 446.590459][T32539] team_slave_0: entered allmulticast mode [ 446.596235][T32539] team_slave_1: entered allmulticast mode [ 446.603963][T32539] team0: entered promiscuous mode [ 446.609088][T32539] team_slave_0: entered promiscuous mode [ 446.614843][T32539] team_slave_1: entered promiscuous mode [ 446.621451][T32543] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.11079: Failed to acquire dquot type 1 [ 446.634757][T32543] EXT4-fs (loop4): 1 truncate cleaned up [ 446.641345][T32543] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.669361][T32540] bridge0: entered promiscuous mode [ 446.684083][T32540] bridge0: left promiscuous mode [ 446.714066][T32543] dummy0 speed is unknown, defaulting to 1000 [ 446.819032][T32568] loop6: detected capacity change from 0 to 512 [ 446.831674][T32568] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 446.840748][T32568] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 446.873540][T32568] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 446.891503][T32570] dummy0 speed is unknown, defaulting to 1000 [ 446.903709][T32568] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 446.920803][T32568] System zones: 0-2, 18-18, 34-34 [ 446.934577][T32568] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 446.987791][T32568] EXT4-fs (loop6): 1 truncate cleaned up [ 447.053365][T32592] loop7: detected capacity change from 0 to 512 [ 447.088852][T32592] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 447.110858][T32600] 9pnet: p9_errstr2errno: server reported unknown error @ [ 447.130842][T32592] bridge0: entered promiscuous mode [ 447.155896][T32592] bridge0: left promiscuous mode [ 447.219097][T32611] 9pnet: Could not find request transport: fd0x0000000000000004 [ 447.333946][T32626] loop9: detected capacity change from 0 to 5 [ 447.350542][T32626] buffer_io_error: 4 callbacks suppressed [ 447.350559][T32626] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.353996][T32628] loop7: detected capacity change from 0 to 512 [ 447.366378][T32626] Buffer I/O error on dev loop9, logical block 0, async page read [ 447.378530][T32626] loop9: unable to read partition table [ 447.388545][T32628] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.397778][T32628] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 447.401788][T32626] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 447.401788][T32626] U) failed (rc=-5) [ 447.436004][T32628] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 447.467374][T32628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 447.488728][T32628] System zones: 0-2, 18-18, 34-34 [ 447.488919][T32638] 9pnet: Could not find request transport: fd0x0000000000000004 [ 447.510878][T32628] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 447.537597][T32628] EXT4-fs (loop7): 1 truncate cleaned up [ 447.548501][T32643] loop2: detected capacity change from 0 to 512 [ 447.563568][T32643] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.11120: corrupted in-inode xattr: invalid ea_ino [ 447.588818][T32643] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11120: couldn't read orphan inode 15 (err -117) [ 447.622187][T32648] loop4: detected capacity change from 0 to 2048 [ 447.644676][T32648] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.670383][T32655] loop0: detected capacity change from 0 to 1024 [ 447.972104][T32678] loop7: detected capacity change from 0 to 164 [ 448.021577][T32682] loop4: detected capacity change from 0 to 512 [ 448.035437][T32682] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 448.044612][T32682] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 448.061873][T32682] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 448.074118][T32684] bond1: entered promiscuous mode [ 448.079200][T32684] bond1: entered allmulticast mode [ 448.081035][T32682] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 448.095819][T32684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.101658][T32682] System zones: 0-2, 18-18, 34-34 [ 448.112085][T32682] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 448.128989][T32684] bond1 (unregistering): Released all slaves [ 448.140195][T32682] EXT4-fs (loop4): 1 truncate cleaned up [ 448.162215][T32682] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 3: comm syz.4.11134: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 448.204537][T32694] netlink: 'GPL': attribute type 10 has an invalid length. [ 448.221225][T32694] team0: left allmulticast mode [ 448.226168][T32694] team_slave_0: left allmulticast mode [ 448.231654][T32694] team_slave_1: left allmulticast mode [ 448.237147][T32694] team0: left promiscuous mode [ 448.242010][T32694] team_slave_0: left promiscuous mode [ 448.247527][T32694] team_slave_1: left promiscuous mode [ 448.253287][T32694] bridge0: port 3(team0) entered disabled state [ 448.262891][T32699] netlink: 'syz.7.11137': attribute type 10 has an invalid length. [ 448.272157][T32696] loop0: detected capacity change from 0 to 2048 [ 448.294631][T32694] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.303111][T32694] team0: entered allmulticast mode [ 448.305562][T32696] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.308250][T32694] team_slave_0: entered allmulticast mode [ 448.324502][T32694] team_slave_1: entered allmulticast mode [ 448.335437][T32694] bond0: (slave team0): Enslaving as an active interface with an up link [ 448.354177][T32699] bond0: (slave team0): Releasing backup interface [ 448.370327][T32699] team0: left allmulticast mode [ 448.375398][T32699] team_slave_0: left allmulticast mode [ 448.380882][T32699] team_slave_1: left allmulticast mode [ 448.389484][T32699] bridge0: port 3(team0) entered blocking state [ 448.395973][T32699] bridge0: port 3(team0) entered disabled state [ 448.404283][T32699] team0: entered allmulticast mode [ 448.409544][T32699] team_slave_0: entered allmulticast mode [ 448.415468][T32699] team_slave_1: entered allmulticast mode [ 448.422349][T32699] team0: entered promiscuous mode [ 448.427419][T32699] team_slave_0: entered promiscuous mode [ 448.433290][T32699] team_slave_1: entered promiscuous mode [ 448.514205][T32721] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=3411 sclass=netlink_audit_socket pid=32721 comm=syz.7.11148 [ 448.532239][T32721] loop7: detected capacity change from 0 to 512 [ 448.572504][T32721] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.610675][T32732] loop0: detected capacity change from 0 to 2048 [ 448.633712][T32732] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.694652][T32742] netlink: 'GPL': attribute type 10 has an invalid length. [ 448.710139][T32742] team0: left allmulticast mode [ 448.715188][T32742] team_slave_0: left allmulticast mode [ 448.720226][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 448.720243][ T29] audit: type=1400 audit(1745977323.797:28798): avc: denied { open } for pid=32745 comm="syz.0.11159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 448.720701][T32742] team_slave_1: left allmulticast mode [ 448.726834][ T29] audit: type=1400 audit(1745977323.797:28799): avc: denied { kernel } for pid=32745 comm="syz.0.11159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 448.746351][T32742] team0: left promiscuous mode [ 448.746367][T32742] team_slave_0: left promiscuous mode [ 448.777302][T32747] netlink: 'syz.7.11158': attribute type 10 has an invalid length. [ 448.782389][T32742] team_slave_1: left promiscuous mode [ 448.795854][T32742] bridge0: port 3(team0) entered disabled state [ 448.796852][ T29] audit: type=1400 audit(1745977323.877:28800): avc: denied { create } for pid=32745 comm="syz.0.11159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 448.825228][ T29] audit: type=1400 audit(1745977323.887:28801): avc: denied { shutdown } for pid=32748 comm="syz.6.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.832798][T32742] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.845404][ T29] audit: type=1400 audit(1745977323.887:28802): avc: denied { setopt } for pid=32748 comm="syz.6.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.871646][ T29] audit: type=1400 audit(1745977323.887:28803): avc: denied { getopt } for pid=32748 comm="syz.6.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.892069][ T29] audit: type=1400 audit(1745977323.887:28804): avc: denied { connect } for pid=32748 comm="syz.6.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 448.902429][T32742] team0: entered allmulticast mode [ 448.911953][ T29] audit: type=1400 audit(1745977323.887:28805): avc: denied { name_connect } for pid=32748 comm="syz.6.11160" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 448.917046][T32742] team_slave_0: entered allmulticast mode [ 448.939438][ T29] audit: type=1400 audit(1745977323.907:28806): avc: denied { setopt } for pid=32745 comm="syz.0.11159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 448.945177][T32742] team_slave_1: entered allmulticast mode [ 448.964895][ T29] audit: type=1400 audit(1745977323.907:28807): avc: denied { write } for pid=32745 comm="syz.0.11159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 448.995548][T32742] bond0: (slave team0): Enslaving as an active interface with an up link [ 449.010218][T32747] bond0: (slave team0): Releasing backup interface [ 449.017922][T32747] team0: left allmulticast mode [ 449.022931][T32747] team_slave_0: left allmulticast mode [ 449.028419][T32747] team_slave_1: left allmulticast mode [ 449.035610][T32747] bridge0: port 3(team0) entered blocking state [ 449.041993][T32747] bridge0: port 3(team0) entered disabled state [ 449.044349][T32758] loop6: detected capacity change from 0 to 164 [ 449.048500][T32747] team0: entered allmulticast mode [ 449.059989][T32747] team_slave_0: entered allmulticast mode [ 449.065901][T32747] team_slave_1: entered allmulticast mode [ 449.072211][T32747] team0: entered promiscuous mode [ 449.077369][T32747] team_slave_0: entered promiscuous mode [ 449.083150][T32747] team_slave_1: entered promiscuous mode [ 449.176970][ T303] loop4: detected capacity change from 0 to 2048 [ 449.216282][ T303] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.241482][ T314] 9pnet_fd: Insufficient options for proto=fd [ 449.242427][ T306] loop0: detected capacity change from 0 to 8192 [ 449.260832][ T316] loop6: detected capacity change from 0 to 512 [ 449.281854][ T316] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.382620][ T316] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.11167: corrupted xattr entries [ 449.403114][ T316] EXT4-fs (loop6): 1 truncate cleaned up [ 449.405303][ T342] __nla_validate_parse: 11 callbacks suppressed [ 449.405322][ T342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11175'. [ 449.434835][ T342] netlink: 'GPL': attribute type 10 has an invalid length. [ 449.456278][ T342] team0: left allmulticast mode [ 449.461235][ T342] team_slave_0: left allmulticast mode [ 449.466837][ T342] team_slave_1: left allmulticast mode [ 449.472349][ T342] team0: left promiscuous mode [ 449.477150][ T342] team_slave_0: left promiscuous mode [ 449.482653][ T342] team_slave_1: left promiscuous mode [ 449.488319][ T342] bridge0: port 3(team0) entered disabled state [ 449.496152][ T345] netlink: 'syz.7.11175': attribute type 10 has an invalid length. [ 449.500288][ T342] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.524131][ T342] team0: entered allmulticast mode [ 449.529289][ T342] team_slave_0: entered allmulticast mode [ 449.535305][ T342] team_slave_1: entered allmulticast mode [ 449.543950][ T342] bond0: (slave team0): Enslaving as an active interface with an up link [ 449.556491][ T345] bond0: (slave team0): Releasing backup interface [ 449.572627][ T345] team0: left allmulticast mode [ 449.577543][ T345] team_slave_0: left allmulticast mode [ 449.583055][ T345] team_slave_1: left allmulticast mode [ 449.590598][ T345] bridge0: port 3(team0) entered blocking state [ 449.597009][ T345] bridge0: port 3(team0) entered disabled state [ 449.609374][ T345] team0: entered allmulticast mode [ 449.614973][ T345] team_slave_0: entered allmulticast mode [ 449.620870][ T345] team_slave_1: entered allmulticast mode [ 449.623333][ T354] 9pnet_fd: Insufficient options for proto=fd [ 449.629149][ T345] team0: entered promiscuous mode [ 449.637928][ T345] team_slave_0: entered promiscuous mode [ 449.643710][ T345] team_slave_1: entered promiscuous mode [ 449.662432][ T349] dummy0 speed is unknown, defaulting to 1000 [ 449.764177][ T361] 9pnet_fd: Insufficient options for proto=fd [ 449.774377][ T362] loop9: detected capacity change from 0 to 5 [ 449.780588][ T362] Buffer I/O error on dev loop9, logical block 0, async page read [ 449.788541][ T362] Buffer I/O error on dev loop9, logical block 0, async page read [ 449.796426][ T362] loop9: unable to read partition table [ 449.802248][ T362] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 449.802248][ T362] U) failed (rc=-5) [ 449.876618][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11187'. [ 449.887342][ T372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11187'. [ 449.900216][ T372] loop7: detected capacity change from 0 to 164 [ 449.980016][ T379] 9pnet_fd: Insufficient options for proto=fd [ 450.084683][ T392] 9pnet_fd: Insufficient options for proto=fd [ 450.119302][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11199'. [ 450.130885][ T394] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11199'. [ 450.155606][ T394] loop6: detected capacity change from 0 to 164 [ 450.232828][ T403] dummy0 speed is unknown, defaulting to 1000 [ 450.324070][ T420] loop9: detected capacity change from 0 to 5 [ 450.330393][ T420] Buffer I/O error on dev loop9, logical block 0, async page read [ 450.342856][ T418] 9pnet: p9_errstr2errno: server reported unknown error @ [ 450.343434][ T420] Buffer I/O error on dev loop9, logical block 0, async page read [ 450.358028][ T420] loop9: unable to read partition table [ 450.364687][ T420] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 450.364687][ T420] U) failed (rc=-5) [ 450.388401][ T422] bond1: entered promiscuous mode [ 450.393562][ T422] bond1: entered allmulticast mode [ 450.417215][ T422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.445981][ T424] blktrace: Concurrent blktraces are not allowed on sg0 [ 450.455342][ T422] bond1 (unregistering): Released all slaves [ 450.631148][ T448] 9pnet: p9_errstr2errno: server reported unknown error @ [ 450.655171][ T451] loop2: detected capacity change from 0 to 512 [ 450.666965][ T436] loop6: detected capacity change from 0 to 8192 [ 450.682991][ T451] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 450.692114][ T451] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 450.702340][ T455] dummy0 speed is unknown, defaulting to 1000 [ 450.720909][ T451] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 450.753212][ T451] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 450.789559][ T451] System zones: 0-2, 18-18, 34-34 [ 450.815486][ T451] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 450.831331][ T451] EXT4-fs (loop2): 1 truncate cleaned up [ 450.854957][ T468] loop4: detected capacity change from 0 to 512 [ 450.900540][ T451] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 3: comm syz.2.11222: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 450.924985][ T468] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.11230: corrupted in-inode xattr: invalid ea_ino [ 450.961035][ T468] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.11230: couldn't read orphan inode 15 (err -117) [ 451.019771][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11233'. [ 451.021538][ T479] bond1: entered promiscuous mode [ 451.033968][ T479] bond1: entered allmulticast mode [ 451.039479][ T479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.047650][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11233'. [ 451.060111][ T479] bond1 (unregistering): Released all slaves [ 451.067974][ T481] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.111139][ T477] loop2: detected capacity change from 0 to 164 [ 451.131149][ T488] bond1: entered promiscuous mode [ 451.136432][ T488] bond1: entered allmulticast mode [ 451.142121][ T488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.157286][ T488] bond1 (unregistering): Released all slaves [ 451.198931][ T491] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.255539][ T500] ref_ctr_offset mismatch. inode: 0x12c offset: 0x0 ref_ctr_offset(old): 0x230000 ref_ctr_offset(new): 0x0 [ 451.277866][ T500] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 451.286391][ T500] ref_ctr decrement failed for inode: 0x12c offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888177023700 [ 451.302984][ T500] uprobe: syz.0.11240:500 failed to unregister, leaking uprobe [ 451.405027][ T512] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11244'. [ 451.455848][ T516] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11246'. [ 451.553831][ T522] 9pnet: p9_errstr2errno: server reported unknown error @ [ 451.727583][ T536] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11256'. [ 451.805570][ T540] loop6: detected capacity change from 0 to 8192 [ 451.915787][ T553] loop0: detected capacity change from 0 to 1024 [ 451.943707][ T551] loop7: detected capacity change from 0 to 8192 [ 451.998269][ T553] xt_hashlimit: max too large, truncated to 1048576 [ 452.221572][ T560] loop0: detected capacity change from 0 to 164 [ 452.343023][ T569] FAULT_INJECTION: forcing a failure. [ 452.343023][ T569] name failslab, interval 1, probability 0, space 0, times 0 [ 452.355757][ T569] CPU: 0 UID: 0 PID: 569 Comm: syz.2.11270 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 452.355798][ T569] Tainted: [W]=WARN [ 452.355815][ T569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 452.355869][ T569] Call Trace: [ 452.355877][ T569] [ 452.355887][ T569] __dump_stack+0x1d/0x30 [ 452.355913][ T569] dump_stack_lvl+0xe8/0x140 [ 452.355938][ T569] dump_stack+0x15/0x1b [ 452.355982][ T569] should_fail_ex+0x265/0x280 [ 452.356012][ T569] should_failslab+0x8c/0xb0 [ 452.356040][ T569] kmem_cache_alloc_node_noprof+0x57/0x320 [ 452.356083][ T569] ? __alloc_skb+0x101/0x320 [ 452.356184][ T569] __alloc_skb+0x101/0x320 [ 452.356238][ T569] fdb_notify+0x6e/0x120 [ 452.356266][ T569] fdb_delete+0x686/0x820 [ 452.356365][ T569] fdb_delete_local+0x230/0x2f0 [ 452.356395][ T569] br_fdb_find_delete_local+0xd0/0xf0 [ 452.356424][ T569] br_vlan_delete+0xf3/0x160 [ 452.356463][ T569] br_vlan_info+0x150/0x230 [ 452.356563][ T569] br_process_vlan_info+0x222/0x510 [ 452.356617][ T569] br_vlan_rtm_process+0x77d/0x9c0 [ 452.356657][ T569] ? __pfx_br_vlan_rtm_process+0x10/0x10 [ 452.356689][ T569] rtnetlink_rcv_msg+0x657/0x6d0 [ 452.356719][ T569] netlink_rcv_skb+0x120/0x220 [ 452.356772][ T569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 452.356807][ T569] rtnetlink_rcv+0x1c/0x30 [ 452.356826][ T569] netlink_unicast+0x59e/0x670 [ 452.356854][ T569] netlink_sendmsg+0x58b/0x6b0 [ 452.356898][ T569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.356937][ T569] __sock_sendmsg+0x142/0x180 [ 452.356968][ T569] ____sys_sendmsg+0x31e/0x4e0 [ 452.357043][ T569] ___sys_sendmsg+0x17b/0x1d0 [ 452.357092][ T569] __x64_sys_sendmsg+0xd4/0x160 [ 452.357118][ T569] x64_sys_call+0x2999/0x2fb0 [ 452.357139][ T569] do_syscall_64+0xd0/0x1a0 [ 452.357165][ T569] ? clear_bhb_loop+0x25/0x80 [ 452.357210][ T569] ? clear_bhb_loop+0x25/0x80 [ 452.357319][ T569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.357421][ T569] RIP: 0033:0x7f144865e969 [ 452.357439][ T569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.357459][ T569] RSP: 002b:00007f1446cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.357487][ T569] RAX: ffffffffffffffda RBX: 00007f1448885fa0 RCX: 00007f144865e969 [ 452.357502][ T569] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 452.357514][ T569] RBP: 00007f1446cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.357525][ T569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.357537][ T569] R13: 0000000000000000 R14: 00007f1448885fa0 R15: 00007fff0a7d1a08 [ 452.357555][ T569] [ 452.740624][ T576] loop2: detected capacity change from 0 to 164 [ 452.815239][ T583] 9pnet: p9_errstr2errno: server reported unknown error @ [ 452.819098][ T585] bond1: entered promiscuous mode [ 452.827703][ T585] bond1: entered allmulticast mode [ 452.833138][ T585] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.843927][ T585] bond1 (unregistering): Released all slaves [ 452.990085][ T600] loop0: detected capacity change from 0 to 8192 [ 453.050859][ T606] loop7: detected capacity change from 0 to 8192 [ 453.085489][ T615] 9pnet: p9_errstr2errno: server reported unknown error @ [ 453.160405][ T622] loop6: detected capacity change from 0 to 512 [ 453.209114][ T622] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.250408][ T622] bridge0: entered promiscuous mode [ 453.277723][ T622] bridge0: left promiscuous mode [ 453.430562][ T642] loop2: detected capacity change from 0 to 164 [ 453.745665][ T29] kauditd_printk_skb: 774 callbacks suppressed [ 453.745679][ T29] audit: type=1400 audit(1745977328.827:29580): avc: denied { open } for pid=675 comm="syz.2.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.771711][ T29] audit: type=1400 audit(1745977328.827:29581): avc: denied { kernel } for pid=675 comm="syz.2.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.791452][ T29] audit: type=1400 audit(1745977328.827:29582): avc: denied { create } for pid=675 comm="syz.2.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.811075][ T29] audit: type=1400 audit(1745977328.827:29583): avc: denied { write } for pid=675 comm="syz.2.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.866755][ T29] audit: type=1400 audit(1745977328.947:29584): avc: denied { getopt } for pid=678 comm="syz.7.11317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 453.906306][ T29] audit: type=1400 audit(1745977328.987:29585): avc: denied { read } for pid=684 comm="syz.2.11322" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.941919][ T29] audit: type=1400 audit(1745977329.017:29586): avc: denied { open } for pid=684 comm="syz.2.11322" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 453.966021][ T29] audit: type=1400 audit(1745977329.017:29587): avc: denied { ioctl } for pid=684 comm="syz.2.11322" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 454.053999][ T698] loop0: detected capacity change from 0 to 1024 [ 454.070735][ T698] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 454.083342][ T29] audit: type=1326 audit(1745977329.167:29588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.2.11330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144865e969 code=0x7ffc0000 [ 454.097681][ T698] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 454.107693][ T29] audit: type=1326 audit(1745977329.167:29589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=701 comm="syz.2.11330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f144865e969 code=0x7ffc0000 [ 454.161167][ T698] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #32: comm syz.0.11320: iget: special inode unallocated [ 454.184775][ T704] loop7: detected capacity change from 0 to 8192 [ 454.192228][ T698] EXT4-fs (loop0): Remounting filesystem read-only [ 454.198793][ T698] EXT4-fs (loop0): no journal found [ 454.204042][ T698] EXT4-fs (loop0): can't get journal size [ 454.221046][ T698] EXT4-fs (loop0): failed to initialize system zone (-117) [ 454.238565][ T698] EXT4-fs (loop0): mount failed [ 454.267290][ T713] bond1: entered promiscuous mode [ 454.272544][ T713] bond1: entered allmulticast mode [ 454.278257][ T713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.288917][ T713] bond1 (unregistering): Released all slaves [ 454.313725][ T721] blktrace: Concurrent blktraces are not allowed on sg0 [ 454.460582][ T733] 9pnet: p9_errstr2errno: server reported unknown error @ [ 454.497329][ T738] __nla_validate_parse: 10 callbacks suppressed [ 454.497349][ T738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11345'. [ 454.520439][ T738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11345'. [ 454.542102][ T738] loop4: detected capacity change from 0 to 164 [ 454.617789][ T746] loop0: detected capacity change from 0 to 4096 [ 454.680527][ T750] bond1: entered promiscuous mode [ 454.685790][ T750] bond1: entered allmulticast mode [ 454.692822][ T750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.706733][ T750] bond1 (unregistering): Released all slaves [ 454.713750][ T756] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 454.726404][ T756] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 454.726539][ T758] blktrace: Concurrent blktraces are not allowed on sg0 [ 454.836137][ T772] 9pnet: p9_errstr2errno: server reported unknown error @ [ 454.910007][ T782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11364'. [ 454.929901][ T784] 9pnet_fd: Insufficient options for proto=fd [ 455.016400][ T791] loop4: detected capacity change from 0 to 1024 [ 455.052526][ T791] EXT4-fs mount: 53 callbacks suppressed [ 455.052541][ T791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 455.124232][ T805] loop0: detected capacity change from 0 to 512 [ 455.131518][ T805] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.136764][ T809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11375'. [ 455.140688][ T805] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 455.149713][ T809] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11375'. [ 455.161093][ T791] xt_hashlimit: max too large, truncated to 1048576 [ 455.176419][ T805] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 455.185576][ T805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 455.195724][ T805] System zones: 0-2, 18-18, 34-34 [ 455.200010][ T809] loop2: detected capacity change from 0 to 164 [ 455.207139][ T805] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 455.226677][ T805] EXT4-fs (loop0): 1 truncate cleaned up [ 455.232997][ T805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.233870][ T808] loop7: detected capacity change from 0 to 8192 [ 455.259091][ T805] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 3: comm syz.0.11374: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 455.293608][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.297119][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11377'. [ 455.311837][ T813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11377'. [ 455.325043][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 455.341151][ T813] loop2: detected capacity change from 0 to 164 [ 455.475715][ T827] loop4: detected capacity change from 0 to 512 [ 455.510475][ T827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.556976][ T827] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 455.570867][ T842] FAULT_INJECTION: forcing a failure. [ 455.570867][ T842] name failslab, interval 1, probability 0, space 0, times 0 [ 455.583614][ T842] CPU: 0 UID: 0 PID: 842 Comm: syz.0.11389 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 455.583648][ T842] Tainted: [W]=WARN [ 455.583656][ T842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 455.583691][ T842] Call Trace: [ 455.583700][ T842] [ 455.583711][ T842] __dump_stack+0x1d/0x30 [ 455.583735][ T842] dump_stack_lvl+0xe8/0x140 [ 455.583837][ T842] dump_stack+0x15/0x1b [ 455.583852][ T842] should_fail_ex+0x265/0x280 [ 455.583893][ T842] should_failslab+0x8c/0xb0 [ 455.583926][ T842] kmem_cache_alloc_noprof+0x50/0x310 [ 455.584043][ T842] ? security_file_alloc+0x32/0x100 [ 455.584074][ T842] security_file_alloc+0x32/0x100 [ 455.584102][ T842] init_file+0x5c/0x1d0 [ 455.584177][ T842] alloc_empty_file+0x8b/0x200 [ 455.584272][ T842] path_openat+0x68/0x2170 [ 455.584298][ T842] ? _parse_integer_limit+0x170/0x190 [ 455.584339][ T842] ? kstrtoull+0x111/0x140 [ 455.584413][ T842] ? kstrtouint+0x76/0xc0 [ 455.584449][ T842] do_filp_open+0x109/0x230 [ 455.584488][ T842] do_sys_openat2+0xa6/0x110 [ 455.584510][ T842] __x64_sys_openat+0xf2/0x120 [ 455.584556][ T842] x64_sys_call+0x1af/0x2fb0 [ 455.584581][ T842] do_syscall_64+0xd0/0x1a0 [ 455.584644][ T842] ? clear_bhb_loop+0x25/0x80 [ 455.584671][ T842] ? clear_bhb_loop+0x25/0x80 [ 455.584693][ T842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.584713][ T842] RIP: 0033:0x7f1829b8e969 [ 455.584796][ T842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.584816][ T842] RSP: 002b:00007f18281f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.584914][ T842] RAX: ffffffffffffffda RBX: 00007f1829db5fa0 RCX: 00007f1829b8e969 [ 455.584928][ T842] RDX: 0000000000000002 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 455.584943][ T842] RBP: 00007f18281f7090 R08: 0000000000000000 R09: 0000000000000000 [ 455.584957][ T842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.584968][ T842] R13: 0000000000000000 R14: 00007f1829db5fa0 R15: 00007fff670616e8 [ 455.584989][ T842] [ 455.838355][ T844] loop2: detected capacity change from 0 to 2048 [ 455.859416][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.876971][ T848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11391'. [ 455.886765][ T844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.910396][ T855] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11394'. [ 455.960009][ T859] 9pnet: p9_errstr2errno: server reported unknown error @ [ 455.978114][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.081434][ T868] FAULT_INJECTION: forcing a failure. [ 456.081434][ T868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.094738][ T868] CPU: 0 UID: 0 PID: 868 Comm: syz.4.11401 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 456.094771][ T868] Tainted: [W]=WARN [ 456.094778][ T868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 456.094863][ T868] Call Trace: [ 456.094870][ T868] [ 456.094879][ T868] __dump_stack+0x1d/0x30 [ 456.094903][ T868] dump_stack_lvl+0xe8/0x140 [ 456.095076][ T868] dump_stack+0x15/0x1b [ 456.095096][ T868] should_fail_ex+0x265/0x280 [ 456.095136][ T868] should_fail_alloc_page+0xf2/0x100 [ 456.095218][ T868] __alloc_frozen_pages_noprof+0xff/0x360 [ 456.095246][ T868] __alloc_pages_noprof+0x9/0x20 [ 456.095275][ T868] ___kmalloc_large_node+0x73/0x130 [ 456.095350][ T868] __kmalloc_large_node_noprof+0x16/0xa0 [ 456.095384][ T868] __kmalloc_noprof+0x2ab/0x3e0 [ 456.095402][ T868] ? iovec_from_user+0x84/0x210 [ 456.095454][ T868] iovec_from_user+0x84/0x210 [ 456.095473][ T868] ? process_vm_rw+0x137/0x950 [ 456.095512][ T868] process_vm_rw+0x15b/0x950 [ 456.095630][ T868] ? _parse_integer+0x27/0x40 [ 456.095663][ T868] ? kstrtoull+0x111/0x140 [ 456.095729][ T868] ? __fget_files+0x184/0x1c0 [ 456.095762][ T868] ? fput+0x8f/0xc0 [ 456.095839][ T868] __x64_sys_process_vm_readv+0x78/0x90 [ 456.095949][ T868] x64_sys_call+0x2978/0x2fb0 [ 456.095973][ T868] do_syscall_64+0xd0/0x1a0 [ 456.096015][ T868] ? clear_bhb_loop+0x25/0x80 [ 456.096083][ T868] ? clear_bhb_loop+0x25/0x80 [ 456.096125][ T868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.096145][ T868] RIP: 0033:0x7fc42620e969 [ 456.096160][ T868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.096178][ T868] RSP: 002b:00007fc424877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 456.096219][ T868] RAX: ffffffffffffffda RBX: 00007fc426435fa0 RCX: 00007fc42620e969 [ 456.096234][ T868] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000458 [ 456.096247][ T868] RBP: 00007fc424877090 R08: 0000000000000286 R09: 0000000000000000 [ 456.096263][ T868] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 456.096278][ T868] R13: 0000000000000000 R14: 00007fc426435fa0 R15: 00007fffd30ca518 [ 456.096302][ T868] [ 456.099915][ T872] 9pnet_fd: Insufficient options for proto=fd [ 456.168554][ T871] loop6: detected capacity change from 0 to 512 [ 456.341824][ T875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11399'. [ 456.359406][ T875] loop7: detected capacity change from 0 to 164 [ 456.379704][ T885] FAULT_INJECTION: forcing a failure. [ 456.379704][ T885] name failslab, interval 1, probability 0, space 0, times 0 [ 456.392535][ T885] CPU: 0 UID: 0 PID: 885 Comm: syz.4.11407 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 456.392614][ T885] Tainted: [W]=WARN [ 456.392622][ T885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 456.392638][ T885] Call Trace: [ 456.392654][ T885] [ 456.392662][ T885] __dump_stack+0x1d/0x30 [ 456.392703][ T885] dump_stack_lvl+0xe8/0x140 [ 456.392727][ T885] dump_stack+0x15/0x1b [ 456.392748][ T885] should_fail_ex+0x265/0x280 [ 456.392789][ T885] should_failslab+0x8c/0xb0 [ 456.392832][ T885] kmem_cache_alloc_noprof+0x50/0x310 [ 456.392901][ T885] ? getname_flags+0x80/0x3b0 [ 456.392999][ T885] getname_flags+0x80/0x3b0 [ 456.393091][ T885] user_path_at+0x28/0x130 [ 456.393117][ T885] __se_sys_inotify_add_watch+0x102/0x7a0 [ 456.393209][ T885] ? __bpf_trace_sys_enter+0x10/0x30 [ 456.393231][ T885] ? trace_sys_enter+0xd0/0x110 [ 456.393259][ T885] __x64_sys_inotify_add_watch+0x43/0x50 [ 456.393292][ T885] x64_sys_call+0x29a4/0x2fb0 [ 456.393319][ T885] do_syscall_64+0xd0/0x1a0 [ 456.393348][ T885] ? clear_bhb_loop+0x25/0x80 [ 456.393368][ T885] ? clear_bhb_loop+0x25/0x80 [ 456.393399][ T885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.393425][ T885] RIP: 0033:0x7fc42620e969 [ 456.393443][ T885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.393467][ T885] RSP: 002b:00007fc424877038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fe [ 456.393489][ T885] RAX: ffffffffffffffda RBX: 00007fc426435fa0 RCX: 00007fc42620e969 [ 456.393505][ T885] RDX: 00000000a0000061 RSI: 00002000000003c0 RDI: 0000000000000006 [ 456.393598][ T885] RBP: 00007fc424877090 R08: 0000000000000000 R09: 0000000000000000 [ 456.393612][ T885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.393626][ T885] R13: 0000000000000000 R14: 00007fc426435fa0 R15: 00007fffd30ca518 [ 456.393650][ T885] [ 456.604568][ T871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.609899][ T893] loop7: detected capacity change from 0 to 1024 [ 456.617580][ T871] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 456.653482][ T893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 456.656259][ T871] bridge0: entered promiscuous mode [ 456.681859][ T871] bridge0: left promiscuous mode [ 456.697705][ T899] 9pnet: p9_errstr2errno: server reported unknown error @ [ 456.709298][ T889] loop2: detected capacity change from 0 to 8192 [ 456.740063][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.785899][ T905] 9pnet_fd: Insufficient options for proto=fd [ 456.805631][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 456.847297][ T909] FAULT_INJECTION: forcing a failure. [ 456.847297][ T909] name failslab, interval 1, probability 0, space 0, times 0 [ 456.859989][ T909] CPU: 0 UID: 0 PID: 909 Comm: syz.6.11417 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 456.860049][ T909] Tainted: [W]=WARN [ 456.860057][ T909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 456.860073][ T909] Call Trace: [ 456.860080][ T909] [ 456.860090][ T909] __dump_stack+0x1d/0x30 [ 456.860116][ T909] dump_stack_lvl+0xe8/0x140 [ 456.860215][ T909] dump_stack+0x15/0x1b [ 456.860263][ T909] should_fail_ex+0x265/0x280 [ 456.860304][ T909] ? kernfs_get_tree+0x56/0x490 [ 456.860329][ T909] should_failslab+0x8c/0xb0 [ 456.860364][ T909] __kmalloc_cache_noprof+0x4c/0x320 [ 456.860447][ T909] kernfs_get_tree+0x56/0x490 [ 456.860471][ T909] ? selinux_capable+0x1f9/0x270 [ 456.860505][ T909] cgroup_do_get_tree+0x86/0x330 [ 456.860543][ T909] cgroup_get_tree+0xd7/0x280 [ 456.860572][ T909] vfs_get_tree+0x54/0x1d0 [ 456.860605][ T909] vfs_cmd_create+0x8a/0x140 [ 456.860651][ T909] vfs_fsconfig_locked+0x6f/0x210 [ 456.860737][ T909] __se_sys_fsconfig+0x648/0x770 [ 456.860855][ T909] __x64_sys_fsconfig+0x67/0x80 [ 456.860890][ T909] x64_sys_call+0x3b8/0x2fb0 [ 456.860997][ T909] do_syscall_64+0xd0/0x1a0 [ 456.861024][ T909] ? clear_bhb_loop+0x25/0x80 [ 456.861051][ T909] ? clear_bhb_loop+0x25/0x80 [ 456.861077][ T909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.861165][ T909] RIP: 0033:0x7fc20321e969 [ 456.861182][ T909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.861205][ T909] RSP: 002b:00007fc201887038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 456.861228][ T909] RAX: ffffffffffffffda RBX: 00007fc203445fa0 RCX: 00007fc20321e969 [ 456.861245][ T909] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 456.861261][ T909] RBP: 00007fc201887090 R08: 0000000000000000 R09: 0000000000000000 [ 456.861277][ T909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.861366][ T909] R13: 0000000000000000 R14: 00007fc203445fa0 R15: 00007ffe3826ac68 [ 456.861392][ T909] [ 457.109420][ T916] netlink: 'GPL': attribute type 10 has an invalid length. [ 457.135686][ T916] team0: left allmulticast mode [ 457.140589][ T916] team_slave_0: left allmulticast mode [ 457.141240][ T922] FAULT_INJECTION: forcing a failure. [ 457.141240][ T922] name failslab, interval 1, probability 0, space 0, times 0 [ 457.146102][ T916] team_slave_1: left allmulticast mode [ 457.158755][ T922] CPU: 0 UID: 0 PID: 922 Comm: syz.6.11421 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 457.158801][ T922] Tainted: [W]=WARN [ 457.158811][ T922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 457.158901][ T922] Call Trace: [ 457.158981][ T922] [ 457.158991][ T922] __dump_stack+0x1d/0x30 [ 457.159070][ T922] dump_stack_lvl+0xe8/0x140 [ 457.159096][ T922] dump_stack+0x15/0x1b [ 457.159118][ T922] should_fail_ex+0x265/0x280 [ 457.159159][ T922] should_failslab+0x8c/0xb0 [ 457.159198][ T922] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 457.159261][ T922] ? sidtab_sid2str_get+0xa0/0x130 [ 457.159361][ T922] ? skb_put+0xa9/0xf0 [ 457.159399][ T922] kmemdup_noprof+0x2b/0x70 [ 457.159424][ T922] sidtab_sid2str_get+0xa0/0x130 [ 457.159461][ T922] security_sid_to_context_core+0x1eb/0x2e0 [ 457.159531][ T922] security_sid_to_context+0x27/0x40 [ 457.159566][ T922] avc_audit_post_callback+0x9d/0x520 [ 457.159610][ T922] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 457.159701][ T922] common_lsm_audit+0x1b8/0x230 [ 457.159806][ T922] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 457.159853][ T922] slow_avc_audit+0x104/0x140 [ 457.159906][ T922] avc_has_perm+0x128/0x150 [ 457.160023][ T922] selinux_socket_setsockopt+0x17c/0x1e0 [ 457.160060][ T922] security_socket_setsockopt+0x46/0x80 [ 457.160091][ T922] __sys_setsockopt+0x98/0x200 [ 457.160190][ T922] __x64_sys_setsockopt+0x64/0x80 [ 457.160235][ T922] x64_sys_call+0x2bd5/0x2fb0 [ 457.160264][ T922] do_syscall_64+0xd0/0x1a0 [ 457.160295][ T922] ? clear_bhb_loop+0x25/0x80 [ 457.160441][ T922] ? clear_bhb_loop+0x25/0x80 [ 457.160470][ T922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.160498][ T922] RIP: 0033:0x7fc20321e969 [ 457.160517][ T922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.160541][ T922] RSP: 002b:00007fc201887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 457.160646][ T922] RAX: ffffffffffffffda RBX: 00007fc203445fa0 RCX: 00007fc20321e969 [ 457.160663][ T922] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 457.160679][ T922] RBP: 00007fc201887090 R08: 0000000000000f00 R09: 0000000000000000 [ 457.160758][ T922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.160774][ T922] R13: 0000000000000000 R14: 00007fc203445fa0 R15: 00007ffe3826ac68 [ 457.160798][ T922] [ 457.270583][ T923] netlink: 'syz.0.11419': attribute type 10 has an invalid length. [ 457.273979][ T916] team0: left promiscuous mode [ 457.273996][ T916] team_slave_0: left promiscuous mode [ 457.274111][ T916] team_slave_1: left promiscuous mode [ 457.320476][ T925] loop4: detected capacity change from 0 to 164 [ 457.325205][ T916] bridge0: port 3(team0) entered disabled state [ 457.449671][ T916] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.458511][ T916] bond0: (slave team0): Enslaving as an active interface with an up link [ 457.498546][ T923] bond0: (slave team0): Releasing backup interface [ 457.511223][ T933] 9pnet: p9_errstr2errno: server reported unknown error @ [ 457.526692][ T923] bridge0: port 3(team0) entered blocking state [ 457.533182][ T923] bridge0: port 3(team0) entered disabled state [ 457.541064][ T931] loop4: detected capacity change from 0 to 512 [ 457.548687][ T923] team0: entered allmulticast mode [ 457.553993][ T923] team_slave_0: entered allmulticast mode [ 457.559875][ T923] team_slave_1: entered allmulticast mode [ 457.566536][ T923] team0: entered promiscuous mode [ 457.571711][ T923] team_slave_0: entered promiscuous mode [ 457.577533][ T923] team_slave_1: entered promiscuous mode [ 457.609472][ T943] 9pnet_fd: Insufficient options for proto=fd [ 457.618233][ T937] loop7: detected capacity change from 0 to 1024 [ 457.627426][ T931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.641128][ T937] EXT4-fs: Ignoring removed nobh option [ 457.646868][ T937] EXT4-fs: Ignoring removed bh option [ 457.651532][ T931] ext4 filesystem being mounted at /503/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 457.703744][ T947] loop0: detected capacity change from 0 to 8192 [ 457.725355][ T954] loop6: detected capacity change from 0 to 256 [ 457.733793][ T954] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 457.789849][ T937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.805768][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.870452][ T960] dummy0 speed is unknown, defaulting to 1000 [ 457.881046][ T937] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.11427: Allocating blocks 385-513 which overlap fs metadata [ 457.913480][ T936] EXT4-fs (loop7): pa ffff8881005ac7e0: logic 16, phys. 129, len 24 [ 457.921548][ T936] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 457.965249][ T974] netlink: 'GPL': attribute type 10 has an invalid length. [ 457.974715][ T974] team0: left allmulticast mode [ 457.979699][ T974] team_slave_0: left allmulticast mode [ 457.985230][ T974] team_slave_1: left allmulticast mode [ 457.990713][ T974] team0: left promiscuous mode [ 457.995542][ T974] team_slave_0: left promiscuous mode [ 458.001082][ T974] team_slave_1: left promiscuous mode [ 458.006698][ T974] bridge0: port 3(team0) entered disabled state [ 458.014384][ T974] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.022149][ T976] netlink: 'syz.4.11439': attribute type 10 has an invalid length. [ 458.023984][ T974] team0: entered allmulticast mode [ 458.035257][ T974] team_slave_0: entered allmulticast mode [ 458.041003][ T974] team_slave_1: entered allmulticast mode [ 458.048573][ T974] bond0: (slave team0): Enslaving as an active interface with an up link [ 458.059668][ T976] bond0: (slave team0): Releasing backup interface [ 458.070458][ T976] team0: left allmulticast mode [ 458.075367][ T976] team_slave_0: left allmulticast mode [ 458.080881][ T976] team_slave_1: left allmulticast mode [ 458.090071][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.113176][ T976] bridge0: port 2(team0) entered blocking state [ 458.119556][ T976] bridge0: port 2(team0) entered disabled state [ 458.122723][ T978] loop7: detected capacity change from 0 to 512 [ 458.127765][ T976] team0: entered allmulticast mode [ 458.135949][ T978] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.137224][ T976] team_slave_0: entered allmulticast mode [ 458.146255][ T978] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 458.152025][ T976] team_slave_1: entered allmulticast mode [ 458.166793][ T976] team0: entered promiscuous mode [ 458.172012][ T976] team_slave_0: entered promiscuous mode [ 458.177953][ T976] team_slave_1: entered promiscuous mode [ 458.184398][ T978] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 458.205020][ T978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 458.213842][ T978] System zones: 0-2, 18-18, 34-34 [ 458.219300][ T978] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 458.236333][ T978] EXT4-fs (loop7): 1 truncate cleaned up [ 458.243200][ T978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.260741][ T978] EXT4-fs error (device loop7): ext4_find_dest_de:2054: inode #2: block 3: comm syz.7.11440: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 458.297334][ T983] 9pnet_fd: Insufficient options for proto=fd [ 458.313245][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.395692][ T995] loop4: detected capacity change from 0 to 512 [ 458.413816][ T995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.428389][ T995] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 458.466108][ T1003] netlink: 'GPL': attribute type 10 has an invalid length. [ 458.473559][ T1003] team0: left allmulticast mode [ 458.478457][ T1003] team_slave_0: left allmulticast mode [ 458.484064][ T1003] team_slave_1: left allmulticast mode [ 458.489543][ T1003] team0: left promiscuous mode [ 458.494355][ T1003] team_slave_0: left promiscuous mode [ 458.500075][ T1003] team_slave_1: left promiscuous mode [ 458.506068][ T1003] bridge0: port 3(team0) entered disabled state [ 458.519053][ T1005] netlink: 'syz.7.11451': attribute type 10 has an invalid length. [ 458.532019][ T1003] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.563909][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.568525][ T1003] team0: entered allmulticast mode [ 458.578478][ T1003] team_slave_0: entered allmulticast mode [ 458.584409][ T1003] team_slave_1: entered allmulticast mode [ 458.591340][ T1003] bond0: (slave team0): Enslaving as an active interface with an up link [ 458.601295][ T1007] loop2: detected capacity change from 0 to 512 [ 458.608022][ T1005] bond0: (slave team0): Releasing backup interface [ 458.616199][ T1007] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.625421][ T1007] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 458.634321][ T1005] team0: left allmulticast mode [ 458.639305][ T1005] team_slave_0: left allmulticast mode [ 458.644963][ T1005] team_slave_1: left allmulticast mode [ 458.658581][ T1005] bridge0: port 3(team0) entered blocking state [ 458.665042][ T1005] bridge0: port 3(team0) entered disabled state [ 458.673601][ T1007] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 458.673774][ T1005] team0: entered allmulticast mode [ 458.687702][ T1005] team_slave_0: entered allmulticast mode [ 458.687751][ T1005] team_slave_1: entered allmulticast mode [ 458.701410][ T1005] team0: entered promiscuous mode [ 458.706638][ T1005] team_slave_0: entered promiscuous mode [ 458.712391][ T1005] team_slave_1: entered promiscuous mode [ 458.745396][ T1013] blktrace: Concurrent blktraces are not allowed on sg0 [ 458.752456][ T29] kauditd_printk_skb: 690 callbacks suppressed [ 458.752472][ T29] audit: type=1400 audit(1745977333.827:30280): avc: denied { ioctl } for pid=1008 comm="syz.4.11453" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 458.792726][ T1007] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 458.805842][ T1009] bond1: entered promiscuous mode [ 458.811077][ T1009] bond1: entered allmulticast mode [ 458.826799][ T1009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.833525][ T1007] System zones: 0-2, 18-18, 34-34 [ 458.839149][ T1007] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 458.840263][ T1019] 9pnet_fd: Insufficient options for proto=fd [ 458.860342][ T1007] EXT4-fs (loop2): 1 truncate cleaned up [ 458.868390][ T1007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.869379][ T1009] bond1 (unregistering): Released all slaves [ 458.894368][ T1007] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 3: comm syz.2.11454: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 458.943077][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.962188][ T29] audit: type=1326 audit(1745977334.047:30281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 458.990017][ T1028] loop0: detected capacity change from 0 to 512 [ 458.996784][ T29] audit: type=1326 audit(1745977334.047:30282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.020562][ T29] audit: type=1326 audit(1745977334.047:30283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044204][ T29] audit: type=1326 audit(1745977334.047:30284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044265][ T29] audit: type=1326 audit(1745977334.047:30285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044367][ T29] audit: type=1326 audit(1745977334.077:30286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044410][ T29] audit: type=1326 audit(1745977334.077:30287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044444][ T29] audit: type=1326 audit(1745977334.077:30288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.044535][ T29] audit: type=1326 audit(1745977334.077:30289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1024 comm="syz.7.11459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe5e42e969 code=0x7ffc0000 [ 459.071802][ T1028] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.071867][ T1028] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 459.072453][ T1028] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 459.072663][ T1028] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 459.072696][ T1028] System zones: 0-2, 18-18, 34-34 [ 459.073136][ T1028] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 459.073445][ T1028] EXT4-fs (loop0): 1 truncate cleaned up [ 459.073939][ T1028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.079061][ T1028] EXT4-fs error (device loop0): ext4_find_dest_de:2054: inode #2: block 3: comm syz.0.11461: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 459.213538][ T1036] loop7: detected capacity change from 0 to 512 [ 459.327178][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.343165][ T1036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.366831][ T1036] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 459.388857][ T1036] bridge0: entered promiscuous mode [ 459.396038][ T1036] bridge0: left promiscuous mode [ 459.424101][ T1050] netlink: 'GPL': attribute type 10 has an invalid length. [ 459.434135][ T1050] team0: left allmulticast mode [ 459.439294][ T1050] team_slave_0: left allmulticast mode [ 459.444821][ T1050] team_slave_1: left allmulticast mode [ 459.450387][ T1050] team0: left promiscuous mode [ 459.455392][ T1050] team_slave_0: left promiscuous mode [ 459.461031][ T1050] team_slave_1: left promiscuous mode [ 459.462681][ T1055] loop6: detected capacity change from 0 to 512 [ 459.466657][ T1050] bridge0: port 3(team0) entered disabled state [ 459.481979][ T1055] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.491065][ T1055] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 459.503101][ T1057] netlink: 'syz.0.11465': attribute type 10 has an invalid length. [ 459.512547][ T1050] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.514163][T25428] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.519263][ T1055] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 459.530011][ T1050] bond0: (slave team0): Enslaving as an active interface with an up link [ 459.552823][ T1057] bond0: (slave team0): Releasing backup interface [ 459.563709][ T1055] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 459.572145][ T1055] System zones: 0-2, 18-18, 34-34 [ 459.578245][ T1055] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 459.596564][ T1057] bridge0: port 3(team0) entered blocking state [ 459.602974][ T1057] bridge0: port 3(team0) entered disabled state [ 459.610020][ T1057] team0: entered allmulticast mode [ 459.611534][ T1055] EXT4-fs (loop6): 1 truncate cleaned up [ 459.615198][ T1057] team_slave_0: entered allmulticast mode [ 459.626762][ T1057] team_slave_1: entered allmulticast mode [ 459.634274][ T1057] team0: entered promiscuous mode [ 459.639352][ T1057] team_slave_0: entered promiscuous mode [ 459.645178][ T1057] team_slave_1: entered promiscuous mode [ 459.652206][ T1055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.669997][ T1055] EXT4-fs error (device loop6): ext4_find_dest_de:2054: inode #2: block 3: comm syz.6.11471: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 459.719340][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.724715][ T1074] loop4: detected capacity change from 0 to 512 [ 459.747299][ T1074] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 459.756534][ T1074] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 459.779818][ T1074] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 459.791307][ T1074] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 459.799646][ T1074] System zones: 0-2, 18-18, 34-34 [ 459.806369][ T1074] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 459.841082][ T1074] EXT4-fs (loop4): 1 truncate cleaned up [ 459.864171][ T1074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.895710][ T1074] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 3: comm syz.4.11477: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 459.942910][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.982463][ T1098] loop6: detected capacity change from 0 to 512 [ 460.014568][ T1098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.053922][ T1098] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.075804][ T1110] loop0: detected capacity change from 0 to 1024 [ 460.094459][ T1098] bridge0: entered promiscuous mode [ 460.101197][ T1098] bridge0: left promiscuous mode [ 460.115802][ T1110] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 460.188857][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.211229][ T1133] loop2: detected capacity change from 0 to 512 [ 460.221189][ T1133] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.230386][ T1133] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 460.243741][ T1133] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 460.255878][ T1133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 460.264797][ T1133] System zones: 0-2, 18-18, 34-34 [ 460.267683][ T1138] 9pnet: p9_errstr2errno: server reported unknown error @ [ 460.280264][ T1133] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 460.299304][ T1133] EXT4-fs (loop2): 1 truncate cleaned up [ 460.299804][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 460.306625][ T1133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.326357][ T1141] loop6: detected capacity change from 0 to 512 [ 460.336225][ T1141] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.338292][ T1133] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 3: comm syz.2.11501: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 460.345452][ T1141] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 460.347980][ T1141] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 460.381316][ T1141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 460.389454][ T1141] System zones: 0-2, 18-18, 34-34 [ 460.396113][ T1141] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 460.412647][ T1141] EXT4-fs (loop6): 1 truncate cleaned up [ 460.423859][ T1141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.437366][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.448629][ T1144] bond1: entered promiscuous mode [ 460.453847][ T1144] bond1: entered allmulticast mode [ 460.459581][ T1144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.469353][ T1150] blktrace: Concurrent blktraces are not allowed on sg0 [ 460.477654][ T1144] bond1 (unregistering): Released all slaves [ 460.496159][ T1154] loop2: detected capacity change from 0 to 512 [ 460.503564][ T1154] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.509923][ T1152] __nla_validate_parse: 8 callbacks suppressed [ 460.509940][ T1152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11511'. [ 460.512655][ T1154] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 460.536372][ T1152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11511'. [ 460.540271][ T1154] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 460.556247][ T1154] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 460.564720][ T1154] System zones: 0-2, 18-18, 34-34 [ 460.573807][ T1154] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 460.588590][ T1152] loop4: detected capacity change from 0 to 164 [ 460.597282][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.600629][ T1154] EXT4-fs (loop2): 1 truncate cleaned up [ 460.621990][ T1154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.656086][ T1154] EXT4-fs error (device loop2): ext4_find_dest_de:2054: inode #2: block 3: comm syz.2.11509: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 460.687770][ T1160] bond1: entered promiscuous mode [ 460.693043][ T1160] bond1: entered allmulticast mode [ 460.698837][ T1160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.710408][ T1160] bond1 (unregistering): Released all slaves [ 460.727039][T28660] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.780675][ T1169] loop0: detected capacity change from 0 to 512 [ 460.788625][ T1170] loop6: detected capacity change from 0 to 1024 [ 460.805054][ T1169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.818199][ T1170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 460.844215][ T1169] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.859427][ T1184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11522'. [ 460.880471][ T1184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11522'. [ 460.894971][ T1184] loop2: detected capacity change from 0 to 164 [ 460.913883][ T1169] bridge0: entered promiscuous mode [ 460.921433][ T1169] bridge0: left promiscuous mode [ 461.009997][T31448] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 461.029275][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.066619][ T1203] bond1: entered promiscuous mode [ 461.071819][ T1203] bond1: entered allmulticast mode [ 461.079430][ T1203] 8021q: adding VLAN 0 to HW filter on device bond1 [ 461.090024][ T1203] bond1 (unregistering): Released all slaves [ 461.115571][ T1214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11536'. [ 461.137133][ T1207] loop0: detected capacity change from 0 to 8192 [ 461.153065][ T1214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11536'. [ 461.175673][ T1218] loop6: detected capacity change from 0 to 164 [ 461.215839][ T1223] netlink: 'GPL': attribute type 10 has an invalid length. [ 461.232683][ T1223] team0: left allmulticast mode [ 461.237683][ T1223] team_slave_0: left allmulticast mode [ 461.243307][ T1223] team_slave_1: left allmulticast mode [ 461.248922][ T1223] team0: left promiscuous mode [ 461.253763][ T1223] team_slave_0: left promiscuous mode [ 461.259460][ T1223] team_slave_1: left promiscuous mode [ 461.265175][ T1223] bridge0: port 3(team0) entered disabled state [ 461.273897][ T1226] netlink: 'syz.2.11538': attribute type 10 has an invalid length. [ 461.284111][ T1223] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.295641][ T1223] bond0: (slave team0): Enslaving as an active interface with an up link [ 461.305567][ T1226] bond0: (slave team0): Releasing backup interface [ 461.316012][ T1226] bridge0: port 3(team0) entered blocking state [ 461.322545][ T1226] bridge0: port 3(team0) entered disabled state [ 461.325457][ T1230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11540'. [ 461.335250][ T1226] team0: entered allmulticast mode [ 461.343095][ T1226] team_slave_0: entered allmulticast mode [ 461.348847][ T1226] team_slave_1: entered allmulticast mode [ 461.354858][ T1230] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11540'. [ 461.375833][ T1230] loop6: detected capacity change from 0 to 164 [ 461.387859][ T1226] team0: entered promiscuous mode [ 461.392995][ T1226] team_slave_0: entered promiscuous mode [ 461.398696][ T1226] team_slave_1: entered promiscuous mode [ 461.404993][ T1225] team0: left allmulticast mode [ 461.410006][ T1225] team_slave_0: left allmulticast mode [ 461.415519][ T1225] team_slave_1: left allmulticast mode [ 461.421076][ T1225] team0: left promiscuous mode [ 461.425970][ T1225] team_slave_0: left promiscuous mode [ 461.431413][ T1225] team_slave_1: left promiscuous mode [ 461.431710][ T1225] bridge0: port 2(team0) entered disabled state [ 461.460996][ T1225] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.469168][ T1225] team0: entered allmulticast mode [ 461.474525][ T1225] team_slave_0: entered allmulticast mode [ 461.480346][ T1225] team_slave_1: entered allmulticast mode [ 461.487168][ T1225] bond0: (slave team0): Enslaving as an active interface with an up link [ 461.498283][ T1231] bond0: (slave team0): Releasing backup interface [ 461.506666][ T1231] team0: left allmulticast mode [ 461.511572][ T1231] team_slave_0: left allmulticast mode [ 461.517209][ T1231] team_slave_1: left allmulticast mode [ 461.532849][ T1231] bridge0: port 2(team0) entered blocking state [ 461.539206][ T1231] bridge0: port 2(team0) entered disabled state [ 461.545965][ T1231] team0: entered allmulticast mode [ 461.551144][ T1231] team_slave_0: entered allmulticast mode [ 461.556971][ T1231] team_slave_1: entered allmulticast mode [ 461.563507][ T1231] team0: entered promiscuous mode [ 461.568575][ T1231] team_slave_0: entered promiscuous mode [ 461.574411][ T1231] team_slave_1: entered promiscuous mode [ 461.727854][ T1247] loop6: detected capacity change from 0 to 8192 [ 461.893711][ T1255] loop2: detected capacity change from 0 to 8192 [ 461.902839][ T1261] loop4: detected capacity change from 0 to 512 [ 461.912695][ T1261] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 461.921815][ T1261] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 461.947587][ T1261] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 461.958231][ T1261] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 461.973321][ T1261] System zones: 0-2, 18-18, 34-34 [ 461.979473][ T1271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11555'. [ 461.999614][ T1261] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 462.037983][ T1271] team0: left allmulticast mode [ 462.038984][ T1280] 9pnet: p9_errstr2errno: server reported unknown error @ [ 462.042950][ T1271] team_slave_0: left allmulticast mode [ 462.042970][ T1271] team_slave_1: left allmulticast mode [ 462.042987][ T1271] team0: left promiscuous mode [ 462.043001][ T1271] team_slave_0: left promiscuous mode [ 462.043126][ T1271] team_slave_1: left promiscuous mode [ 462.072674][ T1261] EXT4-fs (loop4): 1 truncate cleaned up [ 462.077016][ T1271] bridge0: port 3(team0) entered disabled state [ 462.093596][ T1261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.113561][ T1271] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.134995][ T1271] team0: entered allmulticast mode [ 462.140192][ T1271] team_slave_0: entered allmulticast mode [ 462.145989][ T1271] team_slave_1: entered allmulticast mode [ 462.176121][ T1271] bond0: (slave team0): Enslaving as an active interface with an up link [ 462.185939][ T1284] bond0: (slave team0): Releasing backup interface [ 462.196081][T27320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.206140][ T1284] team0: left allmulticast mode [ 462.211035][ T1284] team_slave_0: left allmulticast mode [ 462.216564][ T1284] team_slave_1: left allmulticast mode [ 462.232928][ T1284] bridge0: port 3(team0) entered blocking state [ 462.239312][ T1284] bridge0: port 3(team0) entered disabled state [ 462.261304][ T1284] team0: entered allmulticast mode [ 462.266521][ T1284] team_slave_0: entered allmulticast mode [ 462.272383][ T1284] team_slave_1: entered allmulticast mode [ 462.280220][ T1284] team0: entered promiscuous mode [ 462.285323][ T1284] team_slave_0: entered promiscuous mode [ 462.291087][ T1284] team_slave_1: entered promiscuous mode [ 462.413266][ T1308] loop0: detected capacity change from 0 to 1024 [ 462.465035][ T1308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 462.516480][ T1315] 9pnet: p9_errstr2errno: server reported unknown error @ [ 462.571273][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 462.710059][ T1323] loop0: detected capacity change from 0 to 256 [ 462.956817][ T1351] loop0: detected capacity change from 0 to 512 [ 462.964482][ T1351] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.973584][ T1351] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 462.976883][ T1341] loop6: detected capacity change from 0 to 8192 [ 462.989154][ T1351] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 462.998720][ T1351] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 463.008316][ T1351] System zones: 0-2, 18-18, 34-34 [ 463.016190][ T1351] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 463.031127][ T1351] EXT4-fs (loop0): 1 truncate cleaned up [ 463.037475][ T1351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.099662][T32174] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.125867][ T1356] ================================================================== [ 463.134012][ T1356] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 463.142809][ T1356] [ 463.145145][ T1356] write to 0xffff888106977878 of 8 bytes by task 1341 on cpu 1: [ 463.152785][ T1356] mark_buffer_dirty_inode+0x18c/0x1c0 [ 463.158262][ T1356] fat_mirror_bhs+0x234/0x320 [ 463.162956][ T1356] fat_alloc_clusters+0x98b/0xa80 [ 463.168021][ T1356] fat_get_block+0x258/0x5e0 [ 463.172639][ T1356] __block_write_begin_int+0x419/0xf70 [ 463.178115][ T1356] cont_write_begin+0x5a3/0x8e0 [ 463.183047][ T1356] fat_write_begin+0x4f/0xe0 [ 463.187693][ T1356] cont_write_begin+0x198/0x8e0 [ 463.192560][ T1356] fat_write_begin+0x4f/0xe0 [ 463.197158][ T1356] generic_cont_expand_simple+0xad/0x150 [ 463.202809][ T1356] fat_cont_expand+0x3e/0x170 [ 463.207507][ T1356] fat_setattr+0x2a5/0x8a0 [ 463.211942][ T1356] notify_change+0x806/0x890 [ 463.216542][ T1356] do_ftruncate+0x327/0x430 [ 463.221060][ T1356] __x64_sys_ftruncate+0x68/0xc0 [ 463.226026][ T1356] x64_sys_call+0xd65/0x2fb0 [ 463.230650][ T1356] do_syscall_64+0xd0/0x1a0 [ 463.235175][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.241087][ T1356] [ 463.243415][ T1356] read to 0xffff888106977878 of 8 bytes by task 1356 on cpu 0: [ 463.250968][ T1356] mark_buffer_dirty_inode+0x95/0x1c0 [ 463.256876][ T1356] fat_mirror_bhs+0x234/0x320 [ 463.261587][ T1356] fat_alloc_clusters+0x98b/0xa80 [ 463.266637][ T1356] fat_get_block+0x258/0x5e0 [ 463.271254][ T1356] __block_write_begin_int+0x419/0xf70 [ 463.276729][ T1356] cont_write_begin+0x5a3/0x8e0 [ 463.281591][ T1356] fat_write_begin+0x4f/0xe0 [ 463.286190][ T1356] cont_write_begin+0x198/0x8e0 [ 463.291061][ T1356] fat_write_begin+0x4f/0xe0 [ 463.295657][ T1356] generic_cont_expand_simple+0xad/0x150 [ 463.301317][ T1356] fat_cont_expand+0x3e/0x170 [ 463.306024][ T1356] fat_setattr+0x2a5/0x8a0 [ 463.310472][ T1356] notify_change+0x806/0x890 [ 463.315092][ T1356] do_ftruncate+0x327/0x430 [ 463.319615][ T1356] __x64_sys_ftruncate+0x68/0xc0 [ 463.324569][ T1356] x64_sys_call+0xd65/0x2fb0 [ 463.329194][ T1356] do_syscall_64+0xd0/0x1a0 [ 463.333710][ T1356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.339610][ T1356] [ 463.341936][ T1356] value changed: 0x0000000000000000 -> 0xffff888106b62008 [ 463.349048][ T1356] [ 463.351371][ T1356] Reported by Kernel Concurrency Sanitizer on: [ 463.357530][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.6.11580 Tainted: G W 6.15.0-rc4-syzkaller-00021-gca91b9500108 #0 PREEMPT(voluntary) [ 463.371610][ T1356] Tainted: [W]=WARN [ 463.375417][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 463.385480][ T1356] ================================================================== [ 464.336396][T18054] team0: left allmulticast mode [ 464.341295][T18054] team_slave_0: left allmulticast mode [ 464.346929][T18054] team_slave_1: left allmulticast mode [ 464.352515][T18054] team0: left promiscuous mode [ 464.357385][T18054] team_slave_0: left promiscuous mode [ 464.362862][T18054] team_slave_1: left promiscuous mode [ 464.368384][T18054] bridge0: port 3(team0) entered disabled state [ 464.375300][T18054] bridge_slave_1: left allmulticast mode [ 464.380962][T18054] bridge_slave_1: left promiscuous mode [ 464.386820][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.394811][T18054] bridge_slave_0: left allmulticast mode [ 464.400469][T18054] bridge_slave_0: left promiscuous mode [ 464.406204][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.563941][T18054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.573709][T18054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.583331][T18054] bond0 (unregistering): Released all slaves [ 464.637813][T18054] hsr_slave_0: left promiscuous mode [ 464.643516][T18054] hsr_slave_1: left promiscuous mode [ 464.649163][T18054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.656617][T18054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.664285][T18054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.671710][T18054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.681527][T18054] veth1_macvtap: left promiscuous mode [ 464.687096][T18054] veth0_macvtap: left promiscuous mode [ 464.692673][T18054] veth1_vlan: left promiscuous mode [ 464.697982][T18054] veth0_vlan: left promiscuous mode [ 464.760855][T18054] team0 (unregistering): Port device team_slave_1 removed [ 464.774390][T18054] team0 (unregistering): Port device team_slave_0 removed [ 464.806393][ T10] infiniband syz1: ib_query_port failed (-19)