last executing test programs: 3.031790863s ago: executing program 3 (id=4057): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 2.968421204s ago: executing program 3 (id=4060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r4, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 2.044578999s ago: executing program 4 (id=4075): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45b, &(0x7f0000001200)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffff", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = open(0x0, 0x40c5, 0x130) r2 = socket(0x1e, 0x4, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) write(r2, &(0x7f0000000300)="240000001a005f0214f9f4070d0903001f000000fd050000000200000800040001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000003280)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003240)={&(0x7f0000003340)={0x132c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1146, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x4}, {0x2}, @device_a, @device_b, @broadcast, {0x6}}, @a_msdu=[{@device_b, @broadcast, 0x1000, "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"}, {@device_b, @device_b, 0xda, "a0d19586af0a55549451c622f10b476c29cffc3e6a4ac89ab462178fac2ea80cf26e73c5f69e352a6e53af9920a1120b7e28c1fcad15e8153d139020f6db5c65f91245a487dcce778a26f1ebdb3a8ed7137ed31465bc75229418b4867c4eebc984f49f3f27c915efd64ec96c4426f6a16a7a3b4106d44beb22e5fae99282392e6f408601071c46ce859444f386e7b95a4175d5e83b2c2b2153b802f5d44f2205668b0ca3af72222a88f8a63d1fba276dd97da314d38b498b390c341bf07d93ec66f247b08ce51e8f6cd3bc69003bb4f987f6439ae6b3dce982ca"}, {@broadcast, @broadcast, 0x1d, "61c7210547a2f0a6dccf42f1a40f1d7bc2e4d361e7685758de50709ca0"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {0x6}}}, @NL80211_ATTR_FRAME={0x186, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @from_mac=@broadcast, @device_a, @device_b, {0x8, 0xff7}, "", @value={0x6, 0x0, 0x3, 0x0, 0x3}}, @a_msdu=[{@device_b, @device_b, 0x4c, "9f5d4e2e2e0b03857412fce15b5e06756671fe14d4fe5433284aec7338bc214786039d55c3eafa1c7b314f4b2b76b4a1530e31f194bc750ff6bcdd6666fb32f17d97f3085eb0478e6c2d2581"}, {@broadcast, @device_b, 0x68, "a7c88a41c80e7fbba920a12e9b4ac96c06228faaf9e6a71552d8236cee4b7b9e1d5b2aca785cd0929c0fbadefdf432dd96a252d619afe58ca2a89bd7deda6911fe01de5984124cec1013c8649686d7f9da1743d2e83993930cf1ba4c89ee0f12997a5f79118df8ca"}, {@device_a, @broadcast, 0x86, "53b103e6468b429819aea04933b1ec7e871afc38f06b39b8e607f1fc88d8bd35632e2fb0a8be76897f12d613f8e32cda602fe061a5d9017d0b52eb416dab9bafe063a39cdecd0c201ca0398706f2c77d19c371df21977c9d6f92048c9158cb67f0a2f9fb4e2a59554ad43c6f54760dc6f1bf171bd626a2bb4ef69dcbee5379d4231df1c10e36"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @default, @random="83c9be5219a2"}}]}, 0x132c}, 0x1, 0x0, 0x0, 0x8011}, 0x400c044) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x1}) 1.736974463s ago: executing program 4 (id=4078): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x5d297ab4, 0x8, 0x5) 1.732083843s ago: executing program 2 (id=4079): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file1\x00', 0x40, &(0x7f0000000780)=ANY=[], 0x1, 0x124a, &(0x7f0000001900)="$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") semget(0x0, 0x1, 0x104) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 1.580658105s ago: executing program 4 (id=4081): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x4, "16bf33cc"}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x1}, 0x18002, 0x8002, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) pause() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ftruncate(0xffffffffffffffff, 0xc17a) r5 = socket$packet(0x11, 0x2, 0x300) write$UHID_DESTROY(r2, &(0x7f00000004c0), 0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000400)={r1, 0x1, 0x3}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) mq_open(&(0x7f0000000300)='D\x00', 0x40, 0x88, &(0x7f0000000340)={0x800, 0xffffffffffffffff, 0x5, 0x9}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r9, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r9) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000000) 1.372151129s ago: executing program 0 (id=4085): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0010000000004e20,timeout=0x']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) socket$packet(0x11, 0xa, 0x300) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd"], 0x18}}, 0x40) 1.336072559s ago: executing program 2 (id=4086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x5b, 0xfffffffffffffffe, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x9, &(0x7f0000000000)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="3000000000000000840000000100000002000000000200000900000081000000050000000000000009000000", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000020000000300020005000000d90f0000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000087"], 0x68, 0x40010}], 0x1, 0x240000c0) 1.30584545s ago: executing program 0 (id=4087): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getgroups(0x5, &(0x7f0000000640)=[0xee01, 0x0, 0x0, 0x0, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, 0x0, 0x0, r10, 0x104, 0x5}, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x1}) 1.28292875s ago: executing program 3 (id=4088): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) getgroups(0x5, &(0x7f0000000640)=[0xee01, 0x0, 0x0, 0x0, 0xffffffffffffffff]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000740)={{0x2, 0x0, 0x0, 0x0, r9, 0x104, 0x5}, 0x80000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x1}) 1.188249362s ago: executing program 1 (id=4090): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x48010) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1a392781e0773d21}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 1.152967552s ago: executing program 2 (id=4091): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x5d297ab4, 0x8, 0x5) 1.092979313s ago: executing program 2 (id=4092): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a0b040000000000000000020000004c000480480001800a"], 0xa0}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.020111675s ago: executing program 2 (id=4093): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@fwd={0x2}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @union={0x10, 0x1, 0x0, 0x5, 0x0, 0x159, [{0x2, 0x4, 0x7}]}]}, {0x0, [0x61, 0x30, 0x61]}}, &(0x7f0000000300)=""/127, 0x4d, 0x7f, 0x1, 0x1, 0x10000, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = syz_io_uring_setup(0x51b8, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0x1}, {0x8, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 966.682865ms ago: executing program 1 (id=4094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000260000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010077697265677561726400000004000280080003"], 0x40}, 0x1, 0xd}, 0x0) 884.654106ms ago: executing program 1 (id=4095): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) 869.834777ms ago: executing program 1 (id=4096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x5b, 0xfffffffffffffffe, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 818.674938ms ago: executing program 1 (id=4097): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0010000000004e20,timeout=0x']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) socket$packet(0x11, 0xa, 0x300) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd"], 0x18}}, 0x40) 782.851398ms ago: executing program 1 (id=4098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r4, &(0x7f0000000140)='./file1\x00', r4, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 726.506549ms ago: executing program 0 (id=4099): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) (async) ustat(0xec, &(0x7f00000000c0)) mq_unlink(&(0x7f0000000000)='eth0\x00') (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x8, 0x0, 0x10, 0x0, 0xd2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="020114000129184ad4a08058195c60140000002f0600ac141414e0ecff02808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e46691e233da4d163f53ab1b3f65c3042e749c2d4c8303a0f7fbda34fb8825f80200a3"], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x0, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[]) (async) close(r6) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x4) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000001c0)={r9, 0x3, 0x2, 0x5}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000080)={r9, 0x8}, 0x8) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r1}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000380)={r0, r10}, 0xc) 683.50456ms ago: executing program 3 (id=4100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='S\x00'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x13) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x68cb, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r10, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 644.41624ms ago: executing program 4 (id=4101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fcntl$lock(r2, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x5b, 0xfffffffffffffffe, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x3, 0x2a1, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000c80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000002240)=[{&(0x7f0000001000)=@in={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="3000000000000000840000000100000002000000000200000900000081000000050000000000000009000000", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000020000000300020005000000d90f0000", @ANYRES32=0x0, @ANYBLOB="180000000000000084000087"], 0x68, 0x40010}], 0x1, 0x240000c0) 517.025392ms ago: executing program 0 (id=4102): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x5d297ab4, 0x8, 0x5) 515.891142ms ago: executing program 3 (id=4103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a0b040000000000000000020000004c00048048000180"], 0xa0}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 435.196053ms ago: executing program 0 (id=4104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) syz_read_part_table(0x5d3, &(0x7f0000000000)="$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") bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000015c0)={&(0x7f0000001380)="9d03a486dcd5badf9adefbb51a6553eccc15de88bf37a4019bf73ae3a16f1c803c6ad216603098c82b652a3be345aebc0a091d79cff32919d43ab09d41157b5da3c76c82955b1591c15e827720bc62d5af6ad8c10b4a98442f151038d75abad87d95119ae6eeb681", &(0x7f0000001400)=""/237, &(0x7f0000001500)="86b20c2d6a61491ebae982192450952482c005e9520642cc6725625dff3a05eaf5cba93d32854b7c8a776ffe71d90a26a2ea00dfff792fc3bf3f9278d97f562b24cdeb48533d25fed7b74f056e050f44dce86cbf767ff2889526de6ce512ddc30c111f54d57fbc52ed9797c384322e7e0f9b63e01602333bd98fe5b2f85110202cb7d739b866219eae58076f069b97db03dc49a990e81c80aea8ecbba5c30c059994957847544ea60295c03724", &(0x7f0000000580)="f61257b4ed", 0xc, r0}, 0x38) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000002c0)=0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x8, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="69cc6818ac9dd77643d5ea07f1b63cf02617e1a51da84c2556c5a7addcdbb211770bdcb93d36a21f2b7c8c9b68d652459d1979b63c9b04030a402a5a3217dcae9acd408deacf3530d0867470dad20d9ab1c3ca7159", 0x55}, {&(0x7f0000000580)}, {&(0x7f00000005c0)="02c920d05b11ddd04453716a94c3b40e856e1c1c5eeec61d5f188a0918e25272c90167b406d05657c448a45eedd0ae4cdda21db0eba6020e17f7d601a116f634e54842116b20d1a6f9038e5b8286f7889821503c71ed7860c7817d1625525632042395c6f0c0267eae", 0x69}, {&(0x7f0000000680)="addc2039b792cbde304338609854125e3c0977eda722d2ba22d5271e0270f88e6602ce2c4075ea87990f54eab7a45d4be13774", 0x33}], 0x4, &(0x7f0000000700)=[@hopopts={{0xa0, 0x29, 0x36, {0x84, 0x10, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x19, [0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x92800000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8, 0x33, "5241494d41b006bbf909ae0d29d4a8de346cb5eddbc2f281bff6c7444275a1be0bcb18706ebf1af38c399f37476e58bd596a06"}, @ra={0x5, 0x2, 0xb9d3}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}], 0xb8}}, {{&(0x7f00000007c0)={0xa, 0x4e24, 0xff, @local, 0x9}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000800)="4f8e2d53222fdad70708a0694d1b987b91c3f1ec71bef2adde4664070f1ac159057ef308f4dd2fd814065e04692c91a3208b6e9a300d1d8694c41421a8f1d40fd4e6ca36b03d06f3be9c5bfb534d3da590532291036b88248b556da158c3dd107ac13c492695975d10474ea8ed5baa5feef39d5f5f8edcafca39d5e64be802d87c220c0c41b51c11dec931c04951efae42750d6ed65f09e73564c3245ccdfbbb68f3831e4b1b61615e71072a368fc5d048eb2a", 0xb3}, {&(0x7f0000000bc0)="c9100173b247851e0ad7b30b29339d381e068860c9f702cbb14b332cddaf31e2f9168b676718e3fe46e5234a0aced176e2ddf6507a47fa57248b49def47cdad7ee6c790b505e1d0b30baea9e09f6110e3f73c41bb6a4c6725d108e229bc704e6fa4b310ec5209df4859a44b2944dfe4e8f360150b0f9cbc32946c7219b51f7bbfb8ef09e0f77e6bc9f5aa48740746b8764e2cf382201f1563db2b2f196b5dcb24b1eeb949efd124a8222edd2658db2d511812819b0ef28504c7632cafdae369ff55fdf8d5e74fb448daf8384ba8d1f860d8ba0506d82c36b21ba6b48003d507915b565f1286ec9c03f97d015303043fe7e0b572ef329272bfa3b31", 0xfb}, {&(0x7f00000008c0)="2da0051805bcbde861ab80a27b29a6043411006f23ae9ffc9b1e2558", 0x1c}, {&(0x7f0000000cc0)="28a5f41e7340b51735771dc0900e59bb3e8c3beace75e2662bbb17535d74e0c949e78339fb1190075bc15a052e787d3136c627189f7234055a0d2b340462c9d276abffea026645dbac6b0bb5d2b14d2d67e07455ba66249afebfd53bf4f3020cfe532106a90e291f8b91baa530e9ff5e58c7adf76cdb4cb1da7d46752587ecfe81735161b162442e", 0x88}, {&(0x7f0000000d80)="0a8d40e044b9e5b68a52268cfdec19aac513e5dfbfd64ca483f0c88d21c00ae9a951f525d3f18c66780a653e92c8a08de7ad3af11eea9a3d0da14fb4711673977bf6a0357eb07a566dd352c1ec7bbc0666cfebf3a6349bcb230961c5cf4bec053b74fd6e9ca1b2c4fe15605464aa440c0b6e951989059210c0cba9f895eae59df6a27b239dc9dec205fd3d7276608767cc", 0x91}, {&(0x7f0000000900)="c8929e952220323806c3f8b6d3bc50f8fe156448e4976d18ba3eeb", 0x1b}], 0x6, &(0x7f0000000ec0)=[@dstopts_2292={{0xf8, 0x29, 0x4, {0xf9, 0x1b, '\x00', [@generic={0x7, 0x70, "afc9057262303cde781d56e8fe8efc5f49da8be021cd3d7efd06ba5f3efed0dd7435fefcfa897019e2b546ef0ede7b382fb51970772cabcee6ae015fc390e20f8fb3c526cc19e8f58148a198afdba748a0e002bb61ebac9be09f450ac6792cbd25dcdb84407887ec83333070729076ca"}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x4, [0x2]}}, @pad1, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0xe2, 0xffef, [0x7, 0x700000000000000, 0x8, 0x43, 0x9, 0x29dc4471, 0x2]}}, @jumbo={0xc2, 0x4, 0x8001}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @generic={0x4, 0x61, "2eeef2f2050fcb142cb56a60ea532a011ce96b29a678bfa7e87732fe5bc8b12218a89e71197898b4a264cd3d46287965b4fb38ae6542bacd889a34a801c288f8f89651642f3f0747b861ad30108d01e53273e8e3bf6d3f14426048558ca57d86b8"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0xa26474a81bf0f2d1, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r2}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x0, 0xe, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0xda, 0xe, [0x4, 0x963, 0x5, 0x7, 0xb, 0x9a]}}, @hao={0xc9, 0x10, @remote}, @pad1, @pad1, @ra={0x5, 0x2, 0x9100}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dstopts={{0x150, 0x29, 0x37, {0x32, 0x27, '\x00', [@ra={0x5, 0x2, 0xee5}, @generic={0x8, 0xb0, "c7c92cdbe09d468796ea90bf6be7d7b426023f1e714e332a66ef73ab6cc6f1b47fc03eb8d54529f5d9bfc001c43af938fea7535d9c07b59f40ec3c166292646acb7ab99edaed1bc83bb5800a4d6b1ebd55db39c94bf1ae690db5273e1cac0046459d294840d0ba9e36fc6221a646d1986167b12207ffd0fc02c4ee2507b55714ec175ba9863f7257201ae2e13d8d6249d5bb361d7ae7732a7ad136ddafecb5de2880731e79e6cdee1972f7eb0a19f391"}, @calipso={0x7, 0x30, {0x2, 0xa, 0x6, 0x3, [0x3, 0x1c00000000000, 0x7, 0x10000, 0x8000000000000000]}}, @generic={0x1, 0x11, "df8e603155f212b5fc020adc99312e225c"}, @enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x30, {0x1, 0xa, 0x3, 0x8fa6, [0x7fff, 0x7fff, 0x2, 0x2, 0x7]}}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xfd}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0x418}}], 0x2, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0xc000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, 0x0, r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000001640), r4) fsetxattr(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='user.]'], 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000001840)={'dummy0\x00', {0x2, 0x4e22, @loopback}}) r6 = socket(0x10, 0x3, 0x9) sendmsg$nl_xfrm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x100, 0x70bd26, 0x25dfdbfe, {{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e22, 0x0, 0x4e21, 0x100, 0xa, 0xc0, 0xa0, 0x67}, {0x7ad6, 0xa16, 0x1, 0x1, 0x5, 0x9, 0xfffffffffffffff9}, {0x8, 0xec53, 0x0, 0x2}, 0x6, 0x0, 0x2, 0x1, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 406.734774ms ago: executing program 3 (id=4105): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x2, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000380)=""/81) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 296.912406ms ago: executing program 4 (id=4106): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002180)=@raw={'raw\x00', 0x8000038, 0x3, 0x2b8, 0xf8, 0xffffffff, 0xffffffff, 0x1e8, 0x110, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x8, 0xe6, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x4}, @private0={0xfc, 0x0, '\x00', 0x3}, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4000}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES64=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001d40)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xff, 0x0, 0x7ffc0001}]}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x108) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001e00)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) 196.284927ms ago: executing program 4 (id=4107): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="9924b4da5000", 0x6}, {0x0}], 0x2) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x6f) fallocate(r1, 0x0, 0x0, 0x2000402) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) brk(0x2) 122.028648ms ago: executing program 0 (id=4108): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0010000000004e20,timeout=0x']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a0001"], 0x118}}, 0x0) socket$packet(0x11, 0xa, 0x300) statx(0xffffffffffffffff, 0x0, 0x1000, 0x6000, 0x0) semop(0x0, &(0x7f0000000240)=[{0x1, 0x20, 0x800}, {0x3, 0x0, 0x1800}, {0x0, 0xe65b}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd"], 0x18}}, 0x40) 0s ago: executing program 2 (id=4109): r0 = msgget$private(0x0, 0x20) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f00000001c0)=0xe8) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) fstat(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(0xffffffffffffffff, 0x9) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000540)={{0x2, r1, r3, r4, r5, 0x8, 0x6f6}, 0x0, 0x0, 0x1, 0x7, 0x9, 0x5, 0xfffffffffffffffc, 0x6, 0x1, 0x5, r6, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {r7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r11 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002640)=""/4115, 0x1013}, {&(0x7f0000001240)=""/107, 0x6b}], 0x2}, 0x60012002) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) accept$phonet_pipe(r9, &(0x7f00000008c0), &(0x7f0000000900)=0x10) kernel console output (not intermixed with test programs): essage: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12467 comm=syz.1.3216 [ 205.749652][T12482] 9pnet: Could not find request transport: f [ 205.756729][T12376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.762262][T12482] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3222'. [ 205.776523][T12376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.790627][T12376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.799443][T12376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.846673][T12376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.858995][T12376] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.868055][ T2268] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.875195][ T2268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.884274][T12490] netlink: 'syz.1.3225': attribute type 10 has an invalid length. [ 205.889287][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.892159][T12490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3225'. [ 205.899174][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.003651][T12376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.012352][T12505] loop2: detected capacity change from 0 to 2048 [ 206.078772][T12505] GPT:first_usable_lbas don't match. [ 206.081931][T12376] veth0_vlan: entered promiscuous mode [ 206.084121][T12505] GPT:34 != 290 [ 206.093143][T12505] GPT: Use GNU Parted to correct GPT errors. [ 206.095715][T12376] veth1_vlan: entered promiscuous mode [ 206.099370][T12505] loop2: p1 p2 p3 [ 206.113017][T12376] veth0_macvtap: entered promiscuous mode [ 206.128593][T12376] veth1_macvtap: entered promiscuous mode [ 206.139925][T12376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.153399][T12376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.181791][T12376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.190676][T12376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.199480][T12376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.208214][T12376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.221580][T12520] loop3: detected capacity change from 0 to 164 [ 206.273949][T12524] loop2: detected capacity change from 0 to 2048 [ 206.286353][T12527] loop4: detected capacity change from 0 to 512 [ 206.293404][T12527] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.336381][T12527] EXT4-fs (loop4): 1 truncate cleaned up [ 206.345599][T12527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.363044][T12524] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12524 comm=syz.2.3234 [ 206.392963][T12533] --map-set only usable from mangle table [ 206.466883][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.518608][T12542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.574142][T12549] netlink: 'syz.0.3240': attribute type 10 has an invalid length. [ 206.582124][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3240'. [ 206.620892][T12549] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 206.630001][T12549] team0: Failed to send options change via netlink (err -105) [ 206.637523][T12549] team0: Port device geneve1 added [ 206.678349][T12554] : renamed from vlan0 (while UP) [ 207.532199][T12556] chnl_net:caif_netlink_parms(): no params data found [ 207.551250][T12542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.613121][T12568] loop2: detected capacity change from 0 to 164 [ 207.658816][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 207.658896][ T29] audit: type=1326 audit(1744257761.854:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.697592][T12573] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 207.725943][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.733066][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.756625][ T29] audit: type=1326 audit(1744257761.884:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.780578][ T29] audit: type=1326 audit(1744257761.884:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.804263][ T29] audit: type=1326 audit(1744257761.884:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.827864][ T29] audit: type=1326 audit(1744257761.884:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.851477][ T29] audit: type=1326 audit(1744257761.884:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.875179][ T29] audit: type=1326 audit(1744257761.884:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.898795][ T29] audit: type=1326 audit(1744257761.884:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.922389][ T29] audit: type=1326 audit(1744257761.884:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.946021][ T29] audit: type=1326 audit(1744257761.884:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12567 comm="syz.2.3245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 207.973156][T12556] bridge_slave_0: entered allmulticast mode [ 207.979841][T12556] bridge_slave_0: entered promiscuous mode [ 207.986912][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.994268][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.006274][T12556] bridge_slave_1: entered allmulticast mode [ 208.015608][T12556] bridge_slave_1: entered promiscuous mode [ 208.059542][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.064233][T12578] loop3: detected capacity change from 0 to 512 [ 208.083359][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.094404][T12579] netlink: 'syz.4.3247': attribute type 10 has an invalid length. [ 208.102329][T12579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3247'. [ 208.122317][T12578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 208.135079][T12578] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.146477][T12556] team0: Port device team_slave_0 added [ 208.162011][T12556] team0: Port device team_slave_1 added [ 208.199530][T12587] loop4: detected capacity change from 0 to 512 [ 208.200942][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.206066][T12589] EXT4-fs (loop3): shut down requested (0) [ 208.212869][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.223657][T12587] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.244581][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.266498][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.273557][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.299639][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.331736][T12587] EXT4-fs (loop4): 1 truncate cleaned up [ 208.337792][T12587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.379428][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 208.401245][T12594] --map-set only usable from mangle table [ 208.408098][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.423984][T12556] hsr_slave_0: entered promiscuous mode [ 208.445307][T12556] hsr_slave_1: entered promiscuous mode [ 208.456479][T12556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.467166][T12556] Cannot create hsr debugfs directory [ 208.745445][T12556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.754897][T12556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.763752][T12556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.773561][T12556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.827035][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.845296][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.860309][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.867484][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.896797][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.903996][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.960307][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.229644][T12631] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.255798][T12632] netlink: 'syz.2.3258': attribute type 10 has an invalid length. [ 209.263834][T12632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'. [ 209.278702][T12556] veth0_vlan: entered promiscuous mode [ 209.297343][T12556] veth1_vlan: entered promiscuous mode [ 209.324171][T12556] veth0_macvtap: entered promiscuous mode [ 209.344300][T12632] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.352850][T12632] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.361304][T12632] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.466848][T12556] veth1_macvtap: entered promiscuous mode [ 209.483073][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.493773][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.508934][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.574580][T12556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.585221][T12556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.600555][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.623298][T12556] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.632234][T12556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.641155][T12556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.649948][T12556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.100681][T12658] loop2: detected capacity change from 0 to 2048 [ 210.178626][T12658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12658 comm=syz.2.3266 [ 210.395208][T12542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.490478][T12674] ip6tnl1: entered promiscuous mode [ 210.495837][T12674] ip6tnl1: entered allmulticast mode [ 210.584712][T12681] loop1: detected capacity change from 0 to 128 [ 210.672969][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.682090][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.691124][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.713865][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.723004][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.732246][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.767640][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.776700][T12688] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3279'. [ 210.984211][T12697] loop2: detected capacity change from 0 to 164 [ 211.181791][T12699] FAULT_INJECTION: forcing a failure. [ 211.181791][T12699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.194980][T12699] CPU: 0 UID: 0 PID: 12699 Comm: syz.3.3282 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 211.195009][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.195021][T12699] Call Trace: [ 211.195026][T12699] [ 211.195034][T12699] dump_stack_lvl+0xf6/0x150 [ 211.195062][T12699] dump_stack+0x15/0x1a [ 211.195085][T12699] should_fail_ex+0x261/0x270 [ 211.195135][T12699] should_fail+0xb/0x10 [ 211.195162][T12699] should_fail_usercopy+0x1a/0x20 [ 211.195190][T12699] _copy_from_user+0x1c/0xa0 [ 211.195335][T12699] copy_msghdr_from_user+0x54/0x2b0 [ 211.195372][T12699] ? __fget_files+0x186/0x1c0 [ 211.195395][T12699] __sys_sendmsg+0x141/0x240 [ 211.195453][T12699] __x64_sys_sendmsg+0x46/0x50 [ 211.195486][T12699] x64_sys_call+0x26f3/0x2e10 [ 211.195520][T12699] do_syscall_64+0xc9/0x1c0 [ 211.195555][T12699] ? clear_bhb_loop+0x25/0x80 [ 211.195579][T12699] ? clear_bhb_loop+0x25/0x80 [ 211.195658][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.195734][T12699] RIP: 0033:0x7ff4716dd169 [ 211.195752][T12699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.195774][T12699] RSP: 002b:00007ff46fd3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.195797][T12699] RAX: ffffffffffffffda RBX: 00007ff4718f5fa0 RCX: 00007ff4716dd169 [ 211.195812][T12699] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 211.195826][T12699] RBP: 00007ff46fd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.195838][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.195852][T12699] R13: 0000000000000000 R14: 00007ff4718f5fa0 R15: 00007fff92b80388 [ 211.195872][T12699] [ 211.698606][ T3496] page_pool_release_retry() stalled pool shutdown: id 49, 1 inflight 60 sec [ 212.010160][T12719] ip6tnl1: entered promiscuous mode [ 212.015437][T12719] ip6tnl1: entered allmulticast mode [ 212.125622][T12724] 8021q: adding VLAN 0 to HW filter on device . [ 212.157275][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.195871][T12724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.235087][T12728] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.402431][T12735] netlink: 'syz.4.3295': attribute type 10 has an invalid length. [ 212.420004][T12542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.534977][T12542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.561567][T12739] loop4: detected capacity change from 0 to 512 [ 212.581446][T12542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.600906][T12739] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.625514][T12542] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.646125][T12542] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.677351][T12739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.715448][T12739] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.756515][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 212.756541][ T29] audit: type=1400 audit(1744257766.944:10667): avc: denied { map } for pid=12738 comm="syz.4.3296" path="/121/file0/pids.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 212.836313][ T29] audit: type=1400 audit(1744257767.024:10668): avc: denied { setopt } for pid=12738 comm="syz.4.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.868860][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.975303][ T29] audit: type=1326 audit(1744257767.164:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 212.982107][T12755] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 212.999039][ T29] audit: type=1326 audit(1744257767.164:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 213.030152][ T29] audit: type=1326 audit(1744257767.164:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 213.053949][ T29] audit: type=1326 audit(1744257767.164:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.2.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 213.114894][T12766] __nla_validate_parse: 11 callbacks suppressed [ 213.114916][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 213.164609][T12772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12772 comm=syz.3.3306 [ 213.472053][T12777] netlink: 'syz.2.3310': attribute type 10 has an invalid length. [ 213.480060][T12777] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3310'. [ 213.788081][T12783] loop2: detected capacity change from 0 to 164 [ 213.832492][T12785] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 213.957292][ T29] audit: type=1326 audit(1744257768.044:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 213.981005][ T29] audit: type=1326 audit(1744257768.044:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 214.004675][ T29] audit: type=1326 audit(1744257768.044:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 214.028352][ T29] audit: type=1326 audit(1744257768.044:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12782 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 214.371522][T12793] loop3: detected capacity change from 0 to 8192 [ 214.380367][T12793] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.396013][T12793] netlink: 'syz.3.3316': attribute type 27 has an invalid length. [ 214.594946][T12799] binfmt_misc: register: failed to install interpreter file ./file2 [ 214.749102][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 214.758214][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 214.767278][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 214.790117][T12811] netlink: 'syz.3.3320': attribute type 10 has an invalid length. [ 214.797997][T12811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3320'. [ 214.867421][T12811] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 214.930420][T12824] loop2: detected capacity change from 0 to 164 [ 214.949974][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 214.959098][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 214.968076][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 215.032131][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3322'. [ 215.154710][T12847] loop2: detected capacity change from 0 to 512 [ 215.183920][T12847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 215.196942][T12847] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.265361][T12855] EXT4-fs (loop2): shut down requested (0) [ 215.284917][T12858] loop4: detected capacity change from 0 to 164 [ 215.703230][T12870] loop1: detected capacity change from 0 to 164 [ 215.872933][T12884] ip6tnl1: entered promiscuous mode [ 215.878293][T12884] ip6tnl1: entered allmulticast mode [ 215.976980][T12887] FAULT_INJECTION: forcing a failure. [ 215.976980][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.990218][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.4.3351 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 215.990249][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.990261][T12887] Call Trace: [ 215.990267][T12887] [ 215.990275][T12887] dump_stack_lvl+0xf6/0x150 [ 215.990300][T12887] dump_stack+0x15/0x1a [ 215.990386][T12887] should_fail_ex+0x261/0x270 [ 215.990497][T12887] should_fail+0xb/0x10 [ 215.990523][T12887] should_fail_usercopy+0x1a/0x20 [ 215.990557][T12887] _copy_to_user+0x20/0xa0 [ 215.990597][T12887] simple_read_from_buffer+0xb2/0x130 [ 215.990692][T12887] proc_fail_nth_read+0x103/0x140 [ 215.990714][T12887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.990755][T12887] vfs_read+0x1b2/0x710 [ 215.990781][T12887] ? __rcu_read_unlock+0x4e/0x70 [ 215.990868][T12887] ? __fget_files+0x186/0x1c0 [ 215.990889][T12887] ksys_read+0xeb/0x1b0 [ 215.990964][T12887] __x64_sys_read+0x42/0x50 [ 215.990997][T12887] x64_sys_call+0x2a3b/0x2e10 [ 215.991020][T12887] do_syscall_64+0xc9/0x1c0 [ 215.991063][T12887] ? clear_bhb_loop+0x25/0x80 [ 215.991213][T12887] ? clear_bhb_loop+0x25/0x80 [ 215.991241][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.991264][T12887] RIP: 0033:0x7f3e3172bb7c [ 215.991280][T12887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.991300][T12887] RSP: 002b:00007f3e2fd97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.991319][T12887] RAX: ffffffffffffffda RBX: 00007f3e31945fa0 RCX: 00007f3e3172bb7c [ 215.991331][T12887] RDX: 000000000000000f RSI: 00007f3e2fd970a0 RDI: 0000000000000004 [ 215.991342][T12887] RBP: 00007f3e2fd97090 R08: 0000000000000000 R09: 0000000000000000 [ 215.991354][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.991366][T12887] R13: 0000000000000000 R14: 00007f3e31945fa0 R15: 00007ffe2b5914e8 [ 215.991418][T12887] [ 216.255639][T11892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 216.265235][T12897] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.300684][T12899] --map-set only usable from mangle table [ 216.309484][T12900] netlink: 'syz.0.3356': attribute type 10 has an invalid length. [ 216.326297][T12900] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 216.368915][T12897] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.443403][T12897] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.464245][T12915] loop1: detected capacity change from 0 to 1024 [ 216.470916][T12915] EXT4-fs: Ignoring removed nobh option [ 216.480349][T12915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.503798][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.514167][T12897] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.545092][T12921] loop1: detected capacity change from 0 to 512 [ 216.552141][T12921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.573735][T12921] EXT4-fs (loop1): 1 truncate cleaned up [ 216.580059][T12921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.595516][T12921] : renamed from vlan0 (while UP) [ 216.612864][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.715745][T12924] loop1: detected capacity change from 0 to 8192 [ 216.758364][T12924] loop1: p2 p3 p4 [ 216.762198][T12924] loop1: p2 start 452985600 is beyond EOD, truncated [ 216.768947][T12924] loop1: p3 size 33554432 extends beyond EOD, truncated [ 216.776451][T12924] loop1: p4 start 8388607 is beyond EOD, truncated [ 216.936805][T12933] loop1: detected capacity change from 0 to 164 [ 217.040411][T12940] loop4: detected capacity change from 0 to 2048 [ 217.054896][T12941] --map-set only usable from mangle table [ 217.081467][T12940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12940 comm=syz.4.3371 [ 217.255247][T12948] loop4: detected capacity change from 0 to 128 [ 217.368558][ T3496] page_pool_release_retry() stalled pool shutdown: id 50, 1 inflight 60 sec [ 217.440336][T12953] loop1: detected capacity change from 0 to 8192 [ 217.456849][T12953] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 217.477835][T12953] netlink: 'syz.1.3376': attribute type 27 has an invalid length. [ 217.556254][T12953] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.563620][T12953] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.860567][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.882091][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 217.882114][ T29] audit: type=1326 audit(1744257772.074:11023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 217.912031][ T29] audit: type=1326 audit(1744257772.074:11024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 217.935765][ T29] audit: type=1326 audit(1744257772.074:11025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 217.940979][T12953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.004196][T12969] loop4: detected capacity change from 0 to 164 [ 218.122791][ T29] audit: type=1400 audit(1744257772.074:11026): avc: denied { read } for pid=12962 comm="syz.3.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.142494][ T29] audit: type=1326 audit(1744257772.154:11027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.166079][ T29] audit: type=1326 audit(1744257772.154:11028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12960 comm="syz.4.3379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.189781][ T29] audit: type=1326 audit(1744257772.214:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.213421][ T29] audit: type=1326 audit(1744257772.214:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.237189][ T29] audit: type=1326 audit(1744257772.214:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.260902][ T29] audit: type=1326 audit(1744257772.214:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12968 comm="syz.4.3382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 218.286828][T12953] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.295888][T12953] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.304860][T12953] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.313865][T12953] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.472096][T12897] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.495934][T12897] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.526882][T12897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.544236][T12897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.559316][T12977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.596075][T12976] loop3: detected capacity change from 0 to 2048 [ 218.635274][T12983] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.650640][T12976] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=12976 comm=syz.3.3384 [ 218.896103][T13000] loop1: detected capacity change from 0 to 8192 [ 218.914060][T13000] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.927103][T13006] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 218.935232][T13000] netlink: 'syz.1.3394': attribute type 27 has an invalid length. [ 219.008064][T13012] loop3: detected capacity change from 0 to 164 [ 219.279498][T13021] loop3: detected capacity change from 0 to 128 [ 219.722755][T13031] ip6tnl1: entered promiscuous mode [ 219.728015][T13031] ip6tnl1: entered allmulticast mode [ 220.030984][T13036] loop1: detected capacity change from 0 to 8192 [ 220.085223][T13036] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.117539][T13036] netlink: 'syz.1.3408': attribute type 27 has an invalid length. [ 220.139450][T13045] --map-set only usable from mangle table [ 220.146834][T13044] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 220.365852][T13055] loop4: detected capacity change from 0 to 512 [ 220.393125][T13055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.442664][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.457114][T13055] EXT4-fs (loop4): 1 truncate cleaned up [ 220.469067][T13055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.501830][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.511683][T13064] loop1: detected capacity change from 0 to 128 [ 220.576453][T13059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.634350][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.739459][T13073] binfmt_misc: register: failed to install interpreter file ./file2 [ 221.090190][T13077] loop2: detected capacity change from 0 to 8192 [ 221.121883][T13077] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.134664][T13077] netlink: 'syz.2.3423': attribute type 27 has an invalid length. [ 221.667110][T13092] loop3: detected capacity change from 0 to 512 [ 221.705032][T13092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.743325][T13092] EXT4-fs (loop3): 1 truncate cleaned up [ 221.757216][T13092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.777622][T13101] loop4: detected capacity change from 0 to 512 [ 221.830257][T13101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.858039][T13101] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.929462][T13107] EXT4-fs (loop4): shut down requested (0) [ 222.025849][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.284449][T13118] __nla_validate_parse: 3 callbacks suppressed [ 222.284467][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.299856][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.308821][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.368222][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.377253][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.386296][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.430063][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.439177][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.448229][T13118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3436'. [ 222.632337][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.896071][T13125] Set syz1 is full, maxelem 65536 reached [ 223.157883][T13134] loop4: detected capacity change from 0 to 128 [ 223.390665][T13142] loop3: detected capacity change from 0 to 512 [ 223.439486][T13142] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.474594][T13142] EXT4-fs (loop3): 1 truncate cleaned up [ 223.484661][T13142] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.512760][T13132] --map-set only usable from mangle table [ 223.578015][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.784003][T13155] --map-set only usable from mangle table [ 223.847512][T13153] loop3: detected capacity change from 0 to 8192 [ 223.866078][T13159] loop1: detected capacity change from 0 to 128 [ 223.884779][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 223.884798][ T29] audit: type=1326 audit(1744257778.074:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 223.914866][T13153] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.927530][T13153] netlink: 'syz.3.3446': attribute type 27 has an invalid length. [ 223.948913][T13159] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.992361][ T29] audit: type=1326 audit(1744257778.074:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.016033][ T29] audit: type=1326 audit(1744257778.074:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.039683][ T29] audit: type=1326 audit(1744257778.074:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.063323][ T29] audit: type=1326 audit(1744257778.074:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.086998][ T29] audit: type=1326 audit(1744257778.074:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.093515][T13159] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 224.110659][ T29] audit: type=1326 audit(1744257778.074:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.165995][ T29] audit: type=1326 audit(1744257778.074:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.189674][ T29] audit: type=1326 audit(1744257778.074:11271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.213419][ T29] audit: type=1326 audit(1744257778.074:11272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.0.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 224.363328][T13169] loop3: detected capacity change from 0 to 512 [ 224.385686][T12556] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.408445][T13171] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 224.427118][T13169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 224.448337][T13169] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.527984][T13180] EXT4-fs (loop3): shut down requested (0) [ 224.572627][T13186] binfmt_misc: register: failed to install interpreter file ./file2 [ 224.618243][T13189] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13189 comm=syz.0.3461 [ 224.765000][T13205] netlink: 'syz.1.3465': attribute type 10 has an invalid length. [ 224.773067][T13205] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3465'. [ 224.795254][T13205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.833855][T13205] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 224.857817][T13205] team0: Failed to send options change via netlink (err -105) [ 224.865403][T13205] team0: Port device geneve1 added [ 224.904877][T13213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.926269][T13197] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.054000][T13197] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.070141][T13197] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.081742][T13197] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.093715][T13197] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.211921][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 225.988028][T13236] loop2: detected capacity change from 0 to 2048 [ 226.035065][T13233] loop1: detected capacity change from 0 to 8192 [ 226.056892][T13233] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.069138][T13233] netlink: 'syz.1.3474': attribute type 27 has an invalid length. [ 226.154870][T13233] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.163517][T13233] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.171965][T13233] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.180417][T13233] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.190816][T13240] loop4: detected capacity change from 0 to 128 [ 226.202296][T13236] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13236 comm=syz.2.3477 [ 226.224139][T13241] loop3: detected capacity change from 0 to 164 [ 226.436528][T13250] ip6tnl1: entered promiscuous mode [ 226.441862][T13250] ip6tnl1: entered allmulticast mode [ 226.467380][T13252] netlink: 'syz.2.3481': attribute type 10 has an invalid length. [ 226.880521][T13261] loop3: detected capacity change from 0 to 128 [ 227.252630][T13266] netlink: 'syz.2.3485': attribute type 10 has an invalid length. [ 227.522924][T13272] binfmt_misc: register: failed to install interpreter file ./file2 [ 227.564007][T13274] loop4: detected capacity change from 0 to 2048 [ 227.618435][T13274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13274 comm=syz.4.3488 [ 228.019251][T13291] team0: Port device geneve1 removed [ 228.474442][T13300] loop1: detected capacity change from 0 to 2048 [ 228.558606][T13300] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13300 comm=syz.1.3499 [ 228.662368][T13308] binfmt_misc: register: failed to install interpreter file ./file2 [ 228.763211][T13316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.809251][T13314] loop1: detected capacity change from 0 to 8192 [ 228.819693][T13314] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 228.834737][T13317] netlink: 'syz.0.3507': attribute type 10 has an invalid length. [ 228.842706][T13317] __nla_validate_parse: 2 callbacks suppressed [ 228.842721][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3507'. [ 228.854652][T13314] netlink: 'syz.1.3506': attribute type 27 has an invalid length. [ 228.867995][T13320] loop2: detected capacity change from 0 to 128 [ 228.875646][T13319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.905120][T13316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.950411][T13316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.007671][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 229.017809][T13316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.085671][T13316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.098340][T13334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13334 comm=syz.4.3511 [ 229.101979][T13316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.124398][T13335] bridge_slave_0: left allmulticast mode [ 229.130186][T13335] bridge_slave_0: left promiscuous mode [ 229.135902][T13335] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.148203][T13335] bridge_slave_1: left allmulticast mode [ 229.153920][T13335] bridge_slave_1: left promiscuous mode [ 229.159800][T13335] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.169566][T13335] bond0: (slave bond_slave_0): Releasing backup interface [ 229.178387][T13335] bond0: (slave bond_slave_1): Releasing backup interface [ 229.187142][T13335] team0: Port device team_slave_0 removed [ 229.193752][T13335] team0: Port device team_slave_1 removed [ 229.199963][T13335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.209965][T13335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.224625][T13335] team0: Port device geneve1 removed [ 229.235526][T13316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.252484][T13316] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.315468][T13339] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13339 comm=syz.0.3513 [ 229.405138][T13342] netlink: 'syz.3.3514': attribute type 10 has an invalid length. [ 229.413037][T13342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3514'. [ 229.422244][T13342] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 229.722511][T13350] --map-set only usable from mangle table [ 229.793409][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 229.793426][ T29] audit: type=1326 audit(1744257783.984:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.126231][ T29] audit: type=1326 audit(1744257784.084:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.149999][ T29] audit: type=1326 audit(1744257784.084:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.173696][ T29] audit: type=1326 audit(1744257784.094:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.197336][ T29] audit: type=1326 audit(1744257784.094:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.220958][ T29] audit: type=1326 audit(1744257784.094:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.244664][ T29] audit: type=1326 audit(1744257784.094:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.268382][ T29] audit: type=1326 audit(1744257784.094:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.292016][ T29] audit: type=1326 audit(1744257784.094:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.315517][ T29] audit: type=1326 audit(1744257784.094:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.0.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 230.368327][T13372] ip6tnl1: entered promiscuous mode [ 230.373585][T13372] ip6tnl1: entered allmulticast mode [ 231.158255][T13383] loop1: detected capacity change from 0 to 128 [ 231.312976][T13385] 9pnet_virtio: no channels available for device 127.0.0.1 [ 231.361549][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.370684][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.379745][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.471601][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.480827][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.489809][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.526484][T13385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3528'. [ 231.657498][T13399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13399 comm=syz.3.3531 [ 232.102334][T13406] loop1: detected capacity change from 0 to 512 [ 232.134348][T13406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 232.147019][T13406] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.231485][T13412] EXT4-fs (loop1): shut down requested (0) [ 232.336115][T13418] ip6tnl1: entered promiscuous mode [ 232.341415][T13418] ip6tnl1: entered allmulticast mode [ 232.993432][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 233.086920][T13441] 9pnet_virtio: no channels available for device 127.0.0.1 [ 233.234113][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.242505][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.259196][T13457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 233.280477][T13460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13460 comm=syz.3.3548 [ 233.306856][T13459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13459 comm=syz.1.3551 [ 233.420900][T13472] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 233.441399][T13473] bridge_slave_0: left allmulticast mode [ 233.447143][T13473] bridge_slave_0: left promiscuous mode [ 233.452810][T13473] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.462421][T13473] bridge_slave_1: left allmulticast mode [ 233.468101][T13473] bridge_slave_1: left promiscuous mode [ 233.473839][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.485992][T13473] bond0: (slave bond_slave_0): Releasing backup interface [ 233.508759][T13473] bond0: (slave bond_slave_1): Releasing backup interface [ 233.538577][T13473] team0: Port device team_slave_0 removed [ 233.550185][T13473] team0: Port device team_slave_1 removed [ 233.557131][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.564793][T13473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.590193][T13473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.597846][T13473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.617079][T13473] team0: Port device geneve1 removed [ 233.623898][T13472] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.632138][T13472] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.643498][T13472] team0: Port device geneve1 added [ 233.658263][T13468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.719455][T13468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.746003][T13485] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 233.777434][T13468] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.788991][T13468] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.800541][T13468] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.813437][T13468] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.845543][T13489] gretap0: refused to change device tx_queue_len [ 233.853472][T13489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 234.069969][T13508] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 234.114380][T13514] 9pnet_virtio: no channels available for device 127.0.0.1 [ 234.126842][T13514] __nla_validate_parse: 15 callbacks suppressed [ 234.126858][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.142170][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.151144][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.167186][T13517] loop4: detected capacity change from 0 to 8192 [ 234.174584][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.175122][T13517] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.183714][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.203107][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.207848][T13517] netlink: 'syz.4.3573': attribute type 27 has an invalid length. [ 234.235790][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.244982][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.254028][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3572'. [ 234.521754][T13537] ip6tnl1: entered promiscuous mode [ 234.527025][T13537] ip6tnl1: entered allmulticast mode [ 234.536314][T13539] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 234.636989][T13549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13549 comm=syz.0.3585 [ 234.654526][ T1073] IPVS: starting estimator thread 0... [ 234.689117][T13552] loop1: detected capacity change from 0 to 164 [ 234.758416][T13550] IPVS: using max 2256 ests per chain, 112800 per kthread [ 234.842834][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 234.842849][ T29] audit: type=1400 audit(1744257789.034:11590): avc: denied { mounton } for pid=13548 comm="syz.0.3585" path="/54/file0" dev="tmpfs" ino=307 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 234.922816][T13570] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 234.968889][T13572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.983161][T13572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 235.006299][ T29] audit: type=1326 audit(1744257789.194:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.030142][ T29] audit: type=1326 audit(1744257789.194:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.053843][ T29] audit: type=1326 audit(1744257789.194:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.077646][ T29] audit: type=1326 audit(1744257789.194:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.105421][ T29] audit: type=1326 audit(1744257789.194:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.129153][ T29] audit: type=1326 audit(1744257789.274:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.152748][ T29] audit: type=1326 audit(1744257789.274:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.176425][ T29] audit: type=1326 audit(1744257789.274:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.200097][ T29] audit: type=1326 audit(1744257789.274:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13573 comm="syz.2.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 235.306796][T13589] loop3: detected capacity change from 0 to 512 [ 235.388867][T13595] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 235.408210][T13589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 235.421056][T13589] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.440611][T13598] 9pnet_virtio: no channels available for device 127.0.0.1 [ 235.448335][T13598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3604'. [ 235.494568][T13599] EXT4-fs (loop3): shut down requested (0) [ 235.927115][T13615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.155236][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.455573][T13655] --map-set only usable from mangle table [ 236.558084][T13666] loop4: detected capacity change from 0 to 512 [ 236.565172][T13666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 236.588901][T13666] EXT4-fs (loop4): 1 truncate cleaned up [ 236.595006][T13666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.598670][T13673] 9pnet_virtio: no channels available for device 127.0.0.1 [ 236.652403][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.676181][T13677] loop3: detected capacity change from 0 to 8192 [ 236.683949][T13677] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.697395][T13677] netlink: 'syz.3.3634': attribute type 27 has an invalid length. [ 237.023855][T13697] Cannot find add_set index 1 as target [ 237.029797][T13699] Cannot find add_set index 1 as target [ 237.130840][T13712] loop3: detected capacity change from 0 to 512 [ 237.141746][T13712] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.170787][T13713] --map-set only usable from mangle table [ 237.189974][T13712] EXT4-fs (loop3): 1 truncate cleaned up [ 237.196179][T13712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.262287][T13718] netlink: 'syz.0.3647': attribute type 27 has an invalid length. [ 237.564523][T13718] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.573046][T13718] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.581646][T13718] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.590182][T13718] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.663438][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.775348][T13752] syz.0.3657 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 237.790564][T13749] loop3: detected capacity change from 0 to 2048 [ 237.799246][T13751] 9pnet_virtio: no channels available for device 127.0.0.1 [ 237.844213][T13749] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13749 comm=syz.3.3661 [ 237.976245][T13764] loop2: detected capacity change from 0 to 512 [ 237.983338][T13764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.994587][T13764] EXT4-fs (loop2): 1 truncate cleaned up [ 238.001008][T13764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.033990][T13770] FAULT_INJECTION: forcing a failure. [ 238.033990][T13770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.047117][T13770] CPU: 0 UID: 0 PID: 13770 Comm: syz.3.3666 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 238.047192][T13770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 238.047208][T13770] Call Trace: [ 238.047222][T13770] [ 238.047232][T13770] dump_stack_lvl+0xf6/0x150 [ 238.047280][T13770] dump_stack+0x15/0x1a [ 238.047301][T13770] should_fail_ex+0x261/0x270 [ 238.047408][T13770] should_fail+0xb/0x10 [ 238.047436][T13770] should_fail_usercopy+0x1a/0x20 [ 238.047551][T13770] strncpy_from_user+0x25/0x230 [ 238.047575][T13770] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 238.047608][T13770] __se_sys_memfd_create+0x218/0x5a0 [ 238.047642][T13770] __x64_sys_memfd_create+0x31/0x40 [ 238.047691][T13770] x64_sys_call+0x1163/0x2e10 [ 238.047717][T13770] do_syscall_64+0xc9/0x1c0 [ 238.047751][T13770] ? clear_bhb_loop+0x25/0x80 [ 238.047776][T13770] ? clear_bhb_loop+0x25/0x80 [ 238.047814][T13770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.047839][T13770] RIP: 0033:0x7ff4716dd169 [ 238.047859][T13770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.047879][T13770] RSP: 002b:00007ff46fd3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 238.047901][T13770] RAX: ffffffffffffffda RBX: 0000000000000bd5 RCX: 00007ff4716dd169 [ 238.047916][T13770] RDX: 00007ff46fd3eef0 RSI: 0000000000000000 RDI: 00007ff47175f0cc [ 238.047929][T13770] RBP: 0000200000000c00 R08: 00007ff46fd3ebb7 R09: 00007ff46fd3ee40 [ 238.048008][T13770] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 238.048021][T13770] R13: 00007ff46fd3eef0 R14: 00007ff46fd3eeb0 R15: 00002000000000c0 [ 238.048043][T13770] [ 238.221861][T11892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.267473][T13772] loop3: detected capacity change from 0 to 8192 [ 238.275169][T13772] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.287409][T13772] netlink: 'syz.3.3668': attribute type 27 has an invalid length. [ 238.320029][T13779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13779 comm=syz.2.3669 [ 238.391406][T13788] loop1: detected capacity change from 0 to 2048 [ 238.430811][T13788] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=13788 comm=syz.1.3674 [ 238.520049][T13789] loop3: detected capacity change from 0 to 128 [ 238.710636][T13805] netlink: 'syz.0.3680': attribute type 27 has an invalid length. [ 238.867583][T13818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.881883][T13818] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.899931][T13818] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.146042][T13830] tipc: Started in network mode [ 239.151080][T13830] tipc: Node identity fc000000000000000000000000000001, cluster identity 4711 [ 239.159968][T13830] tipc: Enabling of bearer rejected, failed to enable media [ 239.177377][T13832] tipc: Enabling of bearer rejected, failed to enable media [ 239.512962][T13844] loop2: detected capacity change from 0 to 128 [ 239.611932][T13845] loop4: detected capacity change from 0 to 8192 [ 239.623228][T13845] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.636680][T13845] netlink: 'syz.4.3694': attribute type 27 has an invalid length. [ 239.739289][T13849] netlink: 'syz.4.3695': attribute type 10 has an invalid length. [ 239.747182][T13849] __nla_validate_parse: 37 callbacks suppressed [ 239.747196][T13849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3695'. [ 239.767338][T13849] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.775682][T13849] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.792021][T13849] team0: Port device geneve1 added [ 239.806120][T13848] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.875497][T13848] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.934129][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 239.934144][ T29] audit: type=1326 audit(1744257794.124:11682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 239.971984][ T29] audit: type=1326 audit(1744257794.134:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 239.974927][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3699'. [ 239.995597][ T29] audit: type=1326 audit(1744257794.134:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 239.995635][ T29] audit: type=1326 audit(1744257794.134:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13857 comm="syz.1.3698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 240.028498][T13863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13863 comm=syz.0.3699 [ 240.081696][T13848] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.099334][T13848] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.117106][T13848] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.134597][T13848] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.175037][ T29] audit: type=1400 audit(1744257794.364:11686): avc: denied { connect } for pid=13865 comm="syz.4.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.195046][T13866] loop4: detected capacity change from 0 to 512 [ 240.216922][T13864] loop1: detected capacity change from 0 to 128 [ 240.218203][T13866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.295688][T13866] bridge0: entered allmulticast mode [ 240.358023][T13872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.402600][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.411719][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.420854][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.432373][T13877] loop3: detected capacity change from 0 to 8192 [ 240.440067][T13877] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 240.441591][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.453210][T13877] netlink: 'syz.3.3705': attribute type 27 has an invalid length. [ 240.459857][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.476723][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.500891][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.510198][T13879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3706'. [ 240.952673][ T29] audit: type=1326 audit(1744257795.144:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 240.976479][ T29] audit: type=1326 audit(1744257795.144:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 241.117548][ T29] audit: type=1326 audit(1744257795.194:11689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 241.141312][ T29] audit: type=1326 audit(1744257795.194:11690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 241.165109][ T29] audit: type=1326 audit(1744257795.194:11691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13896 comm="syz.0.3712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfccd6d169 code=0x7ffc0000 [ 241.221004][T13904] --map-set only usable from mangle table [ 241.481241][T13914] loop1: detected capacity change from 0 to 512 [ 241.494949][T13914] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 241.544517][T13917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13917 comm=syz.2.3719 [ 241.643695][ T1073] page_pool_release_retry() stalled pool shutdown: id 51, 1 inflight 60 sec [ 241.658055][T13914] tipc: Can't bind to reserved service type 0 [ 241.692953][T13919] FAULT_INJECTION: forcing a failure. [ 241.692953][T13919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.706139][T13919] CPU: 0 UID: 0 PID: 13919 Comm: syz.1.3720 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 241.706173][T13919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.706208][T13919] Call Trace: [ 241.706215][T13919] [ 241.706223][T13919] dump_stack_lvl+0xf6/0x150 [ 241.706247][T13919] dump_stack+0x15/0x1a [ 241.706263][T13919] should_fail_ex+0x261/0x270 [ 241.706294][T13919] should_fail+0xb/0x10 [ 241.706317][T13919] should_fail_usercopy+0x1a/0x20 [ 241.706364][T13919] _copy_from_user+0x1c/0xa0 [ 241.706467][T13919] copy_msghdr_from_user+0x54/0x2b0 [ 241.706513][T13919] __sys_sendmsg+0x141/0x240 [ 241.706563][T13919] __x64_sys_sendmsg+0x46/0x50 [ 241.706622][T13919] x64_sys_call+0x26f3/0x2e10 [ 241.706705][T13919] do_syscall_64+0xc9/0x1c0 [ 241.706766][T13919] ? clear_bhb_loop+0x25/0x80 [ 241.706793][T13919] ? clear_bhb_loop+0x25/0x80 [ 241.706868][T13919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.706902][T13919] RIP: 0033:0x7f19f73cd169 [ 241.706920][T13919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.706944][T13919] RSP: 002b:00007f19f5a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.706965][T13919] RAX: ffffffffffffffda RBX: 00007f19f75e5fa0 RCX: 00007f19f73cd169 [ 241.706980][T13919] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000006 [ 241.706995][T13919] RBP: 00007f19f5a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.707009][T13919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.707022][T13919] R13: 0000000000000000 R14: 00007f19f75e5fa0 R15: 00007ffd9dc74698 [ 241.707046][T13919] [ 241.900369][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.987227][T13929] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.039940][T13934] netlink: 'syz.1.3724': attribute type 10 has an invalid length. [ 242.068182][T13934] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.072763][T13936] loop3: detected capacity change from 0 to 164 [ 242.076578][T13934] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.091237][T13934] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.327567][T13948] --map-set only usable from mangle table [ 242.595965][T13950] netlink: 'syz.2.3729': attribute type 10 has an invalid length. [ 242.622441][T13957] FAULT_INJECTION: forcing a failure. [ 242.622441][T13957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.635638][T13957] CPU: 0 UID: 0 PID: 13957 Comm: syz.1.3730 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 242.635673][T13957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.635688][T13957] Call Trace: [ 242.635696][T13957] [ 242.635706][T13957] dump_stack_lvl+0xf6/0x150 [ 242.635774][T13957] dump_stack+0x15/0x1a [ 242.635795][T13957] should_fail_ex+0x261/0x270 [ 242.635829][T13957] should_fail+0xb/0x10 [ 242.635914][T13957] should_fail_usercopy+0x1a/0x20 [ 242.635971][T13957] strncpy_from_user+0x25/0x230 [ 242.635997][T13957] ? getname_flags+0x81/0x3b0 [ 242.636020][T13957] getname_flags+0xb0/0x3b0 [ 242.636040][T13957] user_path_at+0x26/0x140 [ 242.636064][T13957] __x64_sys_umount+0x86/0xe0 [ 242.636150][T13957] x64_sys_call+0x2883/0x2e10 [ 242.636175][T13957] do_syscall_64+0xc9/0x1c0 [ 242.636243][T13957] ? clear_bhb_loop+0x25/0x80 [ 242.636329][T13957] ? clear_bhb_loop+0x25/0x80 [ 242.636355][T13957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.636376][T13957] RIP: 0033:0x7f19f73cd169 [ 242.636391][T13957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.636408][T13957] RSP: 002b:00007f19f5a2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 242.636444][T13957] RAX: ffffffffffffffda RBX: 00007f19f75e5fa0 RCX: 00007f19f73cd169 [ 242.636456][T13957] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 242.636468][T13957] RBP: 00007f19f5a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.636479][T13957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.636491][T13957] R13: 0000000000000000 R14: 00007f19f75e5fa0 R15: 00007ffd9dc74698 [ 242.636512][T13957] [ 243.055478][T13965] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.063988][T13965] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.072438][T13965] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.080915][T13965] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.231786][T13965] team0: Port device geneve1 removed [ 243.286793][T13976] loop3: detected capacity change from 0 to 512 [ 243.319123][T13976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 243.351022][T13976] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.381171][T13981] netlink: 'syz.2.3738': attribute type 10 has an invalid length. [ 243.501374][T13993] loop1: detected capacity change from 0 to 256 [ 243.524197][T13993] FAT-fs (loop1): codepage cp857 not found [ 243.987687][T14018] loop4: detected capacity change from 0 to 2048 [ 244.139014][T14018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.177824][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 244.367700][T14024] netlink: 'syz.1.3751': attribute type 10 has an invalid length. [ 244.429588][T14018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.636245][T14042] --map-set only usable from mangle table [ 244.774261][T14041] --map-set only usable from mangle table [ 244.905294][T14060] __nla_validate_parse: 25 callbacks suppressed [ 244.905312][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 244.920875][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 244.929893][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 244.959916][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 244.969002][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 244.977967][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 245.035207][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 245.035222][ T29] audit: type=1400 audit(1744257799.224:11913): avc: denied { write } for pid=14067 comm="syz.4.3763" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 245.091728][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 245.100787][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 245.109906][T14060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3762'. [ 245.134421][ T29] audit: type=1326 audit(1744257799.324:11914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.2.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.172737][ T29] audit: type=1326 audit(1744257799.354:11915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.2.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.196493][ T29] audit: type=1326 audit(1744257799.354:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.2.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.220160][ T29] audit: type=1326 audit(1744257799.354:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14071 comm="syz.2.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.226690][T14078] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3763'. [ 245.259483][ T29] audit: type=1326 audit(1744257799.454:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.283272][ T29] audit: type=1326 audit(1744257799.454:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.312599][T14081] loop2: detected capacity change from 0 to 1024 [ 245.319747][T14081] EXT4-fs: Ignoring removed oldalloc option [ 245.325759][T14081] EXT4-fs: Ignoring removed orlov option [ 245.331609][T14081] EXT4-fs: inline encryption not supported [ 245.337736][ T29] audit: type=1326 audit(1744257799.504:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 245.361458][ T29] audit: type=1326 audit(1744257799.504:11921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffab2e2d1a3 code=0x7ffc0000 [ 245.384934][ T29] audit: type=1326 audit(1744257799.504:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffab2e2bc1f code=0x7ffc0000 [ 245.408924][T14081] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 245.422050][T14083] loop1: detected capacity change from 0 to 512 [ 245.429187][T14083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 245.446055][T14081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.460461][T14083] EXT4-fs (loop1): 1 truncate cleaned up [ 245.466460][T14083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.611484][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.628675][T11892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.646186][T14098] FAULT_INJECTION: forcing a failure. [ 245.646186][T14098] name failslab, interval 1, probability 0, space 0, times 0 [ 245.659124][T14098] CPU: 0 UID: 0 PID: 14098 Comm: syz.3.3775 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 245.659158][T14098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.659173][T14098] Call Trace: [ 245.659181][T14098] [ 245.659191][T14098] dump_stack_lvl+0xf6/0x150 [ 245.659220][T14098] dump_stack+0x15/0x1a [ 245.659284][T14098] should_fail_ex+0x261/0x270 [ 245.659383][T14098] should_failslab+0x8f/0xb0 [ 245.659421][T14098] kmem_cache_alloc_noprof+0x59/0x340 [ 245.659449][T14098] ? getname_flags+0x81/0x3b0 [ 245.659474][T14098] getname_flags+0x81/0x3b0 [ 245.659498][T14098] do_sys_openat2+0x65/0x110 [ 245.659585][T14098] __x64_sys_openat+0xf8/0x120 [ 245.659609][T14098] x64_sys_call+0x1ac/0x2e10 [ 245.659634][T14098] do_syscall_64+0xc9/0x1c0 [ 245.659743][T14098] ? clear_bhb_loop+0x25/0x80 [ 245.659785][T14098] ? clear_bhb_loop+0x25/0x80 [ 245.659811][T14098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.659837][T14098] RIP: 0033:0x7ff4716dd169 [ 245.659855][T14098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.659933][T14098] RSP: 002b:00007ff46fd3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.659951][T14098] RAX: ffffffffffffffda RBX: 00007ff4718f5fa0 RCX: 00007ff4716dd169 [ 245.659963][T14098] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 245.659974][T14098] RBP: 00007ff46fd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.659987][T14098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.660001][T14098] R13: 0000000000000000 R14: 00007ff4718f5fa0 R15: 00007fff92b80388 [ 245.660024][T14098] [ 245.901615][T14114] loop2: detected capacity change from 0 to 128 [ 245.990999][T14116] --map-set only usable from mangle table [ 246.273686][T14135] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14135 comm=syz.0.3787 [ 246.411466][T14137] team0: Port device geneve1 removed [ 247.394629][T14165] loop4: detected capacity change from 0 to 1024 [ 247.406707][T14164] --map-set only usable from mangle table [ 247.423561][T14165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.436561][T14165] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.455792][T14165] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3796: bg 0: block 393: padding at end of block bitmap is not set [ 247.475983][T14165] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 1 with error 117 [ 247.488478][T14165] EXT4-fs (loop4): This should not happen!! Data will be lost [ 247.488478][T14165] [ 247.542771][T14172] loop1: detected capacity change from 0 to 512 [ 247.555165][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.570290][T14172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 247.679045][T14172] EXT4-fs (loop1): 1 truncate cleaned up [ 247.694549][T14172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.767993][T14185] loop4: detected capacity change from 0 to 2048 [ 247.805165][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.832926][T14185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14185 comm=syz.4.3802 [ 247.959178][T14198] syzkaller1: entered promiscuous mode [ 247.964709][T14198] syzkaller1: entered allmulticast mode [ 247.993432][T14198] blktrace: Concurrent blktraces are not allowed on sg0 [ 248.186548][T14211] FAULT_INJECTION: forcing a failure. [ 248.186548][T14211] name failslab, interval 1, probability 0, space 0, times 0 [ 248.199275][T14211] CPU: 0 UID: 0 PID: 14211 Comm: syz.0.3812 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 248.199309][T14211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.199370][T14211] Call Trace: [ 248.199378][T14211] [ 248.199388][T14211] dump_stack_lvl+0xf6/0x150 [ 248.199417][T14211] dump_stack+0x15/0x1a [ 248.199474][T14211] should_fail_ex+0x261/0x270 [ 248.199506][T14211] should_failslab+0x8f/0xb0 [ 248.199545][T14211] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 248.199572][T14211] ? __alloc_skb+0x10d/0x320 [ 248.199672][T14211] __alloc_skb+0x10d/0x320 [ 248.199693][T14211] ? audit_log_start+0x37f/0x6e0 [ 248.199717][T14211] audit_log_start+0x39a/0x6e0 [ 248.199743][T14211] ? kstrtouint+0x7b/0xc0 [ 248.199768][T14211] audit_seccomp+0x4b/0x130 [ 248.199788][T14211] __seccomp_filter+0x694/0x10e0 [ 248.199890][T14211] ? vfs_write+0x669/0x950 [ 248.199930][T14211] __secure_computing+0x7e/0x160 [ 248.199963][T14211] syscall_trace_enter+0xcf/0x1f0 [ 248.200054][T14211] do_syscall_64+0xaa/0x1c0 [ 248.200088][T14211] ? clear_bhb_loop+0x25/0x80 [ 248.200121][T14211] ? clear_bhb_loop+0x25/0x80 [ 248.200144][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.200245][T14211] RIP: 0033:0x7fbfccd6d169 [ 248.200263][T14211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.200285][T14211] RSP: 002b:00007fbfcb3cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 248.200307][T14211] RAX: ffffffffffffffda RBX: 00007fbfccf85fa0 RCX: 00007fbfccd6d169 [ 248.200322][T14211] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.200402][T14211] RBP: 00007fbfcb3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 248.200416][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.200430][T14211] R13: 0000000000000000 R14: 00007fbfccf85fa0 R15: 00007ffc03e377e8 [ 248.200453][T14211] [ 248.404520][T14213] loop2: detected capacity change from 0 to 128 [ 248.411610][T14213] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.438199][T14213] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 248.876363][T14225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14225 comm=syz.0.3816 [ 248.915506][T14233] 9pnet_fd: Insufficient options for proto=fd [ 248.990214][T14239] loop1: detected capacity change from 0 to 164 [ 249.060355][T14235] loop3: detected capacity change from 0 to 8192 [ 249.087438][T14235] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.126636][T14235] netlink: 'syz.3.3821': attribute type 27 has an invalid length. [ 249.165060][T14243] loop2: detected capacity change from 0 to 1024 [ 249.178069][T14243] EXT4-fs (loop2): bad block size 16384 [ 249.373451][T14255] loop4: detected capacity change from 0 to 128 [ 249.970115][T14259] loop3: detected capacity change from 0 to 128 [ 250.371649][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 250.371667][ T29] audit: type=1326 audit(1744257803.604:12200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 251.358401][ T29] audit: type=1326 audit(1744257804.594:12201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 251.382057][ T29] audit: type=1326 audit(1744257804.594:12202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 251.405632][ T29] audit: type=1326 audit(1744257804.594:12203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14256 comm="syz.2.3829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffab2e2d169 code=0x7ffc0000 [ 251.503213][ T1073] page_pool_release_retry() stalled pool shutdown: id 62, 1 inflight 60 sec [ 252.314915][T14278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14278 comm=syz.0.3836 [ 252.405860][T14281] loop1: detected capacity change from 0 to 164 [ 252.422871][ T29] audit: type=1326 audit(1744257806.614:12204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.447122][ T29] audit: type=1326 audit(1744257806.614:12205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.471448][ T29] audit: type=1326 audit(1744257806.614:12206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.495413][ T29] audit: type=1326 audit(1744257806.614:12207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.519333][ T29] audit: type=1326 audit(1744257806.614:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.542982][ T29] audit: type=1326 audit(1744257806.614:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14280 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 252.585976][T14283] loop2: detected capacity change from 0 to 8192 [ 252.593599][T14283] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.611121][T14283] netlink: 'syz.2.3838': attribute type 27 has an invalid length. [ 252.795782][T14300] __nla_validate_parse: 20 callbacks suppressed [ 252.795804][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3843'. [ 252.833661][T14296] x_tables: duplicate underflow at hook 1 [ 252.857111][T14296] netlink: 'syz.0.3841': attribute type 4 has an invalid length. [ 252.932557][T14303] loop1: detected capacity change from 0 to 1024 [ 253.222189][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3847'. [ 253.235857][T14313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3847'. [ 253.254186][T14313] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 253.393912][T14327] 9pnet_fd: Insufficient options for proto=fd [ 253.411136][T14330] --map-set only usable from mangle table [ 253.487389][T14334] loop2: detected capacity change from 0 to 128 [ 253.497867][T14334] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 253.514855][T14334] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 253.744515][T14354] --map-set only usable from mangle table [ 254.045493][T14362] 9pnet_fd: Insufficient options for proto=fd [ 254.232554][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3870'. [ 254.238851][T14367] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 254.592434][T14383] loop3: detected capacity change from 0 to 512 [ 254.683337][T14383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 254.727573][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3880'. [ 254.739202][T14398] --map-set only usable from mangle table [ 254.758330][T14383] EXT4-fs (loop3): 1 truncate cleaned up [ 254.805097][T14383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.008566][T14413] --map-set only usable from mangle table [ 255.073728][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.125692][T14418] loop1: detected capacity change from 0 to 2048 [ 255.176324][T14418] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14418 comm=syz.1.3889 [ 255.284177][T14428] netlink: 'syz.0.3891': attribute type 10 has an invalid length. [ 255.292156][T14428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3891'. [ 255.334846][T14428] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.343162][T14428] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.384340][T14428] team0: Port device geneve1 added [ 255.407413][T14425] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.408565][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3894'. [ 255.519772][T14425] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.558253][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 255.558270][ T29] audit: type=1326 audit(1744257809.734:12398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.588208][ T29] audit: type=1326 audit(1744257809.734:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.611919][ T29] audit: type=1326 audit(1744257809.734:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.620633][T14444] netlink: 'syz.1.3898': attribute type 10 has an invalid length. [ 255.635560][ T29] audit: type=1326 audit(1744257809.734:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.635596][ T29] audit: type=1326 audit(1744257809.734:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.643462][T14444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3898'. [ 255.667033][ T29] audit: type=1326 audit(1744257809.734:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.692308][T14444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.699715][ T29] audit: type=1326 audit(1744257809.734:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.723240][T14444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.731401][ T29] audit: type=1326 audit(1744257809.734:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.754970][T14444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.763117][ T29] audit: type=1326 audit(1744257809.734:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.786708][T14444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.794901][ T29] audit: type=1326 audit(1744257809.734:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14441 comm="syz.1.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 255.851634][T14444] team0: Port device geneve1 added [ 255.878097][T14425] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.896950][T14425] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.908999][T14425] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.920828][T14425] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.030253][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3903'. [ 256.039391][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3903'. [ 256.483499][T14479] loop3: detected capacity change from 0 to 2048 [ 256.565826][T14479] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14479 comm=syz.3.3908 [ 256.680335][T14482] --map-set only usable from mangle table [ 256.884085][T14487] loop3: detected capacity change from 0 to 128 [ 256.906326][T14490] netlink: 'syz.0.3912': attribute type 10 has an invalid length. [ 256.965692][T14487] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.994457][T14490] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.002964][T14490] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.011392][T14490] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.019794][T14490] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.068974][T14487] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.138919][T14497] loop1: detected capacity change from 0 to 128 [ 257.153974][T14497] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.225244][T14497] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.369953][T14507] 9pnet_fd: Insufficient options for proto=fd [ 257.506115][T14520] loop1: detected capacity change from 0 to 512 [ 257.592353][T14532] loop3: detected capacity change from 0 to 128 [ 257.605206][T14520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 257.617959][T14532] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.630628][T14520] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.652832][T14532] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.662602][T14538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.671552][T14520] EXT4-fs (loop1): shut down requested (0) [ 257.716917][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 257.738732][T14544] 9pnet_fd: Insufficient options for proto=fd [ 257.759514][T14546] loop1: detected capacity change from 0 to 2048 [ 257.801936][T14546] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14546 comm=syz.1.3933 [ 257.980507][T14566] loop1: detected capacity change from 0 to 512 [ 258.235428][T14571] 9pnet_fd: Insufficient options for proto=fd [ 258.374732][T14573] x_tables: duplicate underflow at hook 2 [ 258.405476][T14575] loop2: detected capacity change from 0 to 2048 [ 258.574554][T14583] loop3: detected capacity change from 0 to 128 [ 258.600565][T14583] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 258.839441][T14583] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.905721][T14566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 258.929862][T14566] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.974290][T14566] EXT4-fs (loop1): shut down requested (0) [ 259.004117][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 259.075942][T14598] loop3: detected capacity change from 0 to 128 [ 259.112499][T14598] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 259.149802][T14598] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 259.259159][T14604] 9pnet_fd: Insufficient options for proto=fd [ 259.336929][T14608] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 259.344887][T14608] __nla_validate_parse: 18 callbacks suppressed [ 259.344903][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3961'. [ 259.442071][T14608] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.450604][T14608] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.459063][T14608] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.467427][T14608] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.689313][T14628] loop4: detected capacity change from 0 to 8192 [ 259.712181][T14628] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.726388][T14628] netlink: 'syz.4.3968': attribute type 27 has an invalid length. [ 260.243219][T14635] loop2: detected capacity change from 0 to 128 [ 260.399417][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 260.408532][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 260.545065][T14639] 9pnet_fd: Insufficient options for proto=fd [ 260.563741][T14641] loop4: detected capacity change from 0 to 164 [ 260.630672][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 260.698258][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 260.698277][ T29] audit: type=1326 audit(1744257814.864:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.728240][ T29] audit: type=1326 audit(1744257814.864:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.751918][ T29] audit: type=1326 audit(1744257814.864:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.775513][ T29] audit: type=1326 audit(1744257814.864:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.799140][ T29] audit: type=1326 audit(1744257814.864:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.822792][ T29] audit: type=1326 audit(1744257814.864:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.846384][ T29] audit: type=1326 audit(1744257814.864:12720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.869955][ T29] audit: type=1326 audit(1744257814.864:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.893559][ T29] audit: type=1326 audit(1744257814.864:12722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 260.917139][ T29] audit: type=1326 audit(1744257814.864:12723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.4.3970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e3172d169 code=0x7ffc0000 [ 261.016054][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.025021][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.052969][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.081981][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.090923][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.113187][T14637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 261.569573][T14668] netlink: 'syz.0.3980': attribute type 27 has an invalid length. [ 262.082490][T14702] --map-set only usable from mangle table [ 262.104941][T14701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.115964][T14701] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.152973][T14701] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.537150][T14719] loop1: detected capacity change from 0 to 8192 [ 262.546351][T14719] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.563349][T14719] netlink: 'syz.1.3996': attribute type 27 has an invalid length. [ 263.204053][T14747] --map-set only usable from mangle table [ 263.356632][T14753] loop3: detected capacity change from 0 to 2048 [ 263.385958][T14754] netlink: 'syz.2.4008': attribute type 10 has an invalid length. [ 263.406206][T14753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14753 comm=syz.3.4009 [ 263.626389][T14767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14767 comm=syz.3.4014 [ 263.687945][T14771] loop2: detected capacity change from 0 to 1024 [ 263.727571][T14771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.727683][T14777] loop1: detected capacity change from 0 to 164 [ 263.740035][T14771] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.828848][T14779] netem: change failed [ 264.537515][T14792] loop3: detected capacity change from 0 to 128 [ 264.581274][T14792] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.607501][T14792] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.647831][T11892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.728263][T14796] 9pnet_fd: Insufficient options for proto=fd [ 264.774395][T14800] loop1: detected capacity change from 0 to 512 [ 264.793985][T14800] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.4026: corrupted in-inode xattr: invalid ea_ino [ 264.890408][T14800] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.4026: couldn't read orphan inode 15 (err -117) [ 264.922475][T14800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.962802][T14814] loop4: detected capacity change from 0 to 128 [ 264.973801][T14813] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 264.981719][T14813] FAT-fs (loop4): Filesystem has been set read-only [ 264.990784][T14813] bio_check_eod: 101 callbacks suppressed [ 264.990800][T14813] syz.4.4030: attempt to access beyond end of device [ 264.990800][T14813] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.994593][T14800] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 264.996626][T14813] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.026373][T14813] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 265.035418][T14815] __nla_validate_parse: 12 callbacks suppressed [ 265.035437][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 265.078952][T14813] syz.4.4030: attempt to access beyond end of device [ 265.078952][T14813] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.101369][T14813] syz.4.4030: attempt to access beyond end of device [ 265.101369][T14813] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.126166][T14813] syz.4.4030: attempt to access beyond end of device [ 265.126166][T14813] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.170543][T14814] syz.4.4030: attempt to access beyond end of device [ 265.170543][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.181349][T14825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4031'. [ 265.188225][T14814] syz.4.4030: attempt to access beyond end of device [ 265.188225][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.206291][T14814] syz.4.4030: attempt to access beyond end of device [ 265.206291][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.239126][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.256296][T14825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 265.257373][T14814] syz.4.4030: attempt to access beyond end of device [ 265.257373][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.284508][T14814] syz.4.4030: attempt to access beyond end of device [ 265.284508][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.416842][T14839] team0: Port device geneve1 removed [ 265.432983][T14814] syz.4.4030: attempt to access beyond end of device [ 265.432983][T14814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 265.456938][T14842] 9pnet_fd: Insufficient options for proto=fd [ 265.639578][T14848] Buffer I/O error on dev loop4, logical block 2065, async page read [ 265.647806][T14848] Buffer I/O error on dev loop4, logical block 2066, async page read [ 265.656122][T14848] Buffer I/O error on dev loop4, logical block 2067, async page read [ 265.669812][T14848] Buffer I/O error on dev loop4, logical block 2068, async page read [ 265.728201][T14848] Buffer I/O error on dev loop4, logical block 2069, async page read [ 265.736388][T14848] Buffer I/O error on dev loop4, logical block 2070, async page read [ 265.754857][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 265.754876][ T29] audit: type=1326 audit(1744257819.944:12943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.758888][T14848] Buffer I/O error on dev loop4, logical block 2071, async page read [ 265.761255][ T29] audit: type=1326 audit(1744257819.944:12944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.816621][T14848] Buffer I/O error on dev loop4, logical block 2072, async page read [ 265.830850][ T29] audit: type=1326 audit(1744257820.004:12945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.4.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e31724127 code=0x7fc00000 [ 265.854509][ T29] audit: type=1326 audit(1744257820.004:12946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.878226][ T29] audit: type=1326 audit(1744257820.004:12947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.912132][ T29] audit: type=1326 audit(1744257820.104:12948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.935896][ T29] audit: type=1326 audit(1744257820.104:12949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 265.959854][ T29] audit: type=1326 audit(1744257820.104:12950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14856 comm="syz.3.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4716dd169 code=0x7ffc0000 [ 266.004866][T14860] loop4: detected capacity change from 0 to 512 [ 266.008620][T14862] loop3: detected capacity change from 0 to 512 [ 266.018708][T14862] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 266.034064][T14860] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.4046: corrupted in-inode xattr: invalid ea_ino [ 266.048065][T14860] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.4046: couldn't read orphan inode 15 (err -117) [ 266.058801][T14862] EXT4-fs (loop3): 1 truncate cleaned up [ 266.066118][T14862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.085744][T14860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.114530][T14860] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 266.129768][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4046'. [ 266.158867][ T29] audit: type=1326 audit(1744257820.344:12951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.1.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 266.182583][ T29] audit: type=1326 audit(1744257820.344:12952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14865 comm="syz.1.4045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19f73cd169 code=0x7ffc0000 [ 266.238068][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.265076][T11243] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.309361][T14879] loop3: detected capacity change from 0 to 128 [ 266.316102][T14879] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.329997][T14879] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.347286][T14885] loop4: detected capacity change from 0 to 512 [ 266.397107][T14887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.444574][T14885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 266.479969][T14885] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.527681][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 266.536793][T14894] netlink: 'syz.1.4059': attribute type 15 has an invalid length. [ 266.544673][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4059'. [ 266.556202][T14894] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.564518][T14894] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.572838][T14894] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.581059][T14894] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.628937][T14885] EXT4-fs (loop4): shut down requested (0) [ 266.676139][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.742537][T14920] loop2: detected capacity change from 0 to 128 [ 266.751259][T14920] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.766500][T14921] loop3: detected capacity change from 0 to 128 [ 266.787878][T14920] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.872122][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4064'. [ 266.899236][T14924] loop4: detected capacity change from 0 to 2048 [ 266.983550][T14922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=14922 comm=syz.4.4065 [ 267.034436][T14931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.454733][T14946] loop4: detected capacity change from 0 to 512 [ 267.486601][T14946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.523770][T14948] loop1: detected capacity change from 0 to 512 [ 267.544539][T14946] EXT4-fs (loop4): 1 truncate cleaned up [ 267.563802][T14946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.598862][T14948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 267.658487][T14948] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.735652][T11026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.749938][T14948] EXT4-fs (loop1): shut down requested (0) [ 267.838185][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 267.923773][T14957] loop2: detected capacity change from 0 to 8192 [ 267.959510][T14957] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.999063][T14957] netlink: 'syz.2.4079': attribute type 27 has an invalid length. [ 268.185947][T14977] loop2: detected capacity change from 0 to 128 [ 268.197223][T14977] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.220265][T14977] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.247625][T14984] netlink: 'syz.0.4087': attribute type 10 has an invalid length. [ 268.255630][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4087'. [ 268.260499][T14986] loop1: detected capacity change from 0 to 512 [ 268.269577][T14987] netlink: 'syz.3.4088': attribute type 10 has an invalid length. [ 268.278725][T14987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4088'. [ 268.293717][T14984] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.302005][T14984] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.351055][T14986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.357700][T14984] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 268.374706][T14984] team0: Failed to send options change via netlink (err -105) [ 268.382291][T14984] team0: Port device geneve1 added [ 268.388979][T14987] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 268.393112][T14986] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.421363][T14979] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.457006][T15001] loop2: detected capacity change from 0 to 512 [ 268.470412][T14986] EXT4-fs (loop1): shut down requested (0) [ 268.483527][T15001] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #15: comm syz.2.4093: corrupted in-inode xattr: invalid ea_ino [ 268.500696][T15001] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.4093: couldn't read orphan inode 15 (err -117) [ 268.503603][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 268.514579][T15001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.536072][T14979] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.553731][T15001] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 268.562986][T15001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4093'. [ 268.605624][T15009] loop1: detected capacity change from 0 to 128 [ 268.612318][T15009] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.624441][T15009] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.650098][T14979] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.662173][T14979] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.674811][T14979] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.686924][T14979] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.828202][T15023] loop4: detected capacity change from 0 to 128 [ 268.835051][T15023] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 268.900155][T15024] loop1: detected capacity change from 0 to 128 [ 268.926925][T15023] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.124675][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4105'. [ 269.187081][T15030] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=25 sclass=netlink_audit_socket pid=15030 comm=syz.0.4104 [ 269.212796][T15035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15035 comm=syz.3.4105 [ 269.474279][T11892] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.798024][ T9371] ================================================================== [ 269.806163][ T9371] BUG: KCSAN: data-race in delete_from_page_cache_batch / nr_blockdev_pages [ 269.814863][ T9371] [ 269.817188][ T9371] read-write to 0xffff8881006311f0 of 8 bytes by task 11892 on cpu 1: [ 269.825432][ T9371] delete_from_page_cache_batch+0x4fe/0x700 [ 269.831351][ T9371] truncate_inode_pages_range+0x1c7/0x6c0 [ 269.837080][ T9371] truncate_inode_pages+0x24/0x30 [ 269.842111][ T9371] blkdev_flush_mapping+0xa5/0x1a0 [ 269.847234][ T9371] bdev_release+0x2f9/0x420 [ 269.851749][ T9371] blkdev_release+0x15/0x20 [ 269.856262][ T9371] __fput+0x2ac/0x640 [ 269.860252][ T9371] ____fput+0x1c/0x30 [ 269.864244][ T9371] task_work_run+0x13c/0x1b0 [ 269.868846][ T9371] syscall_exit_to_user_mode+0xa8/0x120 [ 269.874406][ T9371] do_syscall_64+0xd6/0x1c0 [ 269.878921][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.884824][ T9371] [ 269.887149][ T9371] read to 0xffff8881006311f0 of 8 bytes by task 9371 on cpu 0: [ 269.894724][ T9371] nr_blockdev_pages+0x7c/0xd0 [ 269.899500][ T9371] si_meminfo+0x87/0xd0 [ 269.903676][ T9371] update_defense_level+0x4b/0x5c0 [ 269.908806][ T9371] defense_work_handler+0x1f/0x80 [ 269.913847][ T9371] process_scheduled_works+0x4de/0xa20 [ 269.919325][ T9371] worker_thread+0x52c/0x710 [ 269.923919][ T9371] kthread+0x4b7/0x540 [ 269.927995][ T9371] ret_from_fork+0x4b/0x60 [ 269.932417][ T9371] ret_from_fork_asm+0x1a/0x30 [ 269.937193][ T9371] [ 269.939519][ T9371] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 269.946631][ T9371] [ 269.948957][ T9371] Reported by Kernel Concurrency Sanitizer on: [ 269.955110][ T9371] CPU: 0 UID: 0 PID: 9371 Comm: kworker/0:12 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(voluntary) [ 269.967730][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.977790][ T9371] Workqueue: events_long defense_work_handler [ 269.983877][ T9371] ================================================================== [ 276.808350][ T9777] page_pool_release_retry() stalled pool shutdown: id 83, 1 inflight 60 sec