last executing test programs: 2.520530357s ago: executing program 3 (id=144): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4092, 0xffc}, {&(0x7f00000046c0)=""/4100, 0x1004}, {&(0x7f0000001140)=""/122, 0x7a}, {&(0x7f0000001400)=""/215, 0xd7}, {&(0x7f00000012c0)=""/175, 0xaf}], 0x6}, 0x0) 1.953906035s ago: executing program 1 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.934663565s ago: executing program 1 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x5c5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ptrace$getregset(0x4205, 0x0, 0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, {0xa, 0x0, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, r4}}, 0x48) 1.876262865s ago: executing program 0 (id=161): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x406c015}, 0x20044c85) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 1.818304836s ago: executing program 1 (id=162): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f00000003c0)={{0x2, 0x0, 0x0, 0x0, r3}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0xfffffffffffffffc, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r6}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='host1x_wait_cdma\x00', r5, 0x0, 0x2}, 0x18) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r8 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000c3b0ca7700000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/60, 0x3c}], 0x1}}], 0x48, 0x800}, 0x0) 1.608613899s ago: executing program 3 (id=165): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000140)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x97, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) flock(r1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x28200, 0x1) flock(r2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/4\x00') read$watch_queue(r3, &(0x7f0000000000)=""/196, 0xc4) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000"], 0x4c}}, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000080), 0x76e5467) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) chdir(&(0x7f0000000140)='./bus\x00') fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2, r6, r7, r6, r7}, 0x0, 0x0, 0x7, 0x7, 0x6, 0xfffffffffffffffc, 0x2, 0xe8, 0x8, 0x2, 0x0, 0xffffffffffffffff}) stat(&(0x7f0000000500)='./bus\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r8]) set_mempolicy(0x0, &(0x7f0000000040)=0x2, 0x8000) 1.54898257s ago: executing program 0 (id=167): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) recvfrom$l2tp6(r3, 0x0, 0x0, 0x40008063, 0x0, 0x0) 1.283981823s ago: executing program 0 (id=169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2e69a, 0x0, "00000008000000fe630500000000000800001f"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000300)=0xd) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x8) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$eJzs3M9rXFUUB/CTNv1hajJRa7UF6UE3unk2WbhyEyQF6YDSNoVWEF7NRIeZzIS8ITBFbHdu/TvEpTtB/AeyceNacJeNyy7EJ84LtglxEcFOWz6fzRzm3i9zH28YeJd7Zu/9bzZ7G1WxUY7ixMxMzG5F5MOMjBNxMhoP4p1bv/z6xo3bd66ttNur1zOvrtxcei8zFy7/+MmX37350+jcre8XfjgTu4uf7v2+/Nvuhd2Le3/e/KJbZbfKwXCUZd4dDkfl3X4n17tVr8j8uN8pq052B1Vn+8D4Rn+4tTXOcrA+P7e13amqLAfj7HXGORrmaHuc5edld5BFUeT8XPDfnY61bx/WdR1R16fidNR1Xb8Qc3EuXoz5WIhWLMZL8XK8Eufj1bgQr8XrcXEya9orBwAAAAAAAAAAAAAAAAAAgOeL/n8AAAAAAAAAAAAAAAAAAACYPv3/AAAAAAAAAAAAAAAAAAAAMH36/wEAAAAAAAAAAAAAAAAAAGD6bty+c22l3V69nnk2YvPrnbWdtea1GV/ZiG70oxNXohV/xKT7v9HUVz9sr17JicV4d/P+fv7+ztrJg/mlyd8JHJlfavJ5MH8m5h7PL0crzh+dXz4yfzbefuuxfBGt+PmzGEY/1uPv7KP8V0uZH3zUPpS/NJkHAAAAz4Mi/3Hk83tR5MxMM/XQePPmv+8P1K1D+wOHnq9n49LsFC+ciWp8r1f2+53tZ6vY/0rGvV55+WlYj+IYxf69e/C0rOcZLU5FxP/4EVP8UeKJeXTTp70SAAAAAAAAAAAAjuMYBwNnm/O2xz9OOO1rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5iB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcFAAD//78558w=") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r4}, 0x10) (async, rerun: 64) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x454, &(0x7f0000000940)="$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") (rerun: 64) 1.212202504s ago: executing program 3 (id=170): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e33, 0x80000000, @dev={0xfe, 0x80, '\x00', 0xf}}, {0xa, 0x0, 0x80001, @private2, 0x1000200}, r1, 0x6}}, 0x48) 1.211752874s ago: executing program 4 (id=171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='htcp\x00', 0x5) shutdown(r0, 0x1) 1.197377784s ago: executing program 4 (id=172): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000000)="4c5779a27c8d", 0x6}], 0x2, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private=0xa010106}}}], 0x20}, 0x24008004) 1.161626305s ago: executing program 3 (id=173): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) ftruncate(r0, 0x88801) r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) socket$inet_udplite(0x2, 0x2, 0x88) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1783, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x204000, 0x67) faccessat2(r2, &(0x7f0000000200)='./file0\x00', 0x2, 0x1300) r3 = io_uring_setup(0x4823, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x103fe, 0x2}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0xa, 0x4e20, 0xb4ea, @ipv4={'\x00', '\xff\xff', @local}, 0xdc88}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x20040080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000140)=0x10, 0x800) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0xf00, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 1.104055346s ago: executing program 4 (id=174): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r1}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = add_key$keyring(0x0, &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) add_key$user(&(0x7f0000000380), 0x0, &(0x7f0000001000)="983c41720a83937953040310a4801d8c4d31ab42dee164c06e8b0a3b97430dfabbae0e16e1ef74ff99443f9c563b56d89e413abb472e78fde68dafc3ac2d5eb903da5bff0db5d0cb2c3b9e2ef24b9602f1e369bc3425ac6722e3e4f77b583f5239cb0aef2268d2d1750b4e48e0c2e42baeb3b303b2c56172eb5a626d05514378aec8fbf6de492abd94bb6320b7867127fbacabfa5075d6645d3bb658921606d4b56ca76698156f550e1e9117e2b0cfb947cd1b76046417babcf281445a4a04c10dbcf8d1259ef6fc5fcb1c866e57e76166192d54a30aa72c5bd6d6fd2d973eff8ff3cb0fa9b4c8f9da28d613b99265cc09f7ab209502aa5a0bfae492dc3f7c3ce0a20c2e2ee00de35c575a40c5eafded5d12feb57a78544ac6a534dd3caa51a079ce08ba6f2a6a1d90a8d11b7e5eb25f135ee3a6d37541aa52376231b8b752dcfa506355915b5b7b8e0c05f29b2fcb12e1082fde0e5efab888f60d6a0220021f059fb4f86ec23d3613ed0361255fb01c67ab68bf2270667c0259c64c843c0df8334745e00701d703e12613be1e3c463fc14fec52a60d6f9db9eaa111293faa6d0488c15150201ae7a3008a6c27833ab07e0d519c840a195ad5f7261ba26da784590be2d9c4e6af4ee2f79e9a77df6567b05393b241bee597c33958cc621dae506f1833d41229a8b22e7f4a94e3dc2c06081d8d680b45a9422e3bce2ee9adff0db89380d903969fb3d3e356479f8651146c35928a1b836f5726bd5415af3d01ef2468d6727d7d0d6c93b96d3981984656c107830d9a66a315c57b52d4d1a17be5e5d468df4095f9e0d9c45901dd1372602b9b245e543dedc9b97b49f8b6619e634e227b3961a1d84dbc8c06b1ea1fac5051b0e292d9d283abc11e299aa4325a6cca75c249af967000c142f61c87db15ac396e028c0e80ffbd9091e9c0eb7df54a1a1c4ef90777d89bd85818935dbf429c516e44f577fc883ccb87f705c467d5737b88fc730556dc8e66244006de869855380d0e959e26599ba84464a3ecbb58132fac4972fb6c7b7a53265a0f53d345aafc1a13834ae98d05eee5d8dcabe9b0e273af83267e7a9bb761c053b0deb96646dbd40a853d1b505ba55428b191a4485ed16406b8281280ce234243c36d969e670852bd797d24a9694269b69bd0c098d6498c172cc2635f7e3e9c8f0c66376e84dd90f5fee1eaef04dbbd5636405a50520238ca533e6221492113bb0fe3b34efc764dd7f5b2b6ec9ef3f069425c3cc0261f5a6b52bc44f014539339a7f957926dcaad1c95bef041c2372373aed4dab70ffc9dc393e86afb8dca968384f0b78fd6524afb5c57022f6191e6c21ab35fdf473c0566b2b8b4329c29cfe91d6575843d1fe4481ee46cd3dee82c70c543eb7ecc9c7dee169675293bc1bc0383df32fb1a631bfeef7f6b093564f438844ffe414a32be6c63a464d1310678510060e5992eefc44c073098d470af87dbf61d863ec052bdadcf6bec69325243ef9f90f70bf8b1641648760ea943087b0fa6e11ce70d803c26d0a225d7d7e88cfe9977fdc6a0f4d7f522726ca58dba0cca79b9654426185d6af994819dc3e83104f6bc916ebc8894c2e6d7adb9470775296b4de4a273654cc05572bf227f57602aeadba392812ea26805b8605ab68fa6680b49743c7742338d5c2bb8d11a87902551c2463ae3ab21fb17d1d534b409148f39e68f1bdef9cd845cfe2f4febed9797ad3a60b031f81f9740853c60f4ba526a8e50bfe24fb3e12df8b5556c9521de49f8a05897b83a9f0afd969533baccaa7def00d57d1636b11406665806e28d7c889544919a92b877b4e3602da19cb9fe7e1667355815b7ec38515e0c273a95f08dba7cb6dc76cd61534cf5c5881277b7e7db5ae80a3aa5fad712b4f288fd69638a627a26c6e32894bf70ba302bc6bcc069a98327df3a4f77fd749c0d24064e0dbca9321fac20fa23e3a714e5dc431710e2969a05ef3f218e4debf8577bdc8a4a399601ec4cabc523c53d7a1c2964e80dfbfaab737adc0e45cf2b6818df98521eb2ce42b7f9190837316f471bbcacd8ddc765ab12983c1b75753979f21f55c7c52472ed348b912bd1c33612eace42dc57daf4e9fb87cf8b647154847650b488f4fa63e5e22dadfdcf77ece8f717a3b8958d1dd258689455fe33f2689123fe51502f6da68faccf60310e6c0896b998c94f973bf524d8d7971f296d9793c9ca6ba21be48cec7377f9ff0a1dbd31eb0f6605b5d0a5fb8378f4bc77e9c21f0049ce7b3ac70e56026d56a3ea567dbe28edf1a2e7da61bb70f8a294f864d58b61313f0ec0c98e1d56cffe9c7f2e0c717ed38d2a04da2f70e0ffdea8f24f947e182f8607b0728da5fea1a438d7c4f9a29b83589af01bb2e8facce7ecf3676352f411f1e7a773f871136eb3046742970ea699a41c976b3487dd12777231c6f0e5dea5dddcd483f71acf20d1de5c4ce7333926cbf030715790a8f1ddec2635f6346925a20742b5977c7db572f46a29b5df2ddf5af0ff43d821596fe08a2ca2a4b9119e33dde750630d3b13b6511604c79c452c12e08a15fcc16da59de48e0d9c5882a72f60fcd29ca555d1f62f5fafa9f887831dd5316ba46f3b265927f7c07229c60deeaffe55283db3bd18feb90d7ef6d9cdf44b6a3a9d8b6c391f6baa51ae84a1b56979372c6bfb4e296f5777589176271a2fbe2528ffe7320dbb37eddd3b33ab13c31be480900be7ad6031f4e7141c9190e66ee20b5b97e0a39c7b4b8cb6829f05e6e2fd6a4178cc2261a75dae988e18b1d15a902a9bd7ac63e6b078044fbb15f4a761c6ca8be1a7d8355a1a45accd28f6b5c0726f89e659f1af1fc954a36310c4710587315ea43b6e14a32aa1521f9952339e02ed2811588bfb411fd34294777ffe0cbf41fad13b62a711f974bd6166ea7cfb439363fb4a57892b8b8ff6e7f20df13753774a88539976601aa1f76a9b5eff0a55e6cd2474e1356883e426f9ac10771739164ed11c38f6d014e0b789cc7fa37cccd1ae90d108bb4cf1219ea2f42b1d24b811ca495acc6b2ed7b3e8681c6b0501b52c5044d3e54899c40feb5a4193bd4ba2b214725f2c0dc554ab0f2743121978eb897b1384db6ad71ab70614665f0b2135f0615e05364787d1c94bde6f91a7cebc5e26b2716fb7590b3239f9c057bf92231f48f1a7aaff66df8475ce8ea31eab3bf53b6be0858027a9afc4c4fdaffd6633ff148788fe2a87e3c3f63ee7685e6120391a5871235a080a8df346308a3ada11fa5f3c800c8f6383b7e1e82d1b9c9678f4c8d8e3b2d4d8d8ea599c0644c6517e3aad321b1c36e57772c3300dbefe21a8aa08f37930869d9611d661903d6641bfec624ad9e6d6a09238c353d90600765b1138a841fcc32372b99ac928005d8acc2fdeeaa48859d150b9bee4ce070ba73ab5d337eff8b0fa3b730c6a104ccb02d352d1a515ca15a8496d0872de5e68eeb746215099b8540586c6d4d63431c118ce14c62ed19dda23e599ade0e25aab765bd27bcd9825a1f1d9804ded94d90bdefa285a74dbe1c62fb19da96114f016e5ba23077bff62e2ed441ab821e252be022ccc00231941b6750ebdcb5554e41de0718e97f52a2479751399459643ce4b5bcc62b2e77bd2cab8b6a21c0cf702e5ca05acd20b9f66bd0867d372f7dcd47d626004d66fb0180cef1e84b88192bc0439c008210724cb3bff3a1bd5d4f47ec38553064e43618dd3b03fe8306fb4c3dc682fe8febbd6d428f573d4cc3bd2d713c0b755e3740ae90ebd97301b00b3a5fba11d2f2b28412eb3e56147a0b1f2c03e5f1f853d26d16659cb9b33dea7c90f5620e9a07646874b32988d7067b4835576a20505183d89908869e63d50a156d7ae8ee97ca498378de9cc45843ba10bff7e6488251cd69a045379a5c1e96a5899dac10a4b6c2d5a237b8a3f9cf8eaf5d13bb897ce9566a70d2836985341fb33fccba98ba7df85fe8319d12c15d231b5600552d0d2ed9d2c71ac4b3e5f78b427ea9c08b9f3142456322bd6ebf09cdc64b79409ea4d9e79b69fcc9c8cdda1019afa80b8579c6fb6f53040b69ee349b53090223739d58faa054e521ec2315abc3d53e0e4bf6e5fbf67bc95de3e322f60faee9eee628e247ec76637abad54bcfa576f6d8cb4802dc626dfc1e6a7f1cc224579f67adbca62474577142b572577ad6ff0e2e7092778b6575703efdc72946ee52f51160d4beb502c5debc4d151c340bb83ccd1b33dad593a4cb3fb22800679a2b4617abec7664921915f3a8604680aa917a7b9195b5d0bcf4bfe8fedb12bfab6249cae13dcf182f76fcbc4f8470fd6495ec0f2feb91f2f1ffc12aefd6d2a752df5149abe52d6b122d9a7fe6ad9f5b48c60d760254ca086c3ce6285cc8c4c0d8e32c997301467f0051c62dc739451b0cc7a9c4e2cf1c89ddb988d10b645ff845458fcac8458bf89f8aca64f746a399e994e7094c6d1cbb9ce7ec366b807c79e8a89afad477155da9232744b815a3f2663e0b9a49a359ac4e5856e9f7e1f4b99cfd4d1ce908af0dedf33cfe06b60735fde49b3b782fdd2861280774e462dfa6c2c337635ee586bda442b0842d80ce24932c19780fe0b07c12554535e989e8c9617ce44842796b1b842480a4b2b3d81ba1e9e557fa9e9f0a877d476c18126b55bcae876c73e57822f7228169ac2cb58f40a0d45854f8a2278ce2908583560fc922cc000c5f817f7a8bfa865f8ec4d0f814ddb83fd1762eb0e3e0ba6ed82a67b01b40bc45f8641233a8a17470846b6f6a5a768f3d4e29d41c21380a7a1796c7f46820832341dc25870ab03cf2564f84032801f02885464ddbe0d117dd264469beefe9fa04167b46ef72a7aca02c531bcee89279169a05b95ac0dbd085f3b1d36a3ddf7e9a3f139ae5063b222fa7d2021e6934f8c296a0041e50f1fe96dc3b415a4ef0181ec8c12a7d7d5659f397fa0e937c00c1735a34d18d296d9094675076ddc37d0affa0e238acf285d0000b35598e305855af904555dd897042fb23cf860c6341519314a0b3135208b00cee6f9d4254baccf80efb60ed9867518f30c573a3d245b2453d13ada4fd6baeedaa9f8a0b716f892b303a57031f573a38779f3c6b135af5641c57eac0c9f9e452cf2ebb024185cc4ddbbe34df28688a634b971b0adc9431707b1d31f3931df45a0e98942c8a443fa31ee3cf1776dbdb2cc938f6e6e2895b9c0db2a15ff97b510e7ab5afb284ed600c68d073a32c58d00968e123e4a2152bec27d084c9bc9709a7cf48dce031e7a461595bad78ae9f1c3d8407ca5753f90fb108229893a91b56e5ed7fc52aff25f9647bd57cb765699cb5741473e74c06fb95ea6f928aa050b258ba0b52ed0bdf0744a30a8e7705496fc7f20ffee68b7d754eb83f4333c0b66e49a12af573f10e7cc9c2f1c9244b597da46fbe1660158c1e2bed85a9052058fb8f100eea16cffbbdb225ed8fc00a429188778368fb8865b7cb94ab55db379ffbecfc5fbade5508b2eff2bb52623e1165fc653a7467b0c8e2302353d13bf1b9c2269001266babb0fc96691d44cee633a387a00e51c6e89a508f248e5e5b11fd2b69e1aa211bb4aab92d123c738540b3ea3928e265bb03312358607b042c4490d96464c85b8e5b31427a160beca601c701113e873d4510b51af63d8ed2b828eb81628d181af269541194f7560e7974b0f87d3a473ea504e93a1fdfc2c4ff6f1219b9188fe35c79b52d85aba3ca536670d6b61a9d7590bc8a6946683def94b22769179a041e682b74401beebc5da425cf5", 0x1000, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}}, 0x24}}, 0x0) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r9, 0x0, 0x0, 0x88c0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x801}, 0x1c) sendto$inet6(r9, &(0x7f0000000440)='\r', 0x1, 0x4000080, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.075989576s ago: executing program 4 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.030464307s ago: executing program 0 (id=176): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/4092, 0xffc}, {&(0x7f00000046c0)=""/4100, 0x1004}, {&(0x7f0000001140)=""/122, 0x7a}, {&(0x7f0000001400)=""/215, 0xd7}, {&(0x7f00000012c0)=""/175, 0xaf}], 0x6}, 0x0) 928.390358ms ago: executing program 1 (id=177): clock_gettime(0xb00, &(0x7f0000000300)) 926.933588ms ago: executing program 1 (id=178): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = io_uring_setup(0x410d, &(0x7f0000000200)={0x0, 0x23cf, 0x0, 0xfffffffc}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x1c, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000b300000000000000230a00001811539a123998da4e31475aa0c9010000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185b00000000000000000000000000000a30020087a60000185a000009000000000000000000000085000000a1000000534702000400000018440000040000000000000000000000185b00000c00000000000000000000003fa10100ffffffff9500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x17, &(0x7f0000000380)=""/23, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000680)=[{0x4, 0x3, 0xb, 0x6}, {0x2, 0x4, 0x8, 0xc}, {0x5, 0x1, 0x5, 0xb}, {0x4, 0x5, 0xe, 0x9}, {0x5, 0x3, 0xa, 0x5}], 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 536.140513ms ago: executing program 2 (id=181): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05e8", 0x19}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020"], 0xfe33) (fail_nth: 2) 535.841323ms ago: executing program 2 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {}, 0xff}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x200, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffffffc, '\x00', r4, r6, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000580)='sys_enter\x00', r1, 0x0, 0x3}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0xfffffff7, 0x0, 0x0) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05e8", 0x19}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020"], 0xfe33) 535.658973ms ago: executing program 2 (id=183): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r1}}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e33, 0x80000000, @dev={0xfe, 0x80, '\x00', 0xf}}, {0xa, 0x0, 0x80001, @private2, 0x1000200}, r1, 0x6}}, 0x48) 526.433913ms ago: executing program 2 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x0, 0xc}}}, 0x24}}, 0x0) 492.718104ms ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000080000000000000080000000000000d0be9593272ba93afc70f7ec1094ad", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x22d}], 0x1}, 0x20000044) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x20080) fsetxattr$security_selinux(r4, &(0x7f0000000900), 0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000080)=r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002500)={0x1, 0xfffffffffffffff7, @status={[0x28f5495e, 0x1000000000000000, 0xc, 0x5, 0x6, 0x6]}, [0x1, 0x1000, 0x8, 0x7, 0x5, 0x9, 0x9, 0x2d, 0x4, 0x9, 0x1, 0x1, 0x2, 0x6, 0x2, 0x7, 0x2fe1, 0xb7bb, 0xd, 0x2400000000000000, 0x2, 0xffff, 0x495, 0x5, 0x4f61, 0xff, 0xfc5, 0x2, 0x100, 0x767c5815, 0x0, 0x7, 0x100000000, 0x4, 0x5, 0x4d, 0x1, 0x8, 0x1, 0x6, 0x8, 0x3, 0x7a7, 0x8000, 0x1, 0x7, 0x117, 0xe431, 0x0, 0x0, 0xc4, 0x5, 0x5, 0x0, 0xff, 0x3, 0x80, 0xfbb, 0x3, 0x4c, 0x1c0000000, 0x7, 0x9, 0x10000]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r8}, 0x18) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="e90ca20000000180c2002f7887"], 0x0) 382.527695ms ago: executing program 2 (id=186): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x1) socket(0x10, 0x803, 0xffffffff) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="bc0400000105030000000000000000000100000854020100010000006fca0000060102000c00170073797a31000000000000000000000000000000000000000000000000000000005fb716098fbb173a6a794c219cfb1de10fbe0a9626e411d4dbe08d5c14a9fe580dd8d5c17a00540100ce87278dc6f2250c7ea21e652e662e3fde1444e614c0750600ff0702000000070000000100040003000000040000000500030002000000b70500008d420600010000000200000003000000020000000f0000000a00030001000000040000000d00090003000000020000000000b50602000000060000000d00be0b030000001a4600004a0907000300000004000000010008390300000008000000060004000100000001f0ffff0200060006000000000000000004010000000000050000005d07070003000000ff0f000000040e00030000000400000000000600020000009a390000ff7fff0302000000090000008100e90a01000000080000000000ff01010000000500000009000600020000000500000002005d000300000009000000070010000200000006000000030000000300000000800000ff00060000000000ff0300000800030000000000d90000001700ec0c0100000005000000800001000300000004000000f8000200010000000000000200084f06560f0e9005000000540005000000000005000000080006000200000000300300fcff030002000000020000000100800000000000080000000700ff00020000000100000000089a0002000000b17c00000f00000002000000f10000000100090002000000001000000300020000000000010000000300040003000000370a00005402010002000000050000000303000000080f0073797a3000000000000000000000000000000000000000000000000000000000d19887376bd0d85897492081390d82fe0d7e1f7962f6b9e684cc9ecde03e9c0838045322860e1a4e4d8488bb315e5dd96fd73e7cfb59c2586e10a4334648c1e20100ff0003000000810000000300000001000000000001000f00070000000000000000000900ffff0200000008000000030011f30300000001000000d7000200010000000700000008000900010000000018000001000900030000000c0000000400962203000000ffff0000ffff06000000000000040000f2ff540300000000000000000f0008000200000080000000070003000100000039f0ffff5600001003000000ff0f00003d96010001000000050000000800080000000000070000000b00cf09020000004af0ffff070085a50300000000000080bacf0080010000005300000009006d0200000000fcffffff04000700030000000e000000010007000200000001000000f7ff07000000000006000000e00e040003000000000c0000070028000000000008000000008003000000000000000000ffff0a0001000000ff03000007000b0001000000000000000500350303000000f50400000700018001000000080000000100020000000000f7120000619b890700000000070000000300f60000000000ea08000071110f0003000000000000000100050002000000810000000300ff0702000000000000000a0000010000000005f500001000070002000000060000000700d40ca312cac3e70c00000000e80001000000010000001ffd5b0f5cb336d25465e831024ac58c8def93df2b32451038763524b870bf8da99c61960e6da5ef182024cbd0a563317396297e230720a7c589e82b5dd8f2e3cabe73c3d45372a99d756c6e2e9ff946da3ba35f8839abcd20df4910840000000083e4b6a1dde3c7545bb78961535a388cd711c51ffd2080ae2fbb4f62e1fa3fe076a94e88bc546d02dd49f18f2ac1a20e629d2e46e3dcd0beec27f5ff3b125a22af806b181a51ca74c1b69344510a9d989396b20a222b29d4ceb136ae0d4581dab2b4bccb29f94ef3f66f1b184837e4d9c2ec1fc6baf4fb4a0587c375e6eef86e8d77c70d26c6f7fa479c4de6ff219c64255fd32db36633925a20126702b50ff118cfa9381a522e347aeff5283a062c01a389f63e378029fdbec53c86f156944b641abe17245fd949cfd35c9588861d9992af07b3ca8545336a961bb32599e858ad314147ae64226de92206123175b65f3b4b70a7b6b0e68d2601c2395a5c1ea65ea3acbc6fcbfdd56d4e0a51dd6ea9030fe03419ebcf229dff0c0d9b6c4b8dcad2c5d57e35aee2097c2f1af4b35ffa8eae0fc293a1bd36ca653ccd97ace8a2d1259947a5e9"], 0x4bc}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0xc, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x200000000000019d, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES64=r2, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6379900b0060dc9d009f7c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, 0x0, 0x0) 304.218376ms ago: executing program 3 (id=187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000012c0)={0x38, r4, 0xc4fc9e906872338b, 0x2000020, 0x0, {{0x15}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x32}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)={0x70c, r4, 0x208, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xb}}}}, [@NL80211_ATTR_TID_CONFIG={0x688, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8000000000000001}]}, {0x4}, {0x408, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3e0, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x2, 0x3, 0x1c1, 0x80, 0x1ff, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5aa1, 0xcbb6, 0x7, 0x3, 0xba28, 0x2, 0x6, 0x6cf1]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x16, 0x24, 0x9, 0x5, 0xb, 0x36, 0x12, 0x3, 0x18, 0x18, 0x16, 0x18, 0x6c, 0x30, 0xb]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x3}, {0x5}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x7}, {0x3, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0xa}, {0x4}, {0x4, 0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0x2}, {0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x7}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x5}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x4, 0x3be, 0xe, 0x8df5, 0x8000, 0x5b91]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x2, 0x6}, {0x5, 0x2}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x2, 0x5}, {0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x4, 0x6}, {0x7}, {0x3, 0xa}, {0x6, 0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x7, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x6}, {0x7, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x7}, {0x0, 0x3}, {0x7, 0x6}, {0x6, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x3}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x7}, {0x4, 0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5, 0x9, 0x7ff, 0xb6, 0x9, 0x1, 0x6]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x80, 0x6, 0x7, 0x2, 0x415d, 0x8]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1, 0xa}, {0x6, 0x4}, {0x0, 0x3}, {0x3, 0x6}, {0x3, 0x7}, {0x7, 0x7}, {0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x0, 0x6}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x4}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x5}, {0x1, 0x5}, {0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0x8}, {0x1, 0x6}, {0x0, 0x5}, {0x7, 0x7}, {}, {0x5, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x7}, {0x3, 0x6}, {0x1}, {0x7, 0x4}, {0x0, 0x3}, {}, {0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x6, 0x5}, {}, {0x3, 0x2}, {0x6, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4ed, 0x51b, 0x6, 0x7, 0xc11, 0x1000, 0x9, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc99, 0x5, 0x4, 0xebb5, 0x0, 0x1ff, 0x4, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1981, 0x28, 0x6, 0x4, 0xbc3, 0x2, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x31, 0x0, 0x7f, 0x2, 0x43, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x2, 0x36, 0x38, 0x6c, 0x36, 0x24, 0x48, 0x1b, 0x36, 0x60]}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x4}, {0x0, 0x4}, {0x5, 0x3}, {0x1, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x3}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x4, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x1}, {0x5, 0x4}, {0x2, 0x7}, {0x2, 0x7}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x7}, {0x2}, {0x0, 0x3}, {0x5, 0x6}, {0x3, 0x8}, {0x2, 0x9}, {0x1, 0x1}, {0x3, 0x9}, {0x5, 0x5}, {0x4, 0x8}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0x9}, {0x3, 0x6}, {0x5, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x3}, {0x4, 0x3}, {0x2, 0x7}, {0x6, 0x7}, {0x5, 0x5}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x5}, {0x5, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x81, 0x1, 0xc94c, 0x0, 0x800, 0x81, 0xa130]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x4, 0x9, 0xc, 0xd5c, 0x5, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x5}, {0x1, 0x3}, {0x3}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x2}, {0x2, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0xa}, {}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x7}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x7, 0xa}, {0x2}, {0x7}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x2, 0x18, 0x5, 0x48, 0x1b, 0x18, 0x6, 0x6]}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc5, 0xfff5, 0x4, 0x4, 0x98d, 0x8, 0x4, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x8, 0xa9, 0x5c98, 0x5000, 0x6c79, 0x0, 0x5a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x18, 0x5, 0x2, 0x12, 0xc, 0xb, 0x4, 0xc, 0x0, 0x12]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x7, 0x6}, {0x1}, {0x6, 0x6}, {0x5}, {0x7, 0xa}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x3}, {0x6, 0x8}, {0x4, 0x9}, {0x6, 0x8}, {0x4, 0x9}, {0x5, 0x7}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x2}, {}, {0x3, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x4, 0xb, 0x12, 0x3, 0x60, 0x5, 0x42, 0x3, 0x12, 0xb, 0x24, 0x30, 0x3, 0x48, 0x4, 0xb, 0xb, 0x60, 0x30, 0xc, 0x6]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x9, 0x4, 0xa9, 0x2a7a, 0x6, 0xfff8, 0xf99f]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}]}, {0x230, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x124, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x1, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x6}, {0x2, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {}, {0x2, 0x9}, {0x3, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x7}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x9}, {0x2, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {0x1}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x14}, {0x0, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x4, 0x6}, {0x7, 0x8}, {0x7, 0x1}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x2}, {0x3, 0x4}, {0x2}, {0x0, 0x1}, {0x5, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x3, 0x1}, {0x1, 0x7}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0x5}, {0x5}, {0x4, 0x9}, {0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7fff, 0x1, 0x3, 0x7, 0x1, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x7}, {0x1, 0x4}, {0x4}, {0x5, 0x7}, {0x5}, {0x7, 0x8}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x6}, {0x6, 0x3}, {0x7, 0x7}, {0x7, 0x8}, {0x5, 0x5}, {0x4, 0x5}, {0x3, 0x9}, {0x6, 0x4}, {0x2}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x1, 0x6}, {0x0, 0x6}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x3, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x0, 0x4}, {0x3, 0x6}, {0x7, 0x2}, {0x1, 0x2}, {0x1}, {0x3, 0x9}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x9}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x6}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x0, 0x5}, {0x3, 0x9}, {0x1, 0x5}, {0x3, 0x7}, {}, {0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x5}, {0x1, 0x5}, {0x7, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x7, 0x1}, {0x6, 0x6}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x7}, {0x4, 0x9}, {0x2, 0x6}, {0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x4, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x6, 0xa}, {0x2, 0xa}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0xfc01, 0x2, 0x5, 0x2]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8, 0x4, 0x4, 0x0, 0x5, 0xf, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x0, 0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0xa}, {0x6, 0x6}, {0x2}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x7, 0x6}, {0x5, 0x9}, {}, {}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x4}, {0x4, 0x8}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x2}, {0x3, 0x9}, {0x3, 0x1}, {0x3, 0x1}, {0x7, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x6}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1, 0x6c, 0x19, 0x6, 0x1, 0x5, 0x1b, 0x30, 0x6c, 0x3, 0x60, 0x6, 0x36, 0xc, 0x3, 0x30, 0x16, 0x12, 0x6, 0x12, 0x2, 0x77, 0x16, 0x36, 0x2, 0x36, 0x4, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x766c, 0x9, 0x7, 0x8, 0x4, 0xb, 0x4, 0x2]}}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x2}, {0x4, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x5, 0x5}, {0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x6}, {0x6, 0x8}, {0x3, 0x6}, {0x4, 0x1}, {0x4, 0xa}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x8}, {0x3}, {0x6, 0x2}, {0x1, 0x6}, {0x4, 0x5}, {0x3, 0x2}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x4}, {0x3, 0x7}, {0x4, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x0, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0xa}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x22}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}]}]}]}, 0x70c}, 0x1, 0x0, 0x0, 0x810}, 0x4080) write$binfmt_misc(r1, &(0x7f0000000180)="e502", 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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") execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 160.082778ms ago: executing program 4 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (fail_nth: 4) 152.704238ms ago: executing program 0 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x3f, 0xa0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x3f}, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 152.258568ms ago: executing program 4 (id=190): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c00078008001240050000000500"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) recvfrom$l2tp6(r3, 0x0, 0x0, 0x40008063, 0x0, 0x0) 69.910049ms ago: executing program 1 (id=191): prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r2, 0x0, 0xfffc80) (fail_nth: 3) 51.34378ms ago: executing program 3 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x0) 0s ago: executing program 0 (id=193): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffff7}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000740)=0x1000400) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r4, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioprio_set$pid(0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x8d) sendfile(r6, r6, 0x0, 0x7a680000) (async) sendfile(r6, r6, 0x0, 0x7a680000) kernel console output (not intermixed with test programs): [ 20.869708][ T29] audit: type=1400 audit(1746119797.161:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.55' (ED25519) to the list of known hosts. [ 27.305241][ T29] audit: type=1400 audit(1746119803.591:82): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.306252][ T3293] cgroup: Unknown subsys name 'net' [ 27.328045][ T29] audit: type=1400 audit(1746119803.591:83): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.355464][ T29] audit: type=1400 audit(1746119803.631:84): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.470342][ T3293] cgroup: Unknown subsys name 'cpuset' [ 27.476511][ T3293] cgroup: Unknown subsys name 'rlimit' [ 27.608331][ T29] audit: type=1400 audit(1746119803.891:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.632822][ T29] audit: type=1400 audit(1746119803.891:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.653611][ T29] audit: type=1400 audit(1746119803.901:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.674025][ T29] audit: type=1400 audit(1746119803.901:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.680477][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.694327][ T29] audit: type=1400 audit(1746119803.901:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.727698][ T29] audit: type=1400 audit(1746119803.901:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.751239][ T29] audit: type=1400 audit(1746119804.001:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.791509][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.958956][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.980876][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.054384][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.065287][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.097917][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.105130][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.112285][ T3309] bridge_slave_0: entered allmulticast mode [ 29.118654][ T3309] bridge_slave_0: entered promiscuous mode [ 29.138927][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.153251][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.160342][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.167604][ T3303] bridge_slave_0: entered allmulticast mode [ 29.174226][ T3303] bridge_slave_0: entered promiscuous mode [ 29.180667][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.187792][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.195036][ T3309] bridge_slave_1: entered allmulticast mode [ 29.201561][ T3309] bridge_slave_1: entered promiscuous mode [ 29.220574][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.227675][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.234926][ T3303] bridge_slave_1: entered allmulticast mode [ 29.241332][ T3303] bridge_slave_1: entered promiscuous mode [ 29.292557][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.311836][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.322043][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.347675][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.361367][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.368431][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.375605][ T3304] bridge_slave_0: entered allmulticast mode [ 29.381944][ T3304] bridge_slave_0: entered promiscuous mode [ 29.388396][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.395545][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.402775][ T3313] bridge_slave_0: entered allmulticast mode [ 29.409154][ T3313] bridge_slave_0: entered promiscuous mode [ 29.415762][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.423039][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.430239][ T3313] bridge_slave_1: entered allmulticast mode [ 29.436641][ T3313] bridge_slave_1: entered promiscuous mode [ 29.456905][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.464230][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.471574][ T3304] bridge_slave_1: entered allmulticast mode [ 29.477949][ T3304] bridge_slave_1: entered promiscuous mode [ 29.502492][ T3303] team0: Port device team_slave_0 added [ 29.508800][ T3309] team0: Port device team_slave_0 added [ 29.515439][ T3309] team0: Port device team_slave_1 added [ 29.536124][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.545292][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.552380][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.559518][ T3307] bridge_slave_0: entered allmulticast mode [ 29.565820][ T3307] bridge_slave_0: entered promiscuous mode [ 29.572755][ T3303] team0: Port device team_slave_1 added [ 29.578524][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.585613][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.592758][ T3307] bridge_slave_1: entered allmulticast mode [ 29.599030][ T3307] bridge_slave_1: entered promiscuous mode [ 29.610580][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.617616][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.643563][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.655416][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.665865][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.675906][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.699455][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.706484][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.732431][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.758514][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.776633][ T3304] team0: Port device team_slave_0 added [ 29.787257][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.794296][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.820240][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.832302][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.847976][ T3304] team0: Port device team_slave_1 added [ 29.854335][ T3313] team0: Port device team_slave_0 added [ 29.860887][ T3313] team0: Port device team_slave_1 added [ 29.866844][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.873856][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.899833][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.942196][ T3307] team0: Port device team_slave_0 added [ 29.950163][ T3309] hsr_slave_0: entered promiscuous mode [ 29.956136][ T3309] hsr_slave_1: entered promiscuous mode [ 29.968060][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.975051][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.001069][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.012393][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.019374][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.045423][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.056814][ T3307] team0: Port device team_slave_1 added [ 30.072724][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.079719][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.105689][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.116659][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.123638][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.149609][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.199029][ T3303] hsr_slave_0: entered promiscuous mode [ 30.205068][ T3303] hsr_slave_1: entered promiscuous mode [ 30.210878][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.218426][ T3303] Cannot create hsr debugfs directory [ 30.233823][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.240829][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.266876][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.278600][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.285577][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.311511][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.327178][ T3313] hsr_slave_0: entered promiscuous mode [ 30.333264][ T3313] hsr_slave_1: entered promiscuous mode [ 30.339019][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.346638][ T3313] Cannot create hsr debugfs directory [ 30.378561][ T3304] hsr_slave_0: entered promiscuous mode [ 30.384721][ T3304] hsr_slave_1: entered promiscuous mode [ 30.390753][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.398299][ T3304] Cannot create hsr debugfs directory [ 30.445976][ T3307] hsr_slave_0: entered promiscuous mode [ 30.451986][ T3307] hsr_slave_1: entered promiscuous mode [ 30.457883][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.465514][ T3307] Cannot create hsr debugfs directory [ 30.621081][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.629290][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.637753][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.648918][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.668733][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.677754][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.691679][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.700643][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.724685][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.736274][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.748517][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.757571][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.817934][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.826752][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.836121][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.845193][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.863108][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.888623][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.896904][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.912096][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.920658][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.930315][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.939471][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.954547][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.961682][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.971619][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.982006][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.996850][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.004007][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.013007][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.020131][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.038942][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.046014][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.064972][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.077440][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.084594][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.103048][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.110198][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.146396][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.160764][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.171227][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.189883][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.218455][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.225725][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.236151][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.243323][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.276742][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.301117][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.314142][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.344510][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.355179][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.382730][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.398037][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.417585][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.430437][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.437501][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.446310][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.453394][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.481233][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.526713][ T3307] veth0_vlan: entered promiscuous mode [ 31.553641][ T3307] veth1_vlan: entered promiscuous mode [ 31.586181][ T3309] veth0_vlan: entered promiscuous mode [ 31.612978][ T3309] veth1_vlan: entered promiscuous mode [ 31.628109][ T3303] veth0_vlan: entered promiscuous mode [ 31.646097][ T3307] veth0_macvtap: entered promiscuous mode [ 31.655472][ T3303] veth1_vlan: entered promiscuous mode [ 31.664970][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.673387][ T3307] veth1_macvtap: entered promiscuous mode [ 31.686631][ T3313] veth0_vlan: entered promiscuous mode [ 31.699723][ T3309] veth0_macvtap: entered promiscuous mode [ 31.706955][ T3309] veth1_macvtap: entered promiscuous mode [ 31.718270][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.728614][ T3313] veth1_vlan: entered promiscuous mode [ 31.743128][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.754301][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.764876][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.775389][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.785026][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793822][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.802596][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811349][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.832294][ T3303] veth0_macvtap: entered promiscuous mode [ 31.838916][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.849474][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.860055][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.871738][ T3303] veth1_macvtap: entered promiscuous mode [ 31.881337][ T3309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890262][ T3309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.899028][ T3309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.907829][ T3309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.947011][ T3313] veth0_macvtap: entered promiscuous mode [ 31.954828][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.965357][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.975277][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.985900][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.997885][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.999936][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.028298][ T3313] veth1_macvtap: entered promiscuous mode [ 32.035529][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.046096][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.056055][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.066660][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.077936][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.087994][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.096821][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105597][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.114480][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.142595][ T3304] veth0_vlan: entered promiscuous mode [ 32.152328][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.162834][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.172860][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.183341][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.193319][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.203883][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.215572][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.224487][ C1] hrtimer: interrupt took 31914 ns [ 32.231567][ T3304] veth1_vlan: entered promiscuous mode [ 32.245072][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.247419][ T3449] 9pnet_fd: Insufficient options for proto=fd [ 32.255659][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.255682][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.255698][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.255710][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.255722][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.258645][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.322025][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.325688][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 32.325702][ T29] audit: type=1400 audit(1746119808.611:132): avc: denied { read write } for pid=3448 comm="syz.2.6" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.330763][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.338802][ T29] audit: type=1400 audit(1746119808.631:133): avc: denied { open } for pid=3448 comm="syz.2.6" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.359746][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.391777][ T3451] loop2: detected capacity change from 0 to 256 [ 32.392304][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.439841][ T3451] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.448176][ T3304] veth0_macvtap: entered promiscuous mode [ 32.470428][ T3304] veth1_macvtap: entered promiscuous mode [ 32.496172][ T3455] sit0: entered allmulticast mode [ 32.504027][ T29] audit: type=1400 audit(1746119808.801:134): avc: denied { mount } for pid=3448 comm="syz.2.6" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.540143][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.550671][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.560580][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.571047][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.578083][ T29] audit: type=1400 audit(1746119808.821:135): avc: denied { create } for pid=3456 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.580871][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.580888][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.580897][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.580909][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.583153][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.600050][ T29] audit: type=1400 audit(1746119808.821:136): avc: denied { create } for pid=3456 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.639018][ T3451] 9pnet_fd: Insufficient options for proto=fd [ 32.640554][ T29] audit: type=1400 audit(1746119808.821:137): avc: denied { create } for pid=3456 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.690531][ T3455] sit0: entered promiscuous mode [ 32.698918][ T29] audit: type=1400 audit(1746119808.931:138): avc: denied { create } for pid=3448 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.718176][ T29] audit: type=1400 audit(1746119808.931:139): avc: denied { listen } for pid=3448 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.737383][ T29] audit: type=1400 audit(1746119808.941:140): avc: denied { prog_run } for pid=3454 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.932266][ T29] audit: type=1400 audit(1746119809.221:141): avc: denied { allowed } for pid=3462 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 32.971927][ T3465] loop1: detected capacity change from 0 to 128 [ 32.984544][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.995059][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.005002][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.015588][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.025587][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.036140][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.046112][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.056626][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.067596][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.108264][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.117160][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.125966][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134700][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.208307][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.208307][ T37] loop1: rw=1, sector=145, nr_sectors = 32 limit=128 [ 33.232414][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.232414][ T37] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 33.258940][ T3473] 9pnet_fd: Insufficient options for proto=fd [ 33.276810][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.276810][ T37] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 33.338600][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.338600][ T37] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 33.368931][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.368931][ T37] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 33.376949][ T3478] loop4: detected capacity change from 0 to 256 [ 33.397134][ T3475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3475 comm=syz.0.11 [ 33.404474][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.404474][ T37] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 33.409627][ T3475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3475 comm=syz.0.11 [ 33.427262][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.427262][ T37] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 33.458058][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.458058][ T37] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 33.504814][ T3478] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.518697][ T3475] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 33.532542][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.532542][ T37] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 33.547629][ T37] kworker/u8:2: attempt to access beyond end of device [ 33.547629][ T37] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 33.594007][ T3487] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.648881][ T3481] serio: Serial port ptm0 [ 33.659295][ T3491] loop0: detected capacity change from 0 to 128 [ 33.678876][ T3484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=3484 comm=syz.3.13 [ 33.691472][ T3484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=3484 comm=syz.3.13 [ 33.803550][ T3496] process 'syz.2.15' launched './file0' with NULL argv: empty string added [ 33.888668][ T3513] loop3: detected capacity change from 0 to 512 [ 33.917984][ T3513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.948803][ T3513] EXT4-fs (loop3): 1 orphan inode deleted [ 33.958612][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.973199][ T3410] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 34.008091][ T3513] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.102208][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.152163][ T3533] loop1: detected capacity change from 0 to 128 [ 34.183627][ T3537] 9pnet_fd: Insufficient options for proto=fd [ 34.367944][ T3542] loop4: detected capacity change from 0 to 256 [ 34.438253][ T3542] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.764425][ T3623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.799602][ T3600] loop1: detected capacity change from 0 to 512 [ 34.847456][ T3600] EXT4-fs (loop1): 1 orphan inode deleted [ 34.860287][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.860473][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 34.915176][ T3638] loop2: detected capacity change from 0 to 128 [ 34.946885][ T3600] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.949817][ T3638] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.027270][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 35.036236][ T3652] sit0: left promiscuous mode [ 35.088455][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.101829][ T3659] sit0: entered promiscuous mode [ 35.158714][ T3663] loop1: detected capacity change from 0 to 512 [ 35.212434][ T3663] EXT4-fs (loop1): 1 orphan inode deleted [ 35.230949][ T3663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.249227][ T3605] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 35.263083][ T3663] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.428426][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.465384][ T3669] serio: Serial port ptm0 [ 35.477263][ T3674] sit0: entered allmulticast mode [ 35.506862][ T3676] loop3: detected capacity change from 0 to 512 [ 35.515635][ T3674] sit0: entered promiscuous mode [ 35.559038][ T3676] EXT4-fs (loop3): 1 orphan inode deleted [ 35.576838][ T3605] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 35.601109][ T3676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.631294][ T3676] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.660309][ T3688] loop0: detected capacity change from 0 to 2048 [ 35.715573][ T3689] serio: Serial port ptm0 [ 35.723075][ T3688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.738959][ T3688] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.934330][ T3697] loop1: detected capacity change from 0 to 512 [ 35.942194][ T3698] 9pnet_fd: Insufficient options for proto=fd [ 36.018830][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.044663][ T3697] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.053933][ T3697] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 36.096869][ T3697] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 36.137391][ T3697] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 36.152446][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 36.167733][ T3703] sit0: entered allmulticast mode [ 36.176754][ T3704] loop2: detected capacity change from 0 to 256 [ 36.187179][ T3697] System zones: 0-2, 18-18, 34-34 [ 36.197082][ T3704] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.207949][ T3697] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 36.226893][ T3697] EXT4-fs (loop1): 1 truncate cleaned up [ 36.255324][ T3704] 9pnet_fd: Insufficient options for proto=fd [ 36.266215][ T3706] sit0: entered promiscuous mode [ 36.292649][ T3697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.528518][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.542052][ T3712] loop4: detected capacity change from 0 to 128 [ 36.575851][ T3716] loop3: detected capacity change from 0 to 128 [ 36.624811][ T3714] sit0: left promiscuous mode [ 36.690133][ T3717] sit0: entered promiscuous mode [ 37.024459][ T3688] syz.0.34 (3688) used greatest stack depth: 6832 bytes left [ 37.036040][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.124297][ T3728] 9pnet_fd: Insufficient options for proto=fd [ 37.140612][ T3730] loop0: detected capacity change from 0 to 512 [ 37.192705][ T3730] EXT4-fs (loop0): 1 orphan inode deleted [ 37.205671][ T3730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.224251][ T3732] loop1: detected capacity change from 0 to 512 [ 37.231054][ T3605] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 37.239824][ T3736] sit0: entered allmulticast mode [ 37.251549][ T3730] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.295310][ T3732] EXT4-fs (loop1): 1 orphan inode deleted [ 37.301164][ T3740] loop4: detected capacity change from 0 to 256 [ 37.312133][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.315365][ T3599] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:16: Failed to release dquot type 1 [ 37.362446][ T3732] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.364329][ T3740] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.430639][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.439807][ T3736] sit0: entered promiscuous mode [ 37.446523][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.465590][ T3745] loop1: detected capacity change from 0 to 128 [ 37.503423][ T3740] 9pnet_fd: Insufficient options for proto=fd [ 37.594496][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 37.594514][ T29] audit: type=1326 audit(1746119813.881:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.646548][ T29] audit: type=1326 audit(1746119813.881:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.669911][ T29] audit: type=1326 audit(1746119813.921:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.693279][ T29] audit: type=1326 audit(1746119813.921:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.716432][ T29] audit: type=1326 audit(1746119813.921:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.810523][ T29] audit: type=1326 audit(1746119814.041:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.833751][ T29] audit: type=1326 audit(1746119814.041:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.899666][ T29] audit: type=1326 audit(1746119814.111:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.922933][ T29] audit: type=1326 audit(1746119814.111:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 37.946154][ T29] audit: type=1326 audit(1746119814.111:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3744 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87f2c2e969 code=0x7ffc0000 [ 38.014231][ T3747] sit0: entered allmulticast mode [ 38.047073][ T3754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 38.086210][ T3758] sit0: left promiscuous mode [ 38.124079][ T3757] sit0: entered promiscuous mode [ 38.377337][ T3758] sit0: entered promiscuous mode [ 38.675194][ T3594] bio_check_eod: 519 callbacks suppressed [ 38.675211][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.675211][ T3594] loop1: rw=1, sector=145, nr_sectors = 32 limit=128 [ 38.713171][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.713171][ T3594] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 38.727335][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.727335][ T3594] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 38.741403][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.741403][ T3594] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 38.763398][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.763398][ T3594] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 38.769601][ T3794] serio: Serial port ptm0 [ 38.784283][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.784283][ T3594] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 38.797825][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.797825][ T3594] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 38.811670][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.811670][ T3594] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 38.825452][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.825452][ T3594] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 38.843824][ T3594] kworker/u8:14: attempt to access beyond end of device [ 38.843824][ T3594] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 38.916958][ T3815] loop1: detected capacity change from 0 to 512 [ 38.917291][ T3814] 9pnet_fd: Insufficient options for proto=fd [ 38.953623][ T3815] EXT4-fs (loop1): 1 orphan inode deleted [ 38.969707][ T3588] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:11: Failed to release dquot type 1 [ 38.988649][ T3815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.021868][ T3824] loop4: detected capacity change from 0 to 256 [ 39.028483][ T3815] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.051059][ T3824] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.102205][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.394128][ T3874] loop1: detected capacity change from 0 to 2048 [ 39.404607][ T3885] sit0: left promiscuous mode [ 39.473949][ T3874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.489268][ T3874] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.501838][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 39.529456][ T3885] sit0: entered promiscuous mode [ 39.538613][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.882222][ T3957] netlink: 72 bytes leftover after parsing attributes in process `syz.2.67'. [ 39.917307][ T3965] loop2: detected capacity change from 0 to 128 [ 40.984718][ T4160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=4160 comm=syz.1.73 [ 40.997242][ T4160] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=4160 comm=syz.1.73 [ 41.028820][ T4164] sit0: left promiscuous mode [ 41.104124][ T4168] loop1: detected capacity change from 0 to 2048 [ 41.121269][ T4168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.133457][ T4168] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.144942][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 41.164974][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.212604][ T4177] IPv6: NLM_F_CREATE should be specified when creating new route [ 41.232233][ T4179] sit0: left promiscuous mode [ 41.263331][ T4179] sit0: entered promiscuous mode [ 41.504633][ T4191] loop2: detected capacity change from 0 to 512 [ 41.510722][ T4190] 9pnet_fd: Insufficient options for proto=fd [ 41.527147][ T4191] EXT4-fs (loop2): 1 orphan inode deleted [ 41.535859][ T4191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.548929][ T4191] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.560897][ T3410] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 41.581382][ T4194] loop4: detected capacity change from 0 to 256 [ 41.611952][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.632818][ T4194] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.773704][ T4200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4200 comm=syz.4.86 [ 42.215684][ T4204] loop1: detected capacity change from 0 to 2048 [ 42.241192][ T4204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.253660][ T4204] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.265518][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 42.286178][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.330216][ T4210] loop1: detected capacity change from 0 to 2048 [ 42.360937][ T4210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.373164][ T4210] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.385885][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 42.406202][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.502646][ T4217] 9pnet_fd: Insufficient options for proto=fd [ 42.621254][ T4230] loop2: detected capacity change from 0 to 256 [ 42.646080][ T4230] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.670638][ T4230] 9pnet_fd: Insufficient options for proto=fd [ 42.678768][ T4234] sit0: left promiscuous mode [ 42.735162][ T4234] sit0: entered promiscuous mode [ 42.980877][ T4242] Zero length message leads to an empty skb [ 43.025688][ T4248] IPv6: NLM_F_CREATE should be specified when creating new route [ 43.123311][ T4262] loop2: detected capacity change from 0 to 512 [ 43.151109][ T4262] EXT4-fs (loop2): 1 orphan inode deleted [ 43.157360][ T4262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.170984][ T383] __quota_error: 35 callbacks suppressed [ 43.170997][ T383] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.183145][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 43.186448][ T383] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 43.208432][ T4262] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.273330][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.309840][ T4267] sit0: left promiscuous mode [ 43.322162][ T29] audit: type=1400 audit(1746119819.611:264): avc: denied { create } for pid=4266 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.343945][ T4268] netlink: 40 bytes leftover after parsing attributes in process `syz.1.101'. [ 43.354539][ T29] audit: type=1400 audit(1746119819.641:265): avc: denied { write } for pid=4266 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.406462][ T4267] sit0: entered promiscuous mode [ 43.437585][ T4272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4272 comm=syz.0.103 [ 43.614840][ T4275] sit0: left promiscuous mode [ 43.646480][ T4275] sit0: entered promiscuous mode [ 43.828603][ T29] audit: type=1400 audit(1746119820.111:266): avc: denied { setopt } for pid=4277 comm="syz.4.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.853399][ T4283] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.260648][ T4294] sit0: entered promiscuous mode [ 44.320791][ T29] audit: type=1400 audit(1746119820.601:267): avc: denied { write } for pid=4297 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.340203][ T29] audit: type=1400 audit(1746119820.601:268): avc: denied { name_connect } for pid=4297 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.386175][ T4298] loop0: detected capacity change from 0 to 1024 [ 44.393205][ T4298] EXT4-fs: Ignoring removed i_version option [ 44.405082][ T4298] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 44.427657][ T4298] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 44.436770][ T4298] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 44.446187][ T4298] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.113: Failed to acquire dquot type 0 [ 44.461956][ T4298] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.477188][ T4298] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.113: corrupted inode contents [ 44.490674][ T4298] EXT4-fs error (device loop0): ext4_dirty_inode:6103: inode #13: comm syz.0.113: mark_inode_dirty error [ 44.502402][ T4298] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.113: corrupted inode contents [ 44.515456][ T4298] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.113: mark_inode_dirty error [ 44.527529][ T4298] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.113: corrupted inode contents [ 44.540820][ T4298] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 44.551091][ T4298] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #13: comm syz.0.113: corrupted inode contents [ 44.563833][ T4298] EXT4-fs error (device loop0): ext4_truncate:4255: inode #13: comm syz.0.113: mark_inode_dirty error [ 44.575078][ T4298] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 44.586100][ T4298] EXT4-fs (loop0): 1 truncate cleaned up [ 44.592725][ T4298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.643883][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.686450][ T4307] sit0: left promiscuous mode [ 44.768415][ T4314] netlink: 'syz.4.119': attribute type 27 has an invalid length. [ 44.815857][ T4307] sit0: entered promiscuous mode [ 44.816061][ T4317] loop4: detected capacity change from 0 to 512 [ 44.836075][ T4318] loop1: detected capacity change from 0 to 2048 [ 44.851324][ T4317] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 44.867779][ T4317] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 44.886248][ T4317] EXT4-fs (loop4): mount failed [ 44.895113][ T4317] FAULT_INJECTION: forcing a failure. [ 44.895113][ T4317] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.908256][ T4317] CPU: 0 UID: 0 PID: 4317 Comm: syz.4.120 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 44.908339][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.908382][ T4317] Call Trace: [ 44.908390][ T4317] [ 44.908398][ T4317] __dump_stack+0x1d/0x30 [ 44.908423][ T4317] dump_stack_lvl+0xe8/0x140 [ 44.908445][ T4317] dump_stack+0x15/0x1b [ 44.908527][ T4317] should_fail_ex+0x265/0x280 [ 44.908634][ T4317] should_fail+0xb/0x20 [ 44.908725][ T4317] should_fail_usercopy+0x1a/0x20 [ 44.908742][ T4317] _copy_from_iter+0xcf/0xdd0 [ 44.908760][ T4317] ? __build_skb_around+0x1a0/0x200 [ 44.908875][ T4317] ? __alloc_skb+0x223/0x320 [ 44.908918][ T4317] pfkey_sendmsg+0x126/0x900 [ 44.909013][ T4317] ? avc_has_perm+0xd3/0x150 [ 44.909053][ T4317] ? selinux_socket_sendmsg+0x175/0x1b0 [ 44.909083][ T4317] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 44.909134][ T4317] __sock_sendmsg+0x142/0x180 [ 44.909165][ T4317] ____sys_sendmsg+0x31e/0x4e0 [ 44.909186][ T4317] ___sys_sendmsg+0x17b/0x1d0 [ 44.909273][ T4317] __x64_sys_sendmsg+0xd4/0x160 [ 44.909329][ T4317] x64_sys_call+0x2999/0x2fb0 [ 44.909353][ T4317] do_syscall_64+0xd0/0x1a0 [ 44.909373][ T4317] ? clear_bhb_loop+0x25/0x80 [ 44.909432][ T4317] ? clear_bhb_loop+0x25/0x80 [ 44.909515][ T4317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.909539][ T4317] RIP: 0033:0x7f63a875e969 [ 44.909561][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.909641][ T4317] RSP: 002b:00007f63a6dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.909662][ T4317] RAX: ffffffffffffffda RBX: 00007f63a8985fa0 RCX: 00007f63a875e969 [ 44.909675][ T4317] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000006 [ 44.909755][ T4317] RBP: 00007f63a6dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.909768][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.909781][ T4317] R13: 0000000000000000 R14: 00007f63a8985fa0 R15: 00007fffe77c2268 [ 44.909801][ T4317] [ 45.133924][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.153792][ T4318] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.193453][ T4330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.195698][ T29] audit: type=1400 audit(1746119821.471:269): avc: denied { ioctl } for pid=4329 comm="syz.4.124" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.226843][ T4330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.265998][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.289072][ T4332] loop3: detected capacity change from 0 to 8192 [ 45.350965][ T4332] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 45.404021][ T4338] FAULT_INJECTION: forcing a failure. [ 45.404021][ T4338] name failslab, interval 1, probability 0, space 0, times 0 [ 45.416746][ T4338] CPU: 0 UID: 0 PID: 4338 Comm: syz.0.128 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 45.416773][ T4338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.416787][ T4338] Call Trace: [ 45.416801][ T4338] [ 45.416813][ T4338] __dump_stack+0x1d/0x30 [ 45.416835][ T4338] dump_stack_lvl+0xe8/0x140 [ 45.416854][ T4338] dump_stack+0x15/0x1b [ 45.416870][ T4338] should_fail_ex+0x265/0x280 [ 45.416927][ T4338] ? alloc_bprm+0x62/0x660 [ 45.416948][ T4338] should_failslab+0x8c/0xb0 [ 45.417008][ T4338] __kmalloc_cache_noprof+0x4c/0x320 [ 45.417030][ T4338] alloc_bprm+0x62/0x660 [ 45.417051][ T4338] ? should_fail+0xb/0x20 [ 45.417093][ T4338] do_execveat_common+0x12e/0x750 [ 45.417117][ T4338] ? getname_flags+0x154/0x3b0 [ 45.417234][ T4338] __x64_sys_execveat+0x73/0x90 [ 45.417258][ T4338] x64_sys_call+0x2dae/0x2fb0 [ 45.417296][ T4338] do_syscall_64+0xd0/0x1a0 [ 45.417317][ T4338] ? clear_bhb_loop+0x25/0x80 [ 45.417338][ T4338] ? clear_bhb_loop+0x25/0x80 [ 45.417399][ T4338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.417419][ T4338] RIP: 0033:0x7f115c8ce969 [ 45.417433][ T4338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.417451][ T4338] RSP: 002b:00007f115af37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 45.417547][ T4338] RAX: ffffffffffffffda RBX: 00007f115caf5fa0 RCX: 00007f115c8ce969 [ 45.417595][ T4338] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 45.417632][ T4338] RBP: 00007f115af37090 R08: 0000000000001000 R09: 0000000000000000 [ 45.417674][ T4338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.417686][ T4338] R13: 0000000000000000 R14: 00007f115caf5fa0 R15: 00007ffd4b864488 [ 45.417705][ T4338] [ 45.631155][ T4342] sit0: left promiscuous mode [ 45.663505][ T4342] sit0: entered promiscuous mode [ 45.787128][ T4349] loop3: detected capacity change from 0 to 512 [ 45.836662][ T4349] EXT4-fs (loop3): 1 orphan inode deleted [ 45.843188][ T4349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.856137][ T383] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 45.876415][ T4349] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.947069][ T4353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.957970][ T4358] loop4: detected capacity change from 0 to 2048 [ 45.972260][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.993926][ T4358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.027079][ T4358] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.031326][ T4365] netlink: 56 bytes leftover after parsing attributes in process `syz.2.139'. [ 46.048522][ T4367] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 46.058490][ T4367] netlink: 44 bytes leftover after parsing attributes in process `syz.3.137'. [ 46.068141][ T4368] loop0: detected capacity change from 0 to 512 [ 46.077702][ T4368] EXT4-fs: quotafile must be on filesystem root [ 46.088722][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.114141][ T4373] loop0: detected capacity change from 0 to 512 [ 46.164381][ T4380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4380 comm=syz.3.144 [ 46.187659][ T4373] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.203840][ T4373] EXT4-fs (loop0): mount failed [ 46.308979][ T4395] loop4: detected capacity change from 0 to 512 [ 46.322888][ T4395] EXT4-fs (loop4): 1 orphan inode deleted [ 46.336700][ T4395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.349401][ T3410] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 46.351177][ T4397] loop1: detected capacity change from 0 to 1024 [ 46.363222][ T4395] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.367375][ T4397] ======================================================= [ 46.367375][ T4397] WARNING: The mand mount option has been deprecated and [ 46.367375][ T4397] and is ignored by this kernel. Remove the mand [ 46.367375][ T4397] option from the mount to silence this warning. [ 46.367375][ T4397] ======================================================= [ 46.435720][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 46.461663][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.472882][ T4406] loop0: detected capacity change from 0 to 2048 [ 46.473209][ T4397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.507429][ T4397] EXT4-fs (loop1): shut down requested (2) [ 46.532176][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.566819][ T4406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.581616][ T4406] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.651368][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.780941][ T4429] ucma_write: process 109 (syz.1.160) changed security contexts after opening file descriptor, this is not allowed. [ 46.996517][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 47.047480][ T4440] loop3: detected capacity change from 0 to 2048 [ 47.068394][ T4442] xt_hashlimit: max too large, truncated to 1048576 [ 47.082006][ T4442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.164'. [ 47.115738][ T4440] EXT4-fs (loop3): failed to initialize system zone (-117) [ 47.127692][ T4440] EXT4-fs (loop3): mount failed [ 47.152786][ T4440] loop3: detected capacity change from 0 to 128 [ 47.161389][ T4440] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.181527][ T4440] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.235616][ T4451] loop0: detected capacity change from 0 to 2048 [ 47.284052][ T4451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.309884][ T4451] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.339047][ T4448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.362602][ T4448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.406195][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.419468][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.432848][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4448 comm=+}[@ [ 47.445046][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=4448 comm=+}[@ [ 47.457276][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=4448 comm=+}[@ [ 47.575963][ T4470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 47.625078][ T4466] loop0: detected capacity change from 0 to 8192 [ 47.675451][ T4475] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4475 comm=syz.0.176 [ 48.014846][ T4484] loop2: detected capacity change from 0 to 2048 [ 48.031845][ T4484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.044121][ T4484] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.066720][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.089261][ T4488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 48.166211][ T4496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 48.199014][ T4498] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.211874][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 48.211890][ T29] audit: type=1400 audit(1746119824.501:370): avc: denied { write } for pid=4497 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.416124][ T4522] loop3: detected capacity change from 0 to 512 [ 48.424183][ T4522] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.450711][ T4522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 48.466761][ T4522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.474281][ T4522] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 48.485197][ T4522] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 48.510105][ T4522] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 48.527410][ T4522] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.187: bg 0: block 40: padding at end of block bitmap is not set [ 48.545576][ T4522] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 48.556739][ T4522] EXT4-fs (loop3): 1 truncate cleaned up [ 48.563111][ T4522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.581499][ T4548] usb usb1: usbfs: process 4548 (syz.0.189) did not claim interface 63 before use [ 48.591083][ T4545] loop4: detected capacity change from 0 to 2048 [ 48.624573][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.648576][ T4554] FAULT_INJECTION: forcing a failure. [ 48.648576][ T4554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.661933][ T4554] CPU: 0 UID: 0 PID: 4554 Comm: +}[@ Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 48.661968][ T4554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.661983][ T4554] Call Trace: [ 48.661992][ T4554] [ 48.662000][ T4554] __dump_stack+0x1d/0x30 [ 48.662040][ T4554] dump_stack_lvl+0xe8/0x140 [ 48.662066][ T4554] dump_stack+0x15/0x1b [ 48.662087][ T4554] should_fail_ex+0x265/0x280 [ 48.662204][ T4554] should_fail+0xb/0x20 [ 48.662241][ T4554] should_fail_usercopy+0x1a/0x20 [ 48.662260][ T4554] _copy_to_user+0x20/0xa0 [ 48.662291][ T4554] simple_read_from_buffer+0xb5/0x130 [ 48.662373][ T4554] proc_fail_nth_read+0x100/0x140 [ 48.662398][ T4554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 48.662445][ T4554] vfs_read+0x19d/0x6f0 [ 48.662468][ T4554] ? __rcu_read_unlock+0x4f/0x70 [ 48.662489][ T4554] ? __fget_files+0x184/0x1c0 [ 48.662516][ T4554] ksys_read+0xda/0x1a0 [ 48.662547][ T4554] __x64_sys_read+0x40/0x50 [ 48.662576][ T4554] x64_sys_call+0x2d77/0x2fb0 [ 48.662602][ T4554] do_syscall_64+0xd0/0x1a0 [ 48.662643][ T4554] ? clear_bhb_loop+0x25/0x80 [ 48.662663][ T4554] ? clear_bhb_loop+0x25/0x80 [ 48.662731][ T4554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.662757][ T4554] RIP: 0033:0x7f87f2c2d37c [ 48.662794][ T4554] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 48.662815][ T4554] RSP: 002b:00007f87f1297030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 48.662916][ T4554] RAX: ffffffffffffffda RBX: 00007f87f2e55fa0 RCX: 00007f87f2c2d37c [ 48.662933][ T4554] RDX: 000000000000000f RSI: 00007f87f12970a0 RDI: 0000000000000008 [ 48.662949][ T4554] RBP: 00007f87f1297090 R08: 0000000000000000 R09: 0000000000000000 [ 48.662964][ T4554] R10: 0000000000fffc80 R11: 0000000000000246 R12: 0000000000000001 [ 48.662979][ T4554] R13: 0000000000000000 R14: 00007f87f2e55fa0 R15: 00007fff6f1b9788 [ 48.663003][ T4554] [ 48.880874][ T4556] ================================================================== [ 48.888977][ T4556] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 48.896271][ T4556] [ 48.898595][ T4556] write to 0xffff8881074dce00 of 8 bytes by task 4560 on cpu 1: [ 48.906222][ T4556] mas_wmb_replace+0x20e/0x14a0 [ 48.911080][ T4556] mas_wr_store_entry+0x17ae/0x2b60 [ 48.916279][ T4556] mas_store_prealloc+0x74d/0x9e0 [ 48.921314][ T4556] vma_iter_store_new+0x1c5/0x200 [ 48.926353][ T4556] mmap_region+0xdc1/0x1470 [ 48.930869][ T4556] do_mmap+0x9de/0xc20 [ 48.934947][ T4556] vm_mmap_pgoff+0x17a/0x2e0 [ 48.939540][ T4556] ksys_mmap_pgoff+0xc2/0x310 [ 48.944233][ T4556] x64_sys_call+0x1602/0x2fb0 [ 48.948932][ T4556] do_syscall_64+0xd0/0x1a0 [ 48.953440][ T4556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.959339][ T4556] [ 48.961673][ T4556] read to 0xffff8881074dce00 of 8 bytes by task 4556 on cpu 0: [ 48.969220][ T4556] mas_state_walk+0x485/0x650 [ 48.973901][ T4556] mas_walk+0x30/0x120 [ 48.977974][ T4556] lock_vma_under_rcu+0xa2/0x2f0 [ 48.982923][ T4556] do_user_addr_fault+0x233/0x1090 [ 48.988056][ T4556] exc_page_fault+0x54/0xc0 [ 48.992589][ T4556] asm_exc_page_fault+0x26/0x30 [ 48.997442][ T4556] [ 48.999762][ T4556] value changed: 0xffff888117d2c7c1 -> 0xffff8881074dce00 [ 49.006866][ T4556] [ 49.009184][ T4556] Reported by Kernel Concurrency Sanitizer on: [ 49.015344][ T4556] CPU: 0 UID: 0 PID: 4556 Comm: syz.0.193 Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(voluntary) [ 49.027670][ T4556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.037726][ T4556] ================================================================== [ 49.071558][ T4545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.085786][ T4545] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.100196][ T29] audit: type=1400 audit(1746119825.391:371): avc: denied { read } for pid=4556 comm="syz.0.193" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.133578][ T4560] loop0: detected capacity change from 0 to 2048 [ 49.200946][ T4560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.223498][ T29] audit: type=1400 audit(1746119825.421:372): avc: denied { open } for pid=4556 comm="syz.0.193" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.247331][ T29] audit: type=1400 audit(1746119825.421:373): avc: denied { ioctl } for pid=4556 comm="syz.0.193" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.281672][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.292224][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.