last executing test programs: 57.437822921s ago: executing program 0 (id=119): r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x2, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0xa1ff) dup3(r2, r0, 0x80000) 57.202016016s ago: executing program 0 (id=121): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000431dfb11facf7897bf0eda55f59d3052dce8478b9eee409fc35c9a351aba8fbe2660", @ANYRES16=r6, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 57.162820177s ago: executing program 0 (id=123): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRESOCT=r0, @ANYBLOB="ac57de4602a3587921c0f7acfd1a716f2068e34b00a28d64d2856186a87ed196c59aa244740a1c420c1973bc1ece2de606b69522bdf1d7e85543ff0f92d505cfd952b91fc623eaa6efb07673bc20a0957856be4cdd4c3fee893c1c4bf884d4367f24523ceee2845e8187d284ae744717b35301af59e98fc28a2f620d57d2b241ff9803692123a0bc1ad71930d90221058278f7605ee91dfcdf43af326824fb403685eb19f6ca91920dc6e1c1ec981f4940e3d48c550c15d6fb984e82606b38ebe3bca1603f01374eb8a98b10d60d2ff4469c46de8ac24fdc8dd13fb50c7d92205f8fe10a1b59c110356f39554927a607deca0f2d4521da052b2f53dad503171bc938e232234b69bee8a04e402807234f362f5395d2fba636cd66ba1ec465ab7418fec480f556c9915792ccdefa2c80595f87c1ffe18b9579121ce10551f7d01f31f70f0948195c17ca3f8d8ace82ba305dfe52fcf392ee2a57099403e84c517c9f45fcdf9cb0e8d031d93d40ffa8920927662d8e7eadb930c9d8b7bb7206d8d9ba78315f66a3e876d19388a5488e5bf499b3075efc8407661c842a978aed1bc7c5f432898ed16d14c82536341dfdd2bb3516d0a537e9754b3a99a3ee5062edb9eb0bef6ecb16616b12daf166edd180a48d33d33993c7fda57ad92a8c6ce815b52bcfd412e01dcc9228f34000a79b8c7c4f0a7110fdb17b5d17e6d5d3190302763e0b4f1030133ca92fce37edd5ce1db440a9659485c7c1fc980c2ffe13059b62eb8cb96d567216eda71efb2af8a4c1cd0bd19494767230327e91a04db072b9724c0c5e2e29ea6e053f570f6f96808365ef50925772acd7a8acdf71ca2b9a3f67883c45559f4b0b0fea4fb5921e59bb72e48290fc812a15ba559260e6bfd13e57a4caaba2989befc64a3c94d58aa0edde8f4f9bee513d8c3eb9d1a31b7b4d5e344752d2cd82e72af71792f8e6b72b82931d834010d6cdbff651e5712eb9f13351df8852bf88bc48f7d30c1e5263977aa10cedbb49575bd9eb9a75e84939a0137f3c909cf45c3383177d9409038f8eee972d222f32fbfd19acd5d825a824a2dcc2013b2368da8f448824f8a7c26b394d42591298a41d46ea38427e5197580eb90071e109a496bc1679a6231d060c43f9e1ff326a432fa64ea4bee7d308a88ac4205decdcb0ee378265a2b8e6e9755679973c5c39a45004f099359231e473ae9b4d9ed182b6a3db6ac049fb209ad14ee97596dcd217504681d976a56d79f8caced370a90386524bbb6c4d21705a123f2a9edf65ca8c2e2d1402e22b42e6cc5abf1fd69e59e408ae54567e475b729e367ebb339a4fc55f70128101ac96e03209a721d81962ddc0bf9df0d08e2570d64bfb5bb80d16d16c41ec11cf8ac891593b7034193e4d21ec40d1ab7f231b30d79495ac3344ee9979639aa09ca72b94f0aa56b38c60acbd036912e1d20b0d42a6f75d11d9d2e15a5150da7f22c7e7f82558f2394e498063bb7eb1fd1333e53f69d8b24733451a9c6b94629053d0af8aee21f825b1d4454a61fc387797ffe77ba33506142bcffcda626995994c788b00ed77ccb7a38c6c6ab88dad20686c7f06b29062dbf60366087e65d803cd78f934a06db1d50250492889673329f872cf651db997d9a5053e7af8837e3afded6e21cdccb177aa3d94f4779c33545af19bd8664fc0af6f68f6cb91e0560036f011870cdd9d07f878f0ef116b7ffcd1b63fb539ed7b8ba46916e407d579f3833074e54215a29f2664afaf6c5c08364e645f5231461a0084b52c9f5e797e8b7c223f967e35c8dcff05127081a35bb132958ee3bf733d7437cd70838bc35f63c7433ac634d9483d992c9169169947ae8b41194a909ff9ff260992d8bf956a4c72fb7d1edf7c58efd8d03a77d0efacdf245dd43f19ddb92647e00641487ba80d4fbda80c1e7ff8084f4f37d769a6f2b992f43af7393ab926c93b318ab0a2c5f09eb904d8146c90d3bd00a8fdc594df7e26eb7e05779a4eb1076d9378ced80bf210cb7a78f0e2daf5c682b52cb27be920f2e4d7e3774763eed3e3e2e4f8683568e68cd50e87019c5e81f21e99a7fca1a0fc568ae3d5f65334e4ca9041369244f6a23f30377f08c1eb35a7f0692fc242c715f38b87246db38105f0f1dddc815fea62914a2cadf165f09edd99354db2cffdd2d894ddccfdf1fb774fcb72e193255c5dc975c0ec6694168e9aaa314229b430f2ecb411113035014aaffdfeaa03ab163854d2728500d4133d742a7f189040e96f8d2c54b374298b33c66ab3db6a90488750f1c5e96f914587f49e0aaa5a5d7a195d004e037c90d1da30aa89284325158179ec5f4f2c7308704a9fec0862a0d82483f86db1c7b3c419d89d14912725324fd6756d2770bfff854cb8f575064fa3f2f8471dadf7f606c4c35c1796471535987ee4c45a44fe067a404d9a71a6889dd46692879fe9dd9362e7fa9dff7fff6e19f68a2b5087cb55842df219a86abc3c6871a54ef117e167f07322e8edadfd40b583155853d6e45dbf99e4697910d5b9dcfd6ab17c6da0d45895a92a16a4b305ede45fa1bb6a04e974673edcdd6090f6139d7eafae67f23980a47eb106bc1c376067d1f627b4cf5b66fa5e6a5ab239fa7a98a704b9a00159c96a1389f8971bbd0caf24aa8a7b5128914537eb56361bc3dd1633b03827e3c913f7782acd0abe24be542334284cb92afd6b99c1236ff1b1569bc37cff492b9a1103225e8273ae13d4a1a2d7ea0ab68b95534f6d043d074a8f23158f4be09607e08c8e00701d149f609a04659da6004555fc9bc5be8801a729d2751dff146bc841abcafe3d37962756d93fa7f430bd9b930ae4bf31defe255a98fc01c59f38d2c318a6c0f2b45ccc08e2ea9531cc0ca8e9a69fd464d6ceef248c678c9fb7c4b741a17eddd1af78bc45b20cf1b319cc21c6772f5026b745af5b78c735970e9ee8b304a8746f2257323644d4fdb7705327e1700eae744883312beceff663da36d44c57d73bebba9d9b8bc5c554f51e909f3762a0613bc894ee95a18df1a77c77c8775db7197e7c92798c53d62017cd3e7163bd28ba54813ab011726634655e4e04dafb6a44c4ce862a05290e497dd35d690f3c833befc25c1ea100f6554b1395ea52ff062ad794868f9a80e8fffedd261dfb7f96385bcd982efc60e908e12e77da76ff85c309e49d82211632c54a731ddb13e098d360dd0fbbab4e47f06ea7f5d673311f75e756104dfccf062371849ebd1f7c0d1cc742584fc54f00978d27d2d16b45be351c790c666e0851c2d19ebd3ff88f3cef845a4c4d23d83aabda90ac2e09c1142ed025265ea5e6a317bc62642216a61e51de2c5ebfa4db92c61598d7449b0359fb5c718938b5404443cc4738f66e31c0514cc1747a99f57641c296f3e935e08cb605efcd81d3f442485bac65ec2fb63a957a0f73a6160b0285880a06be16e26f2f7670b99b17e3698de934b9b4fe3865c4f7fec900c3ad2dc7e97e2c26d423c57cd20b7f69cdc5ab81d19d3c272f8aeb5d61f35764a5ce312026e2a63a1574aa644319f15782209511549b5875460fc0a832fb95f41de493310f760e2edf353f1a460ef1e35c4d2631fa25338a2ac39e24b3eea1a070115e5204088b7f4aae7c7d3adce2b8eacab59d3e8d6d27cd060b7cbe1d213539e42651d73c67ffebc28e79271b81a32662802edc982c4039ed81460cce4b80f7a2e868b6f435283bbd6710053bf967a28e70c4922240c1ea3ad8bdd22a61adc51dcde4fa91ff7a97ec0f9201c47eba2ca5e7295a8eb8ba616430b36e4a9f29f99a2ada57f99419f0d82aa9b7d141a9eaeb09b9f6db31e72f2590e378faa2e48706d9cd671f09060cd674517f959a55c5880123e57a1e63887484014467f9150a5ab652fd4965b384e7a369d9f36de4b77cef49ee64540af73e2efee67dc902cae855fa6fa29f3271b0538576b8259b1e2c2e10046cdf1d6a62712edda22c92e453a37245900f858a31ed76b8397d3b2159115d2f2b2687ffe0e6d84bd20adf19d3d297ccb568e32752c914605ca0424c6baa71c4f4187ae08395ee5636d62cf26e52efd6d16f9f715963689d1d1b4750fdc559ec55b255a448d92f535e8abeb7a226feeb64f3ac07a870f437de91d0b617e09e82b8d0f709d3dc93ec4d11a1936750c2ba07bdc17b769200d895a945109cb2e63dbb1cabbf0f2909d61691e5847cb11e52ce1fccea8920ed5501335824cc4aa615a0157837cc28c013f40f334b3cc9c3b9d9635344152b8af012e8cd0a4da212ff6335946abe7d1d784c9a84efba027753f4236aec666da56f9f19e1e533763e2f29579e6bd6754b8340b9e9484cf3178f3193b44030de44395d0cfa588fd4740f81b83f10758e4e69109e230a537a3740d5653bfbaa452af13c298dffafe52732242baff3e7fafc10f651be27df9cb9e7d323f7b01f9edbfd471a337a189f4c14095c9962107d16573ebd8c59af4fc96278d5fc0321c6130b351675886c40648b598bc1b212252f125813cab4dd68b8dae9b7bbba974d03ae6df1380313952d5ae647f6affcbc9fcf2316a0e7f80569db73e4576827202f44cf7d3373f5404440938f0907c247f218b7aff876f1b14437141aad64465e298592ae3cd8326524527193c4b774c89ad58f3ce2673428fa0b937c266d946834eebaf6846ff873f85285db538f7d4ae59f1283a1e8bf00de5e39306374e028f5e01d957f714a6fd992ad951c28c53122ab337216540fe2d1be74353c27b4df6842d7f4559ff99c689c94e05c792aa82ba8bb3ff37654a955c9d2579c5f476c71b536926fea55f0a126c7f08e59214e7b7e2adafe861e8be5dd238fe6cb50873550d47adfe66a0d7ef588ffd5ddeaf911e6151430485b040c1af33db3137b27858cb29b60355e4e2dadf264973f4f86a43a849ae3a656026bfeca86b94f13655abceb6b679eac51f1bf8dc888a04256738dcf8d34d599f32ca8343f97b278b77ed0a9876510579033fc070c238141da4a77963341a329f4202b0f330f3b4a75a12f7ed54c7f1a1b65b6273f3c35969e3e4a809f7a012117c5c67251c6dcb06aa0e7d26aa86d3265157e73b1682f9da13ce9f050e0bb3b0e29b2f501d932544f223493007d64f721e135f3099ffba4d157b5dc5be40fa170f05cc0ffccc3e7cf18cbc19c2527ec93d97f2070c273d592f0b26e1fdbbcdd6d7fd2ba7b31be376587d88a24338e5b929a669563a05b599ff046eef8843260a24d545ac3fb7f2214ea4e10a313df2e82363145a2319a0e78377cdd70c23fd2183600d0ea14b7dd2b83ec54b715fc46a316755a64e9cacc29bc987a77c416ed76b46a958acca9665561a8a44416a116fd7f8634f5f1aad7a8c9d7e4733b43780f6b1db4c3c6bbce4488b868cf375539564f067306e30cf7e944c5461fbc448484f6d99a7fa86355c5e20dc7b3127041655758567c598923a3825796cbe19a1f779c2a982115af8ec626ce982c2913215f609b45bab94efbee24b2707668b18df12d75b21a763464d8c012ab61cadc8399c37538138e490ecc6e2a4f6385e527caf112af83e5a39ccb730d47ee90252cb6ff2d67d6a4f7f05a10bb4ba17842702d510f9bd28a543ac2e2c83b44977ecfc83ee234b73d25274ebca68e04196889834c0988e1027907802d6d0e4d5b1830733efdf15f43350559a9adc6533e33882b803a05402f3951027a91135a5d2e246c6b3c696a67b7a2783b77bcd48d71a5221873c4e7096dd15d347b7344a99a91a5bc5d814b03", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x80000000000007}, 0x18) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 56.789609044s ago: executing program 0 (id=130): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TDeJTasbtXqhhUaKGPzIR1PSBgsqeOmV9QVikpbotrFNBFtyYUHsA2gfQLxsH8EL8U4QvClee6cUiiS5lshsZpNJsps2H+tU5/eDgXPmg3P+M7N7zp5z2AAqazAivoyI3oj4JCLq+f4k3+Ld9S07b3V5aTrbklhbu/hX0jy+srw0HYVrMsfyzFAakX6VxMttyl24cfPTqUZj9nqeH1m88tnIwo2bb81dmbo8e3n26vjo5OTo+PmJyYlDi/WPuP37hfvv17/55fRvP3384URW3+P5sWIch2UwBjfuyXbDh11YyZ4qpJNaiRVhT9KIOBIRtebnvx5HYvPh1eOHeqmVAwC6Ym3tnW15AOD/L9HmA0DFtH73rywvTbe2MsYhyvLwvfXJq5V8bnN1I/7axkxIz7b5rcM0GBH37pw7lW2x6zxk2qUaAABV82PW/znfrv+XxsnCeUcjoj9f23U8Ip6OiGcK68X2a3Bbfmf/J31wwCJ2lfX/LhTWtq0W4s8NHMlzWcwD0ZNcmmvMjubxD0VPX5Yf26WMkxdf/LvTsWL/717t3Kms/FZfMK/Hg1rf1mtmphanDhJz0cNbES/V2sWfbPR/k2bcHdx6dBlvX7v7QqdjW+K/0y7+7lr7LuK1ts9/c+Vesvv6xJHm+zDSeit2uv36q9c6lV92/Nnz7989/oGkuF5zYe9l/Hx27tdOxx4df/v3vzf5qJnuzfd9MbW4eH0sojf5YOf+M5vXtvKt87P4h063//yfiM078WxEPBcRz0c093d8odt4s/H9K/uPv7uy+Gf29Pz3nuj/+u79TuW3jX/LT93s+Z9tpobyPY/z/fe4Fdz/nQMAAID/jrQ5npukwxvpNB0eXh/nPRH9aWN+YfGNS/OfX51ZH/cdiJ60NdJVL4yHjuVjhK38mW358XwM5du+o8388PR8Y6bs4AGgoo51aP8zf/aVXTsAoGu6tbgdAHhyaf8BoHq0/wBQPdp/AKge7T8AVI/2HwAq5SD/61eFRBpPRDUkJP7lRNnfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fonAAD//2Wz014=") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r7, 0x4, 0xffffffff, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000000b80)=[{{&(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2c00000000000000000000000700000044181533"], 0x30}}], 0x1, 0x4040) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46, 0x43]}, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r9 = socket(0x10, 0x803, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56149, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 56.209406055s ago: executing program 0 (id=138): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r3, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) 55.935554961s ago: executing program 0 (id=143): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x2, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0xa1ff) dup3(r2, r0, 0x80000) 55.806772233s ago: executing program 32 (id=143): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x2, 0x285}, &(0x7f0000000000)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0x0, 0x0, 0xa1ff) dup3(r2, r0, 0x80000) 9.842848698s ago: executing program 4 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0xc, 0x0, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') 9.678931081s ago: executing program 4 (id=926): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x28, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r2, r1, 0x0) recvmmsg(r1, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x402) 8.785557549s ago: executing program 4 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x404e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) kcmp(r2, r2, 0x3, 0xffffffffffffffff, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) poll(0x0, 0x0, 0x1d) socket(0x10, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 7.721970449s ago: executing program 4 (id=955): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@dots}, {@nodots}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x125) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$poke(0x15, r7, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x2}, &(0x7f0000000600)=0x8) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}}, 0x100) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@dots}, {@nodots}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@nodots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@nodots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x125) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) (async) socket(0x10, 0x3, 0x9) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) (async) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r7) (async) ptrace$poke(0x15, r7, 0x0, 0xfffffffffffffffe) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000005c0)={r6, 0x2}, &(0x7f0000000600)=0x8) (async) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}}, 0x100) (async) 7.67878307s ago: executing program 4 (id=957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) 7.414261775s ago: executing program 4 (id=961): ptrace(0x4206, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x6c31a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x44080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) capget(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 7.414045405s ago: executing program 33 (id=961): ptrace(0x4206, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x6c31a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x44080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) capget(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 6.16301645s ago: executing program 5 (id=977): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r4, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2000000000000000100"/368], 0x178) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@random={'osx.', 'GPL\x00'}) 3.130107429s ago: executing program 5 (id=1004): bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x109044, 0x0, 0x0, 0x1, 0x3, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 2.861442374s ago: executing program 5 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) 2.763344256s ago: executing program 5 (id=1010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2.762977406s ago: executing program 5 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 2.680608168s ago: executing program 5 (id=1014): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r4, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2000000000000000100"/368], 0x178) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@random={'osx.', 'GPL\x00'}) 1.910005593s ago: executing program 6 (id=1025): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff088) 1.902154342s ago: executing program 6 (id=1027): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x25, 0x4) 1.872461713s ago: executing program 6 (id=1028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x40810, 0x7}, [@IFLA_MTU={0x8, 0x4, 0x100}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x8001}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket(0x10, 0x3, 0x9) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffffffffffffff) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000140)) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x81800) unshare(0x2a020480) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x244) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000020a000007080002400000000209000131000000002c000000030a010100000000000000000a000017090a05af0c487249748bb28cf8f200010073797a31000000000900030073797a3200000000140002001100010000000010688a38d47414adf1209e495bb240c0580f0da321c73187c00494e4fdfec669788c0303860f7234bea7f2314b9fa990941fb497da413b43b0a152049f"], 0x7c}}, 0x2000c450) sysinfo(&(0x7f00000002c0)=""/74) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090) io_setup(0x6, &(0x7f00000001c0)=0x0) io_cancel(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x5, r1, &(0x7f0000000340)="e84a6a66745cbd521e05c3b583972e330e62d69ab4c8c9af1c2a8c7299741f3e0138a8ab0725f1563d157bc71c0a368defaea7c8b5cd8d7bb71534cb732b27db429265d49769195ed9f531893ce6309d9ec0375e5810182bb20b6f7c927e193f914c371deefd08c5590c9d28ac727cf9918aa0087235ec9c0b84b9b7ff5b76fa636967b55046e24429a585a332835fc8009558401cb0d53205871ec516ff039e22ea", 0xa2, 0x1, 0x0, 0x3}, &(0x7f0000000440)) 876.553623ms ago: executing program 1 (id=1035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 828.689473ms ago: executing program 1 (id=1037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xb57c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18d375bb27657c86, 0x1d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000ffe528d0b817a77bb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000002000000040000000000000018569337c125006f00"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000000780)=""/225, 0x40f00, 0x0, '\x00', r5, @fallback=0x33, r0, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x1, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xc, 0xa}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {0x0, 0x7ffffffe, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x100, 0xe28000, {"4f140468c3d648d20ec10afc04e10a45"}, 0x6, 0x4, 0x6}}}, 0xa0) 718.039485ms ago: executing program 6 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 661.791137ms ago: executing program 6 (id=1040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xb57c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18d375bb27657c86, 0x1d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000ffe528d0b817a77bb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000002000000040000000000000018569337c125006f00"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000000780)=""/225, 0x40f00, 0x0, '\x00', r5, @fallback=0x33, r0, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x1, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xc, 0xa}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {0x0, 0x7ffffffe, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x100, 0xe28000, {"4f140468c3d648d20ec10afc04e10a45"}, 0x6, 0x4, 0x6}}}, 0xa0) 633.795887ms ago: executing program 6 (id=1041): alarm(0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/158, 0x9e}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = dup2(r3, r3) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r4) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000540)) r5 = gettid() syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)=r9}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000380)='cpu==0||!') rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r5, 0x1b) 564.056598ms ago: executing program 2 (id=1043): ptrace(0x4206, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x40000, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x6c31a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x44080, 0x0) 527.424559ms ago: executing program 2 (id=1044): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 513.983699ms ago: executing program 1 (id=1046): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0x4}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 500.64414ms ago: executing program 3 (id=1047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 458.043201ms ago: executing program 2 (id=1048): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 457.790491ms ago: executing program 2 (id=1049): bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x109044, 0x0, 0x0, 0x1, 0x3, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x40000000, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x2) 455.588301ms ago: executing program 1 (id=1050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 414.661042ms ago: executing program 3 (id=1051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xb57c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18d375bb27657c86, 0x1d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000ffe528d0b817a77bb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000002000000040000000000000018569337c125006f00"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000000780)=""/225, 0x40f00, 0x0, '\x00', r5, @fallback=0x33, r0, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x1, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xc, 0xa}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {0x0, 0x7ffffffe, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x100, 0xe28000, {"4f140468c3d648d20ec10afc04e10a45"}, 0x6, 0x4, 0x6}}}, 0xa0) 378.209662ms ago: executing program 3 (id=1052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) 332.716623ms ago: executing program 1 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (fail_nth: 2) 297.253674ms ago: executing program 3 (id=1054): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r2, 0x0, 0x0}, 0x20) 249.472045ms ago: executing program 3 (id=1055): ptrace(0x4206, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x40000, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x6c31a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x44080, 0x0) 187.718806ms ago: executing program 3 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x100000, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800"], 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x6]}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xb57c, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18d375bb27657c86, 0x1d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000ffe528d0b817a77bb7030000000000008500000083000000bf09000000000000550901000000000095000000000000001830000002000000040000000000000018569337c125006f00"/92, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000000780)=""/225, 0x40f00, 0x0, '\x00', r5, @fallback=0x33, r0, 0x8, &(0x7f00000006c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x1, 0x0, &(0x7f0000000540)=[{0x3, 0x5, 0xc, 0xa}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) r11 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$RDMA_USER_CM_CMD_JOIN_MCAST(r11, &(0x7f0000000580)={0x16, 0x98, 0xfa00, {0x0, 0x7ffffffe, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x100, 0xe28000, {"4f140468c3d648d20ec10afc04e10a45"}, 0x6, 0x4, 0x6}}}, 0xa0) 87.645448ms ago: executing program 1 (id=1057): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x203, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 25.774429ms ago: executing program 2 (id=1058): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 0s ago: executing program 2 (id=1059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x4, 0x0, {0xa, 0x0, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r5 = socket$kcm(0x10, 0x2, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) (async) r8 = dup2(r7, r6) sendmmsg(r8, &(0x7f0000008800)=[{{0x0, 0x5f, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="4bd203afa8a0a820573831475cc1ca6053bd0284b52b6bcd4c502be0ff09b7129c217f3c9d67ba184004f2bf0b7f03b31257bf6d6812b36e1f51908ef687e8251bfbb0b9f69e302edc28ecffd45e833222c77c05fc230977e0d617288a2e66caaaa8778bfa68feadf212a2d744713b1384039886323d0ed34984459e40c4f186588a738c54cbf74af7a6216faa39c19fcfe445a434f39b46800f46b454b868dbbe072b5629a22e12f874b9f2991994434354be6ffd4d80e1f1230011874785146729a948328f155cedb5122aab4347840eb1f13e0b2d6ec445209f07110df6391737694972f66c41281c68a0744e51bcb90e6249946b6c213bb85d6a791235805ec9ddeb03afbbd3a57e2e122a8ec318c8926489e71cc276776d5d0ffc0f16ed590c076c8fd7640738268450aeec1011de0d913ccf3f68395ce63256677302dff0b176686ed4868618d677a5e52ab1996f64e499fb942cf04d0024ec633560d4eec2b71fb6bd774c501b87715f3e1df55ae1f7aa065dece77394069492ad8365e8ea39ead9538d48fb50a08e2af84312b3b30384ff8441c2f51fcabbfe76aee565f413237b77cf3f95ee0884077db0724c195a4d40cf903402da79cf8161bdae5e39f557e67be556424deda2982344edcad4f36f03e197c50c88929e887f57e3b0836e9cd58e1132df47f52e15177e3ed5d9908bdfe42b6fe282f670d2a44165775d19958d5e689c47e444b16911dbc5f0ade56c679aecedfbb9eef16572fdd117f921f9f89c504b4fc1dd6ab8939f2ac7b8057498ad5a9ab09c99f540aa9784767fde91c92fd7209dfa6ba78e9953d5b8cfebfeacde6763af29193601d9a7fc6b73148c3aa3b483297f4881ad2d95b492f1476d4b218ac49c7cfb867b1650ba16d91e9412c1762ceb66531113956096bca757a2fd8cc1ad9a8cdf9615121d5f0d636cfa222fb21deae21f9f1982a8d0ace1f9104785eeb015ad1792b26d475b1bc4a454b63e7c8346a5b2bd40bc7541b2f6c02895f54e2fdb88ec2d678aaa9c783d61473afa2c8f6c2df83cd7491f26c7f527a38f71d4924225fc4ae77ef33d46012fba2d0ef723e39c75908a66e884b936cd17e20d3f59bf48f5cbf9ef2542ef9af618fc7df6daa30de39934acf70c8309382c266761966beec9ee78aecdb6623102776a04ee83b6193c0e4492665092d8c872fd355012d9fa65e4bac319b19e95baefae67b20de2dd3c43c4c5f1708ed0fcfba9fc192bf0868f4490c41befc09a5dd744b028c3ea20cdaa738c272ec7a816eed47bfad2121ebdbb8415755148330fc6778313d9831131c5c0c6ac8dc3f2fd678e4f20ff1e0fcf82d4795797936401b0cdbfd23fcc9c1e76d1d063a23d126faab2a225f0174d39446bc4215d2cece1997b233e4a807b161626aa9c5d507cc260cb7bbc22ae36e8f7b3862e841bdb19a31a5eb169804aaa04c898f14056a04e7089be42fafd5d6bf6f2471546beaf8db492c76482a7acea8eee3dddf017e209f9f99343036236ac6b198b90a78ff1a50eba379940de611ddf06f6eda290f2bde25c9573d105ac8a0fb286f7deaeac6e56d065d198f61daccef695890a5f840222899a55adc6d0cea1b5c296096aafc9f598fa4869edcdf047d72feee3a7c60ef5859f4ad96084160d550a109eaea639e01dab9b98cd7dc54b55d7eb2d213331bba4dee7c2029d47339e68c31800d77f370b42d2497f66907db06a2de988dbd14cd157836ebbc7239a8d218a797c5ba6816b28cf11576b5e4ddacc5ade05848ede263cd0d8d65f112c294309aac0bc76e58f7d99a704ced501795c57db6615ec6128090fc61698dd5d7210f30c05faf505ae0641899faf1babb36789c83d7ed723a9e1f7400a94da511899da552d782a43f42623af305a7284b538b2579db694347f8fc9db65dbac055dfa3333a3c0aceaf054b8576d7b3d14769b0ab0147bc3506310bf91e0ece8a6bd1bd878a4559cff9f8074f9bbaa6a034eaccf1a13a2dcef5cf991b457b7bc68f5a4e65114aa3e79fa732200f29d925a9fbc5ba377771837166ebe749332627f0e6e898ac3dc22df2356eccaa03ee00cf890d951e8fdd32834256ec3cf0eaa2141", 0x5dd}], 0x1}}], 0x6, 0x20004095) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000238089e2772fffe68dc50090398313", @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r11, 0x4) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r12, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r13}, 0x4) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r14}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 000 [ 64.024946][ T4695] ? __dev_queue_xmit+0x182/0x2000 [ 64.025062][ T4695] ? ref_tracker_free+0x37d/0x3e0 [ 64.025095][ T4695] netlink_unicast+0x5bd/0x690 [ 64.025124][ T4695] netlink_sendmsg+0x58b/0x6b0 [ 64.025160][ T4695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.025229][ T4695] __sock_sendmsg+0x145/0x180 [ 64.025263][ T4695] ____sys_sendmsg+0x31e/0x4e0 [ 64.025300][ T4695] ___sys_sendmsg+0x17b/0x1d0 [ 64.025347][ T4695] __x64_sys_sendmsg+0xd4/0x160 [ 64.025399][ T4695] x64_sys_call+0x191e/0x2ff0 [ 64.025427][ T4695] do_syscall_64+0xd2/0x200 [ 64.025484][ T4695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.025508][ T4695] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 64.025585][ T4695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.025613][ T4695] RIP: 0033:0x7fdfb8e0eba9 [ 64.025646][ T4695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.025721][ T4695] RSP: 002b:00007fdfb786f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.025745][ T4695] RAX: ffffffffffffffda RBX: 00007fdfb9055fa0 RCX: 00007fdfb8e0eba9 [ 64.025761][ T4695] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 64.025776][ T4695] RBP: 00007fdfb786f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.025792][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.025806][ T4695] R13: 00007fdfb9056038 R14: 00007fdfb9055fa0 R15: 00007ffdc1947f58 [ 64.025826][ T4695] [ 64.306967][ T4699] netlink: 'syz.5.344': attribute type 4 has an invalid length. [ 64.476445][ T3503] loop5: unable to read partition table [ 64.486446][ T4702] loop3: detected capacity change from 0 to 512 [ 64.494739][ T3503] loop5: partition table beyond EOD, truncated [ 64.528406][ T4702] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.556586][ T4702] EXT4-fs (loop3): mount failed [ 64.559271][ T3295] udevd[3295]: symlink '../../loop1' '/dev/disk/by-diskseq/136.tmp-b7:1' failed: Read-only file system [ 64.579832][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/152.tmp-b7:3' failed: Read-only file system [ 64.598614][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 64.625216][ T4721] loop1: detected capacity change from 0 to 128 [ 64.638222][ T3612] udevd[3612]: symlink '../../loop4' '/dev/disk/by-diskseq/142.tmp-b7:4' failed: Read-only file system [ 64.659939][ T3612] udevd[3612]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 64.674596][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/152.tmp-b7:3' failed: Read-only file system [ 64.693279][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/152.tmp-b7:3' failed: Read-only file system [ 64.712040][ T4691] loop5: unable to read partition table [ 64.718558][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.726290][ T3296] udevd[3296]: symlink '../../loop1' '/dev/disk/by-diskseq/153.tmp-b7:1' failed: Read-only file system [ 64.729415][ T4691] loop5: partition table beyond EOD, truncated [ 64.750101][ T4691] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 64.753246][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 64.760136][ T4721] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.785544][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/151.tmp-b7:5' failed: Read-only file system [ 64.805311][ T4721] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.916269][ T4732] loop4: detected capacity change from 0 to 512 [ 64.967482][ T4732] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.999703][ T4732] EXT4-fs (loop4): mount failed [ 65.028199][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.244045][ T4779] loop3: detected capacity change from 0 to 164 [ 65.261336][ T4779] rock: directory entry would overflow storage [ 65.268941][ T4779] rock: sig=0x66, size=4, remaining=3 [ 65.277489][ T4779] rock: directory entry would overflow storage [ 65.284201][ T4779] rock: sig=0x66, size=4, remaining=3 [ 65.333858][ T4779] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 65.350067][ T4786] __nla_validate_parse: 2 callbacks suppressed [ 65.350085][ T4786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.364'. [ 65.406589][ T4775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.420329][ T4789] loop3: detected capacity change from 0 to 2048 [ 65.452974][ T4775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.519814][ T3503] loop3: unable to read partition table [ 65.532480][ T3503] loop3: partition table beyond EOD, truncated [ 65.549994][ T4807] loop4: detected capacity change from 0 to 512 [ 65.586281][ T4807] __quota_error: 255 callbacks suppressed [ 65.586296][ T4807] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 65.617924][ T4789] loop3: unable to read partition table [ 65.625932][ T4807] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.643791][ T4789] loop3: partition table beyond EOD, truncated [ 65.650563][ T4789] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 65.688565][ T4807] EXT4-fs (loop4): mount failed [ 65.695992][ T4812] netlink: 'syz.3.365': attribute type 4 has an invalid length. [ 65.705619][ T4812] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.365'. [ 65.846243][ T4823] loop4: detected capacity change from 0 to 512 [ 65.887057][ T4823] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 65.900710][ T4823] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.918369][ T4823] EXT4-fs (loop4): mount failed [ 66.050744][ T4839] loop5: detected capacity change from 0 to 164 [ 66.059198][ T4839] rock: directory entry would overflow storage [ 66.066685][ T4839] rock: sig=0x66, size=4, remaining=3 [ 66.075367][ T4839] rock: directory entry would overflow storage [ 66.081787][ T4839] rock: sig=0x66, size=4, remaining=3 [ 66.089592][ T4839] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.128940][ T4842] bridge0: entered promiscuous mode [ 66.136634][ T4842] macsec1: entered promiscuous mode [ 66.144258][ T4842] bridge0: port 4(macsec1) entered blocking state [ 66.151529][ T4842] bridge0: port 4(macsec1) entered disabled state [ 66.161133][ T4842] macsec1: entered allmulticast mode [ 66.167387][ T4842] bridge0: entered allmulticast mode [ 66.174508][ T4842] macsec1: left allmulticast mode [ 66.180062][ T4842] bridge0: left allmulticast mode [ 66.187305][ T4842] bridge0: left promiscuous mode [ 66.231760][ T4845] loop4: detected capacity change from 0 to 1024 [ 66.244798][ T4845] EXT4-fs: Ignoring removed orlov option [ 66.288167][ T4845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.342538][ T30] audit: type=1400 audit(1758213787.834:886): avc: denied { create } for pid=4855 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.361037][ T4857] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 66.373205][ T4857] audit: out of memory in audit_log_start [ 66.386467][ T4847] loop3: detected capacity change from 0 to 512 [ 66.399211][ T30] audit: type=1400 audit(1758213787.834:887): avc: denied { connect } for pid=4855 comm="syz.5.379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.457746][ T30] audit: type=1400 audit(1758213787.954:888): avc: denied { write } for pid=4860 comm="+}[@" path="socket:[9650]" dev="sockfs" ino=9650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.526881][ T4863] loop5: detected capacity change from 0 to 164 [ 66.537667][ T4847] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 66.565667][ T4847] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.584478][ T4847] EXT4-fs (loop3): mount failed [ 66.752236][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.777508][ T4874] netlink: 256 bytes leftover after parsing attributes in process `syz.3.387'. [ 66.808346][ T4878] loop4: detected capacity change from 0 to 164 [ 66.815898][ T4878] rock: directory entry would overflow storage [ 66.823214][ T4878] rock: sig=0x66, size=4, remaining=3 [ 66.841812][ T4878] rock: directory entry would overflow storage [ 66.849701][ T4878] rock: sig=0x66, size=4, remaining=3 [ 66.867038][ T4878] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 66.892038][ T4880] loop3: detected capacity change from 0 to 2048 [ 66.928045][ T4883] bridge0: entered promiscuous mode [ 66.928295][ T4884] loop4: detected capacity change from 0 to 1024 [ 66.933723][ T4883] macsec1: entered promiscuous mode [ 66.947680][ T4884] EXT4-fs: Ignoring removed orlov option [ 66.950391][ T4883] bridge0: port 4(macsec1) entered blocking state [ 66.963642][ T4883] bridge0: port 4(macsec1) entered disabled state [ 66.971246][ T4883] macsec1: entered allmulticast mode [ 66.978588][ T4883] bridge0: entered allmulticast mode [ 66.989043][ T4884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.012779][ T4883] macsec1: left allmulticast mode [ 67.018759][ T3612] loop3: unable to read partition table [ 67.018799][ T3612] loop3: partition table beyond EOD, truncated [ 67.031594][ T4883] bridge0: left allmulticast mode [ 67.038888][ T4883] bridge0: left promiscuous mode [ 67.084991][ T4880] loop3: unable to read partition table [ 67.094432][ T4880] loop3: partition table beyond EOD, truncated [ 67.100956][ T4880] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 67.124570][ T4880] netlink: 'syz.3.388': attribute type 4 has an invalid length. [ 67.133512][ T4880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.388'. [ 67.565479][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.771614][ T30] audit: type=1326 audit(1758213789.264:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 67.950140][ T4907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 67.973565][ T30] audit: type=1326 audit(1758213789.294:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.3.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 68.225021][ T4916] loop5: detected capacity change from 0 to 164 [ 68.247091][ T4916] rock: directory entry would overflow storage [ 68.253374][ T4916] rock: sig=0x66, size=4, remaining=3 [ 68.259280][ T4920] bridge0: entered promiscuous mode [ 68.266658][ T4920] macsec1: entered promiscuous mode [ 68.272853][ T4916] rock: directory entry would overflow storage [ 68.274071][ T4922] netlink: 256 bytes leftover after parsing attributes in process `syz.1.402'. [ 68.279284][ T4916] rock: sig=0x66, size=4, remaining=3 [ 68.290372][ T4920] bridge0: port 3(macsec1) entered blocking state [ 68.301423][ T4920] bridge0: port 3(macsec1) entered disabled state [ 68.301570][ T4923] loop4: detected capacity change from 0 to 512 [ 68.308366][ T4920] macsec1: entered allmulticast mode [ 68.320694][ T4920] bridge0: entered allmulticast mode [ 68.327544][ T4916] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.336198][ T4920] macsec1: left allmulticast mode [ 68.341643][ T4920] bridge0: left allmulticast mode [ 68.347973][ T4920] bridge0: left promiscuous mode [ 68.372855][ T4923] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.388696][ T4923] EXT4-fs (loop4): mount failed [ 68.482480][ T4936] FAULT_INJECTION: forcing a failure. [ 68.482480][ T4936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.496353][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.4.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.496381][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.496396][ T4936] Call Trace: [ 68.496404][ T4936] [ 68.496413][ T4936] __dump_stack+0x1d/0x30 [ 68.496454][ T4936] dump_stack_lvl+0xe8/0x140 [ 68.496491][ T4936] dump_stack+0x15/0x1b [ 68.496539][ T4936] should_fail_ex+0x265/0x280 [ 68.496567][ T4936] should_fail+0xb/0x20 [ 68.496599][ T4936] should_fail_usercopy+0x1a/0x20 [ 68.496628][ T4936] strncpy_from_user+0x25/0x230 [ 68.496725][ T4936] ? __kmalloc_cache_noprof+0x189/0x320 [ 68.496766][ T4936] __se_sys_memfd_create+0x1ff/0x590 [ 68.496818][ T4936] __x64_sys_memfd_create+0x31/0x40 [ 68.496846][ T4936] x64_sys_call+0x2abe/0x2ff0 [ 68.496909][ T4936] do_syscall_64+0xd2/0x200 [ 68.496997][ T4936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.497026][ T4936] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 68.497063][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.497089][ T4936] RIP: 0033:0x7fe7a950eba9 [ 68.497157][ T4936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.497187][ T4936] RSP: 002b:00007fe7a7f6ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 68.497211][ T4936] RAX: ffffffffffffffda RBX: 000000000000072d RCX: 00007fe7a950eba9 [ 68.497227][ T4936] RDX: 00007fe7a7f6eef0 RSI: 0000000000000000 RDI: 00007fe7a95927e8 [ 68.497242][ T4936] RBP: 00002000000014c0 R08: 00007fe7a7f6ebb7 R09: 00007fe7a7f6ee40 [ 68.497257][ T4936] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000100 [ 68.497335][ T4936] R13: 00007fe7a7f6eef0 R14: 00007fe7a7f6eeb0 R15: 0000200000000300 [ 68.497354][ T4936] [ 68.740697][ T4941] netlink: 'syz.4.409': attribute type 13 has an invalid length. [ 68.748925][ T4941] netlink: 'syz.4.409': attribute type 17 has an invalid length. [ 68.841642][ T4941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.860623][ T4944] bridge0: entered promiscuous mode [ 68.867253][ T4944] macsec1: entered promiscuous mode [ 68.875950][ T4944] bridge0: port 3(macsec1) entered blocking state [ 68.882654][ T4944] bridge0: port 3(macsec1) entered disabled state [ 68.922191][ T4944] macsec1: entered allmulticast mode [ 68.928332][ T4944] bridge0: entered allmulticast mode [ 68.942213][ T4953] loop5: detected capacity change from 0 to 164 [ 68.971368][ T4948] loop1: detected capacity change from 0 to 8192 [ 68.978373][ T4944] macsec1: left allmulticast mode [ 68.979196][ T4948] ======================================================= [ 68.979196][ T4948] WARNING: The mand mount option has been deprecated and [ 68.979196][ T4948] and is ignored by this kernel. Remove the mand [ 68.979196][ T4948] option from the mount to silence this warning. [ 68.979196][ T4948] ======================================================= [ 68.983711][ T4944] bridge0: left allmulticast mode [ 69.032610][ T4953] rock: directory entry would overflow storage [ 69.039713][ T4953] rock: sig=0x66, size=4, remaining=3 [ 69.046668][ T4953] rock: directory entry would overflow storage [ 69.053196][ T4953] rock: sig=0x66, size=4, remaining=3 [ 69.071607][ T4952] loop2: detected capacity change from 0 to 8192 [ 69.078677][ T4953] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 69.096037][ T4944] bridge0: left promiscuous mode [ 69.127172][ T4955] loop5: detected capacity change from 0 to 2048 [ 69.136027][ T3296] loop2: p1 p2 p3 p4 [ 69.144218][ T3296] loop2: p1 start 51379968 is beyond EOD, truncated [ 69.151128][ T3296] loop2: p2 start 4293394690 is beyond EOD, truncated [ 69.158048][ T3296] loop2: p3 size 100663552 extends beyond EOD, truncated [ 69.167166][ T4955] EXT4-fs: Invalid want_extra_isize 128 [ 69.174991][ T3296] loop2: p4 size 50331648 extends beyond EOD, truncated [ 69.187202][ T4952] loop2: p1 p2 p3 p4 [ 69.210879][ T4952] loop2: p1 start 51379968 is beyond EOD, truncated [ 69.217868][ T4952] loop2: p2 start 4293394690 is beyond EOD, truncated [ 69.224894][ T4952] loop2: p3 size 100663552 extends beyond EOD, truncated [ 69.266564][ T4952] loop2: p4 size 50331648 extends beyond EOD, truncated [ 69.296198][ T4966] bridge0: entered promiscuous mode [ 69.303254][ T4966] macsec1: entered promiscuous mode [ 69.310267][ T4966] bridge0: port 3(macsec1) entered blocking state [ 69.317569][ T4966] bridge0: port 3(macsec1) entered disabled state [ 69.350166][ T4968] loop5: detected capacity change from 0 to 512 [ 69.400577][ T4966] macsec1: entered allmulticast mode [ 69.406231][ T4966] bridge0: entered allmulticast mode [ 69.420866][ T4968] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.455114][ T4966] macsec1: left allmulticast mode [ 69.460409][ T4966] bridge0: left allmulticast mode [ 69.515601][ T4968] EXT4-fs (loop5): mount failed [ 69.521045][ T4966] bridge0: left promiscuous mode [ 69.568901][ T3296] udevd[3296]: symlink '../../loop5' '/dev/disk/by-diskseq/192.tmp-b7:5' failed: Read-only file system [ 69.581984][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 69.593724][ T3612] udevd[3612]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 69.626108][ T4979] Zero length message leads to an empty skb [ 69.648814][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/192.tmp-b7:5' failed: Read-only file system [ 69.667480][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/180.tmp-b7:3' failed: Read-only file system [ 69.695235][ T3296] udevd[3296]: symlink '../../loop4' '/dev/disk/by-diskseq/185.tmp-b7:4' failed: Read-only file system [ 69.713661][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/194.tmp-b7:5' failed: Read-only file system [ 69.736097][ T4985] loop9: detected capacity change from 0 to 7 [ 69.755967][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/194.tmp-b7:5' failed: Read-only file system [ 69.769505][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.779779][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.788209][ T3612] loop9: unable to read partition table [ 69.798226][ T4985] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.810687][ T4989] bridge0: entered promiscuous mode [ 69.822013][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/194.tmp-b7:5' failed: Read-only file system [ 69.829622][ T4989] macsec1: entered promiscuous mode [ 69.840728][ T4985] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.848947][ T4985] loop9: unable to read partition table [ 69.862898][ T4989] bridge0: port 3(macsec1) entered blocking state [ 69.863551][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/193.tmp-b7:1' failed: Read-only file system [ 69.869473][ T4989] bridge0: port 3(macsec1) entered disabled state [ 69.889623][ T4992] 9pnet: Could not find request transport: t [ 69.896314][ T4989] macsec1: entered allmulticast mode [ 69.901745][ T4989] bridge0: entered allmulticast mode [ 69.908660][ T4985] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 69.908660][ T4985] ) failed (rc=-5) [ 69.910161][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.930741][ T4989] macsec1: left allmulticast mode [ 69.936020][ T4989] bridge0: left allmulticast mode [ 69.966095][ T5002] loop4: detected capacity change from 0 to 512 [ 69.977150][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 69.990667][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 70.003522][ T4989] bridge0: left promiscuous mode [ 70.011788][ T5002] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.052462][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 70.067612][ T5002] EXT4-fs (loop4): mount failed [ 70.072482][ T3612] Buffer I/O error on dev loop9, logical block 0, async page read [ 70.129242][ T5008] bridge0: entered promiscuous mode [ 70.139437][ T5008] macsec1: entered promiscuous mode [ 70.146657][ T5008] bridge0: port 3(macsec1) entered blocking state [ 70.153468][ T5008] bridge0: port 3(macsec1) entered disabled state [ 70.160824][ T5008] macsec1: entered allmulticast mode [ 70.166637][ T5008] bridge0: entered allmulticast mode [ 70.176510][ T5008] macsec1: left allmulticast mode [ 70.182818][ T5008] bridge0: left allmulticast mode [ 70.192900][ T5008] bridge0: left promiscuous mode [ 70.269662][ T5010] loop1: detected capacity change from 0 to 512 [ 70.306040][ T5010] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.329951][ T5010] EXT4-fs (loop1): mount failed [ 70.334172][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 70.446242][ T5032] bridge0: entered promiscuous mode [ 70.453417][ T5032] macsec1: entered promiscuous mode [ 70.465341][ T5032] bridge0: port 3(macsec1) entered blocking state [ 70.472632][ T5032] bridge0: port 3(macsec1) entered disabled state [ 70.480520][ T5032] macsec1: entered allmulticast mode [ 70.486031][ T5032] bridge0: entered allmulticast mode [ 70.495473][ T5032] macsec1: left allmulticast mode [ 70.501025][ T5032] bridge0: left allmulticast mode [ 70.508639][ T5032] bridge0: left promiscuous mode [ 70.563304][ T5038] loop1: detected capacity change from 0 to 512 [ 70.597050][ T5038] __quota_error: 96 callbacks suppressed [ 70.597146][ T5038] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 70.609171][ T5047] bridge0: entered promiscuous mode [ 70.619939][ T5047] macsec1: entered promiscuous mode [ 70.624547][ T5038] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.630864][ T5047] bridge0: port 3(macsec1) entered blocking state [ 70.646255][ T5038] EXT4-fs (loop1): mount failed [ 70.648822][ T5047] bridge0: port 3(macsec1) entered disabled state [ 70.665952][ T30] audit: type=1400 audit(1758213792.164:983): avc: denied { create } for pid=5043 comm="syz.2.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 70.687480][ T5047] macsec1: entered allmulticast mode [ 70.694626][ T5047] bridge0: entered allmulticast mode [ 70.743990][ T5047] macsec1: left allmulticast mode [ 70.749761][ T5047] bridge0: left allmulticast mode [ 70.750005][ T5051] loop5: detected capacity change from 0 to 1024 [ 70.762718][ T5047] bridge0: left promiscuous mode [ 70.766620][ T5051] EXT4-fs: Ignoring removed orlov option [ 70.801248][ T5051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.844611][ T5053] loop2: detected capacity change from 0 to 512 [ 70.876165][ T5053] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 70.893307][ T5053] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.921630][ T5053] EXT4-fs (loop2): mount failed [ 71.075870][ T5076] bridge0: entered promiscuous mode [ 71.092774][ T5076] macsec1: entered promiscuous mode [ 71.099293][ T30] audit: type=1326 audit(1758213792.584:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.125171][ T30] audit: type=1326 audit(1758213792.584:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.150065][ T30] audit: type=1326 audit(1758213792.584:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.177107][ T30] audit: type=1326 audit(1758213792.584:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.204234][ T5076] bridge0: port 3(macsec1) entered blocking state [ 71.204903][ T30] audit: type=1326 audit(1758213792.584:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.212162][ T5076] bridge0: port 3(macsec1) entered disabled state [ 71.238054][ T30] audit: type=1326 audit(1758213792.584:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.273031][ T30] audit: type=1326 audit(1758213792.584:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5077 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 71.303005][ T5076] macsec1: entered allmulticast mode [ 71.309350][ T5076] bridge0: entered allmulticast mode [ 71.333859][ T5076] macsec1: left allmulticast mode [ 71.339247][ T5076] bridge0: left allmulticast mode [ 71.348033][ T5076] bridge0: left promiscuous mode [ 71.355337][ T5084] SELinux: failed to load policy [ 71.392791][ T5086] loop4: detected capacity change from 0 to 512 [ 71.427525][ T5086] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.457213][ T5086] EXT4-fs (loop4): mount failed [ 71.502738][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.536400][ T5095] loop4: detected capacity change from 0 to 2048 [ 71.570181][ T5097] loop3: detected capacity change from 0 to 1024 [ 71.579503][ T5097] EXT4-fs: Ignoring removed orlov option [ 71.598750][ T5097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.673505][ T3296] loop4: unable to read partition table [ 71.690762][ T3296] loop4: partition table beyond EOD, truncated [ 71.714976][ T5108] 9pnet: Could not find request transport: t [ 71.779348][ T5113] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 71.788413][ T5113] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.459'. [ 71.810490][ T5095] loop4: unable to read partition table [ 71.816730][ T5095] loop4: partition table beyond EOD, truncated [ 71.823310][ T5095] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 71.862787][ T5120] bridge0: entered promiscuous mode [ 71.868444][ T5120] macsec1: entered promiscuous mode [ 71.924670][ T5120] bridge0: port 4(macsec1) entered blocking state [ 71.931564][ T5120] bridge0: port 4(macsec1) entered disabled state [ 71.941528][ T5120] macsec1: entered allmulticast mode [ 71.947376][ T5120] bridge0: entered allmulticast mode [ 71.955181][ T5120] macsec1: left allmulticast mode [ 71.960759][ T5120] bridge0: left allmulticast mode [ 71.966967][ T5120] bridge0: left promiscuous mode [ 71.982928][ T5124] loop2: detected capacity change from 0 to 512 [ 72.029827][ T5124] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 72.065578][ T5129] 9pnet: Could not find request transport: t [ 72.083456][ T5124] EXT4-fs (loop2): mount failed [ 72.124912][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.136998][ T5137] loop1: detected capacity change from 0 to 164 [ 72.154835][ T5137] rock: directory entry would overflow storage [ 72.161635][ T5137] rock: sig=0x66, size=4, remaining=3 [ 72.188384][ T5137] rock: directory entry would overflow storage [ 72.194874][ T5137] rock: sig=0x66, size=4, remaining=3 [ 72.282294][ T5155] bridge0: entered promiscuous mode [ 72.289703][ T5155] macsec1: entered promiscuous mode [ 72.298890][ T5155] bridge0: port 3(macsec1) entered blocking state [ 72.305679][ T5155] bridge0: port 3(macsec1) entered disabled state [ 72.316926][ T5155] macsec1: entered allmulticast mode [ 72.317635][ T5158] 9pnet: Could not find request transport: t [ 72.322386][ T5155] bridge0: entered allmulticast mode [ 72.335450][ T5155] macsec1: left allmulticast mode [ 72.340860][ T5155] bridge0: left allmulticast mode [ 72.354326][ T5155] bridge0: left promiscuous mode [ 72.427017][ T5170] bridge0: entered promiscuous mode [ 72.432747][ T5170] macsec1: entered promiscuous mode [ 72.442000][ T5170] bridge0: port 4(macsec1) entered blocking state [ 72.449359][ T5170] bridge0: port 4(macsec1) entered disabled state [ 72.468864][ T5174] loop1: detected capacity change from 0 to 164 [ 72.470214][ T5170] macsec1: entered allmulticast mode [ 72.481719][ T5170] bridge0: entered allmulticast mode [ 72.482082][ T5174] rock: directory entry would overflow storage [ 72.494773][ T5174] rock: sig=0x66, size=4, remaining=3 [ 72.501200][ T5170] macsec1: left allmulticast mode [ 72.504179][ T5174] rock: directory entry would overflow storage [ 72.507688][ T5170] bridge0: left allmulticast mode [ 72.514411][ T5174] rock: sig=0x66, size=4, remaining=3 [ 72.531075][ T5170] bridge0: left promiscuous mode [ 72.584512][ T5180] bridge0: entered promiscuous mode [ 72.596936][ T5180] macsec1: entered promiscuous mode [ 72.605801][ T5180] bridge0: port 3(macsec1) entered blocking state [ 72.612618][ T5180] bridge0: port 3(macsec1) entered disabled state [ 72.621599][ T5180] macsec1: entered allmulticast mode [ 72.627835][ T5180] bridge0: entered allmulticast mode [ 72.639722][ T5180] macsec1: left allmulticast mode [ 72.645312][ T5180] bridge0: left allmulticast mode [ 72.660778][ T5180] bridge0: left promiscuous mode [ 72.781741][ T5193] 9pnet: Could not find request transport: t [ 72.788724][ T5196] loop1: detected capacity change from 0 to 2048 [ 72.870044][ T5202] loop5: detected capacity change from 0 to 164 [ 72.878982][ T5196] loop1: unable to read partition table [ 72.893708][ T5196] loop1: partition table beyond EOD, truncated [ 72.899958][ T5196] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 72.909360][ T5202] rock: directory entry would overflow storage [ 72.916266][ T5202] rock: sig=0x66, size=4, remaining=3 [ 72.930558][ T5196] netlink: 'syz.1.495': attribute type 4 has an invalid length. [ 72.939120][ T5196] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.495'. [ 72.950778][ T5202] rock: directory entry would overflow storage [ 72.957663][ T5202] rock: sig=0x66, size=4, remaining=3 [ 72.981026][ T2993] loop1: unable to read partition table [ 72.991559][ T2993] loop1: partition table beyond EOD, truncated [ 73.007340][ T5210] bridge0: entered promiscuous mode [ 73.013506][ T5210] macsec1: entered promiscuous mode [ 73.020308][ T5210] bridge0: port 3(macsec1) entered blocking state [ 73.027597][ T5210] bridge0: port 3(macsec1) entered disabled state [ 73.035850][ T5210] macsec1: entered allmulticast mode [ 73.041838][ T5210] bridge0: entered allmulticast mode [ 73.048912][ T5210] macsec1: left allmulticast mode [ 73.054219][ T5210] bridge0: left allmulticast mode [ 73.061933][ T5210] bridge0: left promiscuous mode [ 73.094216][ T5215] loop5: detected capacity change from 0 to 1024 [ 73.102149][ T5215] EXT4-fs: Ignoring removed orlov option [ 73.113814][ T5215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.202954][ T5220] loop4: detected capacity change from 0 to 512 [ 73.224675][ T5220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.255381][ T5220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.303577][ T5220] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.334572][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.505'. [ 73.370524][ T5220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 73.461590][ T5220] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 28 [ 73.475296][ T5220] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.475296][ T5220] [ 73.486629][ T5220] EXT4-fs (loop4): Total free blocks count 0 [ 73.494310][ T5220] EXT4-fs (loop4): Free/Dirty block details [ 73.500675][ T5220] EXT4-fs (loop4): free_blocks=39627 [ 73.507954][ T5220] EXT4-fs (loop4): dirty_blocks=17 [ 73.514292][ T5220] EXT4-fs (loop4): Block reservation details [ 73.521418][ T5220] EXT4-fs (loop4): i_reserved_data_blocks=17 [ 73.529220][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.672589][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.685369][ T5242] bridge0: entered promiscuous mode [ 73.691275][ T5242] macsec1: entered promiscuous mode [ 73.698316][ T5242] bridge0: port 3(macsec1) entered blocking state [ 73.705013][ T5242] bridge0: port 3(macsec1) entered disabled state [ 73.713127][ T5242] macsec1: entered allmulticast mode [ 73.718605][ T5242] bridge0: entered allmulticast mode [ 73.725110][ T5242] macsec1: left allmulticast mode [ 73.730360][ T5242] bridge0: left allmulticast mode [ 73.771102][ T5242] bridge0: left promiscuous mode [ 73.784641][ T5247] bridge0: entered promiscuous mode [ 73.800522][ T5247] macsec1: entered promiscuous mode [ 73.816169][ T5247] bridge0: port 3(macsec1) entered blocking state [ 73.822931][ T5247] bridge0: port 3(macsec1) entered disabled state [ 73.833482][ T5247] macsec1: entered allmulticast mode [ 73.839594][ T5247] bridge0: entered allmulticast mode [ 73.855238][ T5247] macsec1: left allmulticast mode [ 73.860423][ T5247] bridge0: left allmulticast mode [ 73.868089][ T5247] bridge0: left promiscuous mode [ 74.030882][ T5267] loop5: detected capacity change from 0 to 2048 [ 74.114870][ T3503] loop5: unable to read partition table [ 74.120934][ T3503] loop5: partition table beyond EOD, truncated [ 74.179868][ T5267] loop5: unable to read partition table [ 74.186006][ T5267] loop5: partition table beyond EOD, truncated [ 74.192495][ T5267] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 74.238600][ T5267] netlink: 'syz.5.525': attribute type 4 has an invalid length. [ 74.247445][ T5267] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.525'. [ 74.257932][ T5280] bridge0: entered promiscuous mode [ 74.264483][ T5280] macsec1: entered promiscuous mode [ 74.271841][ T5280] bridge0: port 3(macsec1) entered blocking state [ 74.279200][ T5280] bridge0: port 3(macsec1) entered disabled state [ 74.290844][ T5280] macsec1: entered allmulticast mode [ 74.290869][ T5280] bridge0: entered allmulticast mode [ 74.303260][ T5280] macsec1: left allmulticast mode [ 74.308985][ T5280] bridge0: left allmulticast mode [ 74.323083][ T5280] bridge0: left promiscuous mode [ 74.587688][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/226.tmp-b7:1' failed: Read-only file system [ 74.619438][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/227.tmp-b7:4' failed: Read-only file system [ 74.654290][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/226.tmp-b7:1' failed: Read-only file system [ 74.671046][ T3612] udevd[3612]: symlink '../../loop4' '/dev/disk/by-diskseq/227.tmp-b7:4' failed: Read-only file system [ 74.693295][ T5309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.541'. [ 74.753090][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/226.tmp-b7:1' failed: Read-only file system [ 74.782468][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/227.tmp-b7:4' failed: Read-only file system [ 74.824906][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/227.tmp-b7:4' failed: Read-only file system [ 74.882644][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/228.tmp-b7:5' failed: Read-only file system [ 74.901660][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/228.tmp-b7:5' failed: Read-only file system [ 74.920318][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/229.tmp-b7:5' failed: Read-only file system [ 75.052381][ T5323] loop5: detected capacity change from 0 to 1024 [ 75.090564][ T5323] EXT4-fs: Ignoring removed orlov option [ 75.267979][ T5323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.435931][ T5337] netlink: 256 bytes leftover after parsing attributes in process `syz.3.552'. [ 75.456934][ T5340] loop4: detected capacity change from 0 to 512 [ 75.504112][ T5340] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.527584][ T5340] EXT4-fs (loop4): mount failed [ 75.692843][ T30] kauditd_printk_skb: 327 callbacks suppressed [ 75.692862][ T30] audit: type=1326 audit(1758213797.184:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5350 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 75.724954][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.728130][ T30] audit: type=1326 audit(1758213797.194:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 75.760104][ T30] audit: type=1326 audit(1758213797.194:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5348 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 75.886826][ T30] audit: type=1326 audit(1758213797.384:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 75.911219][ T30] audit: type=1326 audit(1758213797.384:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 75.936292][ T5371] loop4: detected capacity change from 0 to 512 [ 75.958452][ T30] audit: type=1326 audit(1758213797.434:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 75.982996][ T30] audit: type=1326 audit(1758213797.434:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 76.008018][ T30] audit: type=1326 audit(1758213797.434:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 76.032923][ T30] audit: type=1326 audit(1758213797.434:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 76.057393][ T30] audit: type=1326 audit(1758213797.434:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5369 comm="syz.5.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce02aeba9 code=0x7ffc0000 [ 76.122313][ T5371] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.147576][ T5371] EXT4-fs (loop4): mount failed [ 76.184830][ T5387] loop2: detected capacity change from 0 to 512 [ 76.279390][ T5387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.325180][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.344441][ T5387] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.389138][ T5387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'. [ 76.502891][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.112157][ T5423] loop2: detected capacity change from 0 to 2048 [ 77.175579][ T5426] loop5: detected capacity change from 0 to 512 [ 77.185918][ T5423] loop2: unable to read partition table [ 77.191955][ T5423] loop2: partition table beyond EOD, truncated [ 77.198847][ T5423] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 77.214620][ T5426] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.231340][ T5426] EXT4-fs (loop5): mount failed [ 77.252966][ T2993] loop2: unable to read partition table [ 77.259516][ T2993] loop2: partition table beyond EOD, truncated [ 77.275276][ T5423] netlink: 'syz.2.581': attribute type 4 has an invalid length. [ 77.283312][ T5423] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.581'. [ 77.851288][ T5442] 9pnet: Could not find request transport: t [ 78.161298][ T5465] loop2: detected capacity change from 0 to 512 [ 78.217026][ T5465] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.234829][ T5465] EXT4-fs (loop2): mount failed [ 78.319087][ T5479] loop2: detected capacity change from 0 to 512 [ 78.332196][ T5476] 9pnet: Could not find request transport: t [ 78.369710][ T5479] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.408162][ T5479] EXT4-fs (loop2): mount failed [ 78.494570][ T5503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.601'. [ 78.772965][ T5524] netlink: 256 bytes leftover after parsing attributes in process `syz.5.613'. [ 78.822857][ T5528] loop5: detected capacity change from 0 to 512 [ 78.843644][ T5528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.880013][ T5528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.883593][ T5534] loop4: detected capacity change from 0 to 1024 [ 78.896729][ T5528] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.901574][ T5534] EXT4-fs: Ignoring removed orlov option [ 78.923670][ T5528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.614'. [ 78.931627][ T5534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.969299][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.043158][ T5540] netlink: 32 bytes leftover after parsing attributes in process `syz.5.617'. [ 79.268182][ T5551] bridge0: entered promiscuous mode [ 79.306047][ T5551] macsec1: entered promiscuous mode [ 79.336046][ T5551] bridge0: port 4(macsec1) entered blocking state [ 79.343935][ T5551] bridge0: port 4(macsec1) entered disabled state [ 79.361099][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.388741][ T5551] macsec1: entered allmulticast mode [ 79.395012][ T5551] bridge0: entered allmulticast mode [ 79.397382][ T5564] netlink: 256 bytes leftover after parsing attributes in process `syz.1.625'. [ 79.411073][ T5551] macsec1: left allmulticast mode [ 79.416513][ T5551] bridge0: left allmulticast mode [ 79.428868][ T5551] bridge0: left promiscuous mode [ 79.442926][ T5562] bridge0: entered promiscuous mode [ 79.449683][ T5562] macsec1: entered promiscuous mode [ 79.462598][ T5562] bridge0: port 3(macsec1) entered blocking state [ 79.470262][ T5562] bridge0: port 3(macsec1) entered disabled state [ 79.487206][ T5562] macsec1: entered allmulticast mode [ 79.493986][ T5562] bridge0: entered allmulticast mode [ 79.518130][ T5562] macsec1: left allmulticast mode [ 79.523740][ T5562] bridge0: left allmulticast mode [ 79.529747][ T5562] bridge0: left promiscuous mode [ 79.587327][ T5582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.630'. [ 79.597952][ T5581] loop1: detected capacity change from 0 to 1024 [ 79.614442][ T5581] EXT4-fs: Ignoring removed orlov option [ 79.630923][ T3612] udevd[3612]: symlink '../../loop5' '/dev/disk/by-diskseq/248.tmp-b7:5' failed: Read-only file system [ 79.653555][ T3612] udevd[3612]: symlink '../../loop5' '/dev/disk/by-diskseq/248.tmp-b7:5' failed: Read-only file system [ 79.669895][ T5581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.696081][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/250.tmp-b7:1' failed: Read-only file system [ 79.714157][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 79.725278][ T3612] udevd[3612]: symlink '../../loop2' '/dev/disk/by-diskseq/245.tmp-b7:2' failed: Read-only file system [ 79.747906][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/250.tmp-b7:1' failed: Read-only file system [ 79.748940][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 79.755648][ T3296] udevd[3296]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 79.813481][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 79.894917][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/249.tmp-b7:4' failed: Read-only file system [ 79.910234][ T5607] loop4: detected capacity change from 0 to 512 [ 79.921929][ T5607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.940908][ T5607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.956728][ T5607] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.982125][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.039165][ T5611] bridge0: entered promiscuous mode [ 80.047041][ T5611] macsec1: entered promiscuous mode [ 80.054750][ T5611] bridge0: port 3(macsec1) entered blocking state [ 80.062056][ T5611] bridge0: port 3(macsec1) entered disabled state [ 80.072025][ T5611] macsec1: entered allmulticast mode [ 80.077944][ T5611] bridge0: entered allmulticast mode [ 80.085036][ T5611] macsec1: left allmulticast mode [ 80.086776][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.091463][ T5611] bridge0: left allmulticast mode [ 80.108501][ T5611] bridge0: left promiscuous mode [ 80.127093][ T5617] netlink: 256 bytes leftover after parsing attributes in process `syz.1.643'. [ 80.240527][ T5628] 9pnet: Could not find request transport: t [ 80.270487][ T5635] loop4: detected capacity change from 0 to 512 [ 80.287035][ T5640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.648'. [ 80.287532][ T5635] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.316334][ T5635] EXT4-fs (loop4): mount failed [ 80.321942][ T5637] loop2: detected capacity change from 0 to 512 [ 80.336623][ T5637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.359604][ T5637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.373298][ T5637] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.407038][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.460883][ T5652] netlink: 'syz.2.655': attribute type 3 has an invalid length. [ 80.484077][ T5656] bridge0: entered promiscuous mode [ 80.489914][ T5656] macsec1: entered promiscuous mode [ 80.496610][ T5656] bridge0: port 3(macsec1) entered blocking state [ 80.503112][ T5656] bridge0: port 3(macsec1) entered disabled state [ 80.510404][ T5656] macsec1: entered allmulticast mode [ 80.516358][ T5656] bridge0: entered allmulticast mode [ 80.522800][ T5656] macsec1: left allmulticast mode [ 80.528467][ T5656] bridge0: left allmulticast mode [ 80.533476][ T5658] netlink: 256 bytes leftover after parsing attributes in process `syz.2.657'. [ 80.543993][ T5656] bridge0: left promiscuous mode [ 80.605451][ T5665] loop2: detected capacity change from 0 to 512 [ 80.625476][ T5665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.638893][ T5669] loop4: detected capacity change from 0 to 512 [ 80.668594][ T5669] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.674360][ T5665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.693204][ T5669] EXT4-fs (loop4): mount failed [ 80.702431][ T5665] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.732831][ T5677] loop1: detected capacity change from 0 to 512 [ 80.743568][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.765282][ T5677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.772645][ T5679] bridge0: entered promiscuous mode [ 80.789377][ T5681] loop2: detected capacity change from 0 to 1024 [ 80.794710][ T5679] macsec1: entered promiscuous mode [ 80.801619][ T5681] EXT4-fs: Ignoring removed orlov option [ 80.802626][ T5679] bridge0: port 3(macsec1) entered blocking state [ 80.813998][ T5679] bridge0: port 3(macsec1) entered disabled state [ 80.821226][ T5679] macsec1: entered allmulticast mode [ 80.826590][ T5679] bridge0: entered allmulticast mode [ 80.832561][ T5679] macsec1: left allmulticast mode [ 80.832815][ T5681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.838039][ T5679] bridge0: left allmulticast mode [ 80.857842][ T5677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.868274][ T5679] bridge0: left promiscuous mode [ 80.872310][ T5677] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.904759][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.957327][ T5689] loop1: detected capacity change from 0 to 2048 [ 80.965504][ T5689] EXT4-fs (loop1): #clusters per group too big: 32768 [ 80.988112][ T5689] netlink: 'syz.1.666': attribute type 6 has an invalid length. [ 81.044503][ T5692] bridge0: entered promiscuous mode [ 81.050345][ T5692] macsec1: entered promiscuous mode [ 81.058283][ T5692] bridge0: port 3(macsec1) entered blocking state [ 81.065184][ T5692] bridge0: port 3(macsec1) entered disabled state [ 81.073033][ T5692] macsec1: entered allmulticast mode [ 81.078732][ T5692] bridge0: entered allmulticast mode [ 81.089555][ T5692] macsec1: left allmulticast mode [ 81.094861][ T5692] bridge0: left allmulticast mode [ 81.102691][ T5692] bridge0: left promiscuous mode [ 81.218011][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.258626][ T5713] loop4: detected capacity change from 0 to 512 [ 81.274502][ T5710] 9pnet: Could not find request transport: t [ 81.281971][ T5713] __quota_error: 172 callbacks suppressed [ 81.281992][ T5713] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 81.300128][ T5713] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.325222][ T5713] EXT4-fs (loop4): mount failed [ 81.337590][ T30] audit: type=1400 audit(1758213802.824:1491): avc: denied { bind } for pid=5716 comm="syz.2.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 81.388910][ T30] audit: type=1400 audit(1758213802.884:1492): avc: denied { mount } for pid=5716 comm="syz.2.676" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 81.444656][ T5722] loop4: detected capacity change from 0 to 512 [ 81.465942][ T5722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.508403][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.532626][ T5722] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.551413][ T30] audit: type=1326 audit(1758213803.044:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.578789][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.591170][ T30] audit: type=1326 audit(1758213803.044:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.619110][ T30] audit: type=1326 audit(1758213803.044:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.646302][ T30] audit: type=1326 audit(1758213803.044:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.672834][ T30] audit: type=1326 audit(1758213803.054:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.699094][ T30] audit: type=1326 audit(1758213803.054:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.723558][ T30] audit: type=1326 audit(1758213803.054:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5733 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 81.781314][ T5742] bridge0: entered promiscuous mode [ 81.794838][ T5742] macsec1: entered promiscuous mode [ 81.802767][ T5742] bridge0: port 3(macsec1) entered blocking state [ 81.810013][ T5742] bridge0: port 3(macsec1) entered disabled state [ 81.817287][ T5742] macsec1: entered allmulticast mode [ 81.823423][ T5742] bridge0: entered allmulticast mode [ 81.833274][ T5742] macsec1: left allmulticast mode [ 81.838601][ T5742] bridge0: left allmulticast mode [ 81.845331][ T5742] bridge0: left promiscuous mode [ 81.884595][ T5747] 9pnet: Could not find request transport: t [ 81.962658][ T5757] bridge0: entered promiscuous mode [ 81.974857][ T5757] macsec1: entered promiscuous mode [ 81.981843][ T5757] bridge0: port 3(macsec1) entered blocking state [ 81.989077][ T5757] bridge0: port 3(macsec1) entered disabled state [ 81.996207][ T5757] macsec1: entered allmulticast mode [ 82.001729][ T5757] bridge0: entered allmulticast mode [ 82.008557][ T5757] macsec1: left allmulticast mode [ 82.014265][ T5757] bridge0: left allmulticast mode [ 82.020929][ T5757] bridge0: left promiscuous mode [ 82.021760][ T5760] 9pnet_fd: Insufficient options for proto=fd [ 82.266733][ T5779] bridge0: entered promiscuous mode [ 82.272528][ T5779] macsec1: entered promiscuous mode [ 82.292077][ T5779] bridge0: port 3(macsec1) entered blocking state [ 82.299720][ T5779] bridge0: port 3(macsec1) entered disabled state [ 82.310639][ T5779] macsec1: entered allmulticast mode [ 82.316996][ T5779] bridge0: entered allmulticast mode [ 82.325725][ T5779] macsec1: left allmulticast mode [ 82.331882][ T5779] bridge0: left allmulticast mode [ 82.340013][ T5784] loop2: detected capacity change from 0 to 2048 [ 82.342260][ T5779] bridge0: left promiscuous mode [ 82.412501][ T5784] loop2: unable to read partition table [ 82.419315][ T5784] loop2: partition table beyond EOD, truncated [ 82.426447][ T5784] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 82.454460][ T5784] netlink: 'syz.2.696': attribute type 4 has an invalid length. [ 82.463652][ T5784] __nla_validate_parse: 9 callbacks suppressed [ 82.463671][ T5784] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.696'. [ 82.468175][ T2993] loop2: unable to read partition table [ 82.489232][ T2993] loop2: partition table beyond EOD, truncated [ 82.530558][ T5791] loop3: detected capacity change from 0 to 512 [ 82.542346][ T5791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.554220][ T5793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.697'. [ 82.568203][ T5791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.581830][ T5791] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.596298][ T5791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.698'. [ 82.616765][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.672256][ T5801] bridge0: entered promiscuous mode [ 82.679240][ T5801] macsec1: entered promiscuous mode [ 82.686368][ T5801] bridge0: port 3(macsec1) entered blocking state [ 82.693220][ T5801] bridge0: port 3(macsec1) entered disabled state [ 82.710697][ T5801] macsec1: entered allmulticast mode [ 82.716309][ T5801] bridge0: entered allmulticast mode [ 82.735950][ T5801] macsec1: left allmulticast mode [ 82.741855][ T5801] bridge0: left allmulticast mode [ 82.745362][ T5805] 9pnet_fd: Insufficient options for proto=fd [ 82.756745][ T5801] bridge0: left promiscuous mode [ 82.960658][ T5814] loop5: detected capacity change from 0 to 512 [ 82.969131][ T5814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.986916][ T5814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.001808][ T5814] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.016272][ T5814] netlink: 16 bytes leftover after parsing attributes in process `syz.5.706'. [ 83.044728][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.120770][ T5820] netlink: 52 bytes leftover after parsing attributes in process `syz.5.707'. [ 83.202468][ T5824] bridge0: entered promiscuous mode [ 83.208138][ T5824] macsec1: entered promiscuous mode [ 83.215131][ T5824] bridge0: port 3(macsec1) entered blocking state [ 83.221941][ T5824] bridge0: port 3(macsec1) entered disabled state [ 83.229178][ T5824] macsec1: entered allmulticast mode [ 83.234811][ T5824] bridge0: entered allmulticast mode [ 83.243506][ T5824] macsec1: left allmulticast mode [ 83.248791][ T5824] bridge0: left allmulticast mode [ 83.255432][ T5824] bridge0: left promiscuous mode [ 83.367433][ T5835] netlink: 256 bytes leftover after parsing attributes in process `syz.5.713'. [ 83.407246][ T5840] bridge0: entered promiscuous mode [ 83.414048][ T5840] macsec1: entered promiscuous mode [ 83.416948][ T5841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'. [ 83.421640][ T5840] bridge0: port 4(macsec1) entered blocking state [ 83.438389][ T5840] bridge0: port 4(macsec1) entered disabled state [ 83.445567][ T5840] macsec1: entered allmulticast mode [ 83.451276][ T5840] bridge0: entered allmulticast mode [ 83.458926][ T5840] macsec1: left allmulticast mode [ 83.463834][ T5842] 9pnet_fd: Insufficient options for proto=fd [ 83.464422][ T5840] bridge0: left allmulticast mode [ 83.478680][ T5840] bridge0: left promiscuous mode [ 83.636777][ T5860] loop3: detected capacity change from 0 to 512 [ 83.656099][ T5860] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.672902][ T5860] EXT4-fs (loop3): mount failed [ 83.681857][ T5864] loop2: detected capacity change from 0 to 512 [ 83.709445][ T5864] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.771194][ T5864] EXT4-fs (loop2): mount failed [ 83.776051][ T5874] bridge0: entered promiscuous mode [ 83.784744][ T5874] macsec1: entered promiscuous mode [ 83.796100][ T5874] bridge0: port 3(macsec1) entered blocking state [ 83.803452][ T5874] bridge0: port 3(macsec1) entered disabled state [ 83.818243][ T5874] macsec1: entered allmulticast mode [ 83.825002][ T5874] bridge0: entered allmulticast mode [ 83.827482][ T5877] netlink: 'syz.2.723': attribute type 10 has an invalid length. [ 83.841177][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.723'. [ 83.851988][ T5874] macsec1: left allmulticast mode [ 83.858036][ T5874] bridge0: left allmulticast mode [ 83.865003][ T5874] bridge0: left promiscuous mode [ 83.873633][ T5877] batadv0: entered promiscuous mode [ 83.880875][ T5877] batadv0: entered allmulticast mode [ 83.888763][ T5877] bridge0: port 3(batadv0) entered blocking state [ 83.896490][ T5877] bridge0: port 3(batadv0) entered disabled state [ 83.906347][ T5877] bridge0: port 3(batadv0) entered blocking state [ 83.913772][ T5877] bridge0: port 3(batadv0) entered forwarding state [ 83.990839][ T5884] 9pnet: Could not find request transport: t [ 84.072953][ T5892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.727'. [ 84.312584][ T5908] loop3: detected capacity change from 0 to 512 [ 84.319390][ T4320] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 84.329601][ T4320] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 84.341029][ T5908] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.356366][ T5908] EXT4-fs (loop3): mount failed [ 84.480872][ T5917] bridge0: entered promiscuous mode [ 84.486431][ T5917] macsec1: entered promiscuous mode [ 84.492867][ T5917] bridge0: port 4(macsec1) entered blocking state [ 84.500057][ T5917] bridge0: port 4(macsec1) entered disabled state [ 84.507921][ T5917] macsec1: entered allmulticast mode [ 84.513388][ T5917] bridge0: entered allmulticast mode [ 84.519713][ T5917] macsec1: left allmulticast mode [ 84.525021][ T5917] bridge0: left allmulticast mode [ 84.531599][ T5917] bridge0: left promiscuous mode [ 84.637477][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/276.tmp-b7:5' failed: Read-only file system [ 84.642734][ T5925] netlink: 'syz.5.737': attribute type 10 has an invalid length. [ 84.658325][ T5925] netlink: 40 bytes leftover after parsing attributes in process `syz.5.737'. [ 84.675700][ T5927] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 84.679605][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/283.tmp-b7:3' failed: Read-only file system [ 84.698196][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.706861][ T5927] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.722770][ T5927] netlink: 'syz.3.740': attribute type 10 has an invalid length. [ 84.729487][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/276.tmp-b7:5' failed: Read-only file system [ 84.731006][ T5927] batadv0: entered promiscuous mode [ 84.747766][ T5927] batadv0: entered allmulticast mode [ 84.757723][ T5927] bond0: (slave batadv0): Releasing backup interface [ 84.766606][ T5927] bridge0: port 3(batadv0) entered blocking state [ 84.773702][ T5927] bridge0: port 3(batadv0) entered disabled state [ 84.814588][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/283.tmp-b7:3' failed: Read-only file system [ 84.817977][ T3612] udevd[3612]: symlink '../../loop2' '/dev/disk/by-diskseq/281.tmp-b7:2' failed: Read-only file system [ 84.844932][ T5932] bridge0: entered promiscuous mode [ 84.857574][ T5932] macsec1: entered promiscuous mode [ 84.863338][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/281.tmp-b7:2' failed: Read-only file system [ 84.864638][ T4314] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 84.875985][ T5932] bridge0: port 4(macsec1) entered blocking state [ 84.884807][ T4314] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 84.891516][ T5932] bridge0: port 4(macsec1) entered disabled state [ 84.908523][ T5932] macsec1: entered allmulticast mode [ 84.914030][ T5932] bridge0: entered allmulticast mode [ 84.927035][ T5932] macsec1: left allmulticast mode [ 84.932619][ T5932] bridge0: left allmulticast mode [ 84.940981][ T5932] bridge0: left promiscuous mode [ 84.956287][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/276.tmp-b7:5' failed: Read-only file system [ 84.972785][ T5937] loop2: detected capacity change from 0 to 512 [ 84.990011][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/284.tmp-b7:2' failed: Read-only file system [ 84.995546][ T5937] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.003568][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 85.033243][ T5937] EXT4-fs (loop2): mount failed [ 85.042504][ T3612] udevd[3612]: symlink '../../loop4' '/dev/disk/by-diskseq/271.tmp-b7:4' failed: Read-only file system [ 85.087970][ T5951] bridge0: entered promiscuous mode [ 85.104153][ T5951] macsec1: entered promiscuous mode [ 85.111162][ T5951] bridge0: port 4(macsec1) entered blocking state [ 85.118730][ T5951] bridge0: port 4(macsec1) entered disabled state [ 85.126346][ T5951] macsec1: entered allmulticast mode [ 85.132043][ T5951] bridge0: entered allmulticast mode [ 85.142366][ T5951] macsec1: left allmulticast mode [ 85.147890][ T5951] bridge0: left allmulticast mode [ 85.155299][ T5951] bridge0: left promiscuous mode [ 85.276660][ T5967] netlink: 'syz.3.752': attribute type 10 has an invalid length. [ 85.300939][ T5969] unsupported nlmsg_type 40 [ 85.343726][ T5971] SELinux: security policydb version 17 (MLS) not backwards compatible [ 85.357485][ T5971] SELinux: failed to load policy [ 85.392150][ T5978] loop3: detected capacity change from 0 to 1024 [ 85.400068][ T5978] EXT4-fs: Ignoring removed orlov option [ 85.408866][ T5978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.642064][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.654398][ T5988] loop2: detected capacity change from 0 to 512 [ 85.666368][ T5990] bridge0: entered promiscuous mode [ 85.674021][ T5990] macsec1: entered promiscuous mode [ 85.685007][ T5990] bridge0: port 4(macsec1) entered blocking state [ 85.691781][ T5990] bridge0: port 4(macsec1) entered disabled state [ 85.691933][ T5988] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.707839][ T5990] macsec1: entered allmulticast mode [ 85.719356][ T5988] EXT4-fs (loop2): mount failed [ 85.720332][ T5990] bridge0: entered allmulticast mode [ 85.732684][ T5990] macsec1: left allmulticast mode [ 85.738618][ T5990] bridge0: left allmulticast mode [ 85.755236][ T5990] bridge0: left promiscuous mode [ 85.944367][ T6007] loop3: detected capacity change from 0 to 512 [ 85.952162][ T6007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.977049][ T6007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.995529][ T6011] loop4: detected capacity change from 0 to 512 [ 86.002597][ T6007] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.016116][ T6011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.046685][ T6011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.065510][ T6011] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.085977][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.100186][ T6015] 9pnet: Could not find request transport: t [ 86.127245][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.242334][ T6035] loop4: detected capacity change from 0 to 512 [ 86.295690][ T6035] __quota_error: 229 callbacks suppressed [ 86.295769][ T6035] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 86.325225][ T6040] loop2: detected capacity change from 0 to 2048 [ 86.343459][ T6035] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 86.409484][ T3503] loop2: unable to read partition table [ 86.418291][ T6035] EXT4-fs (loop4): mount failed [ 86.423814][ T3503] loop2: partition table beyond EOD, truncated [ 86.470729][ T6050] bridge0: entered promiscuous mode [ 86.481759][ T6050] macsec1: entered promiscuous mode [ 86.494287][ T6052] loop4: detected capacity change from 0 to 512 [ 86.503719][ T6050] bridge0: port 3(macsec1) entered blocking state [ 86.512275][ T6050] bridge0: port 3(macsec1) entered disabled state [ 86.520576][ T6052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.526696][ T6050] macsec1: entered allmulticast mode [ 86.535827][ T6050] bridge0: entered allmulticast mode [ 86.540106][ T6056] netlink: 'syz.2.777': attribute type 4 has an invalid length. [ 86.551216][ T6050] macsec1: left allmulticast mode [ 86.557447][ T6050] bridge0: left allmulticast mode [ 86.563917][ T6050] bridge0: left promiscuous mode [ 86.564895][ T6052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.564968][ T6052] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.583389][ T6040] loop2: unable to read partition table [ 86.602924][ T6040] loop2: partition table beyond EOD, truncated [ 86.609355][ T6054] bridge0: entered promiscuous mode [ 86.609507][ T6040] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 86.618057][ T6054] macsec1: entered promiscuous mode [ 86.637463][ T6054] bridge0: port 4(macsec1) entered blocking state [ 86.645030][ T6054] bridge0: port 4(macsec1) entered disabled state [ 86.653801][ T6054] macsec1: entered allmulticast mode [ 86.654284][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.659711][ T6054] bridge0: entered allmulticast mode [ 86.676209][ T6054] macsec1: left allmulticast mode [ 86.681970][ T6054] bridge0: left allmulticast mode [ 86.688966][ T6054] bridge0: left promiscuous mode [ 86.698546][ T2993] loop2: unable to read partition table [ 86.704749][ T2993] loop2: partition table beyond EOD, truncated [ 86.742137][ T6065] 9pnet: Could not find request transport: t [ 86.860297][ T30] audit: type=1326 audit(1758213808.354:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 86.884617][ T30] audit: type=1326 audit(1758213808.354:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 86.910981][ T30] audit: type=1326 audit(1758213808.354:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 86.935705][ T30] audit: type=1326 audit(1758213808.354:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 86.960501][ T30] audit: type=1326 audit(1758213808.354:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 86.985444][ T30] audit: type=1326 audit(1758213808.354:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 87.011207][ T30] audit: type=1326 audit(1758213808.354:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 87.037224][ T30] audit: type=1326 audit(1758213808.354:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 87.061397][ T30] audit: type=1326 audit(1758213808.354:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6070 comm="syz.1.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 87.261918][ T6090] bridge0: entered promiscuous mode [ 87.267746][ T6090] macsec1: entered promiscuous mode [ 87.278281][ T6090] bridge0: port 4(macsec1) entered blocking state [ 87.285090][ T6090] bridge0: port 4(macsec1) entered disabled state [ 87.292341][ T6090] macsec1: entered allmulticast mode [ 87.300257][ T6090] bridge0: entered allmulticast mode [ 87.306517][ T6090] macsec1: left allmulticast mode [ 87.312022][ T6090] bridge0: left allmulticast mode [ 87.319846][ T6090] bridge0: left promiscuous mode [ 87.322034][ T6092] 9pnet_fd: Insufficient options for proto=fd [ 87.606325][ T6100] bridge0: entered promiscuous mode [ 87.612000][ T6100] macsec1: entered promiscuous mode [ 87.619139][ T6100] bridge0: port 4(macsec1) entered blocking state [ 87.626071][ T6100] bridge0: port 4(macsec1) entered disabled state [ 87.635605][ T6100] macsec1: entered allmulticast mode [ 87.641196][ T6100] bridge0: entered allmulticast mode [ 87.647487][ T6100] macsec1: left allmulticast mode [ 87.652705][ T6100] bridge0: left allmulticast mode [ 87.659299][ T6100] bridge0: left promiscuous mode [ 87.773059][ T6108] loop1: detected capacity change from 0 to 2048 [ 87.886044][ T3503] loop1: unable to read partition table [ 87.893070][ T3503] loop1: partition table beyond EOD, truncated [ 87.939820][ T6108] loop1: unable to read partition table [ 87.947083][ T6108] loop1: partition table beyond EOD, truncated [ 87.948481][ T6117] __nla_validate_parse: 12 callbacks suppressed [ 87.948502][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 87.954070][ T6108] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 87.979555][ T6117] netlink: 'syz.2.798': attribute type 15 has an invalid length. [ 87.995703][ T6108] netlink: 'syz.1.799': attribute type 4 has an invalid length. [ 88.004000][ T6108] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.799'. [ 88.014026][ T6117] vxlan0: entered promiscuous mode [ 88.021790][ T4325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.031712][ T4325] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.043235][ T4325] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.052691][ T4325] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.106183][ T6124] bridge0: entered promiscuous mode [ 88.111747][ T6124] macsec1: entered promiscuous mode [ 88.120409][ T6124] bridge0: port 4(macsec1) entered blocking state [ 88.127493][ T6124] bridge0: port 4(macsec1) entered disabled state [ 88.136014][ T6124] macsec1: entered allmulticast mode [ 88.141614][ T6124] bridge0: entered allmulticast mode [ 88.147966][ T6124] macsec1: left allmulticast mode [ 88.153858][ T6124] bridge0: left allmulticast mode [ 88.161623][ T6124] bridge0: left promiscuous mode [ 88.163923][ T6127] 9pnet_fd: Insufficient options for proto=fd [ 88.305457][ T6140] netlink: 256 bytes leftover after parsing attributes in process `syz.5.810'. [ 88.396719][ T6147] netlink: 48 bytes leftover after parsing attributes in process `syz.5.811'. [ 88.520442][ T6149] loop5: detected capacity change from 0 to 512 [ 88.528712][ T6149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.546062][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.560340][ T6149] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.574095][ T6149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.812'. [ 88.604909][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.017868][ T6168] netlink: 256 bytes leftover after parsing attributes in process `syz.2.818'. [ 89.309826][ T6179] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 89.318936][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.823'. [ 89.335458][ T6180] loop3: detected capacity change from 0 to 512 [ 89.349399][ T6180] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.353081][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.824'. [ 89.381326][ T6180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.413244][ T6180] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.429223][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 89.454870][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.496453][ T6190] netlink: 256 bytes leftover after parsing attributes in process `syz.3.826'. [ 89.621894][ T6201] bridge0: entered promiscuous mode [ 89.629797][ T6201] macsec1: entered promiscuous mode [ 89.638746][ T6201] bridge0: port 4(macsec1) entered blocking state [ 89.645983][ T6201] bridge0: port 4(macsec1) entered disabled state [ 89.653268][ T6201] macsec1: entered allmulticast mode [ 89.659161][ T6201] bridge0: entered allmulticast mode [ 89.665348][ T6201] macsec1: left allmulticast mode [ 89.670500][ T6201] bridge0: left allmulticast mode [ 89.677912][ T6201] bridge0: left promiscuous mode [ 89.689684][ T6204] bridge0: entered promiscuous mode [ 89.695432][ T6204] macsec1: entered promiscuous mode [ 89.703215][ T6204] bridge0: port 4(macsec1) entered blocking state [ 89.707428][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 89.710655][ T6204] bridge0: port 4(macsec1) entered disabled state [ 89.729051][ T6204] macsec1: entered allmulticast mode [ 89.734717][ T6204] bridge0: entered allmulticast mode [ 89.741174][ T6204] macsec1: left allmulticast mode [ 89.746565][ T6204] bridge0: left allmulticast mode [ 89.752863][ T6204] bridge0: left promiscuous mode [ 89.760411][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 89.778035][ T6211] netlink: 'syz.3.834': attribute type 10 has an invalid length. [ 89.793625][ T3503] udevd[3503]: symlink '../../loop4' '/dev/disk/by-diskseq/298.tmp-b7:4' failed: Read-only file system [ 89.829750][ T3612] udevd[3612]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 89.991044][ T6215] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 90.003360][ T6215] team0: Port device dummy0 added [ 90.018454][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 90.158826][ T6225] bridge0: entered promiscuous mode [ 90.172295][ T6225] macsec1: entered promiscuous mode [ 90.188326][ T6225] bridge0: port 4(macsec1) entered blocking state [ 90.195254][ T6225] bridge0: port 4(macsec1) entered disabled state [ 90.222420][ T6225] macsec1: entered allmulticast mode [ 90.228651][ T6225] bridge0: entered allmulticast mode [ 90.258841][ T6225] macsec1: left allmulticast mode [ 90.264068][ T6225] bridge0: left allmulticast mode [ 90.284623][ T6225] bridge0: left promiscuous mode [ 90.369016][ T6215] netlink: 'syz.3.836': attribute type 10 has an invalid length. [ 90.380531][ T6215] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 90.404064][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 90.419392][ T6215] team0: Failed to send options change via netlink (err -105) [ 90.432067][ T6215] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 90.444219][ T6215] team0: Port device dummy0 removed [ 90.453397][ T6215] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.491666][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/302.tmp-b7:1' failed: Read-only file system [ 90.517116][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 90.551959][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 90.644847][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 90.701705][ T6252] netlink: 'syz.5.846': attribute type 10 has an invalid length. [ 90.774990][ T6261] bridge0: entered promiscuous mode [ 90.781652][ T6261] macsec1: entered promiscuous mode [ 90.789176][ T6261] bridge0: port 4(macsec1) entered blocking state [ 90.796433][ T6261] bridge0: port 4(macsec1) entered disabled state [ 90.814630][ T6261] macsec1: entered allmulticast mode [ 90.820492][ T6261] bridge0: entered allmulticast mode [ 90.830065][ T6261] macsec1: left allmulticast mode [ 90.835540][ T6261] bridge0: left allmulticast mode [ 90.841676][ T6261] bridge0: left promiscuous mode [ 91.281427][ T6280] 9pnet: Could not find request transport: t [ 91.486374][ T6290] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 91.852300][ T6308] bridge0: entered promiscuous mode [ 91.858373][ T6308] macsec1: entered promiscuous mode [ 91.865276][ T6308] bridge0: port 3(macsec1) entered blocking state [ 91.872060][ T6308] bridge0: port 3(macsec1) entered disabled state [ 91.879369][ T6308] macsec1: entered allmulticast mode [ 91.884780][ T6308] bridge0: entered allmulticast mode [ 91.890841][ T6308] macsec1: left allmulticast mode [ 91.896324][ T6308] bridge0: left allmulticast mode [ 91.902716][ T6308] bridge0: left promiscuous mode [ 91.916783][ T6306] bridge0: entered promiscuous mode [ 91.922886][ T6306] macsec1: entered promiscuous mode [ 91.929542][ T6306] bridge0: port 4(macsec1) entered blocking state [ 91.937085][ T6306] bridge0: port 4(macsec1) entered disabled state [ 91.944424][ T6306] macsec1: entered allmulticast mode [ 91.950186][ T6306] bridge0: entered allmulticast mode [ 91.956295][ T6306] macsec1: left allmulticast mode [ 91.961713][ T6306] bridge0: left allmulticast mode [ 91.967513][ T6306] bridge0: left promiscuous mode [ 92.097736][ T6312] bridge0: entered promiscuous mode [ 92.107780][ T6312] macsec1: entered promiscuous mode [ 92.111304][ T6314] 9pnet: Could not find request transport: t [ 92.116124][ T6312] bridge0: port 4(macsec1) entered blocking state [ 92.127040][ T6312] bridge0: port 4(macsec1) entered disabled state [ 92.134309][ T6312] macsec1: entered allmulticast mode [ 92.140259][ T6312] bridge0: entered allmulticast mode [ 92.147240][ T6312] macsec1: left allmulticast mode [ 92.152410][ T6312] bridge0: left allmulticast mode [ 92.158554][ T6312] bridge0: left promiscuous mode [ 92.220590][ T30] kauditd_printk_skb: 348 callbacks suppressed [ 92.220609][ T30] audit: type=1326 audit(1758213813.714:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.254664][ T30] audit: type=1326 audit(1758213813.714:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.279046][ T30] audit: type=1326 audit(1758213813.714:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.304483][ T30] audit: type=1326 audit(1758213813.714:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.331089][ T30] audit: type=1326 audit(1758213813.714:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.356298][ T30] audit: type=1326 audit(1758213813.714:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.380828][ T30] audit: type=1326 audit(1758213813.714:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6322 comm="syz.1.872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6a52eba9 code=0x7ffc0000 [ 92.515490][ T30] audit: type=1326 audit(1758213814.014:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 92.541895][ T30] audit: type=1326 audit(1758213814.034:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 92.566934][ T30] audit: type=1326 audit(1758213814.034:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7a950eba9 code=0x7ffc0000 [ 92.619413][ T6341] bridge0: entered promiscuous mode [ 92.627171][ T6341] macsec1: entered promiscuous mode [ 92.640403][ T6341] bridge0: port 4(macsec1) entered blocking state [ 92.647285][ T6341] bridge0: port 4(macsec1) entered disabled state [ 92.655433][ T6341] macsec1: entered allmulticast mode [ 92.661062][ T6341] bridge0: entered allmulticast mode [ 92.663526][ T6343] 9pnet: Could not find request transport: t [ 92.673184][ T6341] macsec1: left allmulticast mode [ 92.678414][ T6341] bridge0: left allmulticast mode [ 92.686409][ T6341] bridge0: left promiscuous mode [ 92.708472][ T6350] loop5: detected capacity change from 0 to 1024 [ 92.715457][ T6350] EXT4-fs: Ignoring removed nobh option [ 92.721159][ T6350] EXT4-fs: Ignoring removed bh option [ 92.756539][ T6350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.773145][ T6356] loop1: detected capacity change from 0 to 512 [ 92.781286][ T6356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.793243][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.804429][ T6356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.817347][ T6356] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.850126][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.864268][ T6363] loop2: detected capacity change from 0 to 512 [ 92.877244][ T6363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.895511][ T6365] bridge0: entered promiscuous mode [ 92.901820][ T6365] macsec1: entered promiscuous mode [ 92.906087][ T6363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.909611][ T6365] bridge0: port 3(macsec1) entered blocking state [ 92.922675][ T6363] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.928080][ T6365] bridge0: port 3(macsec1) entered disabled state [ 92.961926][ T6365] macsec1: entered allmulticast mode [ 92.967679][ T6365] bridge0: entered allmulticast mode [ 92.973890][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.987200][ T6365] macsec1: left allmulticast mode [ 92.992666][ T6365] bridge0: left allmulticast mode [ 92.999089][ T6365] bridge0: left promiscuous mode [ 93.044962][ T6376] __nla_validate_parse: 11 callbacks suppressed [ 93.044979][ T6376] netlink: 16 bytes leftover after parsing attributes in process `syz.5.890'. [ 93.096071][ T6380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'. [ 93.127653][ T6382] bridge0: entered promiscuous mode [ 93.133620][ T6382] macsec1: entered promiscuous mode [ 93.140272][ T6382] bridge0: port 4(macsec1) entered blocking state [ 93.147334][ T6382] bridge0: port 4(macsec1) entered disabled state [ 93.155515][ T6382] macsec1: entered allmulticast mode [ 93.161076][ T6382] bridge0: entered allmulticast mode [ 93.170334][ T6382] macsec1: left allmulticast mode [ 93.175771][ T6382] bridge0: left allmulticast mode [ 93.185975][ T6382] bridge0: left promiscuous mode [ 93.220114][ T6390] bridge0: entered promiscuous mode [ 93.225903][ T6390] macsec1: entered promiscuous mode [ 93.232381][ T6390] bridge0: port 4(macsec1) entered blocking state [ 93.239282][ T6390] bridge0: port 4(macsec1) entered disabled state [ 93.247198][ T6390] macsec1: entered allmulticast mode [ 93.252733][ T6390] bridge0: entered allmulticast mode [ 93.259686][ T6390] macsec1: left allmulticast mode [ 93.264854][ T6390] bridge0: left allmulticast mode [ 93.275446][ T6390] bridge0: left promiscuous mode [ 93.289944][ T6395] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 93.300342][ T6395] team0: Device hsr_slave_0 failed to register rx_handler [ 93.325974][ T6397] netlink: 256 bytes leftover after parsing attributes in process `syz.4.899'. [ 93.497167][ T6410] bridge0: entered promiscuous mode [ 93.503098][ T6410] macsec1: entered promiscuous mode [ 93.509691][ T6410] bridge0: port 4(macsec1) entered blocking state [ 93.516378][ T6410] bridge0: port 4(macsec1) entered disabled state [ 93.524461][ T6410] macsec1: entered allmulticast mode [ 93.530923][ T6410] bridge0: entered allmulticast mode [ 93.540345][ T6410] macsec1: left allmulticast mode [ 93.545921][ T6410] bridge0: left allmulticast mode [ 93.552112][ T6410] bridge0: left promiscuous mode [ 93.565458][ T6416] bridge0: entered promiscuous mode [ 93.571214][ T6416] macsec1: entered promiscuous mode [ 93.577976][ T6416] bridge0: port 4(macsec1) entered blocking state [ 93.585061][ T6416] bridge0: port 4(macsec1) entered disabled state [ 93.591825][ T6416] macsec1: entered allmulticast mode [ 93.597444][ T6416] bridge0: entered allmulticast mode [ 93.604628][ T6416] macsec1: left allmulticast mode [ 93.610316][ T6416] bridge0: left allmulticast mode [ 93.616600][ T6416] bridge0: left promiscuous mode [ 93.706612][ T6420] bridge0: entered promiscuous mode [ 93.712620][ T6420] macsec1: entered promiscuous mode [ 93.719463][ T6420] bridge0: port 4(macsec1) entered blocking state [ 93.727162][ T6420] bridge0: port 4(macsec1) entered disabled state [ 93.734249][ T6420] macsec1: entered allmulticast mode [ 93.739843][ T6420] bridge0: entered allmulticast mode [ 93.746105][ T6420] macsec1: left allmulticast mode [ 93.751482][ T6420] bridge0: left allmulticast mode [ 93.761933][ T6420] bridge0: left promiscuous mode [ 93.784094][ T6422] loop2: detected capacity change from 0 to 1024 [ 93.793641][ T6422] EXT4-fs: Ignoring removed orlov option [ 93.806704][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.919151][ T6433] netlink: 256 bytes leftover after parsing attributes in process `syz.5.910'. [ 93.992881][ T6437] loop5: detected capacity change from 0 to 512 [ 94.025983][ T6437] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.911: corrupted in-inode xattr: overlapping e_value [ 94.041879][ T6437] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.911: couldn't read orphan inode 15 (err -117) [ 94.058195][ T6437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.088650][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.130992][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.248525][ T6453] netlink: 256 bytes leftover after parsing attributes in process `syz.1.916'. [ 94.479318][ T6473] loop5: detected capacity change from 0 to 1024 [ 94.487725][ T6473] EXT4-fs: Ignoring removed orlov option [ 94.504245][ T6473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.700472][ T6485] netlink: 'syz.1.928': attribute type 10 has an invalid length. [ 94.709008][ T6485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.928'. [ 94.718966][ T6485] batadv0: entered promiscuous mode [ 94.724793][ T6485] batadv0: entered allmulticast mode [ 94.731807][ T6485] bridge0: port 3(batadv0) entered blocking state [ 94.739042][ T6485] bridge0: port 3(batadv0) entered disabled state [ 94.764450][ T6485] bridge0: port 3(batadv0) entered blocking state [ 94.771446][ T6485] bridge0: port 3(batadv0) entered forwarding state [ 94.798327][ T3503] udevd[3503]: symlink '../../loop3' '/dev/disk/by-diskseq/305.tmp-b7:3' failed: Read-only file system [ 94.799301][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.830327][ T6489] netlink: 176 bytes leftover after parsing attributes in process `syz.3.930'. [ 94.844363][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/316.tmp-b7:5' failed: Read-only file system [ 94.867024][ T3612] udevd[3612]: symlink '../../loop1' '/dev/disk/by-diskseq/309.tmp-b7:1' failed: Read-only file system [ 94.871973][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/316.tmp-b7:5' failed: Read-only file system [ 94.892452][ T6496] loop1: detected capacity change from 0 to 512 [ 94.897558][ T3503] udevd[3503]: symlink '../../loop5' '/dev/disk/by-diskseq/317.tmp-b7:5' failed: Read-only file system [ 94.906340][ T6489] 9pnet_fd: Insufficient options for proto=fd [ 94.926374][ T3612] udevd[3612]: symlink '../../loop1' '/dev/disk/by-diskseq/318.tmp-b7:1' failed: Read-only file system [ 94.940523][ T3612] udevd[3612]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 94.944661][ T6496] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.974332][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/318.tmp-b7:1' failed: Read-only file system [ 94.987458][ T6496] EXT4-fs (loop1): mount failed [ 94.994486][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 95.023102][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/318.tmp-b7:1' failed: Read-only file system [ 95.107431][ T6504] netlink: 'syz.1.935': attribute type 10 has an invalid length. [ 95.116225][ T6504] team0: Device hsr_slave_0 failed to register rx_handler [ 95.165620][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'. [ 95.253670][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 95.263567][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 95.288198][ T6519] netlink: 16 bytes leftover after parsing attributes in process `syz.5.941'. [ 95.371474][ T6529] loop5: detected capacity change from 0 to 512 [ 95.395285][ T6530] loop3: detected capacity change from 0 to 512 [ 95.426168][ T6530] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.444962][ T6530] EXT4-fs (loop3): mount failed [ 95.451085][ T6529] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.469385][ T6529] EXT4-fs (loop5): mount failed [ 95.551312][ T6539] loop5: detected capacity change from 0 to 512 [ 95.693145][ T6539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.776850][ T6539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.810707][ T6539] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.923095][ T6548] netlink: 16 bytes leftover after parsing attributes in process `syz.5.946'. [ 96.015815][ T3935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.108302][ T6550] FAULT_INJECTION: forcing a failure. [ 96.108302][ T6550] name failslab, interval 1, probability 0, space 0, times 0 [ 96.121939][ T6550] CPU: 1 UID: 0 PID: 6550 Comm: syz.1.951 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.121969][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.121983][ T6550] Call Trace: [ 96.121991][ T6550] [ 96.122000][ T6550] __dump_stack+0x1d/0x30 [ 96.122149][ T6550] dump_stack_lvl+0xe8/0x140 [ 96.122168][ T6550] dump_stack+0x15/0x1b [ 96.122294][ T6550] should_fail_ex+0x265/0x280 [ 96.122320][ T6550] should_failslab+0x8c/0xb0 [ 96.122354][ T6550] kmem_cache_alloc_node_noprof+0x57/0x320 [ 96.122460][ T6550] ? __alloc_skb+0x101/0x320 [ 96.122488][ T6550] __alloc_skb+0x101/0x320 [ 96.122566][ T6550] netlink_alloc_large_skb+0xba/0xf0 [ 96.122590][ T6550] netlink_sendmsg+0x3cf/0x6b0 [ 96.122630][ T6550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.122656][ T6550] __sock_sendmsg+0x145/0x180 [ 96.122723][ T6550] ____sys_sendmsg+0x31e/0x4e0 [ 96.122759][ T6550] ___sys_sendmsg+0x17b/0x1d0 [ 96.122841][ T6550] __x64_sys_sendmsg+0xd4/0x160 [ 96.122881][ T6550] x64_sys_call+0x191e/0x2ff0 [ 96.122938][ T6550] do_syscall_64+0xd2/0x200 [ 96.123019][ T6550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.123049][ T6550] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.123092][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.123119][ T6550] RIP: 0033:0x7fce6a52eba9 [ 96.123138][ T6550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.123158][ T6550] RSP: 002b:00007fce68f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.123177][ T6550] RAX: ffffffffffffffda RBX: 00007fce6a775fa0 RCX: 00007fce6a52eba9 [ 96.123267][ T6550] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 96.123354][ T6550] RBP: 00007fce68f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 96.123368][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.123383][ T6550] R13: 00007fce6a776038 R14: 00007fce6a775fa0 R15: 00007fffd6856208 [ 96.123409][ T6550] [ 96.431020][ T6560] loop4: detected capacity change from 0 to 256 [ 96.481025][ T6566] loop5: detected capacity change from 0 to 512 [ 96.512514][ T6566] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.534443][ T6566] EXT4-fs (loop5): mount failed [ 96.555768][ T6574] bridge0: entered promiscuous mode [ 96.561818][ T6574] macsec1: entered promiscuous mode [ 96.571445][ T6574] bridge0: port 4(macsec1) entered blocking state [ 96.579449][ T6574] bridge0: port 4(macsec1) entered disabled state [ 96.586589][ T6574] macsec1: entered allmulticast mode [ 96.592011][ T6574] bridge0: entered allmulticast mode [ 96.600566][ T6574] macsec1: left allmulticast mode [ 96.605779][ T6574] bridge0: left allmulticast mode [ 96.613676][ T6574] bridge0: left promiscuous mode [ 96.687145][ T6583] loop5: detected capacity change from 0 to 512 [ 96.706169][ T6583] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.726739][ T6583] EXT4-fs (loop5): mount failed [ 96.767277][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.837035][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.907238][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.977009][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.146036][ T51] bridge_slave_1: left allmulticast mode [ 97.152472][ T51] bridge_slave_1: left promiscuous mode [ 97.158541][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.188009][ T51] bridge_slave_0: left allmulticast mode [ 97.194619][ T51] bridge_slave_0: left promiscuous mode [ 97.201685][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.250857][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 97.250951][ T30] audit: type=1326 audit(1758213818.744:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.289850][ T30] audit: type=1326 audit(1758213818.744:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.318445][ T30] audit: type=1326 audit(1758213818.784:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.349579][ T30] audit: type=1326 audit(1758213818.784:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.375667][ T30] audit: type=1326 audit(1758213818.784:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfb8e0d510 code=0x7ffc0000 [ 97.400528][ T30] audit: type=1326 audit(1758213818.784:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fdfb8e103d7 code=0x7ffc0000 [ 97.425702][ T30] audit: type=1326 audit(1758213818.784:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.449671][ T30] audit: type=1326 audit(1758213818.784:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.474114][ T6616] loop5: detected capacity change from 0 to 512 [ 97.475750][ T30] audit: type=1326 audit(1758213818.784:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.509430][ T30] audit: type=1326 audit(1758213818.784:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.3.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfb8e0eba9 code=0x7ffc0000 [ 97.527685][ T6616] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.555343][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.564923][ T6616] EXT4-fs (loop5): mount failed [ 97.570724][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.571640][ T51] bond0 (unregistering): Released all slaves [ 97.594462][ T6617] bridge0: entered promiscuous mode [ 97.607517][ T6617] macsec1: entered promiscuous mode [ 97.617707][ T6617] bridge0: port 4(macsec1) entered blocking state [ 97.626861][ T6617] bridge0: port 4(macsec1) entered disabled state [ 97.633920][ T6617] macsec1: entered allmulticast mode [ 97.639543][ T6617] bridge0: entered allmulticast mode [ 97.707317][ T6617] macsec1: left allmulticast mode [ 97.712625][ T6617] bridge0: left allmulticast mode [ 97.728516][ T6617] bridge0: left promiscuous mode [ 98.066969][ T6627] bridge0: entered promiscuous mode [ 98.079268][ T6627] macsec1: entered promiscuous mode [ 98.088084][ T6627] bridge0: port 4(macsec1) entered blocking state [ 98.095969][ T6627] bridge0: port 4(macsec1) entered disabled state [ 98.105110][ T6627] macsec1: entered allmulticast mode [ 98.111373][ T6627] bridge0: entered allmulticast mode [ 98.119497][ T6627] macsec1: left allmulticast mode [ 98.124863][ T6627] bridge0: left allmulticast mode [ 98.140067][ T6627] bridge0: left promiscuous mode [ 98.168510][ T51] hsr_slave_0: left promiscuous mode [ 98.184459][ T51] hsr_slave_1: left promiscuous mode [ 98.200630][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.209266][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.226321][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.234321][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.256287][ T51] veth1_macvtap: left promiscuous mode [ 98.262392][ T51] veth0_macvtap: left promiscuous mode [ 98.268187][ T51] veth1_vlan: left promiscuous mode [ 98.274844][ T51] veth0_vlan: left promiscuous mode [ 98.337517][ T6681] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 98.345651][ T6681] __nla_validate_parse: 5 callbacks suppressed [ 98.345668][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.982'. [ 98.386952][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.397651][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.405236][ T4325] smc: removing ib device syz! [ 98.435075][ T6589] chnl_net:caif_netlink_parms(): no params data found [ 98.572819][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.580276][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.628498][ T6693] loop1: detected capacity change from 0 to 512 [ 98.640226][ T6589] bridge_slave_0: entered allmulticast mode [ 98.654103][ T6589] bridge_slave_0: entered promiscuous mode [ 98.671244][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.678439][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.702569][ T6589] bridge_slave_1: entered allmulticast mode [ 98.719157][ T6589] bridge_slave_1: entered promiscuous mode [ 98.757536][ T6693] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.801883][ T6693] EXT4-fs (loop1): mount failed [ 98.809318][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.826568][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.887190][ T6589] team0: Port device team_slave_0 added [ 98.907329][ T6589] team0: Port device team_slave_1 added [ 98.972449][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.979606][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.007021][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.077712][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.086062][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.113215][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.162194][ T6589] hsr_slave_0: entered promiscuous mode [ 99.169106][ T6589] hsr_slave_1: entered promiscuous mode [ 99.175656][ T6589] debugfs: 'hsr0' already exists in 'hsr' [ 99.182008][ T6589] Cannot create hsr debugfs directory [ 99.417017][ T6589] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 99.445711][ T6589] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 99.498118][ T6589] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 99.520131][ T6589] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 99.572567][ T6734] bridge0: entered promiscuous mode [ 99.609874][ T6734] macsec1: entered promiscuous mode [ 99.631532][ T6734] bridge0: port 4(macsec1) entered blocking state [ 99.639088][ T6734] bridge0: port 4(macsec1) entered disabled state [ 99.663604][ T6734] macsec1: entered allmulticast mode [ 99.669337][ T6734] bridge0: entered allmulticast mode [ 99.677322][ T6734] macsec1: left allmulticast mode [ 99.683168][ T6734] bridge0: left allmulticast mode [ 99.696422][ T6734] bridge0: left promiscuous mode [ 99.795472][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.830666][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/315.tmp-b7:2' failed: Read-only file system [ 99.847678][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.876850][ T4316] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.884046][ T4316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.912518][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.920377][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.983622][ T6753] loop2: detected capacity change from 0 to 512 [ 99.999531][ T6753] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.004251][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 100.054929][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 100.063971][ T6753] EXT4-fs (loop2): mount failed [ 100.087902][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 100.107050][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.117724][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 100.135765][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/335.tmp-b7:2' failed: Read-only file system [ 100.211395][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 100.224694][ T6769] netlink: 'syz.2.992': attribute type 10 has an invalid length. [ 100.232727][ T6769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.992'. [ 100.240212][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/334.tmp-b7:1' failed: Read-only file system [ 100.286382][ T3503] udevd[3503]: symlink '../../loop1' '/dev/disk/by-diskseq/334.tmp-b7:1' failed: Read-only file system [ 100.334994][ T3503] udevd[3503]: symlink '../../loop2' '/dev/disk/by-diskseq/336.tmp-b7:2' failed: Read-only file system [ 100.357870][ T6780] loop2: detected capacity change from 0 to 512 [ 100.391189][ T6589] veth0_vlan: entered promiscuous mode [ 100.412732][ T6783] netlink: 256 bytes leftover after parsing attributes in process `syz.1.996'. [ 100.423851][ T6780] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 100.425788][ T6589] veth1_vlan: entered promiscuous mode [ 100.452268][ T6589] veth0_macvtap: entered promiscuous mode [ 100.473709][ T6780] EXT4-fs (loop2): mount failed [ 100.482882][ T6589] veth1_macvtap: entered promiscuous mode [ 100.516255][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.528033][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.549789][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.576610][ T4325] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.613440][ T4325] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.645324][ T4325] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.787378][ T6809] loop1: detected capacity change from 0 to 1024 [ 100.799567][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1002'. [ 100.800389][ T6809] EXT4-fs: Ignoring removed orlov option [ 100.827888][ T6809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.081672][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.128547][ T6823] loop5: detected capacity change from 0 to 512 [ 101.146693][ T6823] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.190920][ T6827] loop2: detected capacity change from 0 to 512 [ 101.220318][ T6823] EXT4-fs (loop5): mount failed [ 101.243395][ T6830] bridge0: entered promiscuous mode [ 101.250272][ T6830] macsec1: entered promiscuous mode [ 101.264699][ T6830] bridge0: port 4(macsec1) entered blocking state [ 101.272395][ T6830] bridge0: port 4(macsec1) entered disabled state [ 101.282802][ T6830] macsec1: entered allmulticast mode [ 101.288603][ T6830] bridge0: entered allmulticast mode [ 101.303038][ T6827] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.322555][ T6830] macsec1: left allmulticast mode [ 101.322576][ T6827] EXT4-fs (loop2): mount failed [ 101.328401][ T6830] bridge0: left allmulticast mode [ 101.343876][ T6830] bridge0: left promiscuous mode [ 101.568966][ T6858] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1015'. [ 101.574212][ T6854] loop6: detected capacity change from 0 to 1024 [ 101.605760][ T6854] EXT4-fs: Ignoring removed orlov option [ 101.650183][ T6854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.901643][ T6861] loop1: detected capacity change from 0 to 512 [ 101.905637][ T6589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.948345][ T6861] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.999501][ T6861] EXT4-fs (loop1): mount failed [ 102.088322][ T6879] bridge0: entered promiscuous mode [ 102.094056][ T6879] macsec1: entered promiscuous mode [ 102.101441][ T6879] bridge0: port 4(macsec1) entered blocking state [ 102.104207][ T6880] 9pnet: Could not find request transport: t [ 102.109168][ T6879] bridge0: port 4(macsec1) entered disabled state [ 102.125942][ T6879] macsec1: entered allmulticast mode [ 102.132228][ T6879] bridge0: entered allmulticast mode [ 102.140002][ T6879] macsec1: left allmulticast mode [ 102.145626][ T6879] bridge0: left allmulticast mode [ 102.162133][ T6879] bridge0: left promiscuous mode [ 102.314204][ T6893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 102.822029][ T6899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1029'. [ 102.922919][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 102.922937][ T30] audit: type=1400 audit(1758213824.414:2468): avc: denied { ioctl } for pid=6900 comm="syz.3.1030" path="socket:[14942]" dev="sockfs" ino=14942 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 102.983396][ T30] audit: type=1400 audit(1758213824.424:2469): avc: denied { create } for pid=6900 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 103.003926][ T30] audit: type=1400 audit(1758213824.424:2470): avc: denied { write } for pid=6900 comm="syz.3.1030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 103.054860][ T30] audit: type=1326 audit(1758213824.554:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.091398][ T30] audit: type=1326 audit(1758213824.554:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.116022][ T30] audit: type=1326 audit(1758213824.554:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.140861][ T30] audit: type=1326 audit(1758213824.554:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.165001][ T30] audit: type=1326 audit(1758213824.554:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.188890][ T30] audit: type=1326 audit(1758213824.554:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.214200][ T30] audit: type=1326 audit(1758213824.554:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6905 comm="syz.2.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fa1b442eba9 code=0x7ffc0000 [ 103.308024][ T6920] loop2: detected capacity change from 0 to 1024 [ 103.316602][ T6914] loop3: detected capacity change from 0 to 512 [ 103.319262][ T6920] EXT4-fs: Ignoring removed i_version option [ 103.329344][ T6920] EXT4-fs: Ignoring removed nobh option [ 103.335211][ T6920] EXT4-fs: Ignoring removed bh option [ 103.359751][ T6914] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.369758][ T6925] bridge0: entered promiscuous mode [ 103.386816][ T6914] EXT4-fs (loop3): mount failed [ 103.391015][ T6925] macsec1: entered promiscuous mode [ 103.408229][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.437364][ T6925] bridge0: port 4(macsec1) entered blocking state [ 103.443956][ T6925] bridge0: port 4(macsec1) entered disabled state [ 103.486473][ T6925] macsec1: entered allmulticast mode [ 103.492063][ T6925] bridge0: entered allmulticast mode [ 103.513063][ T6925] macsec1: left allmulticast mode [ 103.518840][ T6925] bridge0: left allmulticast mode [ 103.526102][ T6925] bridge0: left promiscuous mode [ 103.526708][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.661885][ T6949] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1047'. [ 103.828012][ T6970] loop2: detected capacity change from 0 to 512 [ 103.832813][ T6969] FAULT_INJECTION: forcing a failure. [ 103.832813][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 103.847161][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.1.1053 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.847195][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.847210][ T6969] Call Trace: [ 103.847250][ T6969] [ 103.847260][ T6969] __dump_stack+0x1d/0x30 [ 103.847286][ T6969] dump_stack_lvl+0xe8/0x140 [ 103.847309][ T6969] dump_stack+0x15/0x1b [ 103.847329][ T6969] should_fail_ex+0x265/0x280 [ 103.847375][ T6969] should_failslab+0x8c/0xb0 [ 103.847490][ T6969] kmem_cache_alloc_node_noprof+0x57/0x320 [ 103.847529][ T6969] ? __alloc_skb+0x101/0x320 [ 103.847559][ T6969] __alloc_skb+0x101/0x320 [ 103.847662][ T6969] netlink_alloc_large_skb+0xba/0xf0 [ 103.847692][ T6969] netlink_sendmsg+0x3cf/0x6b0 [ 103.847723][ T6969] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.847766][ T6969] __sock_sendmsg+0x145/0x180 [ 103.847805][ T6969] ____sys_sendmsg+0x31e/0x4e0 [ 103.847858][ T6969] ___sys_sendmsg+0x17b/0x1d0 [ 103.847906][ T6969] __x64_sys_sendmsg+0xd4/0x160 [ 103.847936][ T6969] x64_sys_call+0x191e/0x2ff0 [ 103.847963][ T6969] do_syscall_64+0xd2/0x200 [ 103.848071][ T6969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.848103][ T6969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.848143][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.848171][ T6969] RIP: 0033:0x7fce6a52eba9 [ 103.848267][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.848290][ T6969] RSP: 002b:00007fce68f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.848311][ T6969] RAX: ffffffffffffffda RBX: 00007fce6a775fa0 RCX: 00007fce6a52eba9 [ 103.848386][ T6969] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004 [ 103.848402][ T6969] RBP: 00007fce68f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.848417][ T6969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.848433][ T6969] R13: 00007fce6a776038 R14: 00007fce6a775fa0 R15: 00007fffd6856208 [ 103.848458][ T6969] [ 103.870554][ T6970] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.980598][ T6978] bridge0: entered promiscuous mode [ 103.994993][ T6970] EXT4-fs (loop2): mount failed [ 104.030755][ T6978] macsec1: entered promiscuous mode [ 104.090254][ T6978] bridge0: port 4(macsec1) entered blocking state [ 104.096981][ T6978] bridge0: port 4(macsec1) entered disabled state [ 104.108429][ T6978] macsec1: entered allmulticast mode [ 104.113864][ T6978] bridge0: entered allmulticast mode [ 104.128316][ T6978] macsec1: left allmulticast mode [ 104.133670][ T6978] bridge0: left allmulticast mode [ 104.140528][ T6978] bridge0: left promiscuous mode [ 104.160404][ T51] ================================================================== [ 104.168637][ T51] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 104.176734][ T51] [ 104.179072][ T51] write to 0xffff888103db5920 of 8 bytes by task 6985 on cpu 1: [ 104.186710][ T51] sk_common_release+0xae/0x230 [ 104.191689][ T51] udp_lib_close+0x15/0x20 [ 104.196202][ T51] inet_release+0xce/0xf0 [ 104.200556][ T51] inet6_release+0x3e/0x60 [ 104.205160][ T51] sock_close+0x68/0x150 [ 104.209419][ T51] __fput+0x29b/0x650 [ 104.213498][ T51] ____fput+0x1c/0x30 [ 104.217596][ T51] task_work_run+0x12e/0x1a0 [ 104.222287][ T51] exit_to_user_mode_loop+0xe4/0x100 [ 104.227713][ T51] do_syscall_64+0x1d6/0x200 [ 104.232331][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.238371][ T51] [ 104.240698][ T51] read to 0xffff888103db5920 of 8 bytes by task 51 on cpu 0: [ 104.248256][ T51] l2tp_tunnel_del_work+0x2f/0x1a0 [ 104.253497][ T51] process_scheduled_works+0x4cb/0x9d0 [ 104.258988][ T51] worker_thread+0x582/0x770 [ 104.263867][ T51] kthread+0x489/0x510 [ 104.268059][ T51] ret_from_fork+0x11f/0x1b0 [ 104.272667][ T51] ret_from_fork_asm+0x1a/0x30 [ 104.277461][ T51] [ 104.279975][ T51] value changed: 0xffff88811a845380 -> 0x0000000000000000 [ 104.287366][ T51] [ 104.289990][ T51] Reported by Kernel Concurrency Sanitizer on: [ 104.296337][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.306242][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.316405][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 104.321936][ T51] ==================================================================