last executing test programs: 1.813173302s ago: executing program 2 (id=594): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=@newtfilter={0x1174, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1144, 0x2, [@TCA_CGROUP_EMATCHES={0x348, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0xd}, "8cbe7a2e5be23faa5aef862ecb2e7334f66bae1995f194d5e794fbbad75e25d52dffe4aae0435951e5ac785d70d71ae878715c30ad000571833394bdff4b6251dbbf26259963089deef2f74a68ca73ba7f869a9882aa351172462d7e3665e6785ea13ad9df3499024ccf02587456e1adff74cf1c2001633d749a7058ffea5a2517afcc379e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x9ac1}, {0x2, 0x9, 0x7, 0x0, 0xb, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x2}, {0x5, 0x6, 0x2, "d05c6faf8a51"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x0, 0x4, 0x6, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1800, 0x7, 0x7}, {{0x0, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x2, 0x0, 0x0, {{0xfffb, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x83, 0x5, "d14b951a0ca4a4d2c381c63781788bf5113bc5a8f47cf91685d688c4491dae3ee4c5b1bf329c734469a6d48328232a76db5c3f9dbe4f43ffe6c878c52d3a3b24bafbaca707fa8d16c253807b201871ef93e1833d9749884666bb52d4170d4e2d9b102fdcc179c97a5a8935ece6bd07566ade535d42d5f95854ab26b86eaa32"}]}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1}, {0x7, 0xf7, 0x2}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="89997e38f6f890ede705"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xe5, 0x1}, {0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e76584f7"]}]}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0xffff, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\f', @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8001, 0x7, 0xc0}, {{0x0, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x7f}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa, 0x2, 0x200}, {0x80, 0x7, 0x1, "891862becceda0"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff, 0x3, 0x7f}, {0x9, 0xef86, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0xfff8}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xb0, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7606}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e7", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="66f19d"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="41e8", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="9026913d7c4c67", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ac6716cb20", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2729ab1bdf9d2d", @TCF_META_TYPE_VAR="37228bfd02fd069d", @TCF_META_TYPE_VAR="2a821385c6049c5af8"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="28f9", @TCF_META_TYPE_VAR="b63fb7e7e4", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="80b37508494f", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c0793d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8, 0x2}, {0x5, 0xff, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xc}, {0x9, 0x3, 0x2, "2c0596"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8b, 0x3, 0x1000}, {0x5, 0x3, 0x4, 0x80}}}]}]}, @TCA_CGROUP_EMATCHES={0x1c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0x3, 0x5, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xa}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xc283, 0x1, 0x7}, {0x3, 0xe, 0x4, 0x7, 0x0, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x5, 0x9, 0x1ff}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x1000, 0x9, 0x5, 0x4, 0x4, 0x2, 0x2}}}, @TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xf9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x2d, 0x5, "b803b1aed51df6667f67db989798ea3856204d97f633230a7abd4cc13d61214049efa061d8226c10ca"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd0, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x8e}, "f9c20e967e686897e7486ea8e8e5f88d1893453a4e58246629954d5b94bb04900b55df4f4f09beba970ba9282e9766315eb5651e5ee0cc17de6101957c21548ec372a61d8dbefc3946f98533e0a1c65c0d0b8068c348a31a972d739233e9b3bcb6b948d3ecece19ee9e3ebe707d61d9093b615566c45d637b278bcefb5976432a4e28a92b99f7ef4b01f7568fe7c03a8da04b5780126ef77e574a3c29db43deb2bd9fb21eb84061dbe22d4f9ce81b3c95cb8d3310019c84b16f1ed05984d014633"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x76, 0x1, 0x853}, {0x101, 0x4, 0x7, 0x7, 0x1, 0x2}}}]}]}, @TCA_CGROUP_ACT={0x324, 0x1, [@m_xt={0x1ac, 0xc, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x113, 0x6, {0x5, 'mangle\x00', 0x2, 0x1, "906e885d55ab2d35c1ecf999d5e23a499d8fe31ccca5a5ae168c79d7e75002dd4d96da55d1dfd4c7e1693eda0e5c85b251ea7f02b800f529918bd73ac2b026bd32ebe91b2a0f11d9abe117828f6f274957c8d8db2c084d9b4c702450db6f09cafe5fb1f69fb450ba2ae62c8b839a2bb2eeb98a4faf795c37ee20cd892199f3d6485779c4952cefaaaecc23d80b745e9b8ff6d0e8941e19cff1efae67cc9469c94d92021e407e685b11f970184e0d74c0922eba068f6080232a78497bba7c22589bef3c0258913c7dba577fc7c4922efdea3b65928e6322662c99b94c3ad18006ee6ce92873ba56f820"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x34, 0x6, "608c02ffcea85b8478a87eda3c9cfd265b7f7d86cf8b78caf8a7837b8a251bfae1fac56c2583dcb836b20bfef44b4fe6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x108, 0x13, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0xac, 0x6, "aa88bcf7b7c48d008cba99184cac09f6fa6d4b36d2b7f628003c0929369b42d4cb62263edf69ef1dcb985a571cb8cb2e98cd25129ed88044666d65fcc48adb3da544515538c5fac94294431268c3bae62ebceda6c661afa7c8940e6cc70ac70e507d1b9fbcb2b0c4d105805444554780506a2b3e74775124569879d24d3e7ffa202aa8a248f487f1426e366ae5d1ffe69d5d612b4aeff386960aaf1c4cf908a08f8cc6dc79dc2f68"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x6c, 0x10, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xcc}]}, {0x22, 0x6, "f1116ed060114ff20093c0a34dd5026552cae75a2cd4bb9be210081327b9"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_CGROUP_ACT={0x338, 0x1, [@m_bpf={0x68, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0xdc, 0x2, 0x5}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0xd, 0x4, 0x400}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x15, 0x6, "4286b7206319e842b796fa3d823fc8fccc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x140, 0xe, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x8001, 0x5, 0xffffffff, 0x3}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x182, 0xb9, 0x20000000, 0x75d, 0x1}}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x400}]}, {0xa2, 0x6, "7c40c606edcd76a5d8dc5480e116aaa23af0a1c7989ae8841879410d36fbd28229c59a0558a7e8d2af71f65bb186fb73ce979258547f7d8026cf479dbd8bd4d17a15aed023c7a66305082f86fdef67e44b30d6bb66098dd4d4a9758ac7c703b0a75191e4e72f52d6265d5b599683305d356767c6fe3e8577ac71322b84ba000751aebf7d337342fbe56d51a87e750403b847dbbe2be846333985135d46c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xa8, 0x13, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff080, 0x5, 0xf460306f778ce408, 0xfffffe00, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x33, 0x6, "da17d519174a8ed7ebfc6f3e922d584059eed8c378bcab084a40526135ce6da7620e4625c3fa5b00776da12b86965b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0xe4, 0x11, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ffec}]}, {0xaf, 0x6, "0e907a5a0af07b79e16f2d10ab75cdca8c9285c489d569f81d47ce472841583afecc29ec60814a35d0eba1ee8bd9bb07953ff68617b00e1b7b16d8a5fa3b0f6481dda7f2912321fdffdcb4ec9ce452ef8eb0c6f24629989e7905817b948bee2905a24c7ec3a0549c325520a40c91c2aa2bc9066c66c1b8193e20edf3a72a70f0d5acd498d59caaf51fa38366704940dcaeef643c62ebab52c77cf92b30298f8e953c77dfa1acc571ffb10e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x98, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x4}, {0x7fff, 0x1, 0x1, "9c"}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x48b}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8000}, {0xfffffffa, 0x5, 0x70, 0x5}}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="dd970b89", @TCF_META_TYPE_VAR="ce4d6c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x5}, {0x3, 0x5}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="77631d4e6b27c04508"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcf0}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xa8c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0xe, 0x3, 0x1, 0x1, 0x800, 0x200, 0x1c, 0x2, 0x0, 0xff, 0xffff7fff, 0x800, 0x7f, 0xff8e, 0x9, 0x800, 0x0, 0x7, 0x3, 0x8, 0x400, 0x8, 0x6d2, 0x7, 0x9afc, 0x7, 0x801e, 0x3, 0x7, 0x3, 0x8, 0x1, 0xc, 0x7fff, 0x4d82, 0x2, 0x4, 0x3, 0xcb3, 0x8, 0xc, 0xe, 0x1a, 0x2d5f7225, 0x3, 0x7fff, 0x0, 0x0, 0x6, 0x7, 0x1, 0xfffffffb, 0xd6a, 0xe3b5, 0x40, 0x8c, 0xf4, 0x7, 0x3, 0x2, 0x6, 0x2, 0xffffffff, 0xc73b, 0x46, 0x71, 0x800, 0x6, 0x5, 0x1, 0x3, 0x3, 0xfd, 0x3, 0xffffffff, 0x5, 0x8, 0x9, 0x3, 0x2, 0x71f8, 0x7, 0x1, 0xe391, 0x9, 0x7, 0x3, 0x50, 0x101, 0x6, 0x81, 0x0, 0x400, 0x73a, 0x3, 0xa, 0x7, 0x4f62, 0x9, 0x6, 0x3, 0x9, 0x3, 0x72, 0x7, 0x0, 0x8000, 0x0, 0xa, 0x7, 0x4, 0xff, 0x7, 0x7fff, 0x2, 0x3ff, 0x7, 0x2, 0x88f1, 0x9, 0x6, 0x2, 0xb, 0x5, 0xfffffff7, 0x8, 0x10001, 0x3, 0x4c5, 0x200, 0x2, 0xc, 0x2, 0x8, 0x2, 0x25, 0x9, 0x5, 0x9, 0x813, 0x6, 0x4, 0x5, 0x3, 0xce8b, 0xff, 0x8, 0xb7, 0x9, 0x0, 0x1ff, 0x3c, 0x4, 0x5, 0x3, 0x1, 0xe7be, 0xbe22, 0x800, 0x7, 0x9, 0x8, 0x10, 0x6, 0x80000000, 0x401, 0x2, 0x3, 0x1000, 0x101, 0x7, 0x2, 0xffffffd8, 0x9, 0x5, 0x3, 0x6, 0x60, 0x4, 0x5, 0x2, 0x5, 0xefd, 0x3ff, 0x80000001, 0x9, 0xe, 0x8000, 0x6, 0xb, 0x4000000, 0x76, 0x8, 0x2, 0x7, 0x0, 0xfffffffa, 0x2, 0x88, 0x4, 0x6, 0x3d000000, 0x8, 0x7f4, 0x5f4e, 0x6, 0x100, 0x3f, 0x9, 0x3, 0x80, 0xc, 0x3, 0xe, 0x1fda2cc7, 0xffffff81, 0x2d, 0x5, 0x2, 0x0, 0x7ff, 0x14, 0x0, 0x17c7, 0xfffff3ab, 0x7ff, 0x1, 0x6, 0x2, 0x4, 0x2, 0x1, 0x9, 0x3, 0x1, 0xfffffff9, 0x6, 0x0, 0xe5, 0x9, 0x3, 0x0, 0xfffffffd, 0xfffffffb, 0x8, 0xc933, 0x5, 0x5, 0x0, 0x7, 0x8, 0xb00, 0x8, 0xfd7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe826}]}, @TCA_CGROUP_EMATCHES={0x110, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x3}, "fd5c3434e516f446995aac0e444b0819d5b03ca58f76e6552a16c2c582e69856b05b1b5fc9abe025dcc7577ddb38c766b110b39c84e6dfedb61867fe0016cfd8e9686aea94efd48b518da879d11c6a116c0be406fcfbe9dc51a4543fa7738af9e161f80bdfd57e4dcc1bab9d858854"}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x4, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x1}, {0x7, 0x1000, 0x9, 0x3, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff4, 0x1, 0xc}, {0x3, 0x5, 0xb, 0x0, 0x8, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x1174}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 1.765956277s ago: executing program 2 (id=596): r0 = socket(0x28, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000050000103afffe8000030000000000000000000000bbff020000000000000000000000000001"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r3 = socket(0x28, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7daf500000000007b8af8ff00000000bfa200000000000007020000f8ff03000008000000b704000000000000010000009500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x1004010, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.682310035s ago: executing program 3 (id=597): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = dup(r0) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\x15F{^*\x00', 0x6) 1.622913711s ago: executing program 2 (id=598): semget$private(0x0, 0x1, 0x402) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00'}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x80, 0x3, 0x333}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vxcan0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000031c0)=[{{&(0x7f00000003c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000b40)="90df4da2f5253f1d41dc602e3d492aae6379933d0d04484f015b46117d6d66a91d3e58285b1c39852b334ae5ffa31773c71a383821d918de29e7d1f94c680566f062c7a47328d7f0847709e35f77294de6971de0d08a694533f744f5129f9af5b983ad76f84a6ddd6d8388029bc87d7e8bb9560e151432621ce16a3362f7c983d8dcc17e4eb568f4a96260bcc2fc212e39d59395f99885fdbb8e31c38ecbfb925e217bc50fa31b939a63fcd5fab2df46b3c46471b27ef1f02ad990a069a6dde6712c56f0560986a499266b35c4f1d345891b3f9162ed333dcbb717c4e89d92c7becc75e12cf2aac8bee2d2ce1536f8cbc7165cd5", 0xf4}, {&(0x7f00000004c0)="c6ad9b068e2f69c4c670b5ada5ae5e43cc8b504de76e37d3627603a9c5ae3955695d1a92ad40fc0d24ec4ea576b5f1edf72cf0a9ef37d6923f88b126e00b57ff274319b2b3f9ecff015a4b467bc4428131cbe6f431d85257fccee250f55275693b88cc7cd9f86e29365f25c45df476f9642ad23001f81cd6a19d28bc1482d55d216856d4dcb177c0495ea49cbecda491ca12753521fea9cf002e2d2343d2d0a7e71e283fe08c17a9d22850bd", 0xac}, {&(0x7f0000000700)="6af909daedea8148db3370fe109c9f64f046b192ae314b57de084499410ed7f3329e0e33c59a468d21a6caeb5775b6cf838c2a3c5a1d4113ad19a6cb189af7b06a05a7d33a1e286430a3d8aaf721a43dcbb593dfb8a7789c61d94530d87143faec4cdd98dc80169173272aac0a193ede85278664fa9f9846c088e23eb02d8e9420f184ed07afa22eae07fd498fccfd81fa88ba3c9d", 0x95}, {&(0x7f0000000c40)="2e0a375d1c7787b83b463a92e675fea565e031179fcc4820ea9b9ad89d5847e7db1c84451a9292ab18e9fbb923221c8cb0f363d1623cc5fbbf71e3ad6f5fc6f4e0f5501831bc5b8954b23bd380c9ea876497dcbe98e682bab1e36f818a0410bf62f5d1976baac12c5f270c9e57b665906946308d590c6b0c8daeee1c7988df3acc88a969497d7a0de778494c5a2bb0d71135175aad7371f3d59cd1712a8e1d1f69", 0xa1}, {&(0x7f00000005c0)="a0c06a6032e349ed397c4c7ae941afa0639e97b23e9cc835", 0x18}, {&(0x7f0000000d00)="8686ac68e84d13b53ea1c78a8d9197ee2b60c64bf7afc9626ed47cec463eba6688bdca1880b590bed704f15d4b55cee42262ff19452ce36b594c38b56d8a9a7761fb24e8293b3995bc63cd56d0739646c6b88be07af1ca3d345342d46afcaa3c6e5a1385df75e298d3713882080f71bbbdea85e1327e6ffbf0c5ab973cb6304709db566a18c35034f2ec69611a84029e4ea506d65c6f30e49ea2066635c07fcb45d3aa12a0001a184ea0a61547d4e100df", 0xb1}], 0x6, &(0x7f0000000dc0)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xd4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x401}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000f00)="05e24e75cba60f53c53c3302ab4876b61f207e8cb9f6aa7984ec77a585525a39bedcefcd34a55f8c0686bd940ce2afb1e08447872e88b66ff66c6041642f2db86996e1913c08cb31df2394d65ef30bf08cb3fea804d3cfe04be0766071f6ac0f77eb32a8a0fdbcb8ec35c52a8030dab1ea123bb09684bf90f9b4c01efbf89c7da8a8b87b45cdc491600d041ce14a989fec585ff610d99ff9e4c0d12f7aa6a6fe9683a4cc58dd64f2d3f6e81fe5dd984caabe25312504c1b16c493a02ea3b7eb2a01bc8dcfb26f806b69f80fe33f4942327290e9e", 0xd4}, {&(0x7f0000000e80)="61c94e3107c26b", 0x7}, {&(0x7f0000001000)}, {&(0x7f0000001040)="b3a0cee89a31f3949f90d5c4aea2d9a5586c8bcb82f9ef66d98c47d42bb9f1411d2492a1aa7507b0950f1c8c6a72b7bcfb34685f3149c1b19a65f03fff5b4b15635ff3f6fffa5f1ece9fb5646eb400024b000d00777a9231dd53da40fea3b16b52a0563061cd9225ad1c6734b511cbd2eba8", 0x72}, {&(0x7f00000010c0)="d6d2722729aa263d3984546cbc1cf4001e1728fc843da76617936eebf56b824ea399a76c77196b519bf97bae057521b78cc40f5843f24b8ccb1a7b5f13f075cc66505496b7233963b95a1af902db327a7d35fcd1761995dc4a5c58395756bd112b3b62b94894f7e62d7f44abe43794051cac3b6d448e24", 0x77}, {&(0x7f0000001140)="62dc597776b28f46a9cb314a546e32e9f42231c35896bc3a9a68ddef22e44dea10491010fecc39d4fafbd4505590f37584b8f86da6e3d19a967b216029d50a5ba42d41316887f46ee3b1991c9d792f28e5612038bbd1c7277e62809e41697cbed3b28f9e9b96e15d1b74ca63d0da7d2faef630004c3efae49defad6ed4cf4aef3e924a8a9fd8ea5604e9832149832bdc71e23e6e6b047a821be9de49cba5caf37bfee541096ca6a36a8235421a96344b39ce77", 0xb3}, {&(0x7f0000001200)="e3af7c571e589db3d8c981311efce281f8f0f33d10ac882d1e07234691f21409a2c544608743d6380bbd2ee9d94dbba8daee2ca9e0ee04c784ea5a14f1448b", 0x3f}], 0x7, &(0x7f0000003300)=[@dstopts={{0x20, 0x29, 0x37, {0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x9}]}}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x6, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x34}}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x9}, @generic={0x4, 0xa6, "c7753ce307e7ec1eb193477f0f7ac1197a466965b6e0e6bbd5152ec17bf1b205829d33f7d1e885286377d4c046ab18e741e46882020a02cfeae982c69e8673ef7274817739cc8976fdab498f1172b422871a82fb82462e61bd2937829a8ec18c0d6325eb3414e09aeb14050f8cbc3be8d8a64b9e9fb4c52b1c80da1d4826f0df56dbf2dc4003cbc57209389ab1ce9636973adb78736cd1148dd0315f574164441c22884f5daf"}, @ra={0x5, 0x2, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2de9}}, @hopopts={{0x118, 0x29, 0x36, {0x16, 0x1f, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x4, 0x5, [0x8, 0x6, 0x8]}}, @jumbo={0xc2, 0x4, 0x7f}, @calipso={0x7, 0x50, {0x3, 0x12, 0x4, 0x3ff, [0x3, 0x4003cb82, 0x7, 0x100000000, 0xe, 0x734, 0x2, 0xf, 0x9]}}, @enc_lim={0x4, 0x1, 0x65}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0xa5}, @calipso={0x7, 0x50, {0x2, 0x12, 0x6, 0x10, [0x7, 0xc03, 0x1, 0x3, 0xd, 0x80000001, 0x5, 0x3, 0x94]}}, @enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0xb8, 0x29, 0x37, {0x87, 0x13, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x6f68}, @pad1, @jumbo={0xc2, 0x4, 0x821}, @generic={0x6, 0x6f, "033a3f062ea130a3d666ac2727480618082032eec88d766ad3313ae066e46df7fecbb6d6534b03385e102c0f3af47e2a8520f3021e896794c04e4c71b376df983a363df3895c0cad4391055cde8d690d7182945363960a1b9a0f872aed29af0f838f8c3ddc8c1a3d6916132cf66bef"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0x87, 0x17, '\x00', [@pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xab, 0x8e, "1b0414c2db1a9e467f7b66b85a1fafbd170464b13a22a0c9f9e5bf6fd03b0695047be678100f4be917c054dca408e8edbadcb7304b41275cc132df1aced93a424aa16b2cb07d24ab7c587533150a456d40a4ab728429a60487c0152ca335528d3527a1608a6247175f3770cb7cb3720e0ee6e236cbde43bad3e3d5b099ac3bbe5e784c5472d8cc64d614d6c56552"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}]}}}], 0x3e0}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001640)="d1bf725eb166dd94bc59a1258a2ceadff526dd9f3b4b6c5b9238f974668c672f925217b9500b19e11e627f44e63e09c50fb7da0ba106520aab6c03ec466675f851e63b2145774fa1a32605b17be1107236c52d1064bda1fbb35638135db35afc975e9282cc7e7b2851865fafc3bd6ee4cf0d993bbcda94", 0x77}], 0x1, &(0x7f0000001700)=[@rthdr={{0x78, 0x29, 0x39, {0x5c, 0xc, 0x1, 0x6, 0x0, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2, @mcast2, @rand_addr=' \x01\x00', @empty]}}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001780)="bba5d1b5c0ffce9cc6bfde858b6c696c959434eea129cfcbe0630cf2ab071e16c7f6ed5c88fde70f71f115ca3e9c7c8e3d0d4d99ec44286fe46207b66edb3c53719b7a1fc77dcd9d46f6879914f674e01ab0139d0f7407845fd0e36cc25d19c4487ede2948f2ba50361c83ee9ad907d80232c2ec14f91f12731b2d49a2fe7e369b8b088f657257c56e5bbf897e6b4c40f8b64914e7e4c1fd42511196e737d17e5ebe5bf71e8e471895efc7a427457afe4a75f0e5aead99ad7295a0550f", 0xbd}], 0x1, &(0x7f00000018c0)=[@rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x1, 0xf2, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r4}}}, @hopopts={{0x58, 0x29, 0x36, {0x2c, 0x7, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x7}, @generic={0xe, 0x21, "f0d7d682c23d683364905851d24b55547f1f5685e0f4fb2f559025e2b488cb190f"}, @pad1]}}}], 0xe8}}, {{&(0x7f00000019c0)={0xa, 0x4e23, 0x9, @empty}, 0x1c, &(0x7f0000002ec0)=[{&(0x7f0000001a00)="e202417b244533fe1e689315debedc2a7d0f323e69861dd50ee7c495605faf0d8344bb1cea8d9d1908ae79106ab34a12f1e5fd6895e0fdc7e14ad7598fb3ce1e58e0ddb1", 0x44}, {&(0x7f0000001a80)="639aa32c642809ad3e50d323d95c74967cec0dc851216b3c4a79603e4afad0b94d99c3819a3bcda2c5e070ed25e069200783b88e29ed1e2aea5ad3d202febd5ba60650bcd4015c1eb52970c4d036b276369bad8c55966b773740d19d423a5d25d37f75fa1d41582455599c8bc63361fe3c8dca638207b463a39973e25c300f900436c2580faf94fab3d77afffa8503e60c3a16513260d384ab", 0x99}, {&(0x7f0000001b40)="c09225107613b2b6d42645e5e1832491d9ed7ef8d39bbbc2450893ae491a1ee671ed300a539849a8a405089de52bf2743390ee84d07aaca5a06377aa2152edf49546", 0x42}, {&(0x7f0000001bc0)="116158600f7f272ddb218bb2a483a2938de9c92a2308c3bf1a7544ce4c01a25ae0a5935537b8fbc1d8a916f934a802726a72a55e27151da65d62463f06a61794fa23a9545ab0d0afa23fcf9a0a844f2499d9bc37e350b48687deb23e36765058d802174c85e53cb9327369c2caa3e5a021049b32c4e60acb4ed6e259718cc1e4c4a1639cffa9eb630fff643d6935de2f040e97e6a1a4b9505c40732ed7830aaa29b1657702850b492f35fca665f0dabf7b937313893fb8b9fcc6a03f3bf6718434d20ac1f641dc41eb747ca24e071202a4b378e6a8f640d2a98ce90e081c73877a442d867b6d2526d99512ee1eff3bbe7be84e38286acff9144de34b0913b0c238ae1136f9b549f576a76c13ebcb00eaf441b6e885f234aff9f530841f0ab5f1c03ebd6d38435416c42856822c987bd53a8ebd3f6b20fdddc31a253a3f68a620dbfe88831c033f9bb690a1b0c6247b257cbeb809b30abe53f45e5cb927a79e57d313e926eb2e62a66c8446471e333d32a2af5ca6ff540395990f24222a63067f434d69c43b71255b9f72b03fcd0708aef28df384073bf465c44e495f0e238278f285a8d3b3436a9ac149665497f78a8e63b7db53962d70651d0238fb64c096e1103867746fa7f4e129c097d6f1b12d0d31c128a02d6d781c1388b6b6ff73db91789ed1ba3ecd4b996e34521c6f06580151ddc7343bde10be99bbf242feae047180d4f7fecc231da6731348684ef020ebd889e071097d612f92b868ff38fb41149caa16dd2e6bd4b7d48ace1e0317de51ad8284c500e68c6e35ab9a43b336ec131fe332c348090529d0374db628c43821cd819eecfbc7259288aa25e7d0bb1c8d87d41fc889db3799747f10003dca3b2b419c3d0d2fafed7d1bb0529249c18e1ed83505945ffb15dc3faf0859ca2cd571f1e9ac90d9591882bee5b2b7e5e59c02d19be14d35d8ea96a493e854e45d481b51aebd8c2367c9f17873889ccae84f62907a046039d3e6a2d886c4029e4961b8e6ac6a2c5b7a7343b80c190862b396f1af955d274918d1881c78c620ebdea2dfa01084725ff81ea8dae26329a07ab182b2b655c9ba46283ff496625732d96d7f05f3e7803d85dc196d1352835fc07455bee24bd6b3e5bf4ca40f5bb6064afee5c81591bfd36e3d7e43bd99d63a779e5895da09ff32250d66044899b843eef468fc6e1b5b2d18021976b38357c9d98671cfdeb798a144bd9c3af4be11b3d1a610ce3dbda5babd8a308ea5032f0bf3bbfb6afe0a755084c6b2a572337e2bc497c9ac967570b45cd9d8f765ea48c1714db16f7a6dc99419f5ce13609678db610a18c189a49558f32cdef4004d10fc82b51b2f3bd5a9ba860e3576bebba7d0081bf212ec2004b43d697fb1fda8ee65a4c8a5064f70a59e80d512b6684ce7106b61887fa21964633d7e95d666d7d5436e56946549e437b5c992dff24036fb212a08143a8d0aecf62aac45422c91c618c9ba7eb76d685728316606da04ea44348dcea616e78379442c02d3d55ac55b2ae2dc778399d0d08c1f08acb295da08dd9378ef365c0f44de43e4a721f68a98664760743df36ce87e4bbf762dbe1cd247e9c45efbb050c11602745055a2f3f60cf4e543bbe51beb108f745fbb5dc40747e944697eeec40a5cddf2fc5d3fb5e6b518d8b6acde59be79b985a90f451b120cfa921a320e666891b9ab7d7938486634f7ee91ede1522e708f8da15e04018bda37adf7b86c480559a8032ae6c85104685f26f32817818000c91aa82fba56731b3b16b98eb2df49ffb70393f8681f32ccac6e322360f04f3d4dd42229bfbabc338b8aa84323d5079f7fbb0b537bdd01e4708d998e3eee43bfdccd85cb062f300f7a81a02a219ac4d19b741f13f30d4df7cb7e7d3b730ecd9215b41e4b9c7bb13acdc27c87070c2fc8abc7e28f16bf7a838e152ba68c25ca8b0683d93d844ebd71d4c665682574a96d5a652c8a7f417b92bc3e8341468703a7d54f185fb059fa410bdaae584da4ee5a4d0db81c5534ff7ee641d94387eef7306a43f744f7f7f8d4a981d424c83986d77cd3fc5c929ce4eb936b62f9eaa608ad4e55e672374afb38da08bdcfab860debfbc01b4761340c7e963318f6c2e298891f5aa99c19477dc90029d3899e8735ddd9a1110e190318e568ed8534fc7c7363f48516f48ee0fa93d6c530bcc8f54843692cc92377cfb63ee9a7b9e318cd908eadb431ca0f22ad09ff639f86af43a280285c7f8274f595d5d81f87ef9ac73844a6ae2b875fda1db85953fd2055d8710b10ab8b852372be1f916227c56b3fc2f85b8aba23c612e0a58ba24fb9b0781cf4374bc506cf4b67862b527ed3d17c9cdbd4603f3174c476086062556ac5c0cb30aaa82573250c83dc1d825d48291d300d62fac04ef65e1192f7d6783653cccc3a151165edcf8f5d3f351ebec891b0b7d197f200ba7864e4ceb0f2661249abbc0a219faa88662e57f01d1dc4a2ea97969c605a7c790b697bf5c3ffb107bacd3f757b1cb7e85100fc95a2b6d5b2e35d01ef6382b156292c1012778320949a650d2d0f72ff4f3cf414f28268b3110ef666d8d00a8ace2402aaedece05f252c1d263892d79bfa1b148b0c30f38bb6072f436c9ad18c3ad9e810d0eb92ae3acfe4c7f0473aa693a791a7ca278c775e10a415bfe033d54a3fdfa54aa939a54b9b73de41b466de3501c7f6513225318ea7f438f9c2bd16cb35ff5be108cc7ca06d954d3850f373323ec2bc4287de9ec9789352e1e5c9f4c1eed746509e9a0a655458e5dbd54589d60e71e1a0a8227c045b1d57d2bdee4fe93c8c0031069b86e33d3a1e1236c37d80fcf4f7a10d3334ad994d5292593afe5be1616f62cacc761147d9f1e4aa1977d2ad0ae862379c4339f5b1fea9b97260afe04ad5a51777db9eec69347ec35fde44f30e17a37dd97c0a3aa2125c83f5e53699372deffb3f385e981be26199ec51ec023081412004d62208c4a646923b73b54199de8b36047d293e3d0d1c0eabdfa53df1cd78bd71c6aab64348bc755d2f3473a2257d8f5749405359e77feca9574c1af51d8ff1621dbd182b028cf6e630ed58aed1f6b4d2abe1d14a746055423f8bc0cad4330190bc1768a6d9f4e67b7bd30d5c7b159585fef3a1ea9f628c704e1733adf6d7b2c66076a41751406690684fe8ee166d43f7dc2d7c77128f1e82f41f35a3132c84846e5760da15f27275f5f24573fd5803629df96d647dfc3b7eae2467653d8de528149f2e78e753df6a676e30bf9ddf38afd29705c2eb13ba1e60303e3e8a0ac4d5406d4fa43bcb71c41a57a8d8dcc895e4ecc6b5f7ad34fb2d7d4b65f0274a0dc0e223f52fb843bb16655d557e264440d20b90f0473a22624a24c5b53d2e80420bb66186402c709ebf0209d14d0344fcdd05610fc370572e75ad6b298894a7e643695837b932b78a76787b4fc4e30a6f518849db3e64946391e04b01e4bb02ea4089b31115b70f32e17c1873d09bc0c5afca8bfc2f96212f8c0e2265b426a2a20de30f97b7aa809662bb8df7d9f7a0115811fbe9835905a644c66917df40499274868321b471d44c354e2a1e90851cf80125dcedad1266e6e6a834b401b58436a22b168dc04663c62f409cfbaeb5dc28ef8d69f81454bc98684176df115f4502b4b32eb45d95a9020a089cbd3f7090a54ab97da76db6728fee44164ba079eafcc99185130889076ffa895facd453f11783d129fce713625c33e813683ee05de1840b0142eef0f395c3fa040f8be346f81eaaa2cabbbfefcf7d03f517e9f1811e78e83f03221ff34c13ac46a3567890e71ea101731a1bcca4dc637bacd105040f4674900e8284f7cfd74622e4df70f106676ac8f01e32c5bb1287ba0a404959318b5980ce45ec0c7e5ec182c58a32b5faeb4d37697f379629edafd5831568e8032e152927eb0f4febd7321f18e8d5f51b3e5558ce9615c6168cc00ff5f3c386acb4198d82c6a2f9e162bab5902f174b0a3595cd012d23d2d31447734af18568a3886532804955ba4d01b82a64f57fa23ddee130a6c7ecb32bf7293d3fd16cf41514a21a57bd6029e885e0898a48f97d4d9ac3ffea9105c5861d1ef0c4ea6238192b2300a1e33af3cdc4a119d2051d180db41c11c32e02aa11f5f339439a95a81b388bf946068730b3e9d4accdf4b286650a3f9d37b1571b21c95f1136caa18550ca4197302c5dd6e20939b9f9d31646d71ad764d848a4e742f39dfc5f1360b3fdbcc8f1091d8ed184bd1b59080d85453736ec69443f9c1b812bcaea0b5a3218f9634385f19b36c10da269fe99671fd83a8b78f1688c8073e1cb233303d4eabf35a4f1666d85a548a893a533df90b38935764016bd19e7d186ef851f69b6d2b958ee442c85abadb9348ea13e4d419297c0b4834fb6d94efcff136bcf09a53f1117c36203e5179c39e87a2148cec5ed65f53af08fc76a23471090b9958b3fcd301f78b151c030f4cbf5c6ba199f7ac78a28a7941b15f5a0d35b0f3a802a324b1fcdc1e3d06e59d705b51a92b078b32a3bf2d5b53367fd79171ef800204d47deae50f79052a6c0b8c615aa290ce689bcb80922f43e7f448fba0acb1da1f7da31f8cbe21c1953c83c3aaa3cf8ad87435958d2a75f93acc80c5d4e88b33342f98fa3be1f76f08b6432e82e2d726d4083ea1a379a65b79f0c68db9d701d15d09f6b2e1eae1c8673ed834f4a27ed081274c6f1279f6de285a04a605b304daf7429e9e5148ff70f5ba926663047714aa99b6ccca4a625adabbc41d7a6e3632553b52a95c6d6deab3bc52939d3313284b8df9a5a506d1b3099fadeb3c5a989163b914b991a0fc872566a6304a9ca4649c4a28ad865b446b27ee303c8df3c3a040b25e36a128eda15646ab0edd514399f76aad489feaff18a985b0c03fcde57d281e5a8404f95ef0df1c726619cff828a6946c42b4813f77ae4ab863fe3339bedf748c2d6e32d239621b9375d7eabe4efa715f33eade7f4e04755734d2f9d753b471ceb75905ea1a59a34f8c04723358127f47ff4aefdbdada1e27f54b28e3fa938e2083be4793295e4fce34ae5d62a16e9e6e64349f512f4cf17d4c643e8244d1b7227c4adf09176ff1371cf1e768955bdf96f211c01f83b4ef7c4a792fa327da4dcb46530e82b1749e27e4f7910e2fd8c738d64213ec74637bb390a05f6653658a29fd0ff42d389b63f4387466add69a7ef1b80105a25858c3e3be9f42ee9afff975be2c6aae1cc5e2b9d3856817b87459dbca41f96dd90efb366b00140e34344b5bceb4d60b2d6a23494f57d1d2625976e4a9e7b3f25b777150e36f255950dca3777e3a4f965b7abd9767b059d4d3a68bed3ea7e7848388cc28d936cb92b0f22f334c1ff90b862391f5b2868c24eeeef7157de4b469108a2134b17b9484483c805a3d0ec3e50636e5aa995ffdb9a2533f49a125ed8b7b1da73b7ed16027821f11adfb125660f66bd0b517e033c95ab9175cbfa6c0c843e3e0c71c058d2aacc4e4c9d2d4092f184a081dff3d5046773008ef6eb00959fcb24b1be1cbf9625b39df8a2ac133dc43a34bb0b8432f3fe77aa1f94c7706c24582901a09eb89419519290d42f0f0769802fb2a46b316678934b6b630089ec588d89a002441bbaa6cf3d7033827afe42195618ec39e134c49b23df100c5969914cd181e7599f063461b7e20864ad43b27b21da19b701389e59b0540fdc97ebace39baea156b840a2595f4b29e678588dada23cb062a7a659a2b9f67c3270f11b50be46225706bf94d0d397b2a7743b53", 0x1000}, {&(0x7f0000002bc0)="75e7173bd3aec98d31ece4e4b9340ef4998cc99ac9916df5cb7e3f816ed96b11d03598faf22036e5598c98194657bc3059811c7978dcc77deb5c580db21e7236ccb9e48e53d1c1ce414b2bfd4093671fd5918214ad9f5509cada64322a83c707fca3f3e9ad0f9a833beba12632935208824f6c56411aead2e341b701e2246c9bd1bf1541ead74a01b2f0310843b777f45a376663e31c70ffd093e8b403a27007ef7c54feb83342cad554c042447ad48f23f230466a1d3ec2b00f4e2cf2478c14082ec47c6fdb51d263", 0xc9}, {&(0x7f0000002cc0)="c93eb95dc40ee6eae89df10b37d58779b70a0f38e7f8d733c7e8f61cf0487c56e87c6009edb2a38be99e5875e2ca9323c7bd85523c9f752de52c3f1d362de699f3ca98deff673cac499de54170d5e6499b650e856f9f2a16d5325041e049f687bafa9bf8a53defc40a14136ba6591d517c80771759c1446b67674e1f5c36a2ea155531bd4e860128111cd7649e2e8a7b60aeee10b4d46d1c3ae094f01b28b31be405f77ff513a56b0b9e2979356151b18cf09fa487858b0101d38fb6cc4f4e3b3f2030dd5b2a91bf0d3823e82ff283228de3", 0xd2}, {&(0x7f0000002dc0)="2f3ccdd6e3ab66ebd029888028542e23ae127ab1562be476e892857d7836df1355e62ebe153dd289207b73851c492cb2c1c2ddce026c260272202853f9f15ec9f6745e7e3409540bc0c2df0640ab127c02b37e020558299e6b46bf6f3e954d43cee668260c7d68823b332470993e6dacdba6aa8f9d0e4781e370991515a5b29601a0db06f9f2f51d08c1922d3714b0db27dfcc6f357e792759a184355c374c5b4ce34867c40b909e174a39a23ac6996e5f81d83b3bff00c7d072f66de51ea7a565c1d5d7dba90950821244b06fa3889d7d6f36aea8d65f6e5aa922f44f17c8b58e0e978b428483", 0xe7}], 0x7, &(0x7f0000002f40)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x2, 0x6, [0x2d, 0x4, 0x4, 0x8000]}}, @pad1, @jumbo={0xc2, 0x4, 0x200}, @jumbo, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xb}, @jumbo={0xc2, 0x4, 0x80}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xa3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}, @dstopts_2292={{0x138, 0x29, 0x4, {0x2, 0x23, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @pad1, @jumbo={0xc2, 0x4, 0x5af}, @ra={0x5, 0x2, 0xfff9}, @generic={0x1, 0xd0, "68256cfcad479b70581585e070726040b63ad8cf726ac07ceb8978f70429cba481789d3c6ffba8b35ba7b566516ec2a4af8a00966624fefed7cce6bf3aee5a313a12f6278d0339e48c66057a59362dad6a65c005c41e0fe2110b72bc1c1adf37ccaeaabff41327c8944568fee9b6a965e2631d9048bc05a45318ac9fad2adc231ff718805f79b9690e666b2be9acb1b40f72568c70a5839868c9016933a693bfd75072a405b7e356867eca011b079df46be75903c725647682a45eb3c40fc822ca9bb5b873083dba80aefbd95fb36f63"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x55}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xe}}, @tclass={{0x14, 0x29, 0x43, 0xed48}}, @hopopts={{0x28, 0x29, 0x36, {0x32, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}], 0x250}}], 0x5, 0x4028044) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES64, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES8], 0x6, 0x36e, &(0x7f00000007c0)="$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") r8 = socket$nl_audit(0x10, 0x3, 0x9) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$AUDIT_USER_AVC(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000530404"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.498624473s ago: executing program 3 (id=599): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r3, 0x1267, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) 1.457863397s ago: executing program 3 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000100)={0xfffffff8, 0xaeb, 0xe57, 0x1, 0x7, "3ce6920887000000000000000d00", 0x4, 0x1ff}) write(0xffffffffffffffff, &(0x7f0000000740)="656aa90d2aa17eb2d392a8b6c6984898af13ca0084e631d94e86c61bfc58b7497f88087fe915cf2052b2a54e75f7c04be870fa7ece844e47fcb399c978d0364afeff73ec01e75364e90f4ccff36290af95ff0f76fb5588af6cfcc6619e73bc7ce6dccf842dab48d7b9cb29ccd591a67039fff73158c8a1788a8fe2de76b08c95b26fabad034d688e2cb112cf3d6f5e75bd6c0c1b330338654dd26373744fad0f3b80601e9613d1c53e1052aed218bf02596bf252eaf3a5353814bcda1f466d3f7723e4af39ebcb0ce9f0e30f6f7f4609a08c3066f58e8dfac1723387c9b3a34786971feb13b83319f2062412a942df8deec850d67389e83e16f4f824723bd972e0e4c6625447d532b939401cfe3283a53c670d3d7be77d62edfbabda5c328344870ad46afb4a28ea9e45c7074529313b87455278ce211736c777bf56e89532bca17a6d456ce2efcf5830b07426a25fd088e6977aeb9a7d2552c11f8fe94353f60ab13239403f28aab455d01a4489f3f85d19ea71a4216e86790d30ed70fa6eb2cea04703fcaa5d5f4068faeb7b70153d9b4f655b17268b730ccbfdd98d1a757d2736a798a6c60c49709f8349b938cf61bef63cd7337c5988dd67f77a816e00c7b089d465e1d0da2d847abfbfd1f14099ce0b4e36a00172aa90b28c5c9d41c157a984ae0473f32ee5373395d5ecb1dd5a349bc2696a8039444f5df815e3bdd63e0aa01e91aa724dab310900fcabe7e8089ade3bf99f770c103156235e96e0f35b92d985024468f8ad3f5cbadaa74435db2f5ab1c153dbf8eb32c3fc486aaafdbd20cd00645237ef0360b83ab79e1f0650ab4b8b985c7968bbad24bf579304dcc43b31f4c21c6a4d50b8fa77e62831dc030ad4b1b61f721976317b71cd73fcd272816698d4867342c1381e5ca5e431465722c91f15884af25913d93272bcb2bb143d0e3c66426a8a7483589af13c1dca0b7d36aca3ee2f767945370121bc76b5b53d8e7a69827b5313530733cd0c27df3ac6a8bb2d2e824964bc6759356f5d86f20979b85283098f9f5ba381c9ccfcb67fc3b5a0e108ac597cb89aa70a2599c118db95ba587c3c457854a10bcb2ea3c02faafdf309844fa886bfeee3204319275f2b7e8e75e46a84f501146593dddce994e7c23f7a90d162b91f73e4838e4a8cbb734f46c57a87f4ebf256d6a58b4937ec8671a47bee3b7506f758ddacf27892e63471addfdf32ab21f5ed40bd8a17aa192b486f6fa999cd3b4c63d5d418ab76630ede3fac00475db7bcf882b6f6a43759b8d3de67f69da90939f775443b17eee7d18f0e8bf878194a8ac34e58151b8243fad4892801bf90dd36a2e883349014d4bcaf6fede216da2ace165146abaf6f12cf28ff1f8bf101cc2183f4a3c77bdaadda0eacb7d88be18accb652d4a5859b22426ed5d0780f7d9b6b597c0ee4427adeb56a4e47a814f5c90200e46043f46b70b97f63d4d95e7d2d017eadb41183b2f66a79b52f76571515a78d7103d49e33931995c6b36dbfb799edb549d0356ca5c05735b8b045b3cb4448eb6cb9626188428da4024eee3ce6a70ff8558894da802cc5706a4d57eb43dc77184bd79e7e723cf2b14bb3d7a2460c98063e7d184e87a6bec0a09388f933907bb841ec61f4615727c038319ee6a009c173ae1364426799325c286b046033c76f491ae15df2dfbd74ee96a6924f0f48d8ad8810b510941ea96e658e5ffc8d0ba53fe3c4427e22f07968fd8693cdb23aeb7d29d8d40dd2fc77f9243502cae5f464ff290e866099d8317fd5173b038300f4064ab92cae4df714610d3c771e8d3a011d5da0d7f8aa380f8a81ee6828e9172a121929b51869311974ac915623c339945ab41d129876bb6f23cc393805f671b829563dff8b1ef648ba77ce5fc73c6f3494bf6e6af7848155118e35e88a2b1fe654b69b5c2291324080ad869e96c2a696f31898a2bc3aacaa54e54fb8dce144f0ddac29b3881259fe322bdb853a5c66807c8accc8a509faf505851a1a7de526e6515dcc3699e1e7c8cb3c266c14ec98629f20a08bf6289c0ae03c079eb08229b4b007a5f9070b0b05e35e403f608a5cacad82a1bc2b00000000000000000000000000000000b1b41c2eee46f7774b", 0x5e7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.457408127s ago: executing program 4 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0xfc, 0x477, &(0x7f0000000bc0)="$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") (fail_nth: 3) 1.167704396s ago: executing program 4 (id=603): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00'], 0x92280) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[], 0x2080) 1.078404024s ago: executing program 4 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r2, 0x402, 0x8000003b) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000001300)=@newtaction={0x864, 0x30, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{0x274, 0x1, [@m_connmark={0xc0, 0x13, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x8ea6, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x2, 0x5, 0xfff, 0x7}, 0xa}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0x4, 0x20000000, 0x0, 0x8000}, 0x88}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x2, 0x7, 0x20}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffffc7, 0x28000, 0x6, 0xfffffff8, 0x800}, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x1b0, 0x9, 0x0, 0x0, {{0x7}, {0xb4, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_TARG={0x7c, 0x6, {0x1, 'raw\x00', 0x3, 0x0, "5b6584777c9de6f675a4fad720be68ec56bef21e2aa82a954332ad0c93e7c78998109097be391ccc67aa765628ba06ed679fa823e7ce4728da90f7bf7e30168548ceac0357c8c196787dbbfbbf7277e673e0"}}]}, {0xd6, 0x6, "1e3d3929e963ded80b8352a436d0755734369fab53638224aa3227fde0c22715e2c08240e72acfb46bb3cc910496cf1201244dd31bf0001b70b9c44f4a37bd9a7dda7605ddf7387a3f9e6d1e3dfd665012a7f166f89e6f3e050abb1b262f439ac230e06c595ec184843cc2eb10df200c077a927081d05eb1e2154a89b3108b2d81294f7563e638f400fabef245a545a4278d2b4b8e86d0e24d6d51906c468f1a4b5d856df7bd2eeb293bbe0f4a4d6a739d538bfd5af1257306645485d2ecbac1b7ad5ed41387d8126472f6accef4d9a0dfa0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x5dc, 0x1, [@m_ct={0x164, 0x19, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_LABELS={0x14, 0x7, "d5bd4b4a2b165ec415e55e6fd279ef49"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}, @TCA_CT_LABELS_MASK={0x14, 0x8, "ed944a5177fc448033cf123d233ca4b0"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_MARK={0x8, 0x5, 0x40000000}]}, {0xd0, 0x6, "bf055ace26c82aff6591798d6a11774293fea8f50bf662da3ac4bff73bed1acab1769ccb9e3f6fd871a4da8caaa50288833fc34ac4d5da675ec58b668fed6d7457215e31827706c795450230a95bae1a1466bb2ea2ea6e6bc87519957e1d0c3be9e5c523fc5605b1418f5430dddc2e29c5f9b9a3074918e3e03abaefdb9fbb364807e8f7232d950066b8b8e1ce8e96085fec4c5a3cbb239f787c41376a50cbb575aff6c5f03f1add1a42e3d37dd982fde4f15d7d79d8fc8423d2e5599b10e05f23caf0b671b9d54c73bec55c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ct={0x148, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x30}]}, {0xfb, 0x6, "7f996c93e668fccce18b345b7770e0033cadffc61289097e5f81281c5a732872fb2108612b80b891b1e2073c168359e2f0a6600f5f8d77e9f30c8fdf63d15b90155e2c416a4b6ddaea2abed5a73ca0e549099bf37adab2589064f2038a04f817d1ee5ebb6650feab02f18368da881bea6cbf075bcfebd09afc729c3a74cebe201a4d6a19da63f5405898824b0dac9f80e660b139dfec254d0628c5940c3f6abe05512109623085a8b0ef165c24599bcf1e1fb43978c25090bd959400cdd9fa6685c087a5fb328302b311f446f8cb8649ef5ff4cbc5a7787f6350ae44cdbe58c0dfc0f062910fadfa1e32cb76bcba4cc3c4eb85f1eabd87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xb8, 0xa, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x84, 0x6, "435e8d64d14f36270f30d229ab66a7d7aab9688fab22d6b55f3b265640cfdce668543b35173a3b48da54fffecdb49f724fcb510cce3c7b95e36f2ece94d7f4d937ad9785f15dc8df353195e2c22eb05b008c600aaeccef1c529dc570e16fa9f77102f3306522135aaf884a1fa5a7613ee28445d2d0f6252fe102a827bba3bfd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff, 0xf, 0x2, 0x400, 0xffffff7f}, 0xa}}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}]}, {0x9c, 0x6, "ae1fcfaa3c41e3bc680b18d93f53cad2196d19590bdd56890567f6354c3d7f2b5bb445f5ca6c6f19564fcccf0dbe3d9cbe719dafb3a5f83d78f6da1b1188d732fef477e8ac80f7af76b6ebd05a4e4d68a6bb3eeaad094a40b8859540f5703a17a368906bc3db095c057b7ede2fbb4e4a93212fd89b6d06075c634b7cc5fa5700f1a3d588cfd7c80ef61e40be0e77ba4fc2cb5cf7a6cda1d5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x174, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @loopback}, @TCA_CT_ACTION={0x6}, @TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x4}, @TCA_CT_PARMS={0x18, 0x1, {0x7, 0x7f, 0x7, 0xa, 0xf92d}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x864}, 0x1, 0x0, 0x0, 0x40084}, 0x4000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x4, 0x9, {{0xc, 0x4, 0x2, 0x9, 0x30, 0x68, 0x0, 0x89, 0x4, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x31}, {[@end, @timestamp={0x44, 0x18, 0xd0, 0x0, 0x2, [0x1f0, 0x7fff, 0x0, 0x2, 0x6]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000f700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r8, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000580)={@multicast2, @multicast1}, &(0x7f00000005c0)=0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bind$packet(r11, &(0x7f0000000000)={0x11, 0x4, r13, 0x1, 0xfe, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x2, 0x7, 0x8, 0x9, 0x41, @empty, @mcast1, 0x700, 0x10, 0x10001}}) 1.067375425s ago: executing program 2 (id=606): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_create(r1, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00'], 0x92280) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x2080) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000090) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0xef2, 0x4, 0x7, 0x7}, 0x10) 979.176784ms ago: executing program 1 (id=607): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x1b, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x10, 0x8, 0x3a8, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc"}]}, 0xd8}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) 784.762763ms ago: executing program 4 (id=609): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x809b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9d, 0x9, 0x7, 0x8, 0x4e19}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x36}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x20000020) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 741.708848ms ago: executing program 3 (id=610): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x63}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00"], 0x38}}, 0x0) 729.951319ms ago: executing program 2 (id=611): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_dev$loop(&(0x7f0000000340), 0x6, 0x80) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$BLKSECTGET(r3, 0x1267, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x8000) 689.745613ms ago: executing program 2 (id=612): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 645.996587ms ago: executing program 4 (id=613): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x1c, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x10, 0x8, 0x3a8, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc"}]}, 0xe0}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 635.436008ms ago: executing program 0 (id=614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000100)=0x5, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, 0x0, 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) close(r2) r5 = dup(r0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r7, 0x0, 0x0) io_cancel(r7, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x4, r4, &(0x7f0000001bc0)="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", 0x1000, 0x722, 0x0, 0x5, r5}, &(0x7f00000006c0)) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) 467.038724ms ago: executing program 3 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xd}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 456.359726ms ago: executing program 1 (id=616): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$selinux_create(r1, &(0x7f0000000300)=@access={'system_u:object_r:hald_sonypic_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6}, 0x5c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='D\x00'], 0x92280) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x121) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x2080) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x31}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000090) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x14) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) removexattr(0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0xef2, 0x4, 0x7, 0x7}, 0x10) 391.282522ms ago: executing program 0 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000fd841000000c00000085000000c4000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 373.002124ms ago: executing program 3 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]}) socket$inet6(0xa, 0x3, 0x5) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x2007}) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r7}) 348.726406ms ago: executing program 0 (id=619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x80000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES16=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00002, &(0x7f0000000d80)={[{@usrjquota}, {@jqfmt_vfsold}, {@nombcache}, {@noload}, {@usrjquota}, {@dioread_nolock}, {@oldalloc}, {@nouid32}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@data_writeback}]}, 0x1, 0x49c, &(0x7f0000002400)="$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") 225.343598ms ago: executing program 1 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 205.8956ms ago: executing program 1 (id=621): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") setxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=@random={'trusted.', '\x00'}, &(0x7f00000001c0)='\x00', 0x1, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x120) stat(&(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) 196.341931ms ago: executing program 0 (id=622): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x80) 136.105927ms ago: executing program 4 (id=623): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x1c, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x10, 0x8, 0x3a8, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc"}]}, 0xe0}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) 50.642235ms ago: executing program 1 (id=624): prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000140)={0x1000000000006, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141ac2, 0xa8) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) (async, rerun: 64) clock_adjtime(0x3, &(0x7f00000005c0)={0x259, 0xe58, 0x0, 0x655e, 0x7fffffffffffffff, 0x3, 0x10000, 0x9, 0x2c, 0x9, 0x3fffc, 0x7, 0x8, 0xeaf, 0x200004, 0x20000, 0x4, 0x8, 0x7, 0x3, 0x4, 0x9, 0x5, 0x401, 0x401, 0x20000000002}) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x240008c0}, 0x80) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0xffffffffffffff18) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) (async, rerun: 64) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r7, 0x0, 0x8084) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16=r7], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000004, 0x20010, r1, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c000140000000000000"], 0x290}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 49.922395ms ago: executing program 0 (id=625): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010003904000000000000000000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=@newtfilter={0x1174, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1144, 0x2, [@TCA_CGROUP_EMATCHES={0x348, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x2, 0x0, 0x0, {{0x3ff, 0x0, 0xd}, "8cbe7a2e5be23faa5aef862ecb2e7334f66bae1995f194d5e794fbbad75e25d52dffe4aae0435951e5ac785d70d71ae878715c30ad000571833394bdff4b6251dbbf26259963089deef2f74a68ca73ba7f869a9882aa351172462d7e3665e6785ea13ad9df3499024ccf02587456e1adff74cf1c2001633d749a7058ffea5a2517afcc379e"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x9ac1}, {0x2, 0x9, 0x7, 0x0, 0xb, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x2}, {0x5, 0x6, 0x2, "d05c6faf8a51"}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x1}, {0x0, 0x4, 0x6, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1800, 0x7, 0x7}, {{0x0, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xbc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x90, 0x2, 0x0, 0x0, {{0xfffb, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_DATA={0x83, 0x5, "d14b951a0ca4a4d2c381c63781788bf5113bc5a8f47cf91685d688c4491dae3ee4c5b1bf329c734469a6d48328232a76db5c3f9dbe4f43ffe6c878c52d3a3b24bafbaca707fa8d16c253807b201871ef93e1833d9749884666bb52d4170d4e2d9b102fdcc179c97a5a8935ece6bd07566ade535d42d5f95854ab26b86eaa32"}]}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x7ff}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x1}, {0x7, 0xf7, 0x2}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="89997e38f6f890ede705"]}]}}]}, @TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xe5, 0x1}, {0x8, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e76584f7"]}]}}, @TCF_EM_META={0x20, 0x3, 0x0, 0x0, {{0xffff, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='\f', @TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8001, 0x7, 0xc0}, {{0x0, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x7f}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xa, 0x2, 0x200}, {0x80, 0x7, 0x1, "891862becceda0"}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff, 0x3, 0x7f}, {0x9, 0xef86, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6, 0x7, 0xfff8}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0xb0, 0x3, 0x0, 0x0, {{0x9, 0x4, 0x7606}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e7", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_LVALUE={0x7, 0x2, [@TCF_META_TYPE_VAR="66f19d"]}, @TCA_EM_META_LVALUE={0x16, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="41e8", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x38, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="9026913d7c4c67", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ac6716cb20", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="2729ab1bdf9d2d", @TCF_META_TYPE_VAR="37228bfd02fd069d", @TCF_META_TYPE_VAR="2a821385c6049c5af8"]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="28f9", @TCF_META_TYPE_VAR="b63fb7e7e4", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="80b37508494f", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c0793d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x8, 0x2}, {0x5, 0xff, 0x1}}}]}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x9, 0x2, 0xc}, {0x9, 0x3, 0x2, "2c0596"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8b, 0x3, 0x1000}, {0x5, 0x3, 0x4, 0x80}}}]}]}, @TCA_CGROUP_EMATCHES={0x1c4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0x3, 0x5, 0x4}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xa}, {{0x3, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xc283, 0x1, 0x7}, {0x3, 0xe, 0x4, 0x7, 0x0, 0x2, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x7}, {0x7, 0x5, 0x9, 0x1ff}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{}, {0x1000, 0x9, 0x5, 0x4, 0x4, 0x2, 0x2}}}, @TCF_EM_IPT={0x4c, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xf9}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x2d, 0x5, "b803b1aed51df6667f67db989798ea3856204d97f633230a7abd4cc13d61214049efa061d8226c10ca"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}]}}]}, @TCA_EMATCH_TREE_LIST={0xec, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xd0, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x8e}, "f9c20e967e686897e7486ea8e8e5f88d1893453a4e58246629954d5b94bb04900b55df4f4f09beba970ba9282e9766315eb5651e5ee0cc17de6101957c21548ec372a61d8dbefc3946f98533e0a1c65c0d0b8068c348a31a972d739233e9b3bcb6b948d3ecece19ee9e3ebe707d61d9093b615566c45d637b278bcefb5976432a4e28a92b99f7ef4b01f7568fe7c03a8da04b5780126ef77e574a3c29db43deb2bd9fb21eb84061dbe22d4f9ce81b3c95cb8d3310019c84b16f1ed05984d014633"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x76, 0x1, 0x853}, {0x101, 0x4, 0x7, 0x7, 0x1, 0x2}}}]}]}, @TCA_CGROUP_ACT={0x324, 0x1, [@m_xt={0x1ac, 0xc, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x113, 0x6, {0x5, 'mangle\x00', 0x2, 0x1, "906e885d55ab2d35c1ecf999d5e23a499d8fe31ccca5a5ae168c79d7e75002dd4d96da55d1dfd4c7e1693eda0e5c85b251ea7f02b800f529918bd73ac2b026bd32ebe91b2a0f11d9abe117828f6f274957c8d8db2c084d9b4c702450db6f09cafe5fb1f69fb450ba2ae62c8b839a2bb2eeb98a4faf795c37ee20cd892199f3d6485779c4952cefaaaecc23d80b745e9b8ff6d0e8941e19cff1efae67cc9469c94d92021e407e685b11f970184e0d74c0922eba068f6080232a78497bba7c22589bef3c0258913c7dba577fc7c4922efdea3b65928e6322662c99b94c3ad18006ee6ce92873ba56f820"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x34, 0x6, "608c02ffcea85b8478a87eda3c9cfd265b7f7d86cf8b78caf8a7837b8a251bfae1fac56c2583dcb836b20bfef44b4fe6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x108, 0x13, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8}]}, {0xac, 0x6, "aa88bcf7b7c48d008cba99184cac09f6fa6d4b36d2b7f628003c0929369b42d4cb62263edf69ef1dcb985a571cb8cb2e98cd25129ed88044666d65fcc48adb3da544515538c5fac94294431268c3bae62ebceda6c661afa7c8940e6cc70ac70e507d1b9fbcb2b0c4d105805444554780506a2b3e74775124569879d24d3e7ffa202aa8a248f487f1426e366ae5d1ffe69d5d612b4aeff386960aaf1c4cf908a08f8cc6dc79dc2f68"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x6c, 0x10, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xcc}]}, {0x22, 0x6, "f1116ed060114ff20093c0a34dd5026552cae75a2cd4bb9be210081327b9"}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}, @TCA_CGROUP_ACT={0x338, 0x1, [@m_bpf={0x68, 0x6, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0xdc, 0x2, 0x5}]}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0xd, 0x4, 0x400}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x15, 0x6, "4286b7206319e842b796fa3d823fc8fccc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x140, 0xe, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x8001, 0x5, 0xffffffff, 0x3}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x182, 0xb9, 0x20000000, 0x75d, 0x1}}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x400}]}, {0xa2, 0x6, "7c40c606edcd76a5d8dc5480e116aaa23af0a1c7989ae8841879410d36fbd28229c59a0558a7e8d2af71f65bb186fb73ce979258547f7d8026cf479dbd8bd4d17a15aed023c7a66305082f86fdef67e44b30d6bb66098dd4d4a9758ac7c703b0a75191e4e72f52d6265d5b599683305d356767c6fe3e8577ac71322b84ba000751aebf7d337342fbe56d51a87e750403b847dbbe2be846333985135d46c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xa8, 0x13, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffff080, 0x5, 0xf460306f778ce408, 0xfffffe00, 0x2}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x33, 0x6, "da17d519174a8ed7ebfc6f3e922d584059eed8c378bcab084a40526135ce6da7620e4625c3fa5b00776da12b86965b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0xe4, 0x11, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4ffec}]}, {0xaf, 0x6, "0e907a5a0af07b79e16f2d10ab75cdca8c9285c489d569f81d47ce472841583afecc29ec60814a35d0eba1ee8bd9bb07953ff68617b00e1b7b16d8a5fa3b0f6481dda7f2912321fdffdcb4ec9ce452ef8eb0c6f24629989e7905817b948bee2905a24c7ec3a0549c325520a40c91c2aa2bc9066c66c1b8193e20edf3a72a70f0d5acd498d59caaf51fa38366704940dcaeef643c62ebab52c77cf92b30298f8e953c77dfa1acc571ffb10e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x98, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x4}, {0x7fff, 0x1, 0x1, "9c"}}}, @TCF_EM_META={0x10, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x3ff}, [@TCA_EM_META_LVALUE={0x4}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0x48b}, {{0x3}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5, 0x3, 0x8000}, {0xfffffffa, 0x5, 0x70, 0x5}}}, @TCF_EM_META={0x34, 0x1, 0x0, 0x0, {{0x5, 0x4, 0x7}, [@TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="dd970b89", @TCF_META_TYPE_VAR="ce4d6c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x401, 0x5}, {0x3, 0x5}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="77631d4e6b27c04508"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcf0}}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xa8c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x0, 0xe, 0x3, 0x1, 0x1, 0x800, 0x200, 0x1c, 0x2, 0x0, 0xff, 0xffff7fff, 0x800, 0x7f, 0xff8e, 0x9, 0x800, 0x0, 0x7, 0x3, 0x8, 0x400, 0x8, 0x6d2, 0x7, 0x9afc, 0x7, 0x801e, 0x3, 0x7, 0x3, 0x8, 0x1, 0xc, 0x7fff, 0x4d82, 0x2, 0x4, 0x3, 0xcb3, 0x8, 0xc, 0xe, 0x1a, 0x2d5f7225, 0x3, 0x7fff, 0x0, 0x0, 0x6, 0x7, 0x1, 0xfffffffb, 0xd6a, 0xe3b5, 0x40, 0x8c, 0xf4, 0x7, 0x3, 0x2, 0x6, 0x2, 0xffffffff, 0xc73b, 0x46, 0x71, 0x800, 0x6, 0x5, 0x1, 0x3, 0x3, 0xfd, 0x3, 0xffffffff, 0x5, 0x8, 0x9, 0x3, 0x2, 0x71f8, 0x7, 0x1, 0xe391, 0x9, 0x7, 0x3, 0x50, 0x101, 0x6, 0x81, 0x0, 0x400, 0x73a, 0x3, 0xa, 0x7, 0x4f62, 0x9, 0x6, 0x3, 0x9, 0x3, 0x72, 0x7, 0x0, 0x8000, 0x0, 0xa, 0x7, 0x4, 0xff, 0x7, 0x7fff, 0x2, 0x3ff, 0x7, 0x2, 0x88f1, 0x9, 0x6, 0x2, 0xb, 0x5, 0xfffffff7, 0x8, 0x10001, 0x3, 0x4c5, 0x200, 0x2, 0xc, 0x2, 0x8, 0x2, 0x25, 0x9, 0x5, 0x9, 0x813, 0x6, 0x4, 0x5, 0x3, 0xce8b, 0xff, 0x8, 0xb7, 0x9, 0x0, 0x1ff, 0x3c, 0x4, 0x5, 0x3, 0x1, 0xe7be, 0xbe22, 0x800, 0x7, 0x9, 0x8, 0x10, 0x6, 0x80000000, 0x401, 0x2, 0x3, 0x1000, 0x101, 0x7, 0x2, 0xffffffd8, 0x9, 0x5, 0x3, 0x6, 0x60, 0x4, 0x5, 0x2, 0x5, 0xefd, 0x3ff, 0x80000001, 0x9, 0xe, 0x8000, 0x6, 0xb, 0x4000000, 0x76, 0x8, 0x2, 0x7, 0x0, 0xfffffffa, 0x2, 0x88, 0x4, 0x6, 0x3d000000, 0x8, 0x7f4, 0x5f4e, 0x6, 0x100, 0x3f, 0x9, 0x3, 0x80, 0xc, 0x3, 0xe, 0x1fda2cc7, 0xffffff81, 0x2d, 0x5, 0x2, 0x0, 0x7ff, 0x14, 0x0, 0x17c7, 0xfffff3ab, 0x7ff, 0x1, 0x6, 0x2, 0x4, 0x2, 0x1, 0x9, 0x3, 0x1, 0xfffffff9, 0x6, 0x0, 0xe5, 0x9, 0x3, 0x0, 0xfffffffd, 0xfffffffb, 0x8, 0xc933, 0x5, 0x5, 0x0, 0x7, 0x8, 0xb00, 0x8, 0xfd7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe826}]}, @TCA_CGROUP_EMATCHES={0x110, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x7c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0x3}, "fd5c3434e516f446995aac0e444b0819d5b03ca58f76e6552a16c2c582e69856b05b1b5fc9abe025dcc7577ddb38c766b110b39c84e6dfedb61867fe0016cfd8e9686aea94efd48b518da879d11c6a116c0be406fcfbe9dc51a4543fa7738af9e161f80bdfd57e4dcc1bab9d858854"}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x2, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x3}, {0x4, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x1}, {0x7, 0x1000, 0x9, 0x3, 0x0, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfff4, 0x1, 0xc}, {0x3, 0x5, 0xb, 0x0, 0x8, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x1174}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) 29.948937ms ago: executing program 1 (id=626): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x1b, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x10, 0x8, 0x3a8, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc"}]}, 0xd8}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7, 0x0, 0x400007}, 0x18) 0s ago: executing program 0 (id=627): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x1c, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, @sadb_key={0x10, 0x8, 0x3a8, 0x0, "5630f6e8902e42edce8053fcc1ffae922948f2a67f26f317f8caa201a1f568b6276352479653234ae3146302b44884bde392ba28a038c01c09b89cb4c10a3dcdcdfde6f19f0b6226542353f5fa434da09050383066ba039209cf8cea541d1485cbe92a48534f0ab90115efe2d23bf80c826339ebbc"}]}, 0xe0}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400007}, 0x18) kernel console output (not intermixed with test programs): 0x3b0 [ 39.763227][ T3789] ? __rcu_read_unlock+0x4f/0x70 [ 39.763321][ T3789] ? ext4_get_group_desc+0x16b/0x190 [ 39.763369][ T3789] ? folio_mark_accessed+0x240/0x3a0 [ 39.763419][ T3789] ? __account_obj_stock+0x211/0x350 [ 39.763513][ T3789] ext4_map_query_blocks+0xa8/0x480 [ 39.763564][ T3789] ext4_map_blocks+0x330/0xd00 [ 39.763610][ T3789] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 39.763696][ T3789] ? alloc_buffer_head+0x1c3/0x1f0 [ 39.763733][ T3789] _ext4_get_block+0x10a/0x350 [ 39.763780][ T3789] ext4_get_block_unwritten+0x2a/0xb0 [ 39.763897][ T3789] ext4_block_write_begin+0x5e8/0xc00 [ 39.763950][ T3789] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 39.764014][ T3789] ext4_convert_inline_data_to_extent+0x3df/0x7d0 [ 39.764085][ T3789] ext4_try_to_write_inline_data+0x54/0x90 [ 39.764130][ T3789] ext4_write_begin+0x1b3/0xeb0 [ 39.764189][ T3789] ext4_da_write_begin+0x1fb/0x6e0 [ 39.764254][ T3789] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 39.764292][ T3789] generic_perform_write+0x184/0x490 [ 39.764344][ T3789] ext4_buffered_write_iter+0x1ee/0x3c0 [ 39.764375][ T3789] ext4_file_write_iter+0x387/0xf60 [ 39.764422][ T3789] ? kstrtouint_from_user+0x9f/0xf0 [ 39.764489][ T3789] ? 0xffffffff81000000 [ 39.764508][ T3789] ? __rcu_read_unlock+0x4f/0x70 [ 39.764543][ T3789] ? avc_policy_seqno+0x15/0x30 [ 39.764647][ T3789] ? selinux_file_permission+0x1e4/0x320 [ 39.764693][ T3789] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 39.764794][ T3789] vfs_write+0x52a/0x960 [ 39.764885][ T3789] __x64_sys_pwrite64+0xfd/0x150 [ 39.764936][ T3789] x64_sys_call+0xc4d/0x3000 [ 39.765002][ T3789] do_syscall_64+0xd2/0x200 [ 39.765095][ T3789] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.765135][ T3789] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.765175][ T3789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.765206][ T3789] RIP: 0033:0x7f94020befc9 [ 39.765228][ T3789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.765300][ T3789] RSP: 002b:00007f9400b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 39.765335][ T3789] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020befc9 [ 39.765354][ T3789] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006 [ 39.765371][ T3789] RBP: 00007f9400b27090 R08: 0000000000000000 R09: 0000000000000000 [ 39.765409][ T3789] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 39.765427][ T3789] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 39.765529][ T3789] [ 39.773081][ T3789] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, [ 39.813211][ T3787] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.814167][ T3789] inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 39.847507][ T3787] EXT4-fs (loop1): 1 truncate cleaned up [ 39.857307][ T3789] EXT4-fs (loop4): Remounting filesystem read-only [ 39.863108][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.870651][ T3786] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, [ 40.069340][ T3802] netlink: 144 bytes leftover after parsing attributes in process `syz.3.98'. [ 40.072705][ T3786] inode 15: [ 40.168975][ T3803] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.98'. [ 40.174567][ T3786] block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 40.201577][ T3803] lo speed is unknown, defaulting to 1000 [ 40.205508][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.218979][ T3786] EXT4-fs (loop2): Remounting filesystem read-only [ 40.267767][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.282567][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.291345][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.300600][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.313658][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.379972][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.387824][ T3817] loop0: detected capacity change from 0 to 1024 [ 40.388817][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.406410][ T3817] EXT4-fs: inline encryption not supported [ 40.417612][ T3810] loop2: detected capacity change from 0 to 512 [ 40.426604][ T3818] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.448558][ T3817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.456049][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.483673][ T3822] loop1: detected capacity change from 0 to 512 [ 40.513986][ T3822] EXT4-fs: Ignoring removed oldalloc option [ 40.540316][ T3818] tipc: Started in network mode [ 40.545306][ T3818] tipc: Node identity 7a185a843efd, cluster identity 4711 [ 40.552516][ T3818] tipc: Enabled bearer , priority 0 [ 40.552592][ T3822] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 40.552648][ T3822] EXT4-fs: error: could not find journal device path [ 40.588590][ T3817] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 40.603557][ T3818] syzkaller0: MTU too low for tipc bearer [ 40.609352][ T3818] tipc: Disabling bearer [ 40.615051][ T3817] EXT4-fs (loop0): Remounting filesystem read-only [ 40.630789][ T3806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 40.677702][ T3833] loop2: detected capacity change from 0 to 128 [ 40.683356][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.860614][ T3848] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.872981][ T3849] FAULT_INJECTION: forcing a failure. [ 40.872981][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 40.882509][ T3848] tipc: Enabled bearer , priority 0 [ 40.885736][ T3849] CPU: 1 UID: 0 PID: 3849 Comm: syz.2.109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.885768][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.885783][ T3849] Call Trace: [ 40.885792][ T3849] [ 40.885803][ T3849] __dump_stack+0x1d/0x30 [ 40.885907][ T3849] dump_stack_lvl+0xe8/0x140 [ 40.885938][ T3849] dump_stack+0x15/0x1b [ 40.885961][ T3849] should_fail_ex+0x265/0x280 [ 40.886012][ T3849] should_failslab+0x8c/0xb0 [ 40.886107][ T3849] kmem_cache_alloc_bulk_noprof+0x50/0x3d0 [ 40.886155][ T3849] ? bpf_test_run_xdp_live+0x59e/0x11c0 [ 40.886201][ T3849] bpf_test_run_xdp_live+0xdbd/0x11c0 [ 40.886250][ T3849] ? synchronize_rcu+0x45/0x320 [ 40.886331][ T3849] ? bpf_test_run_xdp_live+0x354/0x11c0 [ 40.886401][ T3849] bpf_prog_test_run_xdp+0x525/0x970 [ 40.886510][ T3849] ? _kstrtol+0x31/0x90 [ 40.886587][ T3849] ? __rcu_read_unlock+0x4f/0x70 [ 40.886630][ T3849] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 40.886743][ T3849] bpf_prog_test_run+0x22a/0x390 [ 40.886774][ T3849] __sys_bpf+0x4c0/0x7c0 [ 40.886977][ T3849] __x64_sys_bpf+0x41/0x50 [ 40.887020][ T3849] x64_sys_call+0x2aee/0x3000 [ 40.887050][ T3849] do_syscall_64+0xd2/0x200 [ 40.887116][ T3849] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.887227][ T3849] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.887262][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.887294][ T3849] RIP: 0033:0x7f91f36fefc9 [ 40.887318][ T3849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.887423][ T3849] RSP: 002b:00007f91f2167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.887450][ T3849] RAX: ffffffffffffffda RBX: 00007f91f3955fa0 RCX: 00007f91f36fefc9 [ 40.887468][ T3849] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 40.887486][ T3849] RBP: 00007f91f2167090 R08: 0000000000000000 R09: 0000000000000000 [ 40.887503][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.887521][ T3849] R13: 00007f91f3956038 R14: 00007f91f3955fa0 R15: 00007ffe9a381d38 [ 40.887565][ T3849] [ 41.017992][ T3857] loop0: detected capacity change from 0 to 512 [ 41.035179][ T3857] EXT4-fs: Ignoring removed oldalloc option [ 41.066053][ T3850] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 41.080713][ T3857] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 41.087100][ T3850] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 41.095089][ T3857] EXT4-fs: error: could not find journal device path [ 41.104178][ T3850] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 41.194545][ T3861] loop2: detected capacity change from 0 to 512 [ 41.201167][ T3861] msdos: Unknown parameter 'dotw' [ 41.207654][ T3858] syzkaller0: MTU too low for tipc bearer [ 41.213432][ T3858] tipc: Disabling bearer [ 41.279063][ T3863] sctp: [Deprecated]: syz.2.113 (pid 3863) Use of int in max_burst socket option. [ 41.279063][ T3863] Use struct sctp_assoc_value instead [ 41.323395][ T3868] sctp: [Deprecated]: syz.4.115 (pid 3868) Use of int in max_burst socket option. [ 41.323395][ T3868] Use struct sctp_assoc_value instead [ 41.388581][ T3869] random: crng reseeded on system resumption [ 41.428715][ T3869] ALSA: seq fatal error: cannot create timer (-19) [ 41.457916][ T3876] loop2: detected capacity change from 0 to 512 [ 41.469623][ T3879] netlink: 'syz.4.118': attribute type 13 has an invalid length. [ 41.476339][ T3880] loop3: detected capacity change from 0 to 128 [ 41.492366][ T3876] EXT4-fs: Ignoring removed oldalloc option [ 41.498632][ T3876] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 41.515200][ T3876] EXT4-fs: error: could not find journal device path [ 41.572401][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.579781][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.623773][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.644578][ T3879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.740545][ T3886] loop3: detected capacity change from 0 to 128 [ 41.748931][ T3886] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.769093][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.770941][ T3886] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.792980][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.819081][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.828168][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.862487][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.899405][ T3891] loop3: detected capacity change from 0 to 128 [ 41.928118][ T3891] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.943428][ T3896] netlink: 'syz.1.126': attribute type 30 has an invalid length. [ 41.984898][ T3891] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 42.038698][ T3901] loop1: detected capacity change from 0 to 128 [ 42.061720][ T3884] capability: warning: `syz.2.121' uses deprecated v2 capabilities in a way that may be insecure [ 42.073949][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.085178][ T3905] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 42.100665][ T3894] tipc: Enabled bearer , priority 0 [ 42.110450][ T3894] syzkaller0: MTU too low for tipc bearer [ 42.116296][ T3894] tipc: Disabling bearer [ 42.142536][ T3907] 0ªX¹¦À: renamed from caif0 [ 42.154172][ T3907] 0ªX¹¦À: entered allmulticast mode [ 42.159503][ T3907] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 42.361541][ T3916] loop2: detected capacity change from 0 to 128 [ 42.531580][ T3920] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 42.540706][ T3922] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 42.551143][ T3922] bond0: (slave dummy0): Releasing backup interface [ 42.558041][ T3920] loop1: detected capacity change from 0 to 128 [ 42.566825][ T3922] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.576479][ T3922] team0: Failed to send options change via netlink (err -105) [ 42.584008][ T3922] team0: Port device dummy0 added [ 42.622584][ T3925] netlink: 'syz.1.136': attribute type 13 has an invalid length. [ 42.679262][ T3931] siw: device registration error -23 [ 42.767089][ T3940] loop0: detected capacity change from 0 to 512 [ 42.776763][ T3943] random: crng reseeded on system resumption [ 42.783339][ T3940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.807646][ T3940] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.834601][ T3935] ALSA: seq fatal error: cannot create timer (-19) [ 42.853153][ T3940] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.142: corrupted inode contents [ 42.867256][ T3940] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.142: mark_inode_dirty error [ 42.879343][ T3940] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.142: corrupted inode contents [ 42.896286][ T3940] Unsupported ieee802154 address type: 0 [ 42.925517][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.984476][ T3955] loop4: detected capacity change from 0 to 512 [ 43.020000][ T3960] loop4: detected capacity change from 0 to 128 [ 43.032130][ T3960] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.054693][ T3958] lo speed is unknown, defaulting to 1000 [ 43.062929][ T3963] loop3: detected capacity change from 0 to 128 [ 43.069524][ T3960] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.105065][ T3963] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.125744][ T3963] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.159128][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.210452][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.220012][ T3967] loop4: detected capacity change from 0 to 512 [ 43.282035][ T3971] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 43.381265][ T3976] loop4: detected capacity change from 0 to 512 [ 43.390799][ T3976] EXT4-fs: Ignoring removed oldalloc option [ 43.402143][ T3976] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 43.418709][ T3976] EXT4-fs: error: could not find journal device path [ 43.445202][ T29] kauditd_printk_skb: 519 callbacks suppressed [ 43.445216][ T29] audit: type=1326 audit(1760965944.667:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.475406][ T29] audit: type=1326 audit(1760965944.697:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.498907][ T29] audit: type=1326 audit(1760965944.697:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.525718][ T29] audit: type=1326 audit(1760965944.697:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.549117][ T29] audit: type=1326 audit(1760965944.697:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.572452][ T29] audit: type=1326 audit(1760965944.697:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.595773][ T29] audit: type=1326 audit(1760965944.697:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.619021][ T29] audit: type=1326 audit(1760965944.697:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.642401][ T29] audit: type=1326 audit(1760965944.697:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.657384][ T3981] loop4: detected capacity change from 0 to 512 [ 43.665684][ T29] audit: type=1326 audit(1760965944.697:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3978 comm="syz.3.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 43.672313][ T3981] msdos: Unknown parameter 'dotw' [ 43.720536][ T3985] loop2: detected capacity change from 0 to 512 [ 43.731067][ T3987] 1ªX¹¦À: renamed from 60ªX¹¦À [ 43.737663][ T3985] EXT4-fs: test_dummy_encryption option not supported [ 43.756609][ T3987] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 43.862270][ T3998] netlink: 'syz.0.163': attribute type 13 has an invalid length. [ 43.879205][ T4000] netlink: 'syz.2.164': attribute type 10 has an invalid length. [ 43.915782][ T4000] bond0: (slave dummy0): Releasing backup interface [ 43.929299][ T4002] loop4: detected capacity change from 0 to 512 [ 43.939364][ T4000] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 43.948759][ T4000] team0: Failed to send options change via netlink (err -105) [ 43.956393][ T4000] team0: Port device dummy0 added [ 44.013964][ T4013] siw: device registration error -23 [ 44.046219][ T4016] loop1: detected capacity change from 0 to 1024 [ 44.054561][ T4016] EXT4-fs: inline encryption not supported [ 44.088502][ T4014] random: crng reseeded on system resumption [ 44.102531][ T4016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.121063][ T4016] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 44.136401][ T4016] EXT4-fs (loop1): Remounting filesystem read-only [ 44.180877][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.198423][ T4014] ALSA: seq fatal error: cannot create timer (-19) [ 44.205401][ T4029] loop2: detected capacity change from 0 to 1024 [ 44.215650][ T4029] EXT4-fs: Ignoring removed orlov option [ 44.235817][ T4029] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.260708][ T4037] loop1: detected capacity change from 0 to 1024 [ 44.267982][ T4037] EXT4-fs: Ignoring removed orlov option [ 44.278891][ T4037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.278907][ T4035] lo speed is unknown, defaulting to 1000 [ 44.593509][ T4045] netlink: 'syz.3.178': attribute type 13 has an invalid length. [ 44.649042][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.656490][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.700809][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.746129][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.757012][ T4045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.773686][ T4047] loop2: detected capacity change from 0 to 1024 [ 44.785380][ T4047] EXT4-fs: Ignoring removed orlov option [ 44.799451][ T4047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.817890][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.866572][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.876176][ T1456] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.905918][ T4055] FAULT_INJECTION: forcing a failure. [ 44.905918][ T4055] name failslab, interval 1, probability 0, space 0, times 0 [ 44.907715][ T4053] netlink: 'syz.1.180': attribute type 10 has an invalid length. [ 44.918725][ T4055] CPU: 1 UID: 0 PID: 4055 Comm: syz.3.182 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.918766][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.918784][ T4055] Call Trace: [ 44.918792][ T4055] [ 44.918803][ T4055] __dump_stack+0x1d/0x30 [ 44.918876][ T4055] dump_stack_lvl+0xe8/0x140 [ 44.918904][ T4055] dump_stack+0x15/0x1b [ 44.918942][ T4055] should_fail_ex+0x265/0x280 [ 44.918993][ T4055] should_failslab+0x8c/0xb0 [ 44.919084][ T4055] kmem_cache_alloc_noprof+0x50/0x480 [ 44.919122][ T4055] ? audit_log_start+0x342/0x720 [ 44.919150][ T4055] audit_log_start+0x342/0x720 [ 44.919178][ T4055] ? kstrtouint+0x76/0xc0 [ 44.919333][ T4055] audit_seccomp+0x48/0x100 [ 44.919376][ T4055] ? __seccomp_filter+0x82d/0x1250 [ 44.919420][ T4055] __seccomp_filter+0x83e/0x1250 [ 44.919518][ T4055] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.919579][ T4055] ? vfs_write+0x7e8/0x960 [ 44.919645][ T4055] __secure_computing+0x82/0x150 [ 44.919682][ T4055] syscall_trace_enter+0xcf/0x1e0 [ 44.919723][ T4055] do_syscall_64+0xac/0x200 [ 44.919758][ T4055] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.919851][ T4055] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.919964][ T4055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.920013][ T4055] RIP: 0033:0x7fd0672eefc9 [ 44.920035][ T4055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.920060][ T4055] RSP: 002b:00007fd065d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 44.920088][ T4055] RAX: ffffffffffffffda RBX: 00007fd067545fa0 RCX: 00007fd0672eefc9 [ 44.920105][ T4055] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 44.920123][ T4055] RBP: 00007fd065d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.920149][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.920167][ T4055] R13: 00007fd067546038 R14: 00007fd067545fa0 R15: 00007fff43a91f48 [ 44.920209][ T4055] [ 44.980800][ T4051] loop0: detected capacity change from 0 to 128 [ 44.986723][ T1456] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.143282][ T1456] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.144809][ T4053] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.217955][ T4064] __nla_validate_parse: 30 callbacks suppressed [ 45.217974][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 45.280132][ T4066] loop1: detected capacity change from 0 to 1024 [ 45.289668][ T4066] EXT4-fs: inline encryption not supported [ 45.322325][ T4068] FAULT_INJECTION: forcing a failure. [ 45.322325][ T4068] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.335603][ T4068] CPU: 0 UID: 0 PID: 4068 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.335634][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 45.335651][ T4068] Call Trace: [ 45.335658][ T4068] [ 45.335668][ T4068] __dump_stack+0x1d/0x30 [ 45.335692][ T4068] dump_stack_lvl+0xe8/0x140 [ 45.335729][ T4068] dump_stack+0x15/0x1b [ 45.335769][ T4068] should_fail_ex+0x265/0x280 [ 45.335809][ T4068] should_fail+0xb/0x20 [ 45.335885][ T4068] should_fail_usercopy+0x1a/0x20 [ 45.335910][ T4068] _copy_to_user+0x20/0xa0 [ 45.335939][ T4068] simple_read_from_buffer+0xb5/0x130 [ 45.335992][ T4068] proc_fail_nth_read+0x10e/0x150 [ 45.336030][ T4068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 45.336074][ T4068] vfs_read+0x1a8/0x770 [ 45.336105][ T4068] ? __rcu_read_unlock+0x4f/0x70 [ 45.336130][ T4068] ? __fget_files+0x184/0x1c0 [ 45.336159][ T4068] ksys_read+0xda/0x1a0 [ 45.336185][ T4068] __x64_sys_read+0x40/0x50 [ 45.336239][ T4068] x64_sys_call+0x27c0/0x3000 [ 45.336266][ T4068] do_syscall_64+0xd2/0x200 [ 45.336298][ T4068] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.336332][ T4068] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 45.336408][ T4068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.336430][ T4068] RIP: 0033:0x7f94020bd9dc [ 45.336450][ T4068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 45.336473][ T4068] RSP: 002b:00007f9400b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 45.336498][ T4068] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020bd9dc [ 45.336514][ T4068] RDX: 000000000000000f RSI: 00007f9400b270a0 RDI: 0000000000000008 [ 45.336582][ T4068] RBP: 00007f9400b27090 R08: 0000000000000000 R09: 0000000000000000 [ 45.336598][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.336614][ T4068] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 45.336664][ T4068] [ 45.338767][ T4066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.551032][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.556080][ T4066] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 45.585576][ T4066] EXT4-fs (loop1): Remounting filesystem read-only [ 45.643165][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.654301][ T4075] loop2: detected capacity change from 0 to 1024 [ 45.663511][ T4075] EXT4-fs: Ignoring removed orlov option [ 45.671228][ T4077] sctp: [Deprecated]: syz.0.191 (pid 4077) Use of int in max_burst socket option. [ 45.671228][ T4077] Use struct sctp_assoc_value instead [ 45.693123][ T4075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.737802][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 45.811041][ T4084] loop1: detected capacity change from 0 to 512 [ 45.892971][ T4091] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 45.909889][ T4092] loop1: detected capacity change from 0 to 512 [ 45.917274][ T4091] team0: Port device dummy0 removed [ 45.944206][ T4091] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.960182][ T4094] loop0: detected capacity change from 0 to 1024 [ 45.970577][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.019902][ T4094] EXT4-fs: Ignoring removed orlov option [ 46.037417][ T4092] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.064894][ T4098] loop4: detected capacity change from 0 to 1024 [ 46.073015][ T4098] EXT4-fs: Ignoring removed orlov option [ 46.080323][ T4094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.093657][ T4092] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.197: corrupted inode contents [ 46.107696][ T4101] netlink: 'syz.3.200': attribute type 13 has an invalid length. [ 46.120159][ T4092] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.197: mark_inode_dirty error [ 46.133651][ T4098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.148784][ T4092] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.197: corrupted inode contents [ 46.212448][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.408299][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.435558][ T4113] loop3: detected capacity change from 0 to 128 [ 46.515290][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.572508][ T4120] FAULT_INJECTION: forcing a failure. [ 46.572508][ T4120] name failslab, interval 1, probability 0, space 0, times 0 [ 46.585369][ T4120] CPU: 1 UID: 0 PID: 4120 Comm: syz.2.207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.585479][ T4120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.585496][ T4120] Call Trace: [ 46.585503][ T4120] [ 46.585513][ T4120] __dump_stack+0x1d/0x30 [ 46.585540][ T4120] dump_stack_lvl+0xe8/0x140 [ 46.585565][ T4120] dump_stack+0x15/0x1b [ 46.585707][ T4120] should_fail_ex+0x265/0x280 [ 46.585754][ T4120] should_failslab+0x8c/0xb0 [ 46.585782][ T4120] kmem_cache_alloc_noprof+0x50/0x480 [ 46.585814][ T4120] ? getname_flags+0x80/0x3b0 [ 46.585852][ T4120] getname_flags+0x80/0x3b0 [ 46.585891][ T4120] __se_sys_newstat+0x4b/0x280 [ 46.585943][ T4120] ? fput+0x8f/0xc0 [ 46.585997][ T4120] ? arch_syscall_is_vdso_sigreturn+0xc6/0x110 [ 46.586034][ T4120] ? syscall_user_dispatch+0x85/0xf0 [ 46.586105][ T4120] __x64_sys_newstat+0x31/0x40 [ 46.586141][ T4120] x64_sys_call+0x73e/0x3000 [ 46.586193][ T4120] do_syscall_64+0xd2/0x200 [ 46.586223][ T4120] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.586334][ T4120] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.586435][ T4120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.586457][ T4120] RIP: 0033:0x7f91f36fefc9 [ 46.586497][ T4120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.586521][ T4120] RSP: 002b:00007f91f2167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 46.586545][ T4120] RAX: ffffffffffffffda RBX: 00007f91f3955fa0 RCX: 00007f91f36fefc9 [ 46.586562][ T4120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 46.586600][ T4120] RBP: 00007f91f2167090 R08: 0000000000000000 R09: 0000000000000000 [ 46.586613][ T4120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.586624][ T4120] R13: 00007f91f3956038 R14: 00007f91f3955fa0 R15: 00007ffe9a381d38 [ 46.586649][ T4120] [ 46.594617][ T4123] sctp: [Deprecated]: syz.0.208 (pid 4123) Use of int in max_burst socket option. [ 46.594617][ T4123] Use struct sctp_assoc_value instead [ 46.800247][ T4126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 46.816996][ T4129] netlink: 3 bytes leftover after parsing attributes in process `syz.2.210'. [ 46.826291][ T4129] 1ªX¹¦À: renamed from 60ªX¹¦À [ 46.833321][ T4129] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 46.862720][ T4130] loop1: detected capacity change from 0 to 512 [ 46.874261][ T4130] EXT4-fs: test_dummy_encryption option not supported [ 46.880228][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.984931][ T4139] netlink: 'syz.3.214': attribute type 2 has an invalid length. [ 47.048236][ T4147] loop4: detected capacity change from 0 to 512 [ 47.104695][ T4151] sctp: [Deprecated]: syz.4.220 (pid 4151) Use of int in max_burst socket option. [ 47.104695][ T4151] Use struct sctp_assoc_value instead [ 47.129192][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 47.142570][ T4151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 47.153915][ T4154] process 'syz.0.216' launched '/dev/fd/9' with NULL argv: empty string added [ 47.174693][ T4153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.191807][ T4157] loop1: detected capacity change from 0 to 128 [ 47.200009][ T4158] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.251568][ T4160] loop4: detected capacity change from 0 to 1024 [ 47.278844][ T4153] loop3: detected capacity change from 0 to 512 [ 47.279893][ T4160] EXT4-fs: inline encryption not supported [ 47.291526][ T4153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.333685][ T4153] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.221: bad orphan inode 16 [ 47.354676][ T4153] ext4_test_bit(bit=15, block=4) = 0 [ 47.360133][ T4153] EXT4-fs (loop3): 1 orphan inode deleted [ 47.366970][ T4160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.389004][ T4153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.436549][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.522341][ T4165] loop4: detected capacity change from 0 to 1024 [ 47.534553][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.536096][ T4165] EXT4-fs: Ignoring removed orlov option [ 47.563430][ T4165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.624376][ T4170] sctp: [Deprecated]: syz.3.226 (pid 4170) Use of int in max_burst socket option. [ 47.624376][ T4170] Use struct sctp_assoc_value instead [ 47.641095][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 47.667047][ T4174] loop1: detected capacity change from 0 to 128 [ 47.791118][ T4178] loop3: detected capacity change from 0 to 512 [ 47.812516][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 47.821441][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 47.867521][ T4181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 47.958336][ T4189] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 47.985038][ T4188] loop0: detected capacity change from 0 to 128 [ 48.004493][ T4181] tipc: Started in network mode [ 48.009494][ T4181] tipc: Node identity 4ed15043e1a4, cluster identity 4711 [ 48.012932][ T4192] loop3: detected capacity change from 0 to 1024 [ 48.016810][ T4181] tipc: Enabled bearer , priority 0 [ 48.050269][ T4192] EXT4-fs: inline encryption not supported [ 48.082687][ T4181] syzkaller0: MTU too low for tipc bearer [ 48.088542][ T4181] tipc: Disabling bearer [ 48.118258][ T4192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.162402][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.183314][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.193623][ T4197] random: crng reseeded on system resumption [ 48.233867][ T4202] tipc: Enabling of bearer rejected, failed to enable media [ 48.258640][ T4202] loop3: detected capacity change from 0 to 512 [ 48.310926][ T4209] sctp: [Deprecated]: syz.4.240 (pid 4209) Use of int in max_burst socket option. [ 48.310926][ T4209] Use struct sctp_assoc_value instead [ 48.322212][ T4210] loop0: detected capacity change from 0 to 1024 [ 48.332787][ T4202] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.341935][ T4202] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 48.353997][ T4202] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.360928][ T4210] EXT4-fs: Ignoring removed orlov option [ 48.371487][ T4202] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.236: bad orphan inode 15 [ 48.382840][ T4202] ext4_test_bit(bit=14, block=18) = 1 [ 48.388310][ T4202] is_bad_inode(inode)=0 [ 48.392633][ T4202] NEXT_ORPHAN(inode)=1023 [ 48.397031][ T4202] max_ino=32 [ 48.400238][ T4202] i_nlink=0 [ 48.404415][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.408020][ T4202] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2967: inode #15: comm syz.3.236: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 48.433855][ T4202] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 48.443528][ T4202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.456492][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.481927][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.514906][ T4217] loop3: detected capacity change from 0 to 512 [ 48.537410][ T4219] FAULT_INJECTION: forcing a failure. [ 48.537410][ T4219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.541504][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 48.541527][ T29] audit: type=1326 audit(1760965949.747:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.550628][ T4219] CPU: 0 UID: 0 PID: 4219 Comm: syz.4.244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.550664][ T4219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.550758][ T4219] Call Trace: [ 48.550768][ T4219] [ 48.550779][ T4219] __dump_stack+0x1d/0x30 [ 48.550810][ T4219] dump_stack_lvl+0xe8/0x140 [ 48.550905][ T4219] dump_stack+0x15/0x1b [ 48.550929][ T4219] should_fail_ex+0x265/0x280 [ 48.550990][ T4219] should_fail+0xb/0x20 [ 48.551034][ T4219] should_fail_usercopy+0x1a/0x20 [ 48.551064][ T4219] _copy_from_user+0x1c/0xb0 [ 48.551101][ T4219] do_ipv6_setsockopt+0x124/0x2160 [ 48.551209][ T4219] ? kstrtoull+0x111/0x140 [ 48.551255][ T4219] ? avc_has_perm_noaudit+0x1b1/0x200 [ 48.551326][ T4219] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 48.551389][ T4219] ipv6_setsockopt+0x59/0x130 [ 48.551473][ T4219] udpv6_setsockopt+0x99/0xb0 [ 48.551502][ T4219] sock_common_setsockopt+0x69/0x80 [ 48.551525][ T4219] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 48.551554][ T4219] __sys_setsockopt+0x184/0x200 [ 48.551675][ T4219] __x64_sys_setsockopt+0x64/0x80 [ 48.551718][ T4219] x64_sys_call+0x20ec/0x3000 [ 48.551748][ T4219] do_syscall_64+0xd2/0x200 [ 48.551819][ T4219] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.551861][ T4219] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 48.551895][ T4219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.551925][ T4219] RIP: 0033:0x7f94020befc9 [ 48.552005][ T4219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.552031][ T4219] RSP: 002b:00007f9400b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 48.552058][ T4219] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020befc9 [ 48.552077][ T4219] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 48.552097][ T4219] RBP: 00007f9400b27090 R08: 0000000000000511 R09: 0000000000000000 [ 48.552171][ T4219] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 48.552189][ T4219] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 48.552218][ T4219] [ 48.714590][ T4226] loop4: detected capacity change from 0 to 1024 [ 48.716694][ T29] audit: type=1326 audit(1760965949.747:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.722008][ T4226] EXT4-fs: inline encryption not supported [ 48.741038][ T29] audit: type=1326 audit(1760965949.747:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.776484][ T4226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.781650][ T29] audit: type=1326 audit(1760965949.747:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.800855][ T4226] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, [ 48.822401][ T29] audit: type=1326 audit(1760965949.747:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.822443][ T29] audit: type=1326 audit(1760965949.747:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.822477][ T29] audit: type=1326 audit(1760965949.747:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.828296][ T4226] inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 48.851674][ T29] audit: type=1326 audit(1760965949.747:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 48.865442][ T4226] EXT4-fs (loop4): Remounting filesystem read-only [ 48.887563][ T29] audit: type=1326 audit(1760965949.747:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd0672f0e5c code=0x7ffc0000 [ 48.887655][ T29] audit: type=1326 audit(1760965949.747:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4216 comm="syz.3.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 49.065286][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.083804][ T4231] loop1: detected capacity change from 0 to 128 [ 49.182192][ T4241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.191852][ T4241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.202966][ C0] hrtimer: interrupt took 28258 ns [ 49.207057][ T4237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4237 comm=syz.4.248 [ 49.250690][ T4237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.328559][ T4246] loop3: detected capacity change from 0 to 512 [ 49.335301][ T4246] EXT4-fs: Ignoring removed oldalloc option [ 49.357092][ T4246] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 49.373633][ T4246] EXT4-fs: error: could not find journal device path [ 49.549456][ T4267] loop3: detected capacity change from 0 to 512 [ 49.571311][ T4256] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 49.607609][ T4269] loop1: detected capacity change from 0 to 128 [ 49.608444][ T4256] tipc: Started in network mode [ 49.618836][ T4256] tipc: Node identity 0eea8d47c507, cluster identity 4711 [ 49.626061][ T4256] tipc: Enabled bearer , priority 0 [ 49.636770][ T4267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.644200][ T4256] syzkaller0: MTU too low for tipc bearer [ 49.655124][ T4256] tipc: Disabling bearer [ 49.704623][ T4267] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.743435][ T4267] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.261: corrupted inode contents [ 49.793187][ T4267] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.261: mark_inode_dirty error [ 49.819960][ T4250] lo speed is unknown, defaulting to 1000 [ 49.835557][ T4267] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.261: corrupted inode contents [ 49.896770][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.961121][ T4282] loop3: detected capacity change from 0 to 1024 [ 49.969064][ T4282] EXT4-fs: Ignoring removed orlov option [ 49.987442][ T4282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.057573][ T4286] random: crng reseeded on system resumption [ 50.096043][ T4286] ALSA: seq fatal error: cannot create timer (-19) [ 50.278366][ T4296] __nla_validate_parse: 18 callbacks suppressed [ 50.278407][ T4296] netlink: 32 bytes leftover after parsing attributes in process `syz.4.269'. [ 50.311132][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.352357][ T4298] FAULT_INJECTION: forcing a failure. [ 50.352357][ T4298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.365724][ T4298] CPU: 0 UID: 0 PID: 4298 Comm: syz.2.272 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.365760][ T4298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 50.365776][ T4298] Call Trace: [ 50.365784][ T4298] [ 50.365793][ T4298] __dump_stack+0x1d/0x30 [ 50.365881][ T4298] dump_stack_lvl+0xe8/0x140 [ 50.365956][ T4298] dump_stack+0x15/0x1b [ 50.365977][ T4298] should_fail_ex+0x265/0x280 [ 50.366023][ T4298] should_fail+0xb/0x20 [ 50.366063][ T4298] should_fail_usercopy+0x1a/0x20 [ 50.366161][ T4298] _copy_to_user+0x20/0xa0 [ 50.366193][ T4298] simple_read_from_buffer+0xb5/0x130 [ 50.366238][ T4298] proc_fail_nth_read+0x10e/0x150 [ 50.366278][ T4298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.366315][ T4298] vfs_read+0x1a8/0x770 [ 50.366343][ T4298] ? __rcu_read_unlock+0x4f/0x70 [ 50.366401][ T4298] ? __fget_files+0x184/0x1c0 [ 50.366447][ T4298] ksys_read+0xda/0x1a0 [ 50.366557][ T4298] __x64_sys_read+0x40/0x50 [ 50.366587][ T4298] x64_sys_call+0x27c0/0x3000 [ 50.366616][ T4298] do_syscall_64+0xd2/0x200 [ 50.366700][ T4298] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.366732][ T4298] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 50.366789][ T4298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.366818][ T4298] RIP: 0033:0x7f91f36fd9dc [ 50.366902][ T4298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.366921][ T4298] RSP: 002b:00007f91f2167030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.366964][ T4298] RAX: ffffffffffffffda RBX: 00007f91f3955fa0 RCX: 00007f91f36fd9dc [ 50.366977][ T4298] RDX: 000000000000000f RSI: 00007f91f21670a0 RDI: 0000000000000007 [ 50.366990][ T4298] RBP: 00007f91f2167090 R08: 0000000000000000 R09: 0000000000000000 [ 50.367063][ T4298] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 50.367075][ T4298] R13: 00007f91f3956038 R14: 00007f91f3955fa0 R15: 00007ffe9a381d38 [ 50.367096][ T4298] [ 50.606838][ T4304] loop3: detected capacity change from 0 to 512 [ 50.617942][ T4304] EXT4-fs: Ignoring removed oldalloc option [ 50.624082][ T4304] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 50.640622][ T4304] EXT4-fs: error: could not find journal device path [ 50.654347][ T4307] loop2: detected capacity change from 0 to 512 [ 50.675293][ T4309] loop0: detected capacity change from 0 to 512 [ 50.701548][ T4307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.716229][ T4309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.753109][ T4307] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.757643][ T4309] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.806223][ T4309] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.275: corrupted inode contents [ 50.832897][ T4307] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.274: corrupted inode contents [ 50.833829][ T4309] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.275: mark_inode_dirty error [ 50.845307][ T4307] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.274: mark_inode_dirty error [ 50.868101][ T4307] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.274: corrupted inode contents [ 50.890014][ T4321] loop3: detected capacity change from 0 to 512 [ 50.914990][ T4309] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.275: corrupted inode contents [ 50.940497][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.947852][ T4325] loop1: detected capacity change from 0 to 1024 [ 50.959246][ T4325] EXT4-fs: Ignoring removed orlov option [ 50.974538][ T4325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.996695][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.005578][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.042155][ T4330] netlink: 32 bytes leftover after parsing attributes in process `syz.2.281'. [ 51.094978][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.106305][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.156783][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 51.182030][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.190944][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.202272][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.233884][ T4340] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 51.255002][ T4340] tipc: Enabled bearer , priority 0 [ 51.263106][ T4340] syzkaller0: MTU too low for tipc bearer [ 51.268911][ T4340] tipc: Disabling bearer [ 51.329191][ T4328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 51.356423][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.360884][ T4347] veth2: entered promiscuous mode [ 51.370500][ T4347] veth2: entered allmulticast mode [ 51.437804][ T4353] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:0 [ 51.492324][ T4355] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.564190][ T4355] loop2: detected capacity change from 0 to 1024 [ 51.576722][ T4360] loop1: detected capacity change from 0 to 512 [ 51.590706][ T4355] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.601742][ T4355] EXT4-fs (loop2): group descriptors corrupted! [ 51.658920][ T4355] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 51.668802][ T4362] lo speed is unknown, defaulting to 1000 [ 51.674649][ T4362] lo speed is unknown, defaulting to 1000 [ 51.685892][ T4362] lo speed is unknown, defaulting to 1000 [ 51.692844][ T4362] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.709581][ T4362] lo speed is unknown, defaulting to 1000 [ 51.734448][ T4365] loop1: detected capacity change from 0 to 512 [ 51.748684][ T4362] lo speed is unknown, defaulting to 1000 [ 51.760516][ T4362] lo speed is unknown, defaulting to 1000 [ 51.785428][ T4362] lo speed is unknown, defaulting to 1000 [ 51.798366][ T4365] loop1: detected capacity change from 0 to 512 [ 51.819490][ T4362] lo speed is unknown, defaulting to 1000 [ 51.835904][ T4362] lo speed is unknown, defaulting to 1000 [ 51.864448][ T4362] program syz.1.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.887103][ T4373] loop4: detected capacity change from 0 to 512 [ 51.970261][ T4382] loop2: detected capacity change from 0 to 1024 [ 51.981677][ T4380] lo speed is unknown, defaulting to 1000 [ 51.992675][ T4385] loop4: detected capacity change from 0 to 128 [ 52.001770][ T4382] EXT4-fs: Ignoring removed orlov option [ 52.029835][ T4382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.030414][ T4384] lo speed is unknown, defaulting to 1000 [ 52.054957][ T4380] lo speed is unknown, defaulting to 1000 [ 52.100408][ T4384] lo speed is unknown, defaulting to 1000 [ 52.426749][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.481330][ T4398] loop2: detected capacity change from 0 to 512 [ 52.528169][ T4398] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.305: error while reading EA inode 32 err=-116 [ 52.581858][ T4398] EXT4-fs (loop2): Remounting filesystem read-only [ 52.603039][ T4398] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.643275][ T4398] EXT4-fs (loop2): 1 orphan inode deleted [ 52.654086][ T4401] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 52.669162][ T4401] tipc: Enabled bearer , priority 0 [ 52.678189][ T4401] syzkaller0: MTU too low for tipc bearer [ 52.683962][ T4401] tipc: Disabling bearer [ 52.798812][ T4413] loop1: detected capacity change from 0 to 1024 [ 52.810868][ T4413] EXT4-fs: Ignoring removed orlov option [ 52.835864][ T4417] loop3: detected capacity change from 0 to 1024 [ 52.842597][ T4417] EXT4-fs: inline encryption not supported [ 52.867019][ T4417] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 52.882562][ T4417] EXT4-fs (loop3): Remounting filesystem read-only [ 52.959786][ T4430] siw: device registration error -23 [ 52.967410][ T4428] sctp: [Deprecated]: syz.2.315 (pid 4428) Use of int in max_burst socket option. [ 52.967410][ T4428] Use struct sctp_assoc_value instead [ 52.971358][ T4430] loop3: detected capacity change from 0 to 512 [ 53.003234][ T4430] program syz.3.316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.043488][ T4432] loop3: detected capacity change from 0 to 1024 [ 53.050375][ T4432] EXT4-fs: Ignoring removed orlov option [ 53.219081][ T4442] loop1: detected capacity change from 0 to 512 [ 53.287027][ T4442] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.344276][ T4452] vhci_hcd: invalid port number 254 [ 53.349583][ T4452] vhci_hcd: default hub control req: 050d v0004 i00fe l0 [ 53.387385][ T4454] vhci_hcd: invalid port number 254 [ 53.392736][ T4454] vhci_hcd: default hub control req: 050d v0004 i00fe l0 [ 53.456956][ T4462] netlink: 'syz.2.329': attribute type 13 has an invalid length. [ 53.513771][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.521170][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.533540][ T4466] loop1: detected capacity change from 0 to 512 [ 53.540514][ T4466] EXT4-fs: Ignoring removed oldalloc option [ 53.546755][ T4466] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 53.560709][ T4468] loop4: detected capacity change from 0 to 1024 [ 53.563397][ T4466] EXT4-fs: error: could not find journal device path [ 53.579099][ T4468] EXT4-fs: Ignoring removed orlov option [ 53.616557][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 53.616574][ T29] audit: type=1326 audit(1760965954.837:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.642128][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.657304][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.668872][ T4465] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 53.679454][ T29] audit: type=1326 audit(1760965954.897:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.702934][ T29] audit: type=1326 audit(1760965954.897:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.729008][ T29] audit: type=1326 audit(1760965954.947:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.752420][ T29] audit: type=1326 audit(1760965954.947:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.775910][ T29] audit: type=1326 audit(1760965954.947:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.799881][ T29] audit: type=1326 audit(1760965954.947:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.823604][ T29] audit: type=1326 audit(1760965954.947:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.847226][ T29] audit: type=1326 audit(1760965954.947:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.870897][ T29] audit: type=1326 audit(1760965954.947:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0672eefc9 code=0x7ffc0000 [ 53.887147][ T4473] loop0: detected capacity change from 0 to 512 [ 53.906658][ T4475] netlink: 'syz.1.332': attribute type 10 has an invalid length. [ 53.946228][ T4465] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 53.959758][ T3462] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.986787][ T3462] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.015611][ T3462] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.030541][ T4477] loop1: detected capacity change from 0 to 1024 [ 54.041336][ T3462] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.052222][ T4477] EXT4-fs: Ignoring removed orlov option [ 54.066209][ T4479] loop2: detected capacity change from 0 to 128 [ 54.093654][ T4484] loop0: detected capacity change from 0 to 512 [ 54.116801][ T4453] loop3: detected capacity change from 0 to 128 [ 54.124137][ T4453] vfat: Unknown parameter 'ÿ' [ 54.125524][ T4484] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.337: error while reading EA inode 32 err=-116 [ 54.223403][ T4484] EXT4-fs (loop0): Remounting filesystem read-only [ 54.235874][ T4484] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 54.255806][ T4484] EXT4-fs (loop0): 1 orphan inode deleted [ 54.368214][ T4491] loop2: detected capacity change from 0 to 1024 [ 54.385631][ T4491] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.396696][ T4491] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.415480][ T4491] JBD2: no valid journal superblock found [ 54.421273][ T4491] EXT4-fs (loop2): Could not load journal inode [ 54.432003][ T4491] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 54.491621][ T4499] 0ªX¹¦À: renamed from caif0 [ 54.499987][ T4499] 0ªX¹¦À: entered allmulticast mode [ 54.505525][ T4499] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.609115][ T4507] loop1: detected capacity change from 0 to 512 [ 54.641728][ T4510] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 54.762664][ T4519] loop1: detected capacity change from 0 to 512 [ 54.779410][ T4519] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.350: error while reading EA inode 32 err=-116 [ 54.791974][ T4519] EXT4-fs (loop1): Remounting filesystem read-only [ 54.798654][ T4519] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 54.809076][ T4519] EXT4-fs (loop1): 1 orphan inode deleted [ 54.813635][ T4517] random: crng reseeded on system resumption [ 54.840985][ T4517] ALSA: seq fatal error: cannot create timer (-19) [ 54.859492][ T4524] loop1: detected capacity change from 0 to 1024 [ 54.866319][ T4524] EXT4-fs: Ignoring removed orlov option [ 55.131957][ T4536] loop1: detected capacity change from 0 to 1024 [ 55.140713][ T4536] EXT4-fs: inline encryption not supported [ 55.189457][ T4536] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 55.204498][ T4536] EXT4-fs (loop1): Remounting filesystem read-only [ 55.265633][ T4540] loop1: detected capacity change from 0 to 512 [ 55.291937][ T4540] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.293228][ T4544] netlink: 'syz.0.357': attribute type 10 has an invalid length. [ 55.311432][ T4540] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.356: corrupted inode contents [ 55.343814][ T4544] team0: Port device dummy0 removed [ 55.359232][ T4540] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.356: mark_inode_dirty error [ 55.360699][ T4544] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.393790][ T4548] loop2: detected capacity change from 0 to 512 [ 55.401360][ T4540] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.356: corrupted inode contents [ 55.415291][ T4550] loop4: detected capacity change from 0 to 128 [ 55.466257][ T4553] loop0: detected capacity change from 0 to 512 [ 55.491861][ T4553] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.361: error while reading EA inode 32 err=-116 [ 55.525930][ T4553] EXT4-fs (loop0): Remounting filesystem read-only [ 55.532485][ T4553] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 55.547072][ T4553] EXT4-fs (loop0): 1 orphan inode deleted [ 55.575367][ T4558] __nla_validate_parse: 24 callbacks suppressed [ 55.575382][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 55.596817][ T4553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 55.620633][ T4562] loop1: detected capacity change from 0 to 128 [ 55.630260][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 55.664948][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 55.673812][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 55.698768][ T4566] siw: device registration error -23 [ 55.717523][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 55.722188][ T4568] netlink: 'syz.0.368': attribute type 13 has an invalid length. [ 55.756637][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 55.765596][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 55.770322][ T4564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 55.779584][ T4572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 55.808863][ T4576] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.826291][ T4576] tipc: Enabled bearer , priority 0 [ 55.833930][ T4576] syzkaller0: MTU too low for tipc bearer [ 55.839743][ T4576] tipc: Disabling bearer [ 55.858283][ T4574] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 55.875319][ T4583] 0ªX¹¦À: renamed from caif0 [ 55.881956][ T4583] 0ªX¹¦À: entered allmulticast mode [ 55.887294][ T4583] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 55.914403][ T4564] tipc: Enabled bearer , priority 0 [ 55.922603][ T4564] syzkaller0: MTU too low for tipc bearer [ 55.928447][ T4564] tipc: Disabling bearer [ 55.988358][ T4589] loop1: detected capacity change from 0 to 512 [ 56.002508][ T4590] loop4: detected capacity change from 0 to 512 [ 56.009564][ T4590] EXT4-fs: Ignoring removed oldalloc option [ 56.020380][ T4590] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 56.022228][ T4589] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.036946][ T4590] EXT4-fs: error: could not find journal device path [ 56.072326][ T4589] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.372: corrupted inode contents [ 56.086830][ T4589] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.372: mark_inode_dirty error [ 56.098458][ T4594] sctp: [Deprecated]: syz.4.373 (pid 4594) Use of int in max_burst socket option. [ 56.098458][ T4594] Use struct sctp_assoc_value instead [ 56.098561][ T4589] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.372: corrupted inode contents [ 56.154086][ T4597] sctp: [Deprecated]: syz.1.374 (pid 4597) Use of int in max_burst socket option. [ 56.154086][ T4597] Use struct sctp_assoc_value instead [ 56.222604][ T4599] rdma_op ffff88811b25b980 conn xmit_rdma 0000000000000000 [ 56.232235][ T4599] vhci_hcd: default hub control req: 0314 v001b i0006 l0 [ 56.275032][ T4604] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 56.284921][ T4603] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 56.294522][ T4604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.302618][ T4604] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 56.311795][ T4604] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 56.311990][ T4607] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 56.322794][ T4604] batadv0: entered promiscuous mode [ 56.332667][ T4604] batadv0: entered allmulticast mode [ 56.338477][ T4604] bond0: (slave batadv0): Releasing backup interface [ 56.345685][ T4604] bridge0: port 3(batadv0) entered blocking state [ 56.352123][ T4604] bridge0: port 3(batadv0) entered disabled state [ 56.380052][ T4609] loop1: detected capacity change from 0 to 1024 [ 56.387020][ T4609] EXT4-fs: inline encryption not supported [ 56.412472][ T4612] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 56.422051][ T4609] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 56.425637][ T4612] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 56.437636][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 56.445747][ T4612] SELinux: failed to load policy [ 56.454831][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 56.455499][ T4609] EXT4-fs (loop1): Remounting filesystem read-only [ 56.594841][ T4620] sctp: [Deprecated]: syz.2.383 (pid 4620) Use of int in max_burst socket option. [ 56.594841][ T4620] Use struct sctp_assoc_value instead [ 56.631117][ T4626] loop3: detected capacity change from 0 to 512 [ 56.647052][ T4628] FAULT_INJECTION: forcing a failure. [ 56.647052][ T4628] name failslab, interval 1, probability 0, space 0, times 0 [ 56.654008][ T4626] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.659875][ T4628] CPU: 1 UID: 0 PID: 4628 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.659916][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.659934][ T4628] Call Trace: [ 56.660008][ T4628] [ 56.660019][ T4628] __dump_stack+0x1d/0x30 [ 56.660050][ T4628] dump_stack_lvl+0xe8/0x140 [ 56.660078][ T4628] dump_stack+0x15/0x1b [ 56.660102][ T4628] should_fail_ex+0x265/0x280 [ 56.660200][ T4628] ? audit_log_d_path+0x8d/0x150 [ 56.660226][ T4628] should_failslab+0x8c/0xb0 [ 56.660265][ T4628] __kmalloc_cache_noprof+0x4c/0x4a0 [ 56.660340][ T4628] audit_log_d_path+0x8d/0x150 [ 56.660394][ T4628] audit_log_d_path_exe+0x42/0x70 [ 56.660423][ T4628] audit_log_task+0x1e9/0x250 [ 56.660473][ T4628] audit_seccomp+0x61/0x100 [ 56.660539][ T4628] ? __seccomp_filter+0x82d/0x1250 [ 56.660576][ T4628] __seccomp_filter+0x83e/0x1250 [ 56.660616][ T4628] ? __list_add_valid_or_report+0x38/0xe0 [ 56.660695][ T4628] ? free_frozen_page_commit+0x6f/0x2f0 [ 56.660748][ T4628] __secure_computing+0x82/0x150 [ 56.660785][ T4628] syscall_trace_enter+0xcf/0x1e0 [ 56.660944][ T4628] do_syscall_64+0xac/0x200 [ 56.660989][ T4628] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.661027][ T4628] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.661093][ T4628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.661123][ T4628] RIP: 0033:0x7f94020bd9dc [ 56.661144][ T4628] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 56.661202][ T4628] RSP: 002b:00007f9400b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 56.661231][ T4628] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020bd9dc [ 56.661252][ T4628] RDX: 000000000000000f RSI: 00007f9400b270a0 RDI: 0000000000000005 [ 56.661346][ T4628] RBP: 00007f9400b27090 R08: 0000000000000000 R09: 0000000000000000 [ 56.661390][ T4628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.661407][ T4628] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 56.661435][ T4628] [ 56.714224][ T4633] loop1: detected capacity change from 0 to 512 [ 56.729641][ T4626] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.385: corrupted inode contents [ 56.737133][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 56.748174][ T4626] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.385: mark_inode_dirty error [ 56.807549][ T4633] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 56.837307][ T4626] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.385: corrupted inode contents [ 56.843147][ T4633] EXT4-fs: error: could not find journal device path [ 57.040856][ T4640] siw: device registration error -23 [ 57.059735][ T4648] loop1: detected capacity change from 0 to 128 [ 57.100572][ T3300] udevd[3300]: symlink '../../loop1' '/dev/disk/by-diskseq/270.tmp-b7:1' failed: Read-only file system [ 57.113247][ T4638] loop2: detected capacity change from 0 to 128 [ 57.132871][ T4638] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.150563][ T4656] loop4: detected capacity change from 0 to 1024 [ 57.157282][ T4657] loop0: detected capacity change from 0 to 164 [ 57.159868][ T4656] EXT4-fs: inline encryption not supported [ 57.169061][ T3300] udevd[3300]: symlink '../../loop4' '/dev/disk/by-diskseq/272.tmp-b7:4' failed: Read-only file system [ 57.188325][ T4638] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.203105][ T3300] udevd[3300]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 57.226405][ T3677] udevd[3677]: symlink '../../loop2' '/dev/disk/by-diskseq/271.tmp-b7:2' failed: Read-only file system [ 57.259441][ T3462] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.298824][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/271.tmp-b7:2' failed: Read-only file system [ 57.322776][ T3666] udevd[3666]: symlink '../../loop0' '/dev/disk/by-diskseq/273.tmp-b7:0' failed: Read-only file system [ 57.333753][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/271.tmp-b7:2' failed: Read-only file system [ 57.345900][ T3666] udevd[3666]: symlink '../../loop0' '/dev/disk/by-label/CDROM.tmp-b7:0' failed: Read-only file system [ 57.358444][ T3666] udevd[3666]: symlink '../../loop0' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:0' failed: Read-only file system [ 57.358906][ T4656] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 57.378912][ T3677] udevd[3677]: symlink '../../loop0' '/dev/disk/by-diskseq/273.tmp-b7:0' failed: Read-only file system [ 57.405017][ T4656] EXT4-fs (loop4): Remounting filesystem read-only [ 57.502117][ T4650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.522351][ T4666] 0ªX¹¦À: renamed from 61ªX¹¦À [ 57.529567][ T4666] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 57.574606][ T4676] loop0: detected capacity change from 0 to 512 [ 57.583930][ T4676] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.403: error while reading EA inode 32 err=-116 [ 57.605229][ T4676] EXT4-fs (loop0): Remounting filesystem read-only [ 57.612407][ T4676] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 57.673448][ T4676] EXT4-fs (loop0): 1 orphan inode deleted [ 57.808934][ T4701] loop0: detected capacity change from 0 to 512 [ 57.815848][ T4701] EXT4-fs: Ignoring removed oldalloc option [ 57.821878][ T4701] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 57.838563][ T4701] EXT4-fs: error: could not find journal device path [ 57.958903][ T4715] loop0: detected capacity change from 0 to 512 [ 58.017260][ T4718] lo speed is unknown, defaulting to 1000 [ 58.023529][ T4718] lo speed is unknown, defaulting to 1000 [ 58.241594][ T4733] loop2: detected capacity change from 0 to 1024 [ 58.264183][ T4733] EXT4-fs: Ignoring removed orlov option [ 58.627580][ T29] kauditd_printk_skb: 1544 callbacks suppressed [ 58.627596][ T29] audit: type=1326 audit(1760965959.847:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60330b099 code=0x7ffc0000 [ 58.714866][ T29] audit: type=1326 audit(1760965959.847:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd603365e67 code=0x7ffc0000 [ 58.738231][ T29] audit: type=1326 audit(1760965959.847:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60330b099 code=0x7ffc0000 [ 58.761612][ T29] audit: type=1326 audit(1760965959.847:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd603365e67 code=0x7ffc0000 [ 58.784953][ T29] audit: type=1326 audit(1760965959.847:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60330b099 code=0x7ffc0000 [ 58.808205][ T29] audit: type=1326 audit(1760965959.847:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd603365e67 code=0x7ffc0000 [ 58.831495][ T29] audit: type=1326 audit(1760965959.847:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60330b099 code=0x7ffc0000 [ 58.854778][ T29] audit: type=1326 audit(1760965959.847:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd603365e67 code=0x7ffc0000 [ 58.878042][ T29] audit: type=1326 audit(1760965959.847:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd60330b099 code=0x7ffc0000 [ 58.901312][ T29] audit: type=1326 audit(1760965959.847:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4719 comm="syz.0.409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd603365e67 code=0x7ffc0000 [ 59.039996][ T4770] loop0: detected capacity change from 0 to 512 [ 59.067870][ T4770] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.124172][ T4781] loop3: detected capacity change from 0 to 128 [ 59.132053][ T4767] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 59.132579][ T4775] FAULT_INJECTION: forcing a failure. [ 59.132579][ T4775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.147615][ T4770] EXT4-fs (loop0): 1 truncate cleaned up [ 59.155754][ T4775] CPU: 0 UID: 0 PID: 4775 Comm: syz.4.419 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.155794][ T4775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.155871][ T4775] Call Trace: [ 59.155880][ T4775] [ 59.155890][ T4775] __dump_stack+0x1d/0x30 [ 59.155958][ T4775] dump_stack_lvl+0xe8/0x140 [ 59.155986][ T4775] dump_stack+0x15/0x1b [ 59.156010][ T4775] should_fail_ex+0x265/0x280 [ 59.156061][ T4775] should_fail+0xb/0x20 [ 59.156135][ T4775] should_fail_usercopy+0x1a/0x20 [ 59.156165][ T4775] _copy_to_user+0x20/0xa0 [ 59.156203][ T4775] simple_read_from_buffer+0xb5/0x130 [ 59.156352][ T4775] proc_fail_nth_read+0x10e/0x150 [ 59.156394][ T4775] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 59.156451][ T4775] vfs_read+0x1a8/0x770 [ 59.156482][ T4775] ? __rcu_read_unlock+0x4f/0x70 [ 59.156518][ T4775] ? __fget_files+0x184/0x1c0 [ 59.156557][ T4775] ksys_read+0xda/0x1a0 [ 59.156592][ T4775] __x64_sys_read+0x40/0x50 [ 59.156670][ T4775] x64_sys_call+0x27c0/0x3000 [ 59.156702][ T4775] do_syscall_64+0xd2/0x200 [ 59.156811][ T4775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.156846][ T4775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.156933][ T4775] RIP: 0033:0x7f94020bd9dc [ 59.156956][ T4775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 59.156980][ T4775] RSP: 002b:00007f9400b27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 59.157007][ T4775] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020bd9dc [ 59.157026][ T4775] RDX: 000000000000000f RSI: 00007f9400b270a0 RDI: 000000000000000a [ 59.157040][ T4775] RBP: 00007f9400b27090 R08: 0000000000000000 R09: 0000000000000000 [ 59.157051][ T4775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.157082][ T4775] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 59.157112][ T4775] [ 59.191637][ T4767] tipc: Enabled bearer , priority 0 [ 59.383979][ T4767] syzkaller0: MTU too low for tipc bearer [ 59.389864][ T4767] tipc: Disabling bearer [ 59.402975][ T4795] loop1: detected capacity change from 0 to 128 [ 59.459074][ T4801] loop4: detected capacity change from 0 to 1024 [ 59.469393][ T4801] EXT4-fs: inline encryption not supported [ 59.520392][ T4801] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 59.539199][ T4804] loop0: detected capacity change from 0 to 512 [ 59.571986][ T4804] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.595080][ T4801] EXT4-fs (loop4): Remounting filesystem read-only [ 59.602504][ T4813] loop3: detected capacity change from 0 to 512 [ 59.614038][ T4804] EXT4-fs (loop0): 1 truncate cleaned up [ 59.652039][ T4813] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.822244][ T4833] loop4: detected capacity change from 0 to 512 [ 59.830088][ T4837] loop0: detected capacity change from 0 to 512 [ 59.892788][ T4841] FAULT_INJECTION: forcing a failure. [ 59.892788][ T4841] name failslab, interval 1, probability 0, space 0, times 0 [ 59.905598][ T4841] CPU: 1 UID: 0 PID: 4841 Comm: syz.4.437 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.905704][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.905716][ T4841] Call Trace: [ 59.905723][ T4841] [ 59.905731][ T4841] __dump_stack+0x1d/0x30 [ 59.905816][ T4841] dump_stack_lvl+0xe8/0x140 [ 59.905842][ T4841] dump_stack+0x15/0x1b [ 59.905884][ T4841] should_fail_ex+0x265/0x280 [ 59.905927][ T4841] should_failslab+0x8c/0xb0 [ 59.905962][ T4841] __kvmalloc_node_noprof+0x12e/0x670 [ 59.906001][ T4841] ? alloc_netdev_mqs+0x55d/0xa50 [ 59.906073][ T4841] alloc_netdev_mqs+0x55d/0xa50 [ 59.906113][ T4841] __ip_tunnel_create+0x2bc/0x450 [ 59.906187][ T4841] ? ip_tunnel_find+0x2b5/0x300 [ 59.906225][ T4841] ip_tunnel_ctl+0x38f/0x750 [ 59.906258][ T4841] ipgre_tunnel_ctl+0x22f/0x560 [ 59.906311][ T4841] ip_tunnel_siocdevprivate+0x77/0xe0 [ 59.906401][ T4841] dev_ifsioc+0x8f8/0xaa0 [ 59.906444][ T4841] dev_ioctl+0x78d/0x960 [ 59.906476][ T4841] sock_ioctl+0x593/0x610 [ 59.906499][ T4841] ? __pfx_sock_ioctl+0x10/0x10 [ 59.906523][ T4841] __se_sys_ioctl+0xce/0x140 [ 59.906603][ T4841] __x64_sys_ioctl+0x43/0x50 [ 59.906628][ T4841] x64_sys_call+0x1816/0x3000 [ 59.906653][ T4841] do_syscall_64+0xd2/0x200 [ 59.906689][ T4841] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.906718][ T4841] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.906741][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.906764][ T4841] RIP: 0033:0x7f94020befc9 [ 59.906784][ T4841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.906835][ T4841] RSP: 002b:00007f9400b27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.906859][ T4841] RAX: ffffffffffffffda RBX: 00007f9402315fa0 RCX: 00007f94020befc9 [ 59.906876][ T4841] RDX: 0000200000000280 RSI: 00000000000089f1 RDI: 0000000000000003 [ 59.906892][ T4841] RBP: 00007f9400b27090 R08: 0000000000000000 R09: 0000000000000000 [ 59.906907][ T4841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.906923][ T4841] R13: 00007f9402316038 R14: 00007f9402315fa0 R15: 00007ffde4081b88 [ 59.907023][ T4841] [ 60.164904][ T4843] loop1: detected capacity change from 0 to 128 [ 60.184948][ T4847] loop2: detected capacity change from 0 to 512 [ 60.202967][ T4847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.438: error while reading EA inode 32 err=-116 [ 60.244066][ T4853] sctp: [Deprecated]: syz.4.441 (pid 4853) Use of int in max_burst socket option. [ 60.244066][ T4853] Use struct sctp_assoc_value instead [ 60.264242][ T4847] EXT4-fs (loop2): Remounting filesystem read-only [ 60.271128][ T4847] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 60.284646][ T4847] EXT4-fs (loop2): 1 orphan inode deleted [ 60.417206][ T4858] loop2: detected capacity change from 0 to 512 [ 60.432294][ T4863] loop4: detected capacity change from 0 to 512 [ 60.449875][ T4866] loop0: detected capacity change from 0 to 128 [ 60.458662][ T4858] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.592253][ T4872] loop4: detected capacity change from 0 to 1024 [ 60.602265][ T4872] EXT4-fs: Ignoring removed orlov option [ 60.710168][ T4882] loop3: detected capacity change from 0 to 1024 [ 60.730822][ T4882] EXT4-fs: Ignoring removed orlov option [ 60.861647][ T4889] __nla_validate_parse: 37 callbacks suppressed [ 60.861666][ T4889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 60.982200][ T4896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.459'. [ 61.013690][ T4898] netlink: 144 bytes leftover after parsing attributes in process `syz.4.460'. [ 61.085930][ T4904] loop1: detected capacity change from 0 to 128 [ 61.094680][ T4904] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.112387][ T4907] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.460'. [ 61.129938][ T4904] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.152192][ T4908] netlink: 'syz.2.465': attribute type 10 has an invalid length. [ 61.157417][ T4907] lo speed is unknown, defaulting to 1000 [ 61.168104][ T4907] lo speed is unknown, defaulting to 1000 [ 61.208118][ T3462] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.225809][ T4913] loop2: detected capacity change from 0 to 512 [ 61.283675][ T4918] loop1: detected capacity change from 0 to 512 [ 61.298912][ T4920] loop2: detected capacity change from 0 to 1024 [ 61.306900][ T4920] EXT4-fs: Ignoring removed orlov option [ 61.567509][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 61.577004][ T4927] netlink: 'syz.2.471': attribute type 11 has an invalid length. [ 61.584903][ T4927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.471'. [ 61.600350][ T4927] pim6reg1: entered allmulticast mode [ 61.754540][ T4930] sctp: [Deprecated]: syz.2.472 (pid 4930) Use of int in max_burst socket option. [ 61.754540][ T4930] Use struct sctp_assoc_value instead [ 61.771136][ T4930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 61.896438][ T4934] loop4: detected capacity change from 0 to 1024 [ 61.903154][ T4934] EXT4-fs: Ignoring removed orlov option [ 61.926517][ T4938] sctp: [Deprecated]: syz.2.475 (pid 4938) Use of int in max_burst socket option. [ 61.926517][ T4938] Use struct sctp_assoc_value instead [ 61.943308][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 61.959430][ T4940] loop0: detected capacity change from 0 to 1024 [ 61.966222][ T4940] EXT4-fs: Ignoring removed orlov option [ 62.028402][ T4946] FAULT_INJECTION: forcing a failure. [ 62.028402][ T4946] name failslab, interval 1, probability 0, space 0, times 0 [ 62.041371][ T4946] CPU: 0 UID: 0 PID: 4946 Comm: syz.3.478 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.041425][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.041458][ T4946] Call Trace: [ 62.041467][ T4946] [ 62.041478][ T4946] __dump_stack+0x1d/0x30 [ 62.041499][ T4946] dump_stack_lvl+0xe8/0x140 [ 62.041519][ T4946] dump_stack+0x15/0x1b [ 62.041609][ T4946] should_fail_ex+0x265/0x280 [ 62.041646][ T4946] should_failslab+0x8c/0xb0 [ 62.041674][ T4946] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 62.041707][ T4946] ? __alloc_skb+0x101/0x320 [ 62.041766][ T4946] __alloc_skb+0x101/0x320 [ 62.041796][ T4946] ? audit_log_start+0x342/0x720 [ 62.041822][ T4946] audit_log_start+0x3a0/0x720 [ 62.041850][ T4946] audit_seccomp+0x48/0x100 [ 62.041888][ T4946] ? __seccomp_filter+0x82d/0x1250 [ 62.041978][ T4946] __seccomp_filter+0x83e/0x1250 [ 62.042008][ T4946] ? do_madvise+0x15f/0x190 [ 62.042144][ T4946] __secure_computing+0x82/0x150 [ 62.042177][ T4946] syscall_trace_enter+0xcf/0x1e0 [ 62.042205][ T4946] do_syscall_64+0xac/0x200 [ 62.042311][ T4946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.042346][ T4946] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.042377][ T4946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.042519][ T4946] RIP: 0033:0x7fd0672ed9dc [ 62.042539][ T4946] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.042618][ T4946] RSP: 002b:00007fd065d4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.042643][ T4946] RAX: ffffffffffffffda RBX: 00007fd067545fa0 RCX: 00007fd0672ed9dc [ 62.042657][ T4946] RDX: 000000000000000f RSI: 00007fd065d4f0a0 RDI: 0000000000000006 [ 62.042670][ T4946] RBP: 00007fd065d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.042692][ T4946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.042708][ T4946] R13: 00007fd067546038 R14: 00007fd067545fa0 R15: 00007fff43a91f48 [ 62.042747][ T4946] [ 62.281609][ T3300] udevd[3300]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system [ 62.317100][ T4954] loop3: detected capacity change from 0 to 512 [ 62.347265][ T3677] udevd[3677]: symlink '../../loop3' '/dev/disk/by-diskseq/316.tmp-b7:3' failed: Read-only file system [ 62.360982][ T3677] udevd[3677]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 62.384457][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/326.tmp-b7:3' failed: Read-only file system [ 62.414508][ T4960] loop1: detected capacity change from 0 to 512 [ 62.425389][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 62.454424][ T4954] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.481: error while reading EA inode 32 err=-116 [ 62.481443][ T3677] udevd[3677]: symlink '../../loop2' '/dev/disk/by-diskseq/323.tmp-b7:2' failed: Read-only file system [ 62.489108][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/326.tmp-b7:3' failed: Read-only file system [ 62.494559][ T4963] netlink: 'syz.4.482': attribute type 12 has an invalid length. [ 62.506198][ T3666] udevd[3666]: symlink '../../loop1' '/dev/disk/by-diskseq/322.tmp-b7:1' failed: Read-only file system [ 62.511493][ T4963] netlink: 'syz.4.482': attribute type 29 has an invalid length. [ 62.530438][ T4963] netlink: 148 bytes leftover after parsing attributes in process `syz.4.482'. [ 62.537642][ T3302] udevd[3302]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 62.545768][ T4954] EXT4-fs (loop3): Remounting filesystem read-only [ 62.557479][ T4954] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 62.577978][ T4954] EXT4-fs (loop3): 1 orphan inode deleted [ 62.586567][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 62.598286][ T4962] sctp: [Deprecated]: syz.2.484 (pid 4962) Use of int in max_burst socket option. [ 62.598286][ T4962] Use struct sctp_assoc_value instead [ 62.646632][ T4962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 62.682642][ T4970] netlink: 'syz.3.487': attribute type 10 has an invalid length. [ 62.696964][ T4972] loop1: detected capacity change from 0 to 512 [ 62.704163][ T4970] bond0: (slave dummy0): Releasing backup interface [ 62.712933][ T4970] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 62.722216][ T4970] team0: Failed to send options change via netlink (err -105) [ 62.729811][ T4970] team0: Port device dummy0 added [ 62.756888][ T4972] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.768517][ T4972] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.488: corrupted inode contents [ 62.784976][ T4972] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.488: mark_inode_dirty error [ 62.798870][ T4972] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.488: corrupted inode contents [ 62.824199][ T4968] lo speed is unknown, defaulting to 1000 [ 62.831204][ T4968] lo speed is unknown, defaulting to 1000 [ 62.841607][ T4980] loop3: detected capacity change from 0 to 128 [ 62.919062][ T4991] loop1: detected capacity change from 0 to 1024 [ 62.941001][ T4991] EXT4-fs: Ignoring removed orlov option [ 63.142248][ T4999] 0ªX¹¦À: renamed from 61ªX¹¦À [ 63.161302][ T4999] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 63.253399][ T5007] netlink: 'syz.1.500': attribute type 10 has an invalid length. [ 63.262065][ T5007] bond0: (slave dummy0): Releasing backup interface [ 63.270560][ T5007] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 63.279694][ T5007] team0: Failed to send options change via netlink (err -105) [ 63.287222][ T5007] team0: Port device dummy0 added [ 63.321913][ T5012] sctp: [Deprecated]: syz.1.502 (pid 5012) Use of int in max_burst socket option. [ 63.321913][ T5012] Use struct sctp_assoc_value instead [ 63.361652][ T5014] siw: device registration error -23 [ 63.443401][ T5021] loop1: detected capacity change from 0 to 128 [ 63.615431][ T5026] loop1: detected capacity change from 0 to 512 [ 63.624493][ T5026] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.634520][ T5026] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 63.676553][ T5029] loop0: detected capacity change from 0 to 1024 [ 63.683441][ T5029] EXT4-fs: Ignoring removed orlov option [ 63.803192][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 63.803211][ T29] audit: type=1326 audit(1760965965.017:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f36fefc9 code=0x7ffc0000 [ 63.838011][ T29] audit: type=1326 audit(1760965965.047:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f36fefc9 code=0x7ffc0000 [ 63.861421][ T29] audit: type=1326 audit(1760965965.047:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f91f36fefc9 code=0x7ffc0000 [ 63.884895][ T29] audit: type=1326 audit(1760965965.057:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f36fefc9 code=0x7ffc0000 [ 63.908271][ T29] audit: type=1326 audit(1760965965.057:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5034 comm="syz.2.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91f36fefc9 code=0x7ffc0000 [ 64.013859][ T5045] siw: device registration error -23 [ 64.028181][ T5041] loop3: detected capacity change from 0 to 512 [ 64.043472][ T5047] loop0: detected capacity change from 0 to 1024 [ 64.050639][ T5047] EXT4-fs: inline encryption not supported [ 64.063975][ T5041] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.087218][ T5047] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 64.102366][ T5047] EXT4-fs (loop0): Remounting filesystem read-only [ 64.122897][ T5054] loop3: detected capacity change from 0 to 128 [ 64.130571][ T5054] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.143543][ T5054] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.185592][ T5057] loop0: detected capacity change from 0 to 512 [ 64.200202][ T3462] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.223202][ T5057] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.236617][ T5060] loop4: detected capacity change from 0 to 128 [ 64.252595][ T5064] loop3: detected capacity change from 0 to 1024 [ 64.254069][ T29] audit: type=1107 audit(1760965965.467:3497): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 64.273260][ T5064] EXT4-fs: inline encryption not supported [ 64.289228][ T5057] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.516: corrupted inode contents [ 64.309802][ T5064] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 64.324929][ T5057] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.516: mark_inode_dirty error [ 64.336674][ T5064] EXT4-fs (loop3): Remounting filesystem read-only [ 64.346936][ T5057] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.516: corrupted inode contents [ 64.412882][ T29] audit: type=1326 audit(1760965965.627:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60336efc9 code=0x7ffc0000 [ 64.446915][ T29] audit: type=1326 audit(1760965965.627:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60336efc9 code=0x7ffc0000 [ 64.470374][ T29] audit: type=1326 audit(1760965965.627:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd60336efc9 code=0x7ffc0000 [ 64.493763][ T29] audit: type=1326 audit(1760965965.627:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5070 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60336efc9 code=0x7ffc0000 [ 64.544157][ T5077] loop1: detected capacity change from 0 to 1024 [ 64.550968][ T5077] EXT4-fs: Ignoring removed orlov option [ 64.573897][ T5081] 1ªX¹¦À: renamed from 60ªX¹¦À [ 64.580439][ T5082] sctp: [Deprecated]: syz.4.524 (pid 5082) Use of int in max_burst socket option. [ 64.580439][ T5082] Use struct sctp_assoc_value instead [ 64.601067][ T5081] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 64.874449][ T5089] siw: device registration error -23 [ 64.939790][ T5094] sd 0:0:1:0: device reset [ 65.067318][ T5098] Cannot find add_set index 0 as target [ 65.145346][ T5100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5100 comm=syz.1.529 [ 65.178191][ T5100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=5100 comm=syz.1.529 [ 65.277915][ T5104] loop3: detected capacity change from 0 to 1024 [ 65.337234][ T5104] EXT4-fs: inline encryption not supported [ 65.456442][ T5108] loop0: detected capacity change from 0 to 128 [ 65.477656][ T5108] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.496587][ T5104] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 65.531986][ T5108] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.556281][ T5104] EXT4-fs (loop3): Remounting filesystem read-only [ 65.674103][ T5116] loop3: detected capacity change from 0 to 512 [ 65.698661][ T5116] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.801422][ T5116] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.534: corrupted inode contents [ 65.830753][ T5123] loop4: detected capacity change from 0 to 1024 [ 65.840716][ T5125] loop2: detected capacity change from 0 to 512 [ 65.847955][ T5116] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.534: mark_inode_dirty error [ 65.859876][ T5125] EXT4-fs: Ignoring removed oldalloc option [ 65.869781][ T5123] EXT4-fs: Ignoring removed orlov option [ 65.897685][ T5116] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.534: corrupted inode contents [ 65.910102][ T5125] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 65.926647][ T5125] EXT4-fs: error: could not find journal device path [ 66.025491][ T5132] loop3: detected capacity change from 0 to 512 [ 66.065725][ T5134] netlink: 'syz.2.540': attribute type 21 has an invalid length. [ 66.073517][ T5134] __nla_validate_parse: 9 callbacks suppressed [ 66.073534][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 66.113255][ T5132] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.136542][ T5134] lo speed is unknown, defaulting to 1000 [ 66.142793][ T5134] lo speed is unknown, defaulting to 1000 [ 66.200359][ T5140] netlink: 3 bytes leftover after parsing attributes in process `syz.1.541'. [ 66.209550][ T5140] 0ªX¹¦À: renamed from caif0 [ 66.222682][ T5142] netlink: 'syz.3.542': attribute type 13 has an invalid length. [ 66.241252][ T5140] 0ªX¹¦À: entered allmulticast mode [ 66.246713][ T5140] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 66.278747][ T5145] sctp: [Deprecated]: syz.2.543 (pid 5145) Use of int in max_burst socket option. [ 66.278747][ T5145] Use struct sctp_assoc_value instead [ 66.320346][ T5147] loop3: detected capacity change from 0 to 512 [ 66.400284][ T5153] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 66.438128][ T5156] loop3: detected capacity change from 0 to 512 [ 66.507528][ T5160] loop3: detected capacity change from 0 to 512 [ 66.545645][ T5160] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.575120][ T5160] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.550: corrupted inode contents [ 66.592602][ T5166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 66.602213][ T5160] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.550: mark_inode_dirty error [ 66.615419][ T5160] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.550: corrupted inode contents [ 66.645246][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.654679][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.664103][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.682694][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.691597][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.701515][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.762449][ T5176] loop3: detected capacity change from 0 to 512 [ 66.834503][ T5180] netlink: 'syz.3.556': attribute type 13 has an invalid length. [ 66.842612][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.553'. [ 66.870480][ T5169] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 66.893886][ T5177] lo speed is unknown, defaulting to 1000 [ 66.900022][ T5177] lo speed is unknown, defaulting to 1000 [ 66.927950][ T5169] tipc: Enabled bearer , priority 0 [ 66.946374][ T5169] syzkaller0: MTU too low for tipc bearer [ 66.952233][ T5169] tipc: Disabling bearer [ 66.957906][ T5185] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 66.989926][ T5187] loop3: detected capacity change from 0 to 128 [ 67.055699][ T5191] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 67.159041][ T5196] loop1: detected capacity change from 0 to 128 [ 67.248885][ T5198] loop3: detected capacity change from 0 to 512 [ 67.261867][ T5198] EXT4-fs: Ignoring removed oldalloc option [ 67.269061][ T5198] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 67.285732][ T5198] EXT4-fs: error: could not find journal device path [ 67.297153][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 67.329286][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 67.367466][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 67.396114][ T3677] udevd[3677]: symlink '../../loop2' '/dev/disk/by-diskseq/365.tmp-b7:2' failed: Read-only file system [ 67.416810][ T5207] lo speed is unknown, defaulting to 1000 [ 67.423063][ T3300] udevd[3300]: symlink '../../loop3' '/dev/disk/by-diskseq/381.tmp-b7:3' failed: Read-only file system [ 67.425925][ T5207] lo speed is unknown, defaulting to 1000 [ 67.437461][ T5206] loop2: detected capacity change from 0 to 512 [ 67.453344][ T3677] udevd[3677]: symlink '../../loop1' '/dev/disk/by-diskseq/379.tmp-b7:1' failed: Read-only file system [ 67.472720][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-diskseq/383.tmp-b7:2' failed: Read-only file system [ 67.487405][ T3677] udevd[3677]: symlink '../../loop1' '/dev/disk/by-diskseq/379.tmp-b7:1' failed: Read-only file system [ 67.499526][ T3300] udevd[3300]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 67.511427][ T5206] EXT4-fs: Ignoring removed bh option [ 67.520974][ T5209] sctp: [Deprecated]: syz.1.568 (pid 5209) Use of int in max_burst socket option. [ 67.520974][ T5209] Use struct sctp_assoc_value instead [ 67.522432][ T3677] udevd[3677]: symlink '../../loop1' '/dev/disk/by-diskseq/384.tmp-b7:1' failed: Read-only file system [ 67.560268][ T5206] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.571346][ T5206] FAULT_INJECTION: forcing a failure. [ 67.571346][ T5206] name failslab, interval 1, probability 0, space 0, times 0 [ 67.584020][ T5206] CPU: 0 UID: 0 PID: 5206 Comm: syz.2.567 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.584053][ T5206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.584067][ T5206] Call Trace: [ 67.584074][ T5206] [ 67.584082][ T5206] __dump_stack+0x1d/0x30 [ 67.584139][ T5206] dump_stack_lvl+0xe8/0x140 [ 67.584164][ T5206] dump_stack+0x15/0x1b [ 67.584185][ T5206] should_fail_ex+0x265/0x280 [ 67.584235][ T5206] should_failslab+0x8c/0xb0 [ 67.584267][ T5206] __kmalloc_noprof+0xa5/0x570 [ 67.584295][ T5206] ? find_tree_dqentry+0x3e/0x8c0 [ 67.584484][ T5206] find_tree_dqentry+0x3e/0x8c0 [ 67.584509][ T5206] ? __brelse+0x32/0x60 [ 67.584593][ T5206] ? from_kuid+0x139/0x320 [ 67.584617][ T5206] ? ext4_quota_read+0x22b/0x260 [ 67.584666][ T5206] find_tree_dqentry+0x4c9/0x8c0 [ 67.584739][ T5206] qtree_read_dquot+0x35c/0x4a0 [ 67.584772][ T5206] v2_read_dquot+0x98/0xd0 [ 67.584804][ T5206] dquot_acquire+0xce/0x2b0 [ 67.584842][ T5206] ext4_acquire_dquot+0x15f/0x200 [ 67.584942][ T5206] dqget+0x535/0x8d0 [ 67.584982][ T5206] __dquot_initialize+0x27f/0x7c0 [ 67.585036][ T5206] dquot_initialize+0x1a/0x30 [ 67.585067][ T5206] ext4_setattr+0x1c0/0xfd0 [ 67.585147][ T5206] ? selinux_inode_setattr+0x465/0x4e0 [ 67.585210][ T5206] ? __pfx_ext4_setattr+0x10/0x10 [ 67.585237][ T5206] notify_change+0x872/0x8f0 [ 67.585267][ T5206] chown_common+0x2be/0x3f0 [ 67.585316][ T5206] ksys_fchown+0xbd/0x110 [ 67.585356][ T5206] __x64_sys_fchown+0x3f/0x50 [ 67.585395][ T5206] x64_sys_call+0x838/0x3000 [ 67.585416][ T5206] do_syscall_64+0xd2/0x200 [ 67.585545][ T5206] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 67.585573][ T5206] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.585596][ T5206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.585623][ T5206] RIP: 0033:0x7f91f36fefc9 [ 67.585654][ T5206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.585676][ T5206] RSP: 002b:00007f91f2167038 EFLAGS: 00000246 ORIG_RAX: 000000000000005d [ 67.585701][ T5206] RAX: ffffffffffffffda RBX: 00007f91f3955fa0 RCX: 00007f91f36fefc9 [ 67.585716][ T5206] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000005 [ 67.585728][ T5206] RBP: 00007f91f2167090 R08: 0000000000000000 R09: 0000000000000000 [ 67.585741][ T5206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.585777][ T5206] R13: 00007f91f3956038 R14: 00007f91f3955fa0 R15: 00007ffe9a381d38 [ 67.585800][ T5206] [ 67.835335][ T5206] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.567: Failed to acquire dquot type 0 [ 67.902669][ T5217] netlink: 'syz.4.569': attribute type 10 has an invalid length. [ 67.916340][ T5218] loop0: detected capacity change from 0 to 512 [ 67.923334][ T5218] EXT4-fs: test_dummy_encryption option not supported [ 67.943727][ T5217] bond0: (slave dummy0): Releasing backup interface [ 67.955271][ T5217] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 67.966971][ T5217] team0: Failed to send options change via netlink (err -105) [ 67.974475][ T5217] team0: Port device dummy0 added [ 67.981609][ T5220] loop1: detected capacity change from 0 to 1024 [ 67.997165][ T5220] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 68.008140][ T5220] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 68.030345][ T5220] JBD2: no valid journal superblock found [ 68.036182][ T5220] EXT4-fs (loop1): Could not load journal inode [ 68.134907][ T5229] loop1: detected capacity change from 0 to 128 [ 68.155849][ T5238] sctp: [Deprecated]: syz.2.579 (pid 5238) Use of int in max_burst socket option. [ 68.155849][ T5238] Use struct sctp_assoc_value instead [ 68.164023][ T5239] loop4: detected capacity change from 0 to 1024 [ 68.195121][ T5239] EXT4-fs: Ignoring removed orlov option [ 68.352662][ T5247] loop3: detected capacity change from 0 to 128 [ 68.387666][ T5244] loop2: detected capacity change from 0 to 512 [ 68.412028][ T5244] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.582268][ T5257] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 68.659868][ T5262] sctp: [Deprecated]: syz.3.587 (pid 5262) Use of int in max_burst socket option. [ 68.659868][ T5262] Use struct sctp_assoc_value instead [ 68.676380][ T5264] loop4: detected capacity change from 0 to 512 [ 68.709875][ T5270] sctp: [Deprecated]: syz.2.592 (pid 5270) Use of int in max_burst socket option. [ 68.709875][ T5270] Use struct sctp_assoc_value instead [ 68.737887][ T5272] loop4: detected capacity change from 0 to 128 [ 68.766581][ T5273] lo speed is unknown, defaulting to 1000 [ 68.772769][ T5273] lo speed is unknown, defaulting to 1000 [ 68.829657][ T5278] loop3: detected capacity change from 0 to 512 [ 68.857381][ T5278] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.872835][ T5283] loop2: detected capacity change from 0 to 128 [ 68.886531][ T5283] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.927030][ T5283] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.983929][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 68.999902][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 68.999975][ T29] audit: type=1400 audit(1760965970.217:3761): avc: denied { setopt } for pid=5284 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.043798][ T5287] loop2: detected capacity change from 0 to 128 [ 69.056121][ T29] audit: type=1107 audit(1760965970.277:3762): pid=5286 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¿‘' [ 69.082447][ T5289] netlink: 'syz.3.599': attribute type 10 has an invalid length. [ 69.199672][ T5294] FAULT_INJECTION: forcing a failure. [ 69.199672][ T5294] name failslab, interval 1, probability 0, space 0, times 0 [ 69.212364][ T5294] CPU: 1 UID: 0 PID: 5294 Comm: syz.4.602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.212397][ T5294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.212413][ T5294] Call Trace: [ 69.212421][ T5294] [ 69.212430][ T5294] __dump_stack+0x1d/0x30 [ 69.212456][ T5294] dump_stack_lvl+0xe8/0x140 [ 69.212523][ T5294] dump_stack+0x15/0x1b [ 69.212542][ T5294] should_fail_ex+0x265/0x280 [ 69.212646][ T5294] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 69.212673][ T5294] should_failslab+0x8c/0xb0 [ 69.212708][ T5294] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 69.212738][ T5294] ? shmem_alloc_inode+0x34/0x50 [ 69.212779][ T5294] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 69.212805][ T5294] shmem_alloc_inode+0x34/0x50 [ 69.212830][ T5294] alloc_inode+0x40/0x170 [ 69.212859][ T5294] new_inode+0x1d/0xe0 [ 69.212891][ T5294] shmem_get_inode+0x244/0x750 [ 69.212969][ T5294] __shmem_file_setup+0x113/0x210 [ 69.213011][ T5294] shmem_file_setup+0x3b/0x50 [ 69.213050][ T5294] __se_sys_memfd_create+0x2c3/0x590 [ 69.213169][ T5294] __x64_sys_memfd_create+0x31/0x40 [ 69.213201][ T5294] x64_sys_call+0x2ac2/0x3000 [ 69.213239][ T5294] do_syscall_64+0xd2/0x200 [ 69.213265][ T5294] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.213320][ T5294] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.213351][ T5294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.213380][ T5294] RIP: 0033:0x7f94020befc9 [ 69.213401][ T5294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.213425][ T5294] RSP: 002b:00007f9400b26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 69.213459][ T5294] RAX: ffffffffffffffda RBX: 0000000000000477 RCX: 00007f94020befc9 [ 69.213472][ T5294] RDX: 00007f9400b26ef0 RSI: 0000000000000000 RDI: 00007f9402142960 [ 69.213485][ T5294] RBP: 0000200000000bc0 R08: 00007f9400b26bb7 R09: 00007f9400b26e40 [ 69.213497][ T5294] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 69.213508][ T5294] R13: 00007f9400b26ef0 R14: 00007f9400b26eb0 R15: 0000200000000000 [ 69.213529][ T5294] [ 69.452352][ T5299] loop4: detected capacity change from 0 to 512 [ 69.460801][ T5297] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.472340][ T5301] sctp: [Deprecated]: syz.0.604 (pid 5301) Use of int in max_burst socket option. [ 69.472340][ T5301] Use struct sctp_assoc_value instead [ 69.496906][ T5297] tipc: Enabled bearer , priority 0 [ 69.504903][ T5297] syzkaller0: MTU too low for tipc bearer [ 69.510659][ T5297] tipc: Disabling bearer [ 69.544765][ T29] audit: type=1326 audit(1760965970.757:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.568243][ T29] audit: type=1326 audit(1760965970.757:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.591507][ T29] audit: type=1326 audit(1760965970.757:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.614824][ T29] audit: type=1326 audit(1760965970.757:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.638169][ T29] audit: type=1326 audit(1760965970.757:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.648963][ T5310] loop1: detected capacity change from 0 to 1024 [ 69.661627][ T29] audit: type=1326 audit(1760965970.757:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.669935][ T5310] EXT4-fs: Ignoring removed orlov option [ 69.691271][ T29] audit: type=1326 audit(1760965970.757:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.691307][ T29] audit: type=1326 audit(1760965970.757:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.4.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94020befc9 code=0x7ffc0000 [ 69.723576][ T5310] EXT4-fs mount: 96 callbacks suppressed [ 69.723598][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.815345][ T5315] loop0: detected capacity change from 0 to 128 [ 69.822750][ T5315] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.867122][ T5315] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.889186][ T5320] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 69.941233][ T5325] loop3: detected capacity change from 0 to 512 [ 69.962404][ T3462] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.997948][ T5325] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.610: error while reading EA inode 32 err=-116 [ 70.021950][ T5330] loop4: detected capacity change from 0 to 1024 [ 70.023304][ T5325] EXT4-fs (loop3): Remounting filesystem read-only [ 70.028815][ T5330] EXT4-fs: Ignoring removed orlov option [ 70.042680][ T5325] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 70.045794][ T5331] sctp: [Deprecated]: syz.0.614 (pid 5331) Use of int in max_burst socket option. [ 70.045794][ T5331] Use struct sctp_assoc_value instead [ 70.079673][ T5330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.092597][ T5325] EXT4-fs (loop3): 1 orphan inode deleted [ 70.099505][ T5325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.150384][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.152243][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.192623][ T5336] netlink: 'syz.3.615': attribute type 13 has an invalid length. [ 70.290460][ T5343] loop0: detected capacity change from 0 to 512 [ 70.297631][ T5343] EXT4-fs: Ignoring removed oldalloc option [ 70.309433][ T5343] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 70.326023][ T5343] EXT4-fs: error: could not find journal device path [ 70.420839][ T5350] loop1: detected capacity change from 0 to 128 [ 70.445473][ T5350] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.457876][ T5350] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.470594][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.471414][ T5350] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 70.488233][ T5350] FAT-fs (loop1): Filesystem has been set read-only [ 70.511098][ T5355] loop4: detected capacity change from 0 to 1024 [ 70.517949][ T5355] EXT4-fs: Ignoring removed orlov option [ 70.528699][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.599847][ T5366] loop1: detected capacity change from 0 to 1024 [ 70.607092][ T5366] EXT4-fs: Ignoring removed orlov option [ 70.627342][ T5366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.640089][ T5369] loop0: detected capacity change from 0 to 1024 [ 70.649007][ T5369] EXT4-fs: Ignoring removed orlov option [ 70.666800][ T5369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.723302][ T5366] ================================================================== [ 70.731529][ T5366] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 70.740955][ T5366] [ 70.743302][ T5366] write to 0xffff88810a993168 of 4 bytes by task 5372 on cpu 0: [ 70.750965][ T5366] writeback_single_inode+0x150/0x3f0 [ 70.756381][ T5366] sync_inode_metadata+0x5b/0x90 [ 70.761457][ T5366] generic_buffers_fsync_noflush+0xd9/0x120 [ 70.767398][ T5366] ext4_sync_file+0x1ab/0x690 [ 70.772105][ T5366] vfs_fsync_range+0x10d/0x130 [ 70.776905][ T5366] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.782477][ T5366] ext4_file_write_iter+0x387/0xf60 [ 70.787742][ T5366] iter_file_splice_write+0x666/0xa60 [ 70.793396][ T5366] direct_splice_actor+0x156/0x2a0 [ 70.798630][ T5366] splice_direct_to_actor+0x312/0x680 [ 70.804029][ T5366] do_splice_direct+0xda/0x150 [ 70.809100][ T5366] do_sendfile+0x380/0x650 [ 70.813573][ T5366] __x64_sys_sendfile64+0x105/0x150 [ 70.818825][ T5366] x64_sys_call+0x2bb4/0x3000 [ 70.823529][ T5366] do_syscall_64+0xd2/0x200 [ 70.828092][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.834019][ T5366] [ 70.836360][ T5366] read to 0xffff88810a993168 of 4 bytes by task 5366 on cpu 1: [ 70.843929][ T5366] generic_buffers_fsync_noflush+0x80/0x120 [ 70.849854][ T5366] ext4_sync_file+0x1ab/0x690 [ 70.854562][ T5366] vfs_fsync_range+0x10d/0x130 [ 70.859360][ T5366] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.864935][ T5366] ext4_file_write_iter+0x387/0xf60 [ 70.870220][ T5366] iter_file_splice_write+0x666/0xa60 [ 70.875626][ T5366] direct_splice_actor+0x156/0x2a0 [ 70.880761][ T5366] splice_direct_to_actor+0x312/0x680 [ 70.886264][ T5366] do_splice_direct+0xda/0x150 [ 70.891055][ T5366] do_sendfile+0x380/0x650 [ 70.895513][ T5366] __x64_sys_sendfile64+0x105/0x150 [ 70.900764][ T5366] x64_sys_call+0x2bb4/0x3000 [ 70.905763][ T5366] do_syscall_64+0xd2/0x200 [ 70.910308][ T5366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.916254][ T5366] [ 70.918685][ T5366] value changed: 0x00000070 -> 0x00000002 [ 70.924505][ T5366] [ 70.926840][ T5366] Reported by Kernel Concurrency Sanitizer on: [ 70.933013][ T5366] CPU: 1 UID: 0 PID: 5366 Comm: syz.1.626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.942707][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.952783][ T5366] ================================================================== [ 71.079307][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.088942][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.227486][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.