last executing test programs: 1m6.071169165s ago: executing program 3 (id=257): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff010000000a000000000000000000017f00000100000000000000000000000000750000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100000000000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001fc01000000000001a8000000000000013c000000000000000a"], 0xa0}}, 0x10) 1m6.0042166s ago: executing program 3 (id=258): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="2ab06fb05140f700608545ac89ae6b1315cd28a5cb4f341d01a17849ac810e2f13f77746aa14ee5a8646105ecdfc5e6753d8a0d82d9d2f7a9d4df509dc094ee6729416d1dde794762f8a09a7781f4e85310562a8a8fd751cbfbfbc2e4c71d0f03218733662215adc9a20eac8f48d0d3f4384697d8f5179ba0bdf5aa67d270176ca26cd3de752ec5bb45834a4f595590c6ab5fb096f3530527304230b7fb4ccba335fb350122e23e1cf459b45b0f78d83bad44029f025becbb5a551917e2d4db0", @ANYRES8], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x18) syslog(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2010080, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="280100001700010025bd700000000000ac1414aa0000000000000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001ffffffff0000000000000000000000004e210000000000000a00006400000000", @ANYRES32=0x0, @ANYRES16=r2, @ANYBLOB="fe80000000000000000000000000060eff05"], 0x128}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000073d000/0x4000)=nil, 0x4000, 0xb635773f06ebbee8, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x256581, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2c0281, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m6.00401241s ago: executing program 3 (id=259): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00030000200000"], 0x38, 0x4855}, 0x24000052) 1m5.979577373s ago: executing program 3 (id=260): setresuid(0xee01, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x524, &(0x7f0000000e00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$inet6(0xa, 0x80000, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000ac0)=0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x24, r2, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x33}, @val={0x8}, @void}}}, 0x24}}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) prlimit64(r3, 0x3, &(0x7f0000000000)={0x0, 0x800000000000a}, 0x0) (async) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee00) 1m5.210412722s ago: executing program 3 (id=268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff0100000000000000010000000000017f00000100000000000000000000000000750000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100000000000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001fc01000000000001a8000000000000013c000000000000000a"], 0xa0}}, 0x10) 1m4.820299026s ago: executing program 3 (id=273): r0 = open(0x0, 0x24040, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) truncate(0x0, 0x9471) finit_module(r0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000180000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m4.77743785s ago: executing program 32 (id=273): r0 = open(0x0, 0x24040, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) truncate(0x0, 0x9471) finit_module(r0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000180000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.466196597s ago: executing program 4 (id=296): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) rename(&(0x7f0000000b40)='./file3\x00', &(0x7f0000000b00)='./file1\x00') r4 = semget(0x1, 0x2, 0x8a) semctl$SEM_STAT(r4, 0x1, 0x12, &(0x7f0000000780)=""/206) 1m2.792577957s ago: executing program 4 (id=302): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b304000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b304000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7a4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x10001, 0x30}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x10001, 0x30}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000004c0)={r4, 0x5, 0x0, 0xfffb, 0x8, 0xfffb, 0x6, 0x1aca, {r5, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x3, 0xb, 0xffff, 0x5}}, &(0x7f0000000580)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 1m2.725144073s ago: executing program 4 (id=306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca900000000b0ff3509020000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.708627884s ago: executing program 4 (id=307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x727c45cd4283345, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open(0x0, 0x60840, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, 0x0, 0x20000000) pipe2$9p(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, 0x0, 0x0) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000300), 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb88dd48a1bd5b4e8a27d7b3b19010018000000000000000c0000000c00000004000000020000"], &(0x7f00000000c0)=""/147, 0x28, 0x93, 0x1, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) 1m2.492757553s ago: executing program 4 (id=308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000001fe8000000000050000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e0000001000000000000c9ffff00000007000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 59.844147949s ago: executing program 4 (id=338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket(0x1a, 0x6, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5524, 0x64}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6c804}, 0x80d0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r12 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001600)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22daa55b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) getsockopt$llc_int(r11, 0x10c, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setns(r6, 0x8020000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014"], 0x38}}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x20000000) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) ioctl$SG_GET_SCSI_ID(r13, 0x2276, &(0x7f0000000040)) 59.827994831s ago: executing program 33 (id=338): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket(0x1a, 0x6, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r9, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5524, 0x64}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6c804}, 0x80d0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r12 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r12, 0x4c0a, &(0x7f0000001600)={r11, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22daa55b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) getsockopt$llc_int(r11, 0x10c, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setns(r6, 0x8020000) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0902000000000000000001000000050002000a00000014"], 0x38}}, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x20000000) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) ioctl$SG_GET_SCSI_ID(r13, 0x2276, &(0x7f0000000040)) 18.655540089s ago: executing program 5 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r3, 0x400, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, r3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r10}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) recvfrom$l2tp6(r5, &(0x7f0000000040)=""/22, 0x16, 0x40000041, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110035f867eb2a9965d5c7bac4fdc525acfc9e464a4692ed9f705359a5281bee97de182f0e0ab556d886c800e9e5cb67cc077afc7b4af7f474010893bf9102d6b155b72e6335915b14f3e073a3b42b4d913fd304a44babc124ea99dc90919f7820030d01000000000000001d7502a7908018488a28fc2fe2c1db5e529d37dc3a5f29fa29b3941d7e8bc235c6c1af67dbe41e0fd6da563b", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r12}, 0x10) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000003900090025bd7000ff84000002000800000000000c0001800600060008"], 0x24}}, 0x0) 18.509658232s ago: executing program 5 (id=924): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x3) (async) renameat2(r1, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) (async) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bond0\x00', 0x5}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff04ff810000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) 17.365605334s ago: executing program 5 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dafd6bf2c69abbf1062351756b634f2899a7"], 0xfd, 0x564, &(0x7f0000001f80)="$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") 17.343788425s ago: executing program 5 (id=931): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x3, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x7, 0xa00, 0x6, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff01000000000000000000000a0000017f00000100000000000000000000000000750000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100000000000000000000000000000000010a010100000000000000000000000000fc010000000000000000000000000001fc01000000000001a8000000000000013c000000000000000a"], 0xa0}}, 0x10) 17.308798098s ago: executing program 5 (id=932): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x40, 0x7800, 0x10, 0x72c3c2de, {{0xd, 0x4, 0x3, 0x39, 0x34, 0x68, 0x0, 0x1, 0x0, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x55, 0x1, 0xf, [{@private=0xa010100, 0x7ff}]}, @ra={0x94, 0x4}, @generic={0x86, 0x10, "ae7cc439bb5a1a24bfb7fbacd1d2"}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES64=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) 16.95324537s ago: executing program 5 (id=937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x8060, 0x2c) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000100)={0x0, 0xec25, 0x8, 0x10000001, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x198864e9b5e5e9e4) (async) r7 = io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0xfffefffa, 0x80, 0x4, 0x4800020}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) (async, rerun: 32) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0x4d0e}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) (async, rerun: 64) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @dev={0xac, 0x14, 0x14, 0x34}, r10}, 0xc) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000697000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80c0) (async, rerun: 32) io_uring_setup(0xf, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 3.946761149s ago: executing program 6 (id=1070): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xe19, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.945979089s ago: executing program 6 (id=1072): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002a7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcb37089bc75b19e4ae00000000210200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "9ea0c1f1865b84da", "e4ac7b46fd91fd6bb4fd6019753cb18e63011ee3b64ba64198fe6205901a0c54", "f5d20eac", "644307f69e597635"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xcffa, 0x8, 0x1, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x18600) 3.677093973s ago: executing program 6 (id=1077): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl2\x00', r4, 0x40, 0x7800, 0x8, 0xb, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x65, 0x1, 0x0, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000540)=0x80, 0x1000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="4ce5ffff143bafac171da4af16b634", @ANYRES16=r6, @ANYBLOB="040026bd7000fcdbdf25050000000500060009000000050002000400000005000700020000000500020007000000050007000300000005000700020000000500020005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000880)='-[$,-[+*%+\x10\x00', 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a50020000160a010800000000000000000100000208000740000000021400038008000240000000070800014000000000090001007390c7a7d192797a30000000003800038008000240000000062c000380140001006d6163766c616e300000000000000000140001006d616376746170300000000000000000c00003800800014000000000a400038014000100726f73653000000000000000000000001400010076657468305f746f5f62726964676500140001006772653000000000000000000000000014000100766c616e30000000000000000000000014000100776c616e310000000000000000000000140001007465616d5f736c6176655f300000000014000100626f6e6430000000000000000000000014000100626f6e64300000000000000000000000080001400000000008000140000000003c0003800800024000000ac508000140000000000800024000000006080002400000005818000380140001007465616d5f736c6176655f30000000000c0005400000000000000001d4000380400003801400010076657468305f746f5f6272696467650014000100726f736530000000000000000000000014000100626f6e6430000000000000000000000008000140000000000800024000000003080002400000000000000308000140000000006800038014000100766c616e3000000000000000000000001400010076657468315f746f5f687372000000001400010070696d726567310000000000000000001400010064766d727031000000000000000000001400010076657468305f746f5f626f6e6400000020000000120a010100000000000000000a0000010c0006400000000000000002140000001100010000000000000000"], 0x298}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000100)={0x28, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="02070900040000002dbd7000ffdbdf2502000b"], 0x20}}, 0x4040014) 2.660080863s ago: executing program 1 (id=1093): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0x400, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='io_uring_file_get\x00', r2, 0x0, 0x1}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd63}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x7ff}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 2.647121155s ago: executing program 1 (id=1094): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac14140f0000000000000000000000004e22000100000003020020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x39bba897984d9bd4}, 0x0) 2.603865209s ago: executing program 1 (id=1095): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xe19, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 2.538348314s ago: executing program 1 (id=1097): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000004000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) 2.47381038s ago: executing program 1 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0xe5) (async) sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0xe5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) tkill(r3, 0x2f) (async) tkill(r3, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) tkill(r3, 0xe) (async) tkill(r3, 0xe) ptrace$peeksig(0x4209, r3, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xfffffff7, 0x0, "05000801000000d510017b00000f3600", 0x0, 0x7ff}) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000a40)) 1.888550843s ago: executing program 34 (id=937): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0xffffffff) (async) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x8060, 0x2c) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) (async) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000100)={0x0, 0xec25, 0x8, 0x10000001, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='lo\x00'}) (async, rerun: 64) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x198864e9b5e5e9e4) (async) r7 = io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0xfffefffa, 0x80, 0x4, 0x4800020}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) (async, rerun: 32) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0x4d0e}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x34, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4000) (async, rerun: 64) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@remote, @dev={0xac, 0x14, 0x14, 0x34}, r10}, 0xc) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000697000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x80c0) (async, rerun: 32) io_uring_setup(0xf, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.424302294s ago: executing program 2 (id=1108): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xe19, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESHEX, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 1.423386694s ago: executing program 0 (id=1109): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x8000, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x100883, 0x7ff, 0x8, 0x3, 0xb, 0x7, 0x3fd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1/file3\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000009c0)={'gre0\x00', 0x0, 0x20, 0x8, 0x3, 0x748, {{0x40, 0x4, 0x0, 0xf, 0x100, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x2c, 0x21, 0x3, 0x6, [{@multicast2, 0xd0c3}, {@rand_addr=0x64010101}, {@broadcast, 0x800}, {@multicast1, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x2}]}, @generic={0x83, 0xc, "3f58287b6f3198337819"}, @rr={0x7, 0x27, 0xe9, [@remote, @broadcast, @multicast2, @loopback, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local]}, @rr={0x7, 0x13, 0xb2, [@empty, @loopback, @loopback, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0xe6, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0xfeab}, {@multicast1, 0x66}, {@multicast2, 0x8}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x59, 0x3, 0x5, [{@multicast1, 0x9}, {@local, 0x800000}, {@empty, 0x9}, {@multicast1, 0x101}, {@multicast2, 0x3fac5493}]}, @end, @rr={0x7, 0x27, 0x9d, [@dev={0xac, 0x14, 0x14, 0x29}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010102, @private=0xa010102, @local]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x80000005, @private0, 0x6c45b294}}}, 0x3a) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r7 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000380)='./file1/file3\x00', 0x200) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r7, @ANYRES64=r4, @ANYBLOB, @ANYRESDEC=r6, @ANYRES16=r6, @ANYRES16=r8, @ANYRESOCT=r8], 0x48) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r9], 0x1}, 0x58) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r3, 0x29, 0xb0, 0xe, 0xa8, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x50, 0x20, 0x592, 0xa}}) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x298, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1.373015458s ago: executing program 2 (id=1110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000002060500000000000000000000f400000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 880.003512ms ago: executing program 0 (id=1111): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x1}, 0x48) 755.741993ms ago: executing program 0 (id=1112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dafd6bf2c69abbf1062351756b634f2899a7"], 0xfd, 0x564, &(0x7f0000001f80)="$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") 698.439138ms ago: executing program 0 (id=1113): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4e24, 0x4, 0x4e21, 0x4, 0xa, 0x0, 0x20, 0x2c, 0x0, 0xee01}, {0x5, 0x4, 0x8, 0x2c, 0xffff, 0x1, 0x9, 0xac5}, {0x1, 0x450, 0x7, 0x8}, 0x1, 0x6e6bb7, 0x0, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x3, 0xd, 0x0, 0x5, 0x5}}, 0xe8) readahead(r1, 0x7300, 0x8) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000500)=0xc, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000000000000000000fffff9000000000000000000000000000000000000000b000000000000000000fcffffff00000000"]}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 413.714823ms ago: executing program 2 (id=1114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x204019, &(0x7f0000000240)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303037642c686964652c636865636b3d72656c617865642c757466382c757466382c007850bebd8d7d036618c1146a34cfd146c5861d8bd4466228f0bc2de3f77e11157c389fc315c06b7ba5db6a0be20cefe83f41117225bf80377cd9f3f8ce47ac8bf58ed6e8a5f46c37d64ff6e2fb871053a53f8747dafd6bf2c69abbf1062351756b634f2899a7"], 0xfd, 0x564, &(0x7f0000001f80)="$eJzs3d1uE80ZwPFn8wGRK6GqrRCKAgzQg0QKZm2DkcUBbNdjZ8DetXbXKDlCEXFQhAMVoVKTE8QJbaX2IjjtRfS4N4PeS/Cr/TD5tB3Ih/NG/58FO96dnXl2be2TsbxjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYrlV2y5Y0jBee1kN5lYDv7n7NNv70ApZ2LcY0q+IFf+TmRm5ka668afdzdfj/+7KXPpsTmbixYzs/O7675/8cWqiv/+QgM/F1vbO29Vut/Nh3IGcoZtXB2+ra8+Evmk6da1M6KtKuWw/WKqFqmYaOpSZSDeVG2gn8gM1P7GgCpVKSen8it/26lWnodW8m6x8fL9o22X1PN/SThD63oPn+dBdMo2G8epJnXhzXOdx/EZ8YSIVaaep1PpGt1MadQBxpcJxKhVHVSraxWKhUCwWyo8qjx7b9tShFfYBcqjG+N+0GK9TvHoDJzOR5X9piBFP2rIs6siHK1UJxJfmgO2ZhadZ4YEe2u/e/N/P8jd2N89Kkv9vpc9uDcr/A2I5v8eWbMuOvJVV6UpXOvJh7BH98GPyR2pbsv+c10WLJ0bCr8/ESFOcZI2K14gvSipSlrLY8kqWpCahKKmJkYZoCXufste6mby7AtHiSCS+BKJkXlxZECUFqUhFSqJES15WxJe2eFKXqjhJK+uykZz30pCYv1cqDKyS67/vOlIc0tIR+f9qtiP5H8d0Gpdt4FT0+vl/iCvnFg0AAAAAADgLVvLpezz+n5abSalmGtoed1gAAAAAAOAU9Xq9nsyJFY//ReSmWIz/AQAAAAC4bKzkHjtLRHJyOy2ti5XcLsWHAAAAAAAAXBLJnf+34kUyB8ptsb5Pl8L4HwAAAACAS+Kfg+fYn8mqtK5a//tFgmDa+txa/rO16cQrnc3JdOvkwRaj2qx1LWskWZSnsmeunrOy2S93J8FMe/m2PmqufysLwEo/svipAOTfcietc2ctXa71t6S95GqmofOu33hSEMe5NhHp5ehv7zb+Lsnh/8trXrNkfaPbyb9+311LTsbnuJXPm9kEiofmURwSy8dkvoXknosjj3g6uREj6zeX9mv3X4Bn4mxOpLtnC5ka2edT+SJ399YUye0//pm4z0J+0NFnURROeORf5F5a5978vXRxRBTFUVEU90Zx4FycWhSlUVGUThgFAIzL+ogsZB1O/D9xlTt2dj/JnxfyRebTOvOzyYV1avaIK7o96opunzC7/ffQbyANyrFxv/85kFW/xjt8Hdhv2Cha8Smc/Lj5V7m+tb1zf2Nz9U3nTeddsVgq2w9t+1FRppPDyBbkHgDAEUb/xs7IGtbDEaPqP3z/SkFeXst76cqaLCZ3GyTfODiy1dyeryEsJqPWONjsd1oOjFpzSZpMf+Flccio7kpyl0O/3eLQuvtjKJ39CwEAwDm6OyIPHyf/L44Yd+/P5cNHx7k9v9YGAADOhg6+WbnoH1YQmNarQqVScKIlrQLffaECU61rZbxIB+6S49W1agV+5Lt+Iy68NFUdqrDdavlBpGp+oFp+aJaVJZaocCWMdFOFuul4kXHDVkM7oVau70WOG6mqCV3Vav+lYcIlHSQ7hy3tmppxncj4ngr9duDqvFKh1mozJ5JWNFXtRaZm4qKnWoFpOsGKeuk32k2tqjp0A9OK/LTBfl/Gq/lBM2k2P+6TDQDABbG1vfN2tdvtfDjDwriPEQAA7EeWBgAAAAAAAAAAAAAAAAAAAADg4juP+/8ufUFk3GEs/7/XuyhnY/yFK3IhwvhtF0ZeOj6dywUKwJn5NQAA///IIVDl") 336.301421ms ago: executing program 6 (id=1115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000001fe8000000000050000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d533000000e000000100000000000000000000000307000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000200000000000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) 336.16191ms ago: executing program 1 (id=1116): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@nodioread_nolock}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@init_itable}, {@orlov}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 304.691623ms ago: executing program 6 (id=1117): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="24dc0b9cac55486f1800000000000000000000000000000018010000696c6c25000000003c2020207b1af8ff00000000bfa10000000000568e477eebd7868c0a9a1b840007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) rename(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 289.270424ms ago: executing program 2 (id=1118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600002818000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) 200.306273ms ago: executing program 2 (id=1119): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xe19, 0x0, 0x0, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESHEX, @ANYRES64=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 112.32404ms ago: executing program 2 (id=1120): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002a7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcb37089bc75b19e4ae00000000210200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "9ea0c1f1865b84da", "e4ac7b46fd91fd6bb4fd6019753cb18e63011ee3b64ba64198fe6205901a0c54", "f5d20eac", "644307f69e597635"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xcffa, 0x8, 0x1, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x18600) 111.962461ms ago: executing program 6 (id=1121): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002a7, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1bcb37089bc75b19e4ae00000000210200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "9ea0c1f1865b84da", "e4ac7b46fd91fd6bb4fd6019753cb18e63011ee3b64ba64198fe6205901a0c54", "f5d20eac", "644307f69e597635"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r6}, 0x10) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x219, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0xcffa, 0x8, 0x1, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x18600) 92.979052ms ago: executing program 0 (id=1122): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x2, 0x13, &(0x7f0000001700)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x38000000}, 0x94) 0s ago: executing program 0 (id=1123): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x18, 0x0, 0xfffffffffe000001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800064000"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000003e0009000000000000080000030000000800020007"], 0x1c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x9, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}}], 0x2, 0xc88c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): '. [ 69.033065][ T6379] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.549: couldn't read orphan inode 15 (err -117) [ 69.045258][ T6388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.550'. [ 69.046307][ T6379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.067561][ T6388] program syz.5.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.086542][ T6385] netlink: 60 bytes leftover after parsing attributes in process `syz.5.550'. [ 69.095465][ T6385] netlink: 60 bytes leftover after parsing attributes in process `syz.5.550'. [ 69.097578][ T6388] blktrace: Concurrent blktraces are not allowed on sg0 [ 69.113463][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.196985][ T6394] loop5: detected capacity change from 0 to 512 [ 69.205056][ T6396] loop0: detected capacity change from 0 to 128 [ 69.215644][ T6396] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 69.229904][ T6394] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.229965][ T6396] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 69.267363][ T6394] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.552: inode has both inline data and extents flags [ 69.288797][ T6394] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.552: couldn't read orphan inode 15 (err -117) [ 69.290166][ T6381] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 69.308329][ T6394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.309381][ T6381] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 69.345478][ T6381] EXT4-fs (loop1): 1 truncate cleaned up [ 69.355523][ T6381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.553125][ T6381] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.721404][ T6424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.764381][ T6434] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 70.469436][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.479431][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.513363][ T4476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.694930][ T29] kauditd_printk_skb: 898 callbacks suppressed [ 70.694943][ T29] audit: type=1400 audit(1767789482.092:5285): avc: denied { write } for pid=6463 comm="syz.5.561" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.729719][ T6472] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.754142][ T6472] blktrace: Concurrent blktraces are not allowed on sg0 [ 70.943477][ T6474] syz.2.563 uses obsolete (PF_INET,SOCK_PACKET) [ 70.957831][ T6474] macvtap0: entered promiscuous mode [ 70.963330][ T6474] macvtap0: entered allmulticast mode [ 70.968806][ T6474] veth0_macvtap: entered allmulticast mode [ 70.985149][ T29] audit: type=1400 audit(1767789482.382:5286): avc: denied { read } for pid=6473 comm="syz.2.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.027845][ T29] audit: type=1400 audit(1767789482.422:5287): avc: denied { read write } for pid=6476 comm="syz.2.564" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.051021][ T29] audit: type=1400 audit(1767789482.422:5288): avc: denied { open } for pid=6476 comm="syz.2.564" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.081632][ T29] audit: type=1400 audit(1767789482.472:5289): avc: denied { ioctl } for pid=6476 comm="syz.2.564" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 71.126364][ T6477] lo speed is unknown, defaulting to 1000 [ 71.132419][ T29] audit: type=1400 audit(1767789482.522:5290): avc: denied { create } for pid=6476 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.151799][ T29] audit: type=1400 audit(1767789482.522:5291): avc: denied { write } for pid=6476 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 71.171881][ T6477] lo speed is unknown, defaulting to 1000 [ 71.178093][ T6477] lo speed is unknown, defaulting to 1000 [ 71.186650][ T6477] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 71.195695][ T6477] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.207961][ T6477] lo speed is unknown, defaulting to 1000 [ 71.218428][ T6477] lo speed is unknown, defaulting to 1000 [ 71.225952][ T6477] lo speed is unknown, defaulting to 1000 [ 71.232397][ T6477] lo speed is unknown, defaulting to 1000 [ 71.235929][ T6483] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.250530][ T6483] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.250880][ T6477] lo speed is unknown, defaulting to 1000 [ 71.327250][ T29] audit: type=1326 audit(1767789482.722:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce3cf749 code=0x7ffc0000 [ 71.351104][ T29] audit: type=1326 audit(1767789482.722:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce3cf749 code=0x7ffc0000 [ 71.374492][ T29] audit: type=1326 audit(1767789482.722:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.2.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce3cf749 code=0x7ffc0000 [ 71.479855][ T6496] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.571: error while reading EA inode 32 err=-116 [ 71.510570][ T6496] EXT4-fs (loop0): Remounting filesystem read-only [ 71.518188][ T6496] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 71.538762][ T6496] EXT4-fs (loop0): 1 orphan inode deleted [ 71.545145][ T6496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.565777][ T6496] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 71.579714][ T3521] IPVS: starting estimator thread 0... [ 71.599761][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.607847][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.615755][ T4114] loop9: unable to read partition table [ 71.626946][ T6496] Buffer I/O error on dev loop9, logical block 0, async page read [ 71.636013][ T6496] loop9: unable to read partition table [ 71.642240][ T6496] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 71.642240][ T6496] ) failed (rc=-5) [ 71.669517][ T6502] IPVS: using max 2448 ests per chain, 122400 per kthread [ 71.684001][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.715757][ T6494] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 71.724019][ T6494] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 71.735022][ T6494] EXT4-fs (loop5): 1 truncate cleaned up [ 71.749082][ T6494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.809072][ T6494] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 71.822274][ T6519] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.850457][ T4476] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.866226][ T6519] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 71.881466][ T6508] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 72.039598][ T6540] __nla_validate_parse: 14 callbacks suppressed [ 72.039614][ T6540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 72.072386][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.581'. [ 72.081316][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.581'. [ 72.169680][ T6549] program syz.0.581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.209600][ T6549] blktrace: Concurrent blktraces are not allowed on sg0 [ 72.617159][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.581'. [ 72.626099][ T6534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.581'. [ 72.766974][ T6556] set_capacity_and_notify: 7 callbacks suppressed [ 72.766988][ T6556] loop6: detected capacity change from 0 to 512 [ 72.800539][ T6556] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.586: error while reading EA inode 32 err=-116 [ 72.831036][ T6556] EXT4-fs (loop6): Remounting filesystem read-only [ 72.837870][ T6556] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 72.848620][ T6556] EXT4-fs (loop6): 1 orphan inode deleted [ 72.855501][ T6556] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.938145][ T6556] netlink: 'syz.6.586': attribute type 3 has an invalid length. [ 72.985612][ T6556] loop9: detected capacity change from 0 to 7 [ 72.994070][ T6556] loop9: unable to read partition table [ 72.999982][ T6556] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 72.999982][ T6556] ) failed (rc=-5) [ 73.048386][ T6565] loop0: detected capacity change from 0 to 128 [ 73.108771][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.119118][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 73.128901][ T6565] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.148524][ T6573] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 73.164813][ T6565] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.185719][ T6573] loop2: detected capacity change from 0 to 512 [ 73.200221][ T6578] loop9: detected capacity change from 0 to 7 [ 73.215968][ T6573] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 73.230543][ T6573] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 73.243176][ T6580] loop5: detected capacity change from 0 to 164 [ 73.250291][ T6573] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.273438][ T6584] loop0: detected capacity change from 0 to 512 [ 73.282616][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.5.595'. [ 73.296278][ T6584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.304632][ T6584] EXT4-fs (loop0): orphan cleanup on readonly fs [ 73.349822][ T6584] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.358815][ T6582] Invalid logical block size (1) [ 73.364957][ T6587] syzkaller1: entered promiscuous mode [ 73.375077][ T6587] syzkaller1: entered allmulticast mode [ 73.388901][ T6580] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 73.396550][ T6584] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 73.404186][ T6584] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.596: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 73.422422][ T6584] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.596: couldn't read orphan inode 13 (err -117) [ 73.434822][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.435124][ T6584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.481437][ T6593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.598'. [ 73.510645][ T6584] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 73.561353][ T6584] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 73.580976][ T6584] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 73.597198][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 73.618498][ T6604] team1: entered promiscuous mode [ 73.618768][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.623580][ T6604] team1: entered allmulticast mode [ 73.639377][ T6604] 8021q: adding VLAN 0 to HW filter on device team1 [ 73.650425][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.662082][ T6595] netlink: 'syz.6.599': attribute type 13 has an invalid length. [ 73.672465][ T6609] loop1: detected capacity change from 0 to 512 [ 73.690308][ T6613] futex_wake_op: syz.5.602 tries to shift op by -1; fix this program [ 73.701007][ T6614] random: crng reseeded on system resumption [ 73.707657][ T6609] EXT4-fs: Ignoring removed oldalloc option [ 73.718727][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.725355][ T6609] journal_path: Non-blockdev passed as './file0' [ 73.734161][ T6609] EXT4-fs: error: could not find journal device path [ 73.787523][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.794803][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.804729][ T6618] loop0: detected capacity change from 0 to 512 [ 73.822327][ T6618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.603: error while reading EA inode 32 err=-116 [ 73.847614][ T6620] openvswitch: netlink: Missing key (keys=40, expected=100) [ 73.878890][ T6618] EXT4-fs (loop0): Remounting filesystem read-only [ 73.898907][ T6618] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 73.911497][ T6618] EXT4-fs (loop0): 1 orphan inode deleted [ 73.917812][ T6618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.936678][ T6618] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 73.964311][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.981076][ T6618] loop9: detected capacity change from 0 to 7 [ 73.989859][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.997669][ T6618] buffer_io_error: 13 callbacks suppressed [ 73.997683][ T6618] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.013393][ T6618] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.021281][ T6618] loop9: unable to read partition table [ 74.036746][ T6618] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 74.036746][ T6618] ) failed (rc=-5) [ 74.052137][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.060538][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.069393][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.077791][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.086977][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.105843][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.165029][ T122] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.176568][ T122] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.190781][ T122] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.200975][ T122] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.258532][ T6619] infiniband syz!: set active [ 74.263458][ T6619] infiniband syz!: added team_slave_0 [ 74.281173][ T6619] RDS/IB: syz!: added [ 74.285190][ T6619] smc: adding ib device syz! with port count 1 [ 74.295932][ T6619] smc: ib device syz! port 1 has no pnetid [ 74.305916][ T6648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'. [ 74.391943][ T6657] SELinux: Context system_u:object_r:apt_lock_t:s0 is not valid (left unmapped). [ 75.163726][ T6714] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.633: bg 0: block 5: invalid block bitmap [ 75.178051][ T6714] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 75.196294][ T6714] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.633: invalid indirect mapped block 3 (level 2) [ 75.221461][ T6714] EXT4-fs (loop0): 2 truncates cleaned up [ 75.227769][ T6714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.365868][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.381024][ T6742] program syz.1.642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.390969][ T6742] blktrace: Concurrent blktraces are not allowed on sg0 [ 75.489765][ T6728] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 75.501589][ T6762] EXT4-fs: dax option not supported [ 75.543450][ T6764] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 75.876683][ T29] kauditd_printk_skb: 805 callbacks suppressed [ 75.876697][ T29] audit: type=1400 audit(1767789487.272:6100): avc: denied { execute } for pid=6782 comm="syz.1.653" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14728 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 75.947040][ T29] audit: type=1400 audit(1767789487.322:6101): avc: denied { read write } for pid=6782 comm="syz.1.653" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.970358][ T29] audit: type=1400 audit(1767789487.322:6102): avc: denied { open } for pid=6782 comm="syz.1.653" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 75.993635][ T29] audit: type=1400 audit(1767789487.322:6103): avc: denied { ioctl } for pid=6782 comm="syz.1.653" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 76.078746][ T6716] 9pnet_fd: p9_fd_create_tcp (6716): problem connecting socket to 127.0.0.1 [ 76.095350][ T29] audit: type=1400 audit(1767789487.462:6104): avc: denied { mount } for pid=6786 comm="syz.1.655" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.191588][ T29] audit: type=1400 audit(1767789487.532:6105): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.350050][ T6785] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 76.368702][ T6785] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 76.386614][ T6785] EXT4-fs (loop0): 1 truncate cleaned up [ 76.399425][ T6785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.485983][ T29] audit: type=1400 audit(1767789487.882:6106): avc: denied { remount } for pid=6784 comm="syz.0.654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.501594][ T6796] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.534800][ T6798] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 76.569994][ T6798] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 76.600866][ T6795] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 76.626942][ T6798] EXT4-fs (loop6): 1 truncate cleaned up [ 76.636542][ T29] audit: type=1400 audit(1767789488.032:6107): avc: denied { bind } for pid=6806 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.640815][ T6798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.670256][ T29] audit: type=1400 audit(1767789488.072:6108): avc: denied { setopt } for pid=6806 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.690264][ T6795] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 76.699780][ T6807] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.709367][ T6795] EXT4-fs (loop1): 1 truncate cleaned up [ 76.725789][ T6795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.747581][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.760897][ T6807] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.797847][ T6802] FAULT_INJECTION: forcing a failure. [ 76.797847][ T6802] name failslab, interval 1, probability 0, space 0, times 0 [ 76.810576][ T6802] CPU: 1 UID: 0 PID: 6802 Comm: syz.1.659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.810604][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 76.810614][ T6802] Call Trace: [ 76.810622][ T6802] [ 76.810630][ T6802] __dump_stack+0x1d/0x30 [ 76.810654][ T6802] dump_stack_lvl+0x95/0xd0 [ 76.810675][ T6802] dump_stack+0x15/0x1b [ 76.810691][ T6802] should_fail_ex+0x265/0x280 [ 76.810745][ T6802] should_failslab+0x8c/0xb0 [ 76.810765][ T6802] kmem_cache_alloc_noprof+0x69/0x4b0 [ 76.810847][ T6802] ? getname_flags+0x80/0x3b0 [ 76.810866][ T6802] ? fput+0x8f/0xc0 [ 76.810925][ T6802] getname_flags+0x80/0x3b0 [ 76.810948][ T6802] __x64_sys_mkdirat+0x40/0x60 [ 76.811009][ T6802] x64_sys_call+0x30c/0x3000 [ 76.811031][ T6802] do_syscall_64+0xca/0x2b0 [ 76.811072][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.811131][ T6802] RIP: 0033:0x7f6184bede97 [ 76.811144][ T6802] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.811228][ T6802] RSP: 002b:00007f618362de68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 76.811245][ T6802] RAX: ffffffffffffffda RBX: 00007f618362def0 RCX: 00007f6184bede97 [ 76.811256][ T6802] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 76.811335][ T6802] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 76.811347][ T6802] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100 [ 76.811358][ T6802] R13: 00007f618362deb0 R14: 0000000000000000 R15: 00002000000001c0 [ 76.811374][ T6802] [ 76.981710][ T6802] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 76.993416][ T6807] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.022603][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.062900][ T6804] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 77.079308][ T6816] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.666: error while reading EA inode 32 err=-116 [ 77.099848][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.101466][ T6804] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 77.130095][ T6816] EXT4-fs (loop1): Remounting filesystem read-only [ 77.147338][ T6807] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.157214][ T29] audit: type=1400 audit(1767789488.552:6109): avc: denied { create } for pid=6823 comm="syz.0.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 77.182349][ T6816] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 77.193979][ T6816] EXT4-fs (loop1): 1 orphan inode deleted [ 77.200073][ T6804] EXT4-fs (loop2): 1 truncate cleaned up [ 77.206264][ T6816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.218885][ T6804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.247970][ T6831] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 77.249446][ T1007] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.270624][ T6816] netlink: 'syz.1.666': attribute type 3 has an invalid length. [ 77.294640][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.310003][ T6838] __nla_validate_parse: 15 callbacks suppressed [ 77.310017][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 77.329799][ T1007] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.349633][ T6812] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.380410][ T6841] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.395725][ T6840] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.424280][ T1007] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.456682][ T6841] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.464658][ T6841] loop9: unable to read partition table [ 77.469634][ T1007] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482538][ T6840] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.505132][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.506830][ T6841] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 77.506830][ T6841] ) failed (rc=-5) [ 77.515752][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 77.559092][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 77.580156][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.675'. [ 77.589073][ T6850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.675'. [ 77.634018][ T6855] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.676: error while reading EA inode 32 err=-116 [ 77.659938][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.675303][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.678'. [ 77.684239][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.678'. [ 77.693407][ T6855] EXT4-fs (loop0): Remounting filesystem read-only [ 77.705110][ T6854] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.736160][ T6855] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 77.748820][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.678'. [ 77.757732][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.5.678'. [ 77.784182][ T6864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.678'. [ 77.795493][ T6855] EXT4-fs (loop0): 1 orphan inode deleted [ 77.813726][ T6871] tmpfs: Unknown parameter 'dA.q-z>xj!0LȚ-qTQ8iH\va^oYNg] [ 78.199212][ T6861] __dump_stack+0x1d/0x30 [ 78.199257][ T6861] dump_stack_lvl+0x95/0xd0 [ 78.199314][ T6861] dump_stack+0x15/0x1b [ 78.199334][ T6861] should_fail_ex+0x265/0x280 [ 78.199438][ T6861] should_fail+0xb/0x20 [ 78.199458][ T6861] should_fail_usercopy+0x1a/0x20 [ 78.199564][ T6861] strncpy_from_user+0x27/0x260 [ 78.199591][ T6861] getname_flags+0xae/0x3b0 [ 78.199612][ T6861] __x64_sys_mkdirat+0x40/0x60 [ 78.199693][ T6861] x64_sys_call+0x30c/0x3000 [ 78.199714][ T6861] do_syscall_64+0xca/0x2b0 [ 78.199788][ T6861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.199865][ T6861] RIP: 0033:0x7fb0ce3cde97 [ 78.199879][ T6861] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.199894][ T6861] RSP: 002b:00007fb0cce36e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 78.199911][ T6861] RAX: ffffffffffffffda RBX: 00007fb0cce36ef0 RCX: 00007fb0ce3cde97 [ 78.199924][ T6861] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 78.199936][ T6861] RBP: 0000200000000180 R08: 0000200000000000 R09: 0000000000000000 [ 78.199949][ T6861] R10: 0000200000000180 R11: 0000000000000246 R12: 0000200000000100 [ 78.200031][ T6861] R13: 00007fb0cce36eb0 R14: 0000000000000000 R15: 00002000000001c0 [ 78.200050][ T6861] [ 78.201099][ T6861] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 78.201615][ T6887] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 78.376420][ T6887] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 78.386936][ T6887] EXT4-fs (loop1): 1 truncate cleaned up [ 78.397685][ T6887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.414531][ T6887] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 78.416708][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.489486][ T6887] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 78.502539][ T6913] xt_hashlimit: max too large, truncated to 1048576 [ 78.514189][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.663868][ T6934] loop0: detected capacity change from 0 to 256 [ 78.672372][ T6936] loop1: detected capacity change from 0 to 164 [ 78.764529][ T6943] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.784258][ T6945] loop5: detected capacity change from 0 to 512 [ 78.829636][ T6945] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 78.910595][ T6945] EXT4-fs (loop5): mount failed [ 78.995363][ T6940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.050837][ T6940] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.087837][ T6940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.131537][ T6956] netlink: 'syz.6.706': attribute type 26 has an invalid length. [ 79.458287][ T6979] lo speed is unknown, defaulting to 1000 [ 79.587447][ T6982] loop5: detected capacity change from 0 to 764 [ 79.602888][ T6971] loop6: detected capacity change from 0 to 512 [ 79.621816][ T6982] rock: directory entry would overflow storage [ 79.628105][ T6982] rock: sig=0x5245, size=8, remaining=5 [ 79.643154][ T6971] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 79.682124][ T6971] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 79.748822][ T6989] loop2: detected capacity change from 0 to 2048 [ 79.769616][ T6971] EXT4-fs (loop6): 1 truncate cleaned up [ 79.775691][ T6971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.853807][ T6993] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.862085][ T6996] loop0: detected capacity change from 0 to 164 [ 79.871533][ T3310] Alternate GPT is invalid, using primary GPT. [ 79.878015][ T3310] loop2: p2 p3 p7 [ 79.878880][ T6997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.921088][ T6997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.935711][ T6993] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.953124][ T6989] Alternate GPT is invalid, using primary GPT. [ 79.959650][ T6989] loop2: p2 p3 p7 [ 79.962747][ T6997] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.984508][ T6981] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.000286][ T6993] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.029620][ T6997] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.723: Failed to acquire dquot type 0 [ 80.080453][ T7004] program syz.0.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.090863][ T7004] blktrace: Concurrent blktraces are not allowed on sg0 [ 80.096705][ T6997] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.723: Failed to acquire dquot type 0 [ 80.110282][ T6993] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.149432][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.168143][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 80.179129][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 80.200719][ T4114] udevd[4114]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 80.247637][ T3619] udevd[3619]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 80.266604][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 80.282883][ T4114] udevd[4114]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 80.293785][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 80.988491][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 80.988506][ T29] audit: type=1326 audit(1767789492.382:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.115324][ T29] audit: type=1326 audit(1767789492.382:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.138816][ T29] audit: type=1326 audit(1767789492.462:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.163627][ T29] audit: type=1326 audit(1767789492.462:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.186963][ T29] audit: type=1326 audit(1767789492.462:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.210421][ T29] audit: type=1326 audit(1767789492.462:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.233807][ T29] audit: type=1326 audit(1767789492.462:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.258379][ T29] audit: type=1326 audit(1767789492.462:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.281755][ T29] audit: type=1326 audit(1767789492.462:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.305259][ T29] audit: type=1326 audit(1767789492.472:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7032 comm="syz.1.735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6184bef749 code=0x7ffc0000 [ 81.341519][ T7039] netlink: '+}[@': attribute type 30 has an invalid length. [ 81.352410][ T2455] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.401406][ T2455] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.430163][ T7045] program syz.6.740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.448235][ T2455] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.459027][ T7045] blktrace: Concurrent blktraces are not allowed on sg0 [ 81.488420][ T2455] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.541509][ T7051] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.573938][ T7051] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 81.639456][ T7024] syz.0.732 (7024) used greatest stack depth: 6216 bytes left [ 81.693595][ T7037] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.722016][ T7037] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 81.741297][ T7037] EXT4-fs (loop2): 1 truncate cleaned up [ 81.818231][ T7037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.841130][ T7037] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 81.937741][ T7057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.951221][ T7057] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.960584][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.136512][ T7063] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 82.154837][ T7076] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20004 [ 82.216303][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237939][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.256697][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.274621][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.352517][ T7092] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.369220][ T7092] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 82.381510][ T7095] __nla_validate_parse: 17 callbacks suppressed [ 82.381523][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 82.396563][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'. [ 82.399627][ T7096] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.458972][ T52] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.468902][ T52] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.511637][ T52] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.537914][ T4780] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.582166][ T52] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.633854][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 82.661470][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'. [ 82.684843][ T7114] kthread_run failed with err -4 [ 82.753239][ T7121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.796582][ T7121] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.762: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 82.829372][ T7121] EXT4-fs (loop1): Remounting filesystem read-only [ 82.911765][ T7109] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 82.950848][ T7109] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 82.970774][ T7109] EXT4-fs (loop6): 1 truncate cleaned up [ 82.976985][ T7109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.992632][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.047874][ T7109] FAULT_INJECTION: forcing a failure. [ 83.047874][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.061018][ T7109] CPU: 0 UID: 0 PID: 7109 Comm: syz.6.757 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.061042][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.061054][ T7109] Call Trace: [ 83.061061][ T7109] [ 83.061070][ T7109] __dump_stack+0x1d/0x30 [ 83.061113][ T7109] dump_stack_lvl+0x95/0xd0 [ 83.061174][ T7109] dump_stack+0x15/0x1b [ 83.061195][ T7109] should_fail_ex+0x265/0x280 [ 83.061219][ T7109] should_fail+0xb/0x20 [ 83.061238][ T7109] should_fail_usercopy+0x1a/0x20 [ 83.061339][ T7109] _copy_from_user+0x1c/0xb0 [ 83.061365][ T7109] __se_sys_mount+0x10d/0x2e0 [ 83.061390][ T7109] __x64_sys_mount+0x67/0x80 [ 83.061411][ T7109] x64_sys_call+0x2cca/0x3000 [ 83.061510][ T7109] do_syscall_64+0xca/0x2b0 [ 83.061543][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.061596][ T7109] RIP: 0033:0x7f0d1dfe0eea [ 83.061612][ T7109] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.061630][ T7109] RSP: 002b:00007f0d1ca46e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.061652][ T7109] RAX: ffffffffffffffda RBX: 00007f0d1ca46ef0 RCX: 00007f0d1dfe0eea [ 83.061665][ T7109] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 83.061679][ T7109] RBP: 0000200000000180 R08: 00007f0d1ca46ef0 R09: 0000000000000061 [ 83.061762][ T7109] R10: 0000000000000061 R11: 0000000000000246 R12: 0000200000000100 [ 83.061774][ T7109] R13: 00007f0d1ca46eb0 R14: 0000000000000000 R15: 00002000000001c0 [ 83.061870][ T7109] [ 83.063586][ T7109] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.091324][ T7151] set_capacity_and_notify: 10 callbacks suppressed [ 83.091346][ T7151] loop1: detected capacity change from 0 to 164 [ 83.242961][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.281022][ T7129] loop0: detected capacity change from 0 to 1024 [ 83.322512][ T7129] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 83.334139][ T7129] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 83.353936][ T7129] JBD2: no valid journal superblock found [ 83.360367][ T7129] EXT4-fs (loop0): Could not load journal inode [ 83.390000][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.772'. [ 83.400170][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.6.772'. [ 83.588310][ T7163] lo speed is unknown, defaulting to 1000 [ 84.162119][ T7182] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.197888][ T7180] ipvlan0: entered promiscuous mode [ 84.207973][ T7184] loop1: detected capacity change from 0 to 512 [ 84.315642][ T7184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.380883][ T7184] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.572108][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.615666][ T7205] loop6: detected capacity change from 0 to 164 [ 85.664289][ T7255] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.730653][ T7255] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.782236][ T7255] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.841139][ T7255] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.903017][ T5548] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.926379][ T5548] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.952213][ T7270] loop2: detected capacity change from 0 to 256 [ 85.968910][ T5548] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.982221][ T5548] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.990694][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 85.990705][ T29] audit: type=1326 audit(1767789497.392:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb0ce3cf749 code=0x7ffc0000 [ 86.026801][ T7270] loop2: detected capacity change from 0 to 512 [ 86.061811][ T7270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.112316][ T29] audit: type=1326 audit(1767789497.432:6567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0ce3cf783 code=0x7ffc0000 [ 86.135675][ T29] audit: type=1326 audit(1767789497.432:6568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0ce3ce1ff code=0x7ffc0000 [ 86.158881][ T29] audit: type=1326 audit(1767789497.432:6569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb0ce3cf7d7 code=0x7ffc0000 [ 86.182143][ T29] audit: type=1326 audit(1767789497.432:6570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0ce3cdf90 code=0x7ffc0000 [ 86.205526][ T29] audit: type=1326 audit(1767789497.432:6571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb0ce3cf34b code=0x7ffc0000 [ 86.228758][ T29] audit: type=1326 audit(1767789497.452:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0ce3ce3aa code=0x7ffc0000 [ 86.242341][ T7270] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.251937][ T29] audit: type=1326 audit(1767789497.452:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0ce3ce3aa code=0x7ffc0000 [ 86.285526][ T29] audit: type=1326 audit(1767789497.452:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb0ce3cde97 code=0x7ffc0000 [ 86.308827][ T29] audit: type=1326 audit(1767789497.452:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7269 comm="syz.2.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb0ce3d0eea code=0x7ffc0000 [ 86.372718][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.389376][ T7282] loop6: detected capacity change from 0 to 128 [ 86.409248][ T7282] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.438166][ T7286] capability: warning: `syz.0.811' uses 32-bit capabilities (legacy support in use) [ 86.467556][ T7282] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.498053][ T7286] program syz.0.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.543409][ T7286] loop0: detected capacity change from 0 to 512 [ 86.723609][ T7303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.772792][ T7304] loop6: detected capacity change from 0 to 128 [ 86.784068][ T7305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.799559][ T7304] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.835785][ T7304] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.848498][ T7307] loop5: detected capacity change from 0 to 256 [ 86.885712][ T7307] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.922657][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.820'. [ 86.962598][ T7307] lo speed is unknown, defaulting to 1000 [ 86.969145][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.820'. [ 87.346830][ T7345] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.410200][ T7345] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.425988][ T7341] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.445145][ T7359] netlink: 19 bytes leftover after parsing attributes in process `syz.2.833'. [ 87.530407][ T7345] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.630905][ T7345] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.701301][ T7386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.906883][ T2207] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.931195][ T2207] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.951603][ T2207] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.967934][ T2207] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.162315][ T7429] set_capacity_and_notify: 3 callbacks suppressed [ 88.162333][ T7429] loop6: detected capacity change from 0 to 512 [ 88.217827][ T7409] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.219654][ T7433] loop2: detected capacity change from 0 to 164 [ 88.234987][ T7429] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.258908][ T7429] EXT4-fs (loop6): mount failed [ 88.311019][ T7435] lo speed is unknown, defaulting to 1000 [ 88.376654][ T7435] loop0: detected capacity change from 0 to 1024 [ 88.383451][ T7435] EXT4-fs: Ignoring removed orlov option [ 88.389159][ T7435] ext4: Unknown parameter 'fsname' [ 88.582310][ T7442] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7442 comm=syz.6.866 [ 88.717389][ T7445] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.225840][ T7475] sd 0:0:1:0: device reset [ 89.342491][ T7471] lo speed is unknown, defaulting to 1000 [ 90.092099][ T7492] loop6: detected capacity change from 0 to 8192 [ 90.124052][ T7492] loop6: detected capacity change from 0 to 128 [ 90.319095][ T7510] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.949403][ T7524] loop1: detected capacity change from 0 to 512 [ 90.959397][ T7524] EXT4-fs: Ignoring removed oldalloc option [ 90.978850][ T7524] EXT4-fs: Ignoring removed i_version option [ 90.984996][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.002088][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 91.002101][ T29] audit: type=1400 audit(90.979:7162): avc: denied { ioctl } for pid=7520 comm="syz.2.888" path="socket:[17756]" dev="sockfs" ino=17756 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.036515][ T7524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.052360][ T29] audit: type=1400 audit(90.979:7163): avc: denied { accept } for pid=7520 comm="syz.2.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.088563][ T7524] EXT4-fs (loop1): 1 truncate cleaned up [ 91.140039][ T7527] loop6: detected capacity change from 0 to 8192 [ 91.184867][ T7533] loop2: detected capacity change from 0 to 164 [ 91.220658][ T7527] loop6: detected capacity change from 0 to 128 [ 91.275152][ T7539] loop5: detected capacity change from 0 to 512 [ 91.428458][ T7541] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 91.436972][ T7541] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 91.446458][ T7541] EXT4-fs (loop2): 1 truncate cleaned up [ 91.529626][ T7541] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.916997][ T7570] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.902: error while reading EA inode 32 err=-116 [ 91.937236][ T7570] EXT4-fs (loop5): Remounting filesystem read-only [ 91.945571][ T7570] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 91.955818][ T7570] EXT4-fs (loop5): 1 orphan inode deleted [ 91.965123][ T7570] netlink: 'syz.5.902': attribute type 3 has an invalid length. [ 91.995092][ T4149] buffer_io_error: 4 callbacks suppressed [ 91.995107][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.009033][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.016845][ T4149] loop9: unable to read partition table [ 92.047180][ T7578] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.057745][ T7570] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.078419][ T7570] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.086295][ T7570] loop9: unable to read partition table [ 92.552388][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.561233][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.570056][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.603831][ T7570] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 92.603831][ T7570] ) failed (rc=-5) [ 92.635815][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.705388][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.714257][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.723202][ T7583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 92.734368][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.024188][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.032367][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.040633][ T4149] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.172124][ T29] audit: type=1400 audit(93.149:7164): avc: denied { name_bind } for pid=7603 comm="syz.0.910" src=65535 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 93.222698][ T7614] set_capacity_and_notify: 5 callbacks suppressed [ 93.222720][ T7614] loop6: detected capacity change from 0 to 512 [ 93.246067][ T7614] EXT4-fs: Ignoring removed oldalloc option [ 93.259974][ T7614] EXT4-fs: Ignoring removed i_version option [ 93.266073][ T7614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.274264][ T7614] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 93.285225][ T7614] EXT4-fs (loop6): 1 truncate cleaned up [ 93.920776][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 93.929603][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 93.938565][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 94.009939][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'. [ 94.026366][ T29] audit: type=1326 audit(93.999:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.189851][ T7636] loop0: detected capacity change from 0 to 512 [ 94.208534][ T29] audit: type=1326 audit(94.029:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.231312][ T29] audit: type=1326 audit(94.079:7167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.253984][ T29] audit: type=1326 audit(94.079:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.276711][ T29] audit: type=1326 audit(94.079:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.299368][ T29] audit: type=1326 audit(94.089:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.322020][ T29] audit: type=1326 audit(94.089:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 94.329309][ T7636] ext4: Unknown parameter 'subj_role' [ 94.466601][ T100] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.475190][ T7646] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 94.493886][ T7646] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.648754][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.667051][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.843239][ T7644] syz.2.919 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 94.857378][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.2.919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.857469][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.857481][ T7644] Call Trace: [ 94.857488][ T7644] [ 94.857496][ T7644] __dump_stack+0x1d/0x30 [ 94.857519][ T7644] dump_stack_lvl+0x95/0xd0 [ 94.857538][ T7644] dump_stack+0x15/0x1b [ 94.857597][ T7644] dump_header+0x81/0x240 [ 94.857663][ T7644] oom_kill_process+0x295/0x350 [ 94.857676][ T7644] out_of_memory+0x97b/0xb80 [ 94.857714][ T7644] try_charge_memcg+0x610/0xa10 [ 94.857738][ T7644] obj_cgroup_charge_pages+0xa6/0x150 [ 94.857851][ T7644] __memcg_kmem_charge_page+0x9f/0x170 [ 94.857867][ T7644] __alloc_frozen_pages_noprof+0x18f/0x360 [ 94.857959][ T7644] alloc_pages_mpol+0xb3/0x260 [ 94.857987][ T7644] alloc_pages_noprof+0x90/0x130 [ 94.858011][ T7644] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 94.858084][ T7644] __kvmalloc_node_noprof+0x492/0x6b0 [ 94.858187][ T7644] ? ip_set_alloc+0x24/0x30 [ 94.858290][ T7644] ? ip_set_alloc+0x24/0x30 [ 94.858321][ T7644] ip_set_alloc+0x24/0x30 [ 94.858349][ T7644] hash_netiface_create+0x282/0x740 [ 94.858455][ T7644] ? __pfx_hash_netiface_create+0x10/0x10 [ 94.858485][ T7644] ip_set_create+0x3cc/0x970 [ 94.858528][ T7644] nfnetlink_rcv_msg+0x4c6/0x590 [ 94.858567][ T7644] netlink_rcv_skb+0x123/0x220 [ 94.858599][ T7644] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 94.858630][ T7644] nfnetlink_rcv+0x167/0x16c0 [ 94.858727][ T7644] ? __list_del_entry_valid_or_report+0x65/0x130 [ 94.858809][ T7644] ? __rmqueue_pcplist+0x9c2/0xb90 [ 94.858838][ T7644] ? should_fail_ex+0x30/0x280 [ 94.858861][ T7644] ? selinux_nlmsg_lookup+0x99/0x890 [ 94.858884][ T7644] ? __rcu_read_unlock+0x34/0x70 [ 94.858901][ T7644] ? __netlink_lookup+0x266/0x2a0 [ 94.858930][ T7644] netlink_unicast+0x5c0/0x690 [ 94.858953][ T7644] netlink_sendmsg+0x58b/0x6b0 [ 94.859074][ T7644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.859098][ T7644] __sock_sendmsg+0x145/0x180 [ 94.859115][ T7644] ____sys_sendmsg+0x31e/0x4a0 [ 94.859139][ T7644] ___sys_sendmsg+0x17b/0x1d0 [ 94.859232][ T7644] __x64_sys_sendmsg+0xd4/0x160 [ 94.859258][ T7644] x64_sys_call+0x17ba/0x3000 [ 94.859278][ T7644] do_syscall_64+0xca/0x2b0 [ 94.859372][ T7644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.859390][ T7644] RIP: 0033:0x7fb0ce3cf749 [ 94.859404][ T7644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.859420][ T7644] RSP: 002b:00007fb0cce37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.859437][ T7644] RAX: ffffffffffffffda RBX: 00007fb0ce625fa0 RCX: 00007fb0ce3cf749 [ 94.859448][ T7644] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 94.859498][ T7644] RBP: 00007fb0ce453f91 R08: 0000000000000000 R09: 0000000000000000 [ 94.859509][ T7644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.859520][ T7644] R13: 00007fb0ce626038 R14: 00007fb0ce625fa0 R15: 00007ffd538da398 [ 94.859536][ T7644] [ 95.157885][ T7644] memory: usage 307200kB, limit 307200kB, failcnt 595 [ 95.164675][ T7644] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 95.172584][ T7644] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 95.179921][ T7644] Memory cgroup stats for /syz2: [ 95.180209][ T7644] cache 0 [ 95.188044][ T7644] rss 0 [ 95.190865][ T7644] shmem 0 [ 95.193787][ T7644] mapped_file 0 [ 95.197247][ T7644] dirty 0 [ 95.200191][ T7644] writeback 0 [ 95.203470][ T7644] workingset_refault_anon 288 [ 95.208119][ T7644] workingset_refault_file 2412 [ 95.212895][ T7644] swap 372736 [ 95.216164][ T7644] swapcached 4096 [ 95.219801][ T7644] pgpgin 128035 [ 95.223445][ T7644] pgpgout 128033 [ 95.227431][ T7644] pgfault 109517 [ 95.231076][ T7644] pgmajfault 78 [ 95.234790][ T7644] inactive_anon 0 [ 95.238414][ T7644] active_anon 0 [ 95.241895][ T7644] inactive_file 0 [ 95.245521][ T7644] active_file 4096 [ 95.249298][ T7644] unevictable 0 [ 95.252750][ T7644] hierarchical_memory_limit 314572800 [ 95.258186][ T7644] hierarchical_memsw_limit 9223372036854771712 [ 95.264399][ T7644] total_cache 0 [ 95.267850][ T7644] total_rss 0 [ 95.271142][ T7644] total_shmem 0 [ 95.274628][ T7644] total_mapped_file 0 [ 95.278623][ T7644] total_dirty 0 [ 95.282128][ T7644] total_writeback 0 [ 95.285947][ T7644] total_workingset_refault_anon 288 [ 95.291157][ T7644] total_workingset_refault_file 2412 [ 95.296517][ T7644] total_swap 372736 [ 95.300342][ T7644] total_swapcached 4096 [ 95.304479][ T7644] total_pgpgin 128035 [ 95.308562][ T7644] total_pgpgout 128033 [ 95.312804][ T7644] total_pgfault 109517 [ 95.316124][ T7663] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.316892][ T7644] total_pgmajfault 78 [ 95.331301][ T7644] total_inactive_anon 0 [ 95.335476][ T7644] total_active_anon 0 [ 95.339515][ T7644] total_inactive_file 0 [ 95.343667][ T7644] total_active_file 4096 [ 95.347949][ T7644] total_unevictable 0 [ 95.351954][ T7644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.919,pid=7642,uid=0 [ 95.366754][ T7644] Memory cgroup out of memory: Killed process 7642 (syz.2.919) total-vm:93836kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 95.591987][ T7673] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.635317][ T7675] loop5: detected capacity change from 0 to 164 [ 95.647238][ T7671] loop2: detected capacity change from 0 to 128 [ 95.890230][ T7687] loop0: detected capacity change from 0 to 164 [ 95.990716][ T7689] loop0: detected capacity change from 0 to 164 [ 96.053030][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 96.053047][ T29] audit: type=1400 audit(96.029:7274): avc: denied { append } for pid=7690 comm="syz.0.936" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 96.165625][ T29] audit: type=1400 audit(96.119:7275): avc: denied { ioctl } for pid=7693 comm="syz.5.937" path="socket:[18196]" dev="sockfs" ino=18196 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.189651][ T29] audit: type=1400 audit(96.119:7276): avc: denied { write } for pid=7693 comm="syz.5.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 96.364819][ T7694] loop2: detected capacity change from 0 to 512 [ 96.381003][ T7694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.390854][ T7694] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.419473][ T7694] EXT4-fs (loop2): 1 truncate cleaned up [ 96.500277][ T7707] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 96.530173][ T3848] Bluetooth: hci0: command 0x1003 tx timeout [ 96.536296][ T5292] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.628031][ T29] audit: type=1326 audit(96.599:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.807254][ T29] audit: type=1326 audit(96.629:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.830044][ T29] audit: type=1326 audit(96.629:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.852717][ T29] audit: type=1326 audit(96.629:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.875327][ T29] audit: type=1326 audit(96.639:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.897937][ T29] audit: type=1326 audit(96.639:7282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 96.920604][ T29] audit: type=1326 audit(96.639:7283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7710 comm="syz.6.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d1dfdf749 code=0x7ffc0000 [ 97.004439][ T7715] loop2: detected capacity change from 0 to 164 [ 97.071003][ T7722] loop0: detected capacity change from 0 to 164 [ 97.208834][ T7736] loop1: detected capacity change from 0 to 512 [ 97.228764][ T7736] EXT4-fs mount: 19 callbacks suppressed [ 97.228779][ T7736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.277343][ T7732] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.597383][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.634463][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.153742][ T7795] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.173145][ T7795] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.182289][ T7800] __nla_validate_parse: 10 callbacks suppressed [ 98.182303][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 98.200654][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.969'. [ 98.252226][ T7802] set_capacity_and_notify: 6 callbacks suppressed [ 98.252243][ T7802] loop6: detected capacity change from 0 to 512 [ 98.289876][ T7798] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.302634][ T7802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.342436][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.446466][ T7828] loop6: detected capacity change from 0 to 1024 [ 98.491477][ T7828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.523888][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'. [ 98.540147][ T7830] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.573284][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.583595][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.610785][ T7830] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.624926][ T7836] loop6: detected capacity change from 0 to 512 [ 98.642237][ T7836] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.981: error while reading EA inode 32 err=-116 [ 98.670098][ T7836] EXT4-fs (loop6): Remounting filesystem read-only [ 98.672917][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 98.686249][ T7836] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 98.710005][ T7830] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.719419][ T7836] EXT4-fs (loop6): 1 orphan inode deleted [ 98.733782][ T7836] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.752429][ T7830] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.755603][ T7836] netlink: 'syz.6.981': attribute type 3 has an invalid length. [ 98.795296][ T7836] loop9: detected capacity change from 0 to 7 [ 98.802269][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.810520][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.818344][ T4114] loop9: unable to read partition table [ 98.824589][ T7836] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.833596][ T7836] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.841457][ T7836] loop9: unable to read partition table [ 98.853396][ T1007] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.872708][ T1007] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.881712][ T7836] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 98.881712][ T7836] ) failed (rc=-5) [ 98.895370][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.903574][ T1007] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.912040][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.920187][ T1007] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.942859][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.956736][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.969212][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.986564][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 98.997074][ T7853] loop2: detected capacity change from 0 to 512 [ 99.016194][ T7853] EXT4-fs: Ignoring removed oldalloc option [ 99.037634][ T7853] EXT4-fs: Ignoring removed i_version option [ 99.043797][ T7853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.054214][ T7853] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.065922][ T7853] EXT4-fs (loop2): 1 truncate cleaned up [ 99.072092][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.744469][ T7876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.993'. [ 99.763011][ T7877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 99.871165][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.932620][ T7887] loop2: detected capacity change from 0 to 164 [ 99.951635][ T7884] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.027536][ T7879] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 100.049179][ T7884] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.105043][ T7896] netlink: 'syz.2.998': attribute type 1 has an invalid length. [ 100.112810][ T7896] netlink: 'syz.2.998': attribute type 2 has an invalid length. [ 100.121081][ T7884] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.127203][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 100.190229][ T7884] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 100.297811][ T1007] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.333258][ T1007] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.363407][ T1007] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.393076][ T1007] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.678426][ T7932] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.008193][ T7936] loop0: detected capacity change from 0 to 128 [ 101.026614][ T7936] vfat: Unknown parameter '000000000000000007270x000000000000000601777777777777777777777" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 101.065701][ T29] kauditd_printk_skb: 1002 callbacks suppressed [ 101.065714][ T29] audit: type=1326 audit(101.039:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd277b4df90 code=0x7ffc0000 [ 101.104740][ T7920] syz.1.1006 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 101.115876][ T7920] CPU: 1 UID: 0 PID: 7920 Comm: syz.1.1006 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.115906][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.115918][ T7920] Call Trace: [ 101.115926][ T7920] [ 101.115934][ T7920] __dump_stack+0x1d/0x30 [ 101.115956][ T7920] dump_stack_lvl+0x95/0xd0 [ 101.116049][ T7920] dump_stack+0x15/0x1b [ 101.116083][ T7920] dump_header+0x81/0x240 [ 101.116101][ T7920] oom_kill_process+0x295/0x350 [ 101.116128][ T7920] out_of_memory+0x97b/0xb80 [ 101.116147][ T7920] try_charge_memcg+0x610/0xa10 [ 101.116186][ T7920] charge_memcg+0x51/0xc0 [ 101.116228][ T7920] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 101.116327][ T7920] __read_swap_cache_async+0x17b/0x2d0 [ 101.116358][ T7920] swap_cluster_readahead+0x262/0x3c0 [ 101.116392][ T7920] swapin_readahead+0xde/0x820 [ 101.116473][ T7920] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 101.116497][ T7920] ? lruvec_stat_mod_folio+0xd6/0x120 [ 101.116520][ T7920] ? __rcu_read_unlock+0x4f/0x70 [ 101.116541][ T7920] ? swap_cache_get_folio+0x277/0x280 [ 101.116632][ T7920] do_swap_page+0x2b4/0x21e0 [ 101.116660][ T7920] ? __pfx_default_wake_function+0x10/0x10 [ 101.116688][ T7920] handle_mm_fault+0x9d8/0x2c60 [ 101.116723][ T7920] do_user_addr_fault+0x630/0x1080 [ 101.116775][ T7920] exc_page_fault+0x62/0xa0 [ 101.116799][ T7920] asm_exc_page_fault+0x26/0x30 [ 101.116817][ T7920] RIP: 0033:0x7f6184ac59ec [ 101.116832][ T7920] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 101.116874][ T7920] RSP: 002b:00007ffee02ff8e0 EFLAGS: 00010206 [ 101.116892][ T7920] RAX: 0000000000000000 RBX: 00007f6184e45fa0 RCX: 0000000000000000 [ 101.116906][ T7920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555584c10808 [ 101.116919][ T7920] RBP: 00007f6184e47da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 101.116998][ T7920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000018b73 [ 101.117019][ T7920] R13: 00007ffee02ff9d0 R14: ffffffffffffffff R15: 00007ffee02ff9f0 [ 101.117037][ T7920] [ 101.117044][ T7920] memory: usage 307200kB, limit 307200kB, failcnt 421 [ 101.136044][ T29] audit: type=1326 audit(101.079:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd277b4f34b code=0x7ffc0000 [ 101.136882][ T7920] memory+swap: usage 307856kB, limit 9007199254740988kB, failcnt 0 [ 101.140143][ T29] audit: type=1326 audit(101.079:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd277b4e3aa code=0x7ffc0000 [ 101.143045][ T7920] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 101.147364][ T29] audit: type=1326 audit(101.079:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.151887][ T7920] Memory cgroup stats for /syz1 [ 101.156041][ T29] audit: type=1326 audit(101.079:8290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7935 comm="syz.0.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.160357][ T7920] : [ 101.163543][ T7920] cache 0 [ 101.447469][ T7920] rss 0 [ 101.450241][ T7920] shmem 0 [ 101.453216][ T7920] mapped_file 1576960 [ 101.457194][ T7920] dirty 0 [ 101.460134][ T7920] writeback 8192 [ 101.463664][ T7920] workingset_refault_anon 45 [ 101.468247][ T7920] workingset_refault_file 2394 [ 101.473109][ T7920] swap 671744 [ 101.476376][ T7920] swapcached 8192 [ 101.480017][ T7920] pgpgin 177137 [ 101.483663][ T7920] pgpgout 177135 [ 101.487197][ T7920] pgfault 77917 [ 101.490761][ T7920] pgmajfault 18 [ 101.494224][ T7920] inactive_anon 8192 [ 101.498097][ T7920] active_anon 0 [ 101.501645][ T7920] inactive_file 0 [ 101.505268][ T7920] active_file 0 [ 101.508742][ T7920] unevictable 0 [ 101.512196][ T7920] hierarchical_memory_limit 314572800 [ 101.518253][ T7920] hierarchical_memsw_limit 9223372036854771712 [ 101.524453][ T7920] total_cache 0 [ 101.527897][ T7920] total_rss 0 [ 101.531268][ T7920] total_shmem 0 [ 101.534708][ T7920] total_mapped_file 1576960 [ 101.539230][ T7920] total_dirty 0 [ 101.542677][ T7920] total_writeback 8192 [ 101.546733][ T7920] total_workingset_refault_anon 45 [ 101.551880][ T7920] total_workingset_refault_file 2394 [ 101.557152][ T7920] total_swap 671744 [ 101.560996][ T7920] total_swapcached 8192 [ 101.565159][ T7920] total_pgpgin 177137 [ 101.569238][ T7920] total_pgpgout 177135 [ 101.573293][ T7920] total_pgfault 77917 [ 101.577259][ T7920] total_pgmajfault 18 [ 101.581280][ T7920] total_inactive_anon 8192 [ 101.585693][ T7920] total_active_anon 0 [ 101.589771][ T7920] total_inactive_file 0 [ 101.593925][ T7920] total_active_file 0 [ 101.597927][ T7920] total_unevictable 0 [ 101.598440][ T29] audit: type=1326 audit(101.569:8291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.601928][ T7920] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.791,pid=7222,uid=0 [ 101.639207][ T7920] Memory cgroup out of memory: Killed process 7222 (syz.1.791) total-vm:95508kB, anon-rss:1156kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 101.645052][ T29] audit: type=1326 audit(101.609:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.679094][ T29] audit: type=1326 audit(101.609:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.688953][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 101.701895][ T29] audit: type=1326 audit(101.609:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.701922][ T29] audit: type=1326 audit(101.609:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7940 comm="syz.0.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 101.758316][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.758340][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.758351][ T3316] Call Trace: [ 101.758357][ T3316] [ 101.758364][ T3316] __dump_stack+0x1d/0x30 [ 101.758466][ T3316] dump_stack_lvl+0x95/0xd0 [ 101.758567][ T3316] dump_stack+0x15/0x1b [ 101.758584][ T3316] dump_header+0x81/0x240 [ 101.758601][ T3316] oom_kill_process+0x295/0x350 [ 101.758622][ T3316] out_of_memory+0x97b/0xb80 [ 101.758646][ T3316] try_charge_memcg+0x610/0xa10 [ 101.758690][ T3316] charge_memcg+0x51/0xc0 [ 101.758764][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 101.758832][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 101.758863][ T3316] swap_cluster_readahead+0x262/0x3c0 [ 101.758965][ T3316] swapin_readahead+0xde/0x820 [ 101.758988][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 101.759006][ T3316] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 101.759029][ T3316] ? __list_add_valid_or_report+0x38/0xe0 [ 101.759075][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 101.759110][ T3316] ? swap_cache_get_folio+0x277/0x280 [ 101.759133][ T3316] do_swap_page+0x2b4/0x21e0 [ 101.759220][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 101.759240][ T3316] ? __schedule+0x85f/0xcd0 [ 101.759273][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 101.759301][ T3316] handle_mm_fault+0x9d8/0x2c60 [ 101.759332][ T3316] do_user_addr_fault+0x630/0x1080 [ 101.759363][ T3316] exc_page_fault+0x62/0xa0 [ 101.759461][ T3316] asm_exc_page_fault+0x26/0x30 [ 101.759479][ T3316] RIP: 0033:0x7f6184c21fc5 [ 101.759495][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 101.759514][ T3316] RSP: 002b:00007ffee02ffab8 EFLAGS: 00010246 [ 101.759605][ T3316] RAX: 0000000000000000 RBX: 0000000000000259 RCX: 00007f6184c21fc3 [ 101.759616][ T3316] RDX: 00007ffee02ffad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.759627][ T3316] RBP: 00007ffee02ffb3c R08: 00000000024e84e2 R09: 0000000000000000 [ 101.759710][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 101.759721][ T3316] R13: 00000000000927c0 R14: 0000000000018862 R15: 00007ffee02ffb90 [ 101.759737][ T3316] [ 101.981370][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 492 [ 101.988258][ T3316] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 101.996201][ T3316] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 102.003586][ T3316] Memory cgroup stats for /syz1: [ 102.004060][ T3316] cache 4096 [ 102.012252][ T3316] rss 36864 [ 102.015353][ T3316] shmem 0 [ 102.018361][ T3316] mapped_file 1581056 [ 102.022417][ T3316] dirty 4096 [ 102.025609][ T3316] writeback 0 [ 102.025616][ T3316] workingset_refault_anon 77 [ 102.025623][ T3316] workingset_refault_file 2403 [ 102.025629][ T3316] swap 528384 [ 102.025635][ T3316] swapcached 36864 [ 102.045227][ T3316] pgpgin 177179 [ 102.048840][ T3316] pgpgout 177167 [ 102.052404][ T3316] pgfault 77947 [ 102.055854][ T3316] pgmajfault 41 [ 102.059437][ T3316] inactive_anon 20480 [ 102.063482][ T3316] active_anon 12288 [ 102.067280][ T3316] inactive_file 4096 [ 102.071239][ T3316] active_file 0 [ 102.074861][ T3316] unevictable 0 [ 102.078345][ T3316] hierarchical_memory_limit 314572800 [ 102.083790][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 102.089988][ T3316] total_cache 4096 [ 102.093735][ T3316] total_rss 36864 [ 102.097365][ T3316] total_shmem 0 [ 102.100841][ T3316] total_mapped_file 1581056 [ 102.105408][ T3316] total_dirty 4096 [ 102.109148][ T3316] total_writeback 0 [ 102.112988][ T3316] total_workingset_refault_anon 77 [ 102.118181][ T3316] total_workingset_refault_file 2403 [ 102.123485][ T3316] total_swap 528384 [ 102.127358][ T3316] total_swapcached 36864 [ 102.131692][ T3316] total_pgpgin 177179 [ 102.135699][ T3316] total_pgpgout 177167 [ 102.139782][ T3316] total_pgfault 77947 [ 102.143795][ T3316] total_pgmajfault 41 [ 102.147837][ T3316] total_inactive_anon 20480 [ 102.152346][ T3316] total_active_anon 12288 [ 102.156721][ T3316] total_inactive_file 4096 [ 102.161151][ T3316] total_active_file 0 [ 102.165119][ T3316] total_unevictable 0 [ 102.169101][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.791,pid=7219,uid=0 [ 102.183660][ T3316] Memory cgroup out of memory: Killed process 7219 (syz.1.791) total-vm:95508kB, anon-rss:1156kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 102.327831][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 102.338776][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.338805][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.338819][ T3316] Call Trace: [ 102.338826][ T3316] [ 102.338836][ T3316] __dump_stack+0x1d/0x30 [ 102.338912][ T3316] dump_stack_lvl+0x95/0xd0 [ 102.338993][ T3316] dump_stack+0x15/0x1b [ 102.339013][ T3316] dump_header+0x81/0x240 [ 102.339035][ T3316] oom_kill_process+0x295/0x350 [ 102.339074][ T3316] out_of_memory+0x97b/0xb80 [ 102.339098][ T3316] try_charge_memcg+0x610/0xa10 [ 102.339142][ T3316] charge_memcg+0x51/0xc0 [ 102.339288][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 102.339384][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 102.339469][ T3316] swap_cluster_readahead+0x362/0x3c0 [ 102.339500][ T3316] swapin_readahead+0xde/0x820 [ 102.339527][ T3316] ? update_load_avg+0x1da/0x820 [ 102.339571][ T3316] ? __list_add_valid_or_report+0x38/0xe0 [ 102.339594][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 102.339612][ T3316] ? swap_cache_get_folio+0x277/0x280 [ 102.339641][ T3316] do_swap_page+0x2b4/0x21e0 [ 102.339745][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 102.339767][ T3316] ? __schedule+0x85f/0xcd0 [ 102.339837][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 102.339865][ T3316] handle_mm_fault+0x9d8/0x2c60 [ 102.339921][ T3316] do_user_addr_fault+0x630/0x1080 [ 102.339952][ T3316] exc_page_fault+0x62/0xa0 [ 102.339978][ T3316] asm_exc_page_fault+0x26/0x30 [ 102.340061][ T3316] RIP: 0033:0x7f6184c21fc5 [ 102.340098][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 102.340114][ T3316] RSP: 002b:00007ffee02ffab8 EFLAGS: 00010246 [ 102.340129][ T3316] RAX: 0000000000000000 RBX: 0000000000000259 RCX: 00007f6184c21fc3 [ 102.340169][ T3316] RDX: 00007ffee02ffad0 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.340180][ T3316] RBP: 00007ffee02ffb3c R08: 000000000ea2f149 R09: 0000000000000000 [ 102.340193][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 102.340206][ T3316] R13: 00000000000927c0 R14: 0000000000018862 R15: 00007ffee02ffb90 [ 102.340242][ T3316] [ 102.340248][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 1175 [ 102.563889][ T3316] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 102.571799][ T3316] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 102.579118][ T3316] Memory cgroup stats for /syz1: [ 102.579520][ T3316] cache 0 [ 102.587400][ T3316] rss 0 [ 102.590178][ T3316] shmem 0 [ 102.593102][ T3316] mapped_file 0 [ 102.596548][ T3316] dirty 0 [ 102.599571][ T3316] writeback 0 [ 102.602841][ T3316] workingset_refault_anon 132 [ 102.607501][ T3316] workingset_refault_file 2755 [ 102.612266][ T3316] swap 389120 [ 102.615569][ T3316] swapcached 0 [ 102.618955][ T3316] pgpgin 177633 [ 102.622404][ T3316] pgpgout 177633 [ 102.625931][ T3316] pgfault 78016 [ 102.629408][ T3316] pgmajfault 92 [ 102.632857][ T3316] inactive_anon 0 [ 102.636482][ T3316] active_anon 0 [ 102.639949][ T3316] inactive_file 0 [ 102.643567][ T3316] active_file 0 [ 102.647025][ T3316] unevictable 0 [ 102.650488][ T3316] hierarchical_memory_limit 314572800 [ 102.655902][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 102.662092][ T3316] total_cache 0 [ 102.665532][ T3316] total_rss 0 [ 102.668818][ T3316] total_shmem 0 [ 102.672258][ T3316] total_mapped_file 0 [ 102.676227][ T3316] total_dirty 0 [ 102.679745][ T3316] total_writeback 0 [ 102.683534][ T3316] total_workingset_refault_anon 132 [ 102.688869][ T3316] total_workingset_refault_file 2755 [ 102.694139][ T3316] total_swap 389120 [ 102.697931][ T3316] total_swapcached 0 [ 102.701841][ T3316] total_pgpgin 177633 [ 102.705805][ T3316] total_pgpgout 177633 [ 102.709915][ T3316] total_pgfault 78016 [ 102.713881][ T3316] total_pgmajfault 92 [ 102.717845][ T3316] total_inactive_anon 0 [ 102.722067][ T3316] total_active_anon 0 [ 102.726032][ T3316] total_inactive_file 0 [ 102.730199][ T3316] total_active_file 0 [ 102.734176][ T3316] total_unevictable 0 [ 102.738210][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1006,pid=7920,uid=0 [ 102.752809][ T3316] Memory cgroup out of memory: Killed process 7920 (syz.1.1006) total-vm:95884kB, anon-rss:1188kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 102.965117][ T7962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 102.974180][ T7962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 102.980707][ T7959] 9p: Bad value for 'wfdno' [ 102.988127][ T7967] loop6: detected capacity change from 0 to 128 [ 103.029111][ T7967] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.043076][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1020'. [ 103.078024][ T7975] program syz.1.1020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.087556][ T7962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 103.100596][ T7975] blktrace: Concurrent blktraces are not allowed on sg0 [ 103.108095][ T7967] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.181072][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 103.192008][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.192032][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.192065][ T3320] Call Trace: [ 103.192073][ T3320] [ 103.192082][ T3320] __dump_stack+0x1d/0x30 [ 103.192106][ T3320] dump_stack_lvl+0x95/0xd0 [ 103.192128][ T3320] dump_stack+0x15/0x1b [ 103.192147][ T3320] dump_header+0x81/0x240 [ 103.192164][ T3320] oom_kill_process+0x295/0x350 [ 103.192287][ T3320] out_of_memory+0x97b/0xb80 [ 103.192317][ T3320] try_charge_memcg+0x610/0xa10 [ 103.192352][ T3320] charge_memcg+0x51/0xc0 [ 103.192440][ T3320] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 103.192516][ T3320] __read_swap_cache_async+0x17b/0x2d0 [ 103.192554][ T3320] swap_cluster_readahead+0x262/0x3c0 [ 103.192582][ T3320] swapin_readahead+0xde/0x820 [ 103.192663][ T3320] ? __rcu_read_unlock+0x4f/0x70 [ 103.192683][ T3320] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 103.192707][ T3320] ? __list_add_valid_or_report+0x38/0xe0 [ 103.192786][ T3320] ? __rcu_read_unlock+0x4f/0x70 [ 103.192802][ T3320] ? swap_cache_get_folio+0x277/0x280 [ 103.192826][ T3320] do_swap_page+0x2b4/0x21e0 [ 103.192853][ T3320] ? _raw_spin_unlock+0x26/0x50 [ 103.192948][ T3320] ? __schedule+0x85f/0xcd0 [ 103.192970][ T3320] ? __pfx_default_wake_function+0x10/0x10 [ 103.193036][ T3320] handle_mm_fault+0x9d8/0x2c60 [ 103.193071][ T3320] do_user_addr_fault+0x630/0x1080 [ 103.193097][ T3320] exc_page_fault+0x62/0xa0 [ 103.193183][ T3320] asm_exc_page_fault+0x26/0x30 [ 103.193230][ T3320] RIP: 0033:0x7fb0ce401fc5 [ 103.193244][ T3320] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 103.193259][ T3320] RSP: 002b:00007ffd538da6d8 EFLAGS: 00010246 [ 103.193276][ T3320] RAX: 0000000000000000 RBX: 0000000000000278 RCX: 00007fb0ce401fc3 [ 103.193318][ T3320] RDX: 00007ffd538da6f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.193328][ T3320] RBP: 00007ffd538da75c R08: 00000000063f4bfa R09: 0000000000000000 [ 103.193341][ T3320] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 103.193355][ T3320] R13: 00000000000927c0 R14: 0000000000019283 R15: 00007ffd538da7b0 [ 103.193375][ T3320] [ 103.193382][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 902 [ 103.278823][ T7962] __nla_validate_parse: 1 callbacks suppressed [ 103.278839][ T7962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 103.282073][ T3320] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 103.287961][ T7962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1020'. [ 103.293692][ T3320] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 103.293708][ T3320] Memory cgroup stats for /syz2: [ 103.658533][ T3320] cache 0 [ 103.666444][ T3320] rss 20480 [ 103.669591][ T3320] shmem 0 [ 103.672516][ T3320] mapped_file 208896 [ 103.676477][ T3320] dirty 0 [ 103.679490][ T3320] writeback 0 [ 103.682802][ T3320] workingset_refault_anon 328 [ 103.687469][ T3320] workingset_refault_file 2540 [ 103.692420][ T3320] swap 356352 [ 103.695703][ T3320] swapcached 16384 [ 103.699473][ T3320] pgpgin 135146 [ 103.702921][ T3320] pgpgout 135140 [ 103.706461][ T3320] pgfault 117826 [ 103.710052][ T3320] pgmajfault 105 [ 103.713586][ T3320] inactive_anon 0 [ 103.717206][ T3320] active_anon 12288 [ 103.721052][ T3320] inactive_file 0 [ 103.724671][ T3320] active_file 4096 [ 103.728375][ T3320] unevictable 0 [ 103.732058][ T3320] hierarchical_memory_limit 314572800 [ 103.737485][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 103.743751][ T3320] total_cache 0 [ 103.747233][ T3320] total_rss 20480 [ 103.750942][ T3320] total_shmem 0 [ 103.754395][ T3320] total_mapped_file 208896 [ 103.758866][ T3320] total_dirty 0 [ 103.762346][ T3320] total_writeback 0 [ 103.763578][ T7992] loop0: detected capacity change from 0 to 1024 [ 103.766140][ T3320] total_workingset_refault_anon 328 [ 103.766150][ T3320] total_workingset_refault_file 2540 [ 103.783066][ T3320] total_swap 356352 [ 103.786858][ T3320] total_swapcached 16384 [ 103.791188][ T3320] total_pgpgin 135146 [ 103.795158][ T3320] total_pgpgout 135140 [ 103.799235][ T3320] total_pgfault 117826 [ 103.803345][ T3320] total_pgmajfault 105 [ 103.807407][ T3320] total_inactive_anon 0 [ 103.811593][ T3320] total_active_anon 12288 [ 103.815976][ T3320] total_inactive_file 0 [ 103.820217][ T3320] total_active_file 4096 [ 103.824479][ T3320] total_unevictable 0 [ 103.828504][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1022,pid=7969,uid=0 [ 103.843108][ T3320] Memory cgroup out of memory: Killed process 7969 (syz.2.1022) total-vm:94040kB, anon-rss:1136kB, file-rss:22436kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 103.861972][ T7992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.025900][ T8008] loop1: detected capacity change from 0 to 128 [ 104.071468][ T8008] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.145161][ T8008] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.318451][ T7992] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1027: bg 0: block 112: padding at end of block bitmap is not set [ 104.344102][ T2566] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:13: lblock 0 mapped to illegal pblock 0 (length 6) [ 104.370256][ T2566] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 104.382674][ T2566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.382674][ T2566] [ 104.423444][ T7991] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1027: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 104.562588][ T2566] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 104.587758][ T2566] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 104.600060][ T2566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.600060][ T2566] [ 104.651201][ T2566] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 104.663951][ T2566] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.663951][ T2566] [ 104.673668][ T2566] EXT4-fs (loop0): Total free blocks count 0 [ 104.679674][ T2566] EXT4-fs (loop0): Free/Dirty block details [ 104.685560][ T2566] EXT4-fs (loop0): free_blocks=0 [ 104.713516][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 104.724434][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.724463][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.724526][ T3320] Call Trace: [ 104.724532][ T3320] [ 104.724541][ T3320] __dump_stack+0x1d/0x30 [ 104.724562][ T3320] dump_stack_lvl+0x95/0xd0 [ 104.724583][ T3320] dump_stack+0x15/0x1b [ 104.724645][ T3320] dump_header+0x81/0x240 [ 104.724667][ T3320] oom_kill_process+0x295/0x350 [ 104.724691][ T3320] out_of_memory+0x97b/0xb80 [ 104.724715][ T3320] try_charge_memcg+0x610/0xa10 [ 104.724772][ T3320] charge_memcg+0x51/0xc0 [ 104.724798][ T3320] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 104.724831][ T3320] __read_swap_cache_async+0x17b/0x2d0 [ 104.724861][ T3320] swap_cluster_readahead+0x362/0x3c0 [ 104.724943][ T3320] swapin_readahead+0xde/0x820 [ 104.725021][ T3320] ? bpf_strtoul+0xae/0x100 [ 104.725040][ T3320] ? __rcu_read_unlock+0x4f/0x70 [ 104.725062][ T3320] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 104.725084][ T3320] ? __rcu_read_unlock+0x4f/0x70 [ 104.725100][ T3320] ? __rcu_read_unlock+0x4f/0x70 [ 104.725139][ T3320] ? swap_cache_get_folio+0x277/0x280 [ 104.725164][ T3320] do_swap_page+0x2b4/0x21e0 [ 104.725190][ T3320] ? _raw_spin_unlock+0x26/0x50 [ 104.725214][ T3320] ? __schedule+0x85f/0xcd0 [ 104.725315][ T3320] ? __pfx_default_wake_function+0x10/0x10 [ 104.725344][ T3320] handle_mm_fault+0x9d8/0x2c60 [ 104.725383][ T3320] do_user_addr_fault+0x630/0x1080 [ 104.725478][ T3320] exc_page_fault+0x62/0xa0 [ 104.725499][ T3320] asm_exc_page_fault+0x26/0x30 [ 104.725518][ T3320] RIP: 0033:0x7fb0ce401fc5 [ 104.725610][ T3320] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 104.725627][ T3320] RSP: 002b:00007ffd538da6d8 EFLAGS: 00010246 [ 104.725642][ T3320] RAX: 0000000000000000 RBX: 000000000000027d RCX: 00007fb0ce401fc3 [ 104.725657][ T3320] RDX: 00007ffd538da6f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.725671][ T3320] RBP: 00007ffd538da75c R08: 0000000026420094 R09: 0000000000000000 [ 104.725684][ T3320] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 104.725739][ T3320] R13: 00000000000927c0 R14: 00000000000195e1 R15: 00007ffd538da7b0 [ 104.725755][ T3320] [ 104.725762][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 1203 [ 104.959544][ T3320] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 104.967432][ T3320] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 104.974738][ T3320] Memory cgroup stats for /syz2: [ 104.978551][ T3320] cache 0 [ 104.986433][ T3320] rss 0 [ 104.989214][ T3320] shmem 0 [ 104.992147][ T3320] mapped_file 0 [ 104.995602][ T3320] dirty 0 [ 104.998527][ T3320] writeback 0 [ 105.001838][ T3320] workingset_refault_anon 415 [ 105.006500][ T3320] workingset_refault_file 2540 [ 105.011359][ T3320] swap 376832 [ 105.014644][ T3320] swapcached 0 [ 105.018048][ T3320] pgpgin 135303 [ 105.021525][ T3320] pgpgout 135302 [ 105.021745][ T8018] loop1: detected capacity change from 0 to 512 [ 105.025052][ T3320] pgfault 118086 [ 105.025060][ T3320] pgmajfault 163 [ 105.025067][ T3320] inactive_anon 0 [ 105.025074][ T3320] active_anon 0 [ 105.025081][ T3320] inactive_file 0 [ 105.049086][ T3320] active_file 4096 [ 105.052790][ T3320] unevictable 0 [ 105.056239][ T3320] hierarchical_memory_limit 314572800 [ 105.061628][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 105.067775][ T3320] total_cache 0 [ 105.071242][ T3320] total_rss 0 [ 105.074511][ T3320] total_shmem 0 [ 105.077963][ T3320] total_mapped_file 0 [ 105.081988][ T3320] total_dirty 0 [ 105.085434][ T3320] total_writeback 0 [ 105.089251][ T3320] total_workingset_refault_anon 415 [ 105.094441][ T3320] total_workingset_refault_file 2540 [ 105.099780][ T3320] total_swap 376832 [ 105.103586][ T3320] total_swapcached 0 [ 105.107474][ T3320] total_pgpgin 135303 [ 105.111486][ T3320] total_pgpgout 135302 [ 105.115573][ T3320] total_pgfault 118086 [ 105.119674][ T3320] total_pgmajfault 163 [ 105.123733][ T3320] total_inactive_anon 0 [ 105.127932][ T3320] total_active_anon 0 [ 105.131917][ T3320] total_inactive_file 0 [ 105.136060][ T3320] total_active_file 4096 [ 105.140306][ T3320] total_unevictable 0 [ 105.144273][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1031,pid=8005,uid=0 [ 105.158991][ T3320] Memory cgroup out of memory: Killed process 8005 (syz.2.1031) total-vm:93836kB, anon-rss:1260kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 105.243109][ T8024] loop2: detected capacity change from 0 to 512 [ 105.277244][ T8024] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1036: error while reading EA inode 32 err=-116 [ 105.300041][ T8024] EXT4-fs (loop2): Remounting filesystem read-only [ 105.306654][ T8024] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 105.334666][ T8024] EXT4-fs (loop2): 1 orphan inode deleted [ 105.349065][ T8024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.381389][ T8024] netlink: 'syz.2.1036': attribute type 3 has an invalid length. [ 105.459767][ T8035] lo speed is unknown, defaulting to 1000 [ 105.560519][ T8035] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.584424][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 105.593445][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 105.630615][ T8035] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.662910][ T8039] loop9: detected capacity change from 0 to 7 [ 105.680896][ T8035] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.735130][ T8042] program syz.0.1040 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.753793][ T8035] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.769533][ T8039] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.787907][ T8044] blktrace: Concurrent blktraces are not allowed on sg0 [ 105.807425][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1040'. [ 105.847018][ T8039] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.854925][ T8039] loop9: unable to read partition table [ 105.911606][ T2207] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.922314][ T2207] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.943575][ T2207] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.952297][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 105.961293][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 105.972263][ T8039] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 105.972263][ T8039] ) failed (rc=-5) [ 105.991451][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.998837][ T2207] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.999456][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.015607][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.032833][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.042359][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.053979][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.062382][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 106.071439][ T8034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1040'. [ 106.150624][ T8050] lo speed is unknown, defaulting to 1000 [ 106.199054][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1041'. [ 106.211254][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 106.211265][ T29] audit: type=1326 audit(106.189:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.268603][ T29] audit: type=1326 audit(106.199:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fd277b06357 code=0x7ffc0000 [ 106.291773][ T29] audit: type=1326 audit(106.199:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd277b063b6 code=0x7ffc0000 [ 106.314581][ T29] audit: type=1326 audit(106.199:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.337359][ T29] audit: type=1326 audit(106.199:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.360253][ T29] audit: type=1326 audit(106.199:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.383148][ T29] audit: type=1326 audit(106.199:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.405996][ T29] audit: type=1326 audit(106.199:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.428903][ T29] audit: type=1326 audit(106.199:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.0.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.451767][ T29] audit: type=1326 audit(106.199:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 106.538470][ T8063] loop6: detected capacity change from 0 to 1024 [ 106.550663][ T8063] EXT4-fs: Ignoring removed bh option [ 106.573498][ T8063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.621566][ T8067] loop0: detected capacity change from 0 to 512 [ 106.646521][ T4780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.662702][ T8067] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1046: error while reading EA inode 32 err=-116 [ 106.700044][ T8067] EXT4-fs (loop0): Remounting filesystem read-only [ 106.710788][ T8070] netlink: 'syz.6.1047': attribute type 1 has an invalid length. [ 106.732245][ T8067] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 106.762680][ T8067] EXT4-fs (loop0): 1 orphan inode deleted [ 106.773225][ T8067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.785998][ T8070] bond3: (slave bridge1): making interface the new active one [ 106.806153][ T8070] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 106.824924][ T8067] netlink: 'syz.0.1046': attribute type 3 has an invalid length. [ 106.939914][ T8076] loop9: detected capacity change from 0 to 7 [ 106.946193][ T8076] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.958737][ T8076] Buffer I/O error on dev loop9, logical block 0, async page read [ 106.966591][ T8076] loop9: unable to read partition table [ 106.988725][ T8076] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 106.988725][ T8076] ) failed (rc=-5) [ 106.990051][ T4114] Buffer I/O error on dev loop9, logical block 0, async page read [ 107.028535][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.104667][ T8080] loop0: detected capacity change from 0 to 128 [ 107.144687][ T8080] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.539777][ T3328] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.647388][ T8087] loop0: detected capacity change from 0 to 128 [ 107.677744][ T8087] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.724213][ T8087] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.796324][ T8097] ext2: Unknown parameter 'permit_directio' [ 107.833247][ T8090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.890593][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.481281][ T8126] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 108.497153][ T8126] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 108.525640][ T8126] EXT4-fs (loop0): 1 truncate cleaned up [ 108.540161][ T8126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.614768][ T8126] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 108.707645][ T3328] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.362565][ T8161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 109.369154][ T8161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.376727][ T8161] vhci_hcd vhci_hcd.0: Device attached [ 109.390778][ T8165] netlink: 'syz.0.1076': attribute type 1 has an invalid length. [ 109.454197][ T8167] __nla_validate_parse: 3 callbacks suppressed [ 109.454282][ T8167] netlink: 484 bytes leftover after parsing attributes in process `syz.6.1077'. [ 109.582546][ T8165] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 109.638715][ T4731] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 109.656990][ T8162] vhci_hcd: connection closed [ 109.657254][ T2566] vhci_hcd vhci_hcd.0: stop threads [ 109.667234][ T2566] vhci_hcd vhci_hcd.0: release socket [ 109.672638][ T2566] vhci_hcd vhci_hcd.0: disconnect device [ 109.681765][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'. [ 109.697868][ T4731] usb 1-1: enqueue for inactive port 0 [ 109.714499][ T4731] usb 1-1: enqueue for inactive port 0 [ 109.726099][ T4731] usb 1-1: enqueue for inactive port 0 [ 109.820593][ T4731] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 109.828966][ T8193] set_capacity_and_notify: 6 callbacks suppressed [ 109.828980][ T8193] loop1: detected capacity change from 0 to 128 [ 109.908525][ T8204] loop1: detected capacity change from 0 to 512 [ 109.927122][ T8204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.943514][ T8204] EXT4-fs (loop1): 1 truncate cleaned up [ 109.961049][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.990266][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 109.999217][ T8204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1085'. [ 110.028951][ T8204] bridge1: entered promiscuous mode [ 110.034274][ T8204] bridge1: entered allmulticast mode [ 110.133332][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.192995][ T8239] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 110.442179][ T8271] loop1: detected capacity change from 0 to 128 [ 110.463966][ T8275] netlink: 'syz.2.1096': attribute type 21 has an invalid length. [ 110.464006][ T8276] netlink: 'syz.2.1096': attribute type 21 has an invalid length. [ 110.501137][ T8276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1096'. [ 110.510314][ T8276] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 110.518192][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1096'. [ 110.527325][ T8275] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 111.230364][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 111.230380][ T29] audit: type=1400 audit(111.209:9010): avc: denied { mounton } for pid=8353 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 111.441966][ T8379] loop0: detected capacity change from 0 to 164 [ 111.444689][ T8353] lo speed is unknown, defaulting to 1000 [ 111.579845][ T8390] loop2: detected capacity change from 0 to 128 [ 111.637451][ T29] audit: type=1326 audit(111.609:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.712035][ T29] audit: type=1326 audit(111.609:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.735055][ T29] audit: type=1326 audit(111.639:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.757913][ T29] audit: type=1326 audit(111.649:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.780843][ T29] audit: type=1326 audit(111.649:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.803653][ T29] audit: type=1326 audit(111.649:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.826459][ T29] audit: type=1326 audit(111.649:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.849286][ T29] audit: type=1326 audit(111.649:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 111.958703][ T29] audit: type=1326 audit(111.789:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.0.1109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd277b4f749 code=0x7ffc0000 [ 112.034408][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 112.200446][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.207551][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.260128][ T8413] loop0: detected capacity change from 0 to 164 [ 112.272112][ T8353] bridge_slave_0: entered allmulticast mode [ 112.289242][ T8353] bridge_slave_0: entered promiscuous mode [ 112.298209][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.305310][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.327787][ T8353] bridge_slave_1: entered allmulticast mode [ 112.343343][ T8353] bridge_slave_1: entered promiscuous mode [ 112.397112][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.434515][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.446437][ T8416] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 112.496943][ T8353] team0: Port device team_slave_0 added [ 112.517814][ T8353] team0: Port device team_slave_1 added [ 112.571419][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.578417][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.604383][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.672653][ T8419] loop2: detected capacity change from 0 to 164 [ 112.685970][ T8422] loop1: detected capacity change from 0 to 512 [ 112.752636][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.759694][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.785787][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.829078][ T8431] loop2: detected capacity change from 0 to 128 [ 112.871977][ T8426] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 112.903864][ T8353] hsr_slave_0: entered promiscuous mode [ 112.929337][ T8353] hsr_slave_1: entered promiscuous mode [ 112.955861][ T8353] debugfs: 'hsr0' already exists in 'hsr' [ 112.961676][ T8353] Cannot create hsr debugfs directory [ 113.006814][ T8439] loop0: detected capacity change from 0 to 512 [ 113.037473][ T8439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.110178][ T8439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.142476][ T8433] ================================================================== [ 113.150587][ T8433] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 113.157272][ T8433] [ 113.159591][ T8433] write to 0xffff88811baebc10 of 8 bytes by task 8435 on cpu 0: [ 113.167212][ T8433] __dentry_kill+0x142/0x4b0 [ 113.171810][ T8433] finish_dput+0x2b/0x200 [ 113.176141][ T8433] dput+0x52/0x60 [ 113.179779][ T8433] step_into_slowpath+0x36b/0x480 [ 113.184809][ T8433] path_openat+0x18db/0x23b0 [ 113.189406][ T8433] do_filp_open+0x109/0x230 [ 113.193914][ T8433] io_openat2+0x272/0x390 [ 113.198242][ T8433] io_openat+0x1b/0x30 [ 113.202301][ T8433] __io_issue_sqe+0xfe/0x2e0 [ 113.206888][ T8433] io_issue_sqe+0x56/0xa80 [ 113.211300][ T8433] io_submit_sqes+0x78b/0x11b0 [ 113.216066][ T8433] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 113.221610][ T8433] __x64_sys_io_uring_enter+0x78/0x90 [ 113.226980][ T8433] x64_sys_call+0x27e4/0x3000 [ 113.231652][ T8433] do_syscall_64+0xca/0x2b0 [ 113.236151][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.242039][ T8433] [ 113.244352][ T8433] read to 0xffff88811baebc10 of 8 bytes by task 8433 on cpu 1: [ 113.251881][ T8433] fast_dput+0x5f/0x2c0 [ 113.256026][ T8433] dput+0x24/0x60 [ 113.259650][ T8433] step_into_slowpath+0x36b/0x480 [ 113.264667][ T8433] path_openat+0x18db/0x23b0 [ 113.269252][ T8433] do_filp_open+0x109/0x230 [ 113.273751][ T8433] io_openat2+0x272/0x390 [ 113.278074][ T8433] io_openat+0x1b/0x30 [ 113.282133][ T8433] __io_issue_sqe+0xfe/0x2e0 [ 113.286726][ T8433] io_issue_sqe+0x56/0xa80 [ 113.291135][ T8433] io_submit_sqes+0x78b/0x11b0 [ 113.295893][ T8433] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 113.301436][ T8433] __x64_sys_io_uring_enter+0x78/0x90 [ 113.306808][ T8433] x64_sys_call+0x27e4/0x3000 [ 113.311479][ T8433] do_syscall_64+0xca/0x2b0 [ 113.315978][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.321863][ T8433] [ 113.324171][ T8433] value changed: 0xffff888237799428 -> 0x0000000000000000 [ 113.331258][ T8433] [ 113.333567][ T8433] Reported by Kernel Concurrency Sanitizer on: [ 113.339714][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.6.1121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.349428][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 113.359474][ T8433] ================================================================== [ 113.596459][ T8438] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.648292][ T8447] syz_tun (unregistering): left allmulticast mode [ 113.654769][ T8447] syz_tun (unregistering): left promiscuous mode [ 113.661123][ T8447] bridge0: port 3(syz_tun) entered disabled state [ 113.687577][ T2566] bridge_slave_1: left allmulticast mode [ 113.693348][ T2566] bridge_slave_1: left promiscuous mode [ 113.699147][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.708040][ T2566] bridge_slave_0: left allmulticast mode [ 113.713747][ T2566] bridge_slave_0: left promiscuous mode [ 113.719447][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.771614][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.781381][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.791088][ T2566] bond0 (unregistering): Released all slaves [ 113.901952][ T2566] hsr_slave_0: left promiscuous mode [ 113.907605][ T2566] hsr_slave_1: left promiscuous mode [ 113.913533][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.923144][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.956624][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 113.966477][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 114.283053][ T2566] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.340405][ T2566] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.400734][ T2566] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.460490][ T2566] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.547164][ T2566] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.589888][ T2566] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.639783][ T2566] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.700042][ T2566] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.972103][ T2566] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.010137][ T2566] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.060647][ T2566] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.129949][ T2566] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.232416][ T2566] bridge_slave_1: left allmulticast mode [ 115.238082][ T2566] bridge_slave_1: left promiscuous mode [ 115.243852][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.269754][ T2566] bridge_slave_0: left allmulticast mode [ 115.275422][ T2566] bridge_slave_0: left promiscuous mode [ 115.281262][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.300494][ T2566] bridge_slave_1: left allmulticast mode [ 115.306153][ T2566] bridge_slave_1: left promiscuous mode [ 115.311894][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.319925][ T2566] bridge_slave_0: left allmulticast mode [ 115.325575][ T2566] bridge_slave_0: left promiscuous mode [ 115.331310][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.340075][ T2566] bridge_slave_1: left allmulticast mode [ 115.345727][ T2566] bridge_slave_1: left promiscuous mode [ 115.351425][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.359365][ T2566] bridge_slave_0: left allmulticast mode [ 115.365005][ T2566] bridge_slave_0: left promiscuous mode [ 115.370821][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.379332][ T2566] bridge_slave_1: left allmulticast mode [ 115.384973][ T2566] bridge_slave_1: left promiscuous mode [ 115.390712][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.398762][ T2566] bridge_slave_0: left allmulticast mode [ 115.404399][ T2566] bridge_slave_0: left promiscuous mode [ 115.410055][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.571104][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.581016][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.599586][ T2566] bond0 (unregistering): Released all slaves [ 115.608621][ T2566] bond1 (unregistering): Released all slaves [ 115.720852][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.730339][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.739752][ T2566] bond0 (unregistering): Released all slaves [ 115.840349][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.850301][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.859491][ T2566] bond0 (unregistering): Released all slaves [ 115.877954][ T2566] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 115.940977][ T2566] bond3 (unregistering): (slave bridge1): Releasing active interface [ 116.000798][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.010093][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.019272][ T2566] bond0 (unregistering): Released all slaves [ 116.028434][ T2566] bond1 (unregistering): (slave bond2): Releasing backup interface [ 116.036874][ T2566] bond1 (unregistering): Released all slaves [ 116.046547][ T2566] bond2 (unregistering): Released all slaves [ 116.055462][ T2566] bond3 (unregistering): Released all slaves [ 116.276187][ T2566] hsr_slave_0: left promiscuous mode [ 116.288830][ T2566] hsr_slave_1: left promiscuous mode [ 116.294473][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.301901][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.311093][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.318470][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.330152][ T2566] hsr_slave_0: left promiscuous mode [ 116.336982][ T2566] hsr_slave_1: left promiscuous mode [ 116.343001][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.357005][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.368220][ T2566] hsr_slave_0: left promiscuous mode [ 116.376067][ T2566] hsr_slave_1: left promiscuous mode [ 116.382536][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.390105][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.400194][ T2566] hsr_slave_0: left promiscuous mode [ 116.405835][ T2566] hsr_slave_1: left promiscuous mode [ 116.411583][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.419381][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.431521][ T2566] veth1_macvtap: left promiscuous mode [ 116.437046][ T2566] veth0_macvtap: left promiscuous mode [ 116.442833][ T2566] veth1_vlan: left promiscuous mode [ 116.448080][ T2566] veth0_vlan: left promiscuous mode [ 116.454522][ T2566] veth0_macvtap: left allmulticast mode [ 116.520554][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 116.532199][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 116.590420][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 116.599828][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 116.657965][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 116.667314][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 116.727788][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 116.737457][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 117.487569][ T2566] IPVS: stop unused estimator thread 0... [ 119.039197][ T2566] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.062077][ T2566] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.099931][ T2566] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.160089][ T2566] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.236211][ T2566] bridge_slave_1: left allmulticast mode [ 119.241963][ T2566] bridge_slave_1: left promiscuous mode [ 119.247603][ T2566] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.255905][ T2566] bridge_slave_0: left allmulticast mode [ 119.261625][ T2566] bridge_slave_0: left promiscuous mode [ 119.267243][ T2566] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.350749][ T2566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.360814][ T2566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.370203][ T2566] bond0 (unregistering): Released all slaves [ 119.440821][ T2566] hsr_slave_0: left promiscuous mode [ 119.446527][ T2566] hsr_slave_1: left promiscuous mode [ 119.452419][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.459889][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.469889][ T2566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.477278][ T2566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.486986][ T2566] veth1_macvtap: left promiscuous mode [ 119.492590][ T2566] veth0_macvtap: left promiscuous mode [ 119.498090][ T2566] veth1_vlan: left promiscuous mode [ 119.503321][ T2566] veth0_vlan: left promiscuous mode [ 119.562704][ T2566] team0 (unregistering): Port device team_slave_1 removed [ 119.572845][ T2566] team0 (unregistering): Port device team_slave_0 removed [ 119.580273][ T52] smc: removing ib device syz!