last executing test programs: 4.437855654s ago: executing program 3 (id=6618): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000300), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ffffffff00000000000000000001000086dd"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1c, 0x5, &(0x7f0000003040)=ANY=[@ANYBLOB="18000000369ee5ffffff00000900000027f309000500000029b7c0ff0100000095000000000000003fc99ce7f9c41728ec966f5ecdd17c5cb21f2ef6a5687eaff7c30f71f565ae4fff7a1de3896a1fca1b79ea95fe130bf17a238413cdb0c63dc95267fe757e6dac2d52e7536dd8eb54421e8d3af18eeb366bb2eb1c7f5fac10e62bfaeb8bac7687d80ced97"], &(0x7f00000008c0)='syzkaller\x00', 0x8a, 0xac, &(0x7f0000000900)=""/172, 0x40f00, 0x15, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x3, 0x0, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001d40)=[r1, r1, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x1, 0x3, 0x5, 0x5}, {0x5, 0x5, 0xf, 0x8}, {0x0, 0x2, 0x0, 0xa}, {0x200004, 0x2, 0x3, 0x4}], 0x10, 0xe4, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.37590567s ago: executing program 3 (id=6620): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2386dd603000bb00102b00fc020000000000000000000000000000fe8000000000000000000000000000aa3c000000000000000000000000089078"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000540)='./bus\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYRES64=0x0], 0x81, 0x374, &(0x7f0000000980)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000013000000000000da3f13a03d0000000000002b9b36"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffcbc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000380)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007008000010009000000010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c00028006000100000000001c0003800c00010000010000800000000c00010000000000ffffff7f0400048008000a00", @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r7], 0x6c}, 0x1, 0xba01}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r9, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r9, 0x80004506, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d002085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x7) mq_open(0x0, 0x40, 0x4b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.942113486s ago: executing program 3 (id=6628): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000dc00000000000b000000000000000007000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r2, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) sendmmsg$inet(r2, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40012110, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000810"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 3.874232182s ago: executing program 3 (id=6632): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}]}, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x6) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000, 0x315}) close(r6) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0xeaa) 3.773108491s ago: executing program 4 (id=6633): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x2710], 0x48}}, 0x0) 3.695707527s ago: executing program 3 (id=6636): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$link(0x8, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f0ff000000000000000000000000a376a2c401f91668f37c0000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000001080), 0x1, 0x4e2, &(0x7f0000000b80)="$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") listxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x65) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0xe000, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 3.061795461s ago: executing program 3 (id=6638): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x500, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.774763365s ago: executing program 4 (id=6641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) 2.773956145s ago: executing program 4 (id=6643): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="afb900000b00000081"]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x440301, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000300)=""/220, 0xdc, 0x0, &(0x7f00000004c0)=""/241, 0xf1}}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r3, 0x5, 0x0, @val=@target_btf_id=r4}, 0x14) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x164e077801a2caba, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) 2.557081774s ago: executing program 4 (id=6645): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}]}, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x6) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000, 0x315}) close(r6) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0xeaa) 2.353256031s ago: executing program 4 (id=6649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400008000"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa2000000005b94f2440000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 2.302617435s ago: executing program 2 (id=6650): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 1.241211716s ago: executing program 2 (id=6663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) 1.06962896s ago: executing program 4 (id=6665): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f2379"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000001fea0521101533dd1779352c64f409122b505cb9662815cf8de610713b32f6646"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @mss={0x2, 0x2}, @window={0x3, 0xff, 0x2}, @window={0x3, 0xd9, 0xd}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.06886903s ago: executing program 2 (id=6667): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000300), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ffffffff00000000000000000001000086dd"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1c, 0x5, &(0x7f0000003040)=ANY=[@ANYBLOB="18000000369ee5ffffff00000900000027f309000500000029b7c0ff0100000095000000000000003fc99ce7f9c41728ec966f5ecdd17c5cb21f2ef6a5687eaff7c30f71f565ae4fff7a1de3896a1fca1b79ea95fe130bf17a238413cdb0c63dc95267fe757e6dac2d52e7536dd8eb54421e8d3af18eeb366bb2eb1c7f5fac10e62bfaeb8bac7687d80ced97fc0d8bb9b5a096c34e4c96a318df746ddbab39064728db027ffa24742c07c9c6711dc40725621036670d1cb9232a9c0b587ec575840dd0f1080a33215e93bcbfc1b23e6c81ca4d4c20a3626275212d8271dcce6873a784f25e7cd9b7d1763cd3a14f34d509a5a63c97"], &(0x7f00000008c0)='syzkaller\x00', 0x8a, 0xac, &(0x7f0000000900)=""/172, 0x40f00, 0x15, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x3, 0x0, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001d40)=[r1, r1, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x1, 0x3, 0x5, 0x5}, {0x5, 0x5, 0xf, 0x8}, {0x0, 0x2, 0x0, 0xa}, {0x200004, 0x2, 0x3, 0x4}], 0x10, 0xe4, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 925.267362ms ago: executing program 2 (id=6670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001600)=@newtaction={0x9d8, 0x30, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{0x8ac, 0x1, [@m_ctinfo={0x14c, 0x2, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x7ff, 0x7, 0x2, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0xdd2a, 0x3, 0x2, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfffffffd, 0xfffffff8, 0x4, 0x800, 0x401}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}]}, {0x9d, 0x6, "25c2ad9014e43486d15d930831913e333e8d3f19990be79665e3150d6121f0090ba28c77adba968d89cf23bb94510077191b932dcfbd7edb78122d600253bc5cc9235471bb7f018b74e72278a6bc611bfa14a6083be1bcbe16fe69f527cc7d106e1733bbacc7eb0717dca6af1102db8445fdbd17df180ac59aef8a2fb04e168b4c1c207e64bef49b2af80485415b32c40e8177e1012524f37d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0xe8, 0x8, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x200, 0x5, 0x80, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x200}]}, {0x89, 0x6, "b4a879d555530b915b7806a74591d7f3190cfabba882df9c88de367714cd0e0dc73ffab33415e2dc3a28b91d1e1f3b2c579435575649f8f0c4271025fa47a4be73fc81f1c432cf1e6e81f46f8cacf1abd9964be1f726f7b390fa8f026685800f8253b97fa04f6af76a2cf6a69c0046afda36e34d11ddaf19e1633d58644905c6b4f0b4e7cd"}, {0xc, 0x7, {0x31698e8d54fd2dff}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0x94, 0x14, 0x0, 0x0, {{0xb}, {0x68, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x50, 0x8, 0x1, 0xfe37}, 0x4}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x74}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf19b}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x800, 0x1a6ea37f, 0xffffffffffffffff, 0x753, 0x100}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x284, 0xe, 0x0, 0x0, {{0x7}, {0x188, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x31, 0x6, {0xe, 'security\x00', 0x6, 0x0, "0666e1ae055bef"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x119, 0x6, {0x5b7, 'raw\x00', 0x6, 0x1000, "c157a4394767e165c3d0595675fc7514ebe1b6811e31e6a2e79e00008f0735729db40e704590de84ad3617324e287d14386e5374423ba356474b0f7dfb364d785038017dd3f49253378a1bbb1ab5f2bbbcf70cc93e2e0a3afaf230d64515aa6380f9ee10736c07fa2b2cf3af0c688c4c349a64e4233f154ee9f656ccdfbed5c5becef5d0e7f29c2abda93c8d746a06bfc8c2335493633a3e51e8a0b48d8c6c87df1316ef9a2fbb7baa9b54e1e8eeaea0e05a3841696d7791de81cc089ec0804fa4628f4c48118c005d4343ccac9842fcb080b6bd21d8b57b46a776c8796263a0c98ebe2729be84d3342273b657a9ac"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xd5, 0x6, "f13017300acae4509340f6215d40ce405ca83188009e07be1aaba53ac90cd51f0a65b15ce1c46287cfc83e7385983450618fd1eba6181aba516ce5f3361a38f19cb9e5e18e47778d5513f1fb367ba7d26bcdd626b9cb8ccd343fb3dd6b33cd5321ac2af17018f24a317897d8ce20ebf5a0ae7f7b8905f4546796b44222e8bc9c156dc6f0d477d3f3876d0d02ebc7c243dc27c10d1497f19ef318764f944b04c673b1684aa05d7be96b14671ba56b5366f3890d13b9563f0da0b18692295bc7669eef1af63691d4f2515e2f7c2393f8f656"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x130, 0xd, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x7fff, 0x5, 0x8000, 0x9b1b}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9377}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0x5}}]}, {0xa9, 0x6, "76adc489435096c016d3269a117c181a7e77ce217afcd5211d2f97753ae4451b6179391a0ac49282ff5e28ec152e2bc3544efa44bd7a29a012461615c493866baedab0061e7c656c2541ad26ba18764f610dd641987b9eec8d0da867b379a7abb1be1d0ad3cf2a3c4e919b76f73167ad18737a60d7b52bd2cb307b3f20939df53c073dadd4e49ce9b8e7186f41476ff6af434a270ee627b4cc36c11666a49878cd2aa504d8"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0xa4, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x6, 0x20000000, 0xb, 0x6}, 0x4}}]}, {0x55, 0x6, "065ac1512fbd36841c207fda506e8382e394a901f2a2db35ae6adabb8ba017ab1f820acec1c7364952c7a6ca38527bb12ab7c4a9741047d6b641281f26f9cff6cdb08b504f59ded2e34a044763d6e1a704"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x90, 0x4, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x7, 0x20000006, 0x965, 0x3ff}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x401, 0x7, 0x7, 0xfff, 0x401}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x37}, @TCA_MPLS_LABEL={0x8, 0x5, 0x11d89}]}, {0x11, 0x6, "5c7a4a9e1b2e0723535bc3ba76"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xf8, 0x1a, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xc1, 0x6, "cd0fed5748e9ccb7e3a71960a9bd109a6aea54be8cbd2b04d945746f4c2ec6eca374c7b86919480d083ce013668f6306b4867db2c3957939b27abc292892b89324f338659f8980fd78e7aeb9a3b8c63a8d2b8086f27228373b1e1a51a50f98725c2f2cb8848148158a2a485ec2dce8bf33c5dbcd05ada0aecaaa66af79ac3b1be74832eed55f6cddf31fa165df9914b5a991cafb54129bfa3dd8282fcb9eb5e1d63ec37f6d58bfc572cf24881e5054fecda103ca8896c02e6268213995"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0x118, 0x1, [@m_mpls={0x114, 0xf, 0x0, 0x0, {{0x9}, {0x4}, {0xe5, 0x6, "17e2de27fffc182ed6ba67b94b92f1d6b7bbdb7b359429e64fb2c07a450a706962d99cea7363aa35b501364693036cb5de3b48df91d7360b49196a22b96e56b5e8963a433954d622bf081563bebb37dce9d1aca512c990a9b78bffb90eab2a48bb1281d48d9f53d5371d592bc9b24089f1abdebc35208d3676651f5dcb1e198294f9fd91528f52959ed50e5bd652634da864efbcf33779e2699f7e1e7466ded93134977ee04820e1f9563d0510daab703331f7cb94b03306a02df8e12fbe4e2dc87281b14bf9fa2395b22c140359947483e409d38ba1a3039df867b0350605f7df"}, {0xc}, {0xc}}}]}]}, 0x9d8}}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000000), 0x10, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[], 0x48}}, 0x0) 881.036386ms ago: executing program 2 (id=6671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x20, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x81}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 880.238496ms ago: executing program 1 (id=6672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075196c9c16cae0ce58473acfacbf45a69ed2fbf2bfaa33797016fc197fd4160332f4e92dcfee5a899a450e8b1b212d7675d9768574535a116c7b2fb880eea4e22c124e1b9f9cea7b743f6c63ec3ab4e85c"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0610000000000010000000000000000000000005c5d9fbbf00f9820d09f34ec099698ddf27e5285355bb4a57bbe2ef792816f92b527e4424d37f499dc87c1103dc9c184016fe229cce87f5158b7d34bfbd8d5f548c9327f856e2df8508077520da26617228bb2d4ab941d92fd2e10a30769f7c90a93f91990657b03bc0077341ae42a1298ff1b53318150280829d9ff9fb037c8bd492361714ded0800"/166, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x47, 0x0, 0x20000000) fsetxattr$security_evm(r1, &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "f979a74a832832ccc72760aaadecb339"}, 0x11, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/246, 0xf6}, &(0x7f00000005c0)=0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x1d2) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) 869.426887ms ago: executing program 0 (id=6673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 836.58716ms ago: executing program 0 (id=6674): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', 0x0}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r5, @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000b40000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ec0)={0x28, r10, 0xacf5e67dd0b583a1, 0xfffffffe, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r12 = syz_open_procfs(r11, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r12, &(0x7f0000000380)=ANY=[@ANYBLOB="5000000002000000c801"], 0x410902) close_range(r1, 0xffffffffffffffff, 0x0) 803.033693ms ago: executing program 1 (id=6675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[], 0x10}}, 0x0) 774.927675ms ago: executing program 0 (id=6676): syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 729.537499ms ago: executing program 1 (id=6677): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x5, 0xe80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 562.376713ms ago: executing program 1 (id=6678): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000300), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ffffffff00000000000000000001000086dd"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x1c, 0x5, &(0x7f0000003040)=ANY=[@ANYBLOB="18000000369ee5ffffff00000900000027f309000500000029b7c0ff0100000095000000000000003fc99ce7f9c41728ec966f5ecdd17c5cb21f2ef6a5687eaff7c30f71f565ae4fff7a1de3896a1fca1b79ea95fe130bf17a238413cdb0c63dc95267fe757e6dac2d52e7536dd8eb54421e8d3af18eeb366bb2eb1c7f5fac10e62bfaeb8bac7687d80ced97fc0d8bb9b5a096c34e4c96a318df746ddbab39064728db027ffa24742c07c9c6711dc40725621036670d1cb9232a9c0b587ec575840dd0f1080a33215e93bcbfc1b23e6c81ca4d4c20a3626275212d8271dcce6873a784f25e7cd9b7d1763cd3a14f34d509a5a63c97"], &(0x7f00000008c0)='syzkaller\x00', 0x8a, 0xac, &(0x7f0000000900)=""/172, 0x40f00, 0x15, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001d00)={0x3, 0x0, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001d40)=[r1, r1, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x1, 0x3, 0x5, 0x5}, {0x5, 0x5, 0xf, 0x8}, {0x0, 0x2, 0x0, 0xa}, {0x200004, 0x2, 0x3, 0x4}], 0x10, 0xe4, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x4}, 0x10, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xf1, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 530.014885ms ago: executing program 1 (id=6679): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, ','}]}, 0xd) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x6) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000000, 0x315}) close(r6) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0xeaa) 404.805776ms ago: executing program 1 (id=6680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 219.217732ms ago: executing program 0 (id=6681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0) open(&(0x7f0000000000)='./file0/../file0/../file0\x00', 0x0, 0x5c) 139.612849ms ago: executing program 0 (id=6682): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x5, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd896"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000001fea0521101533dd1779352c64f409122b505cb9662815cf8de610713b32f6646"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @mss={0x2, 0x2}, @window={0x3, 0xff, 0x2}, @window={0x3, 0xd9, 0xd}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13.238769ms ago: executing program 0 (id=6683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 0s ago: executing program 2 (id=6684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000075196c9c16cae0ce58473acfacbf45a69ed2fbf2bfaa33797016fc197fd4160332f4e92dcfee5a899a450e8b1b212d7675d9768574535a116c7b2fb880eea4e22c124e1b9f9cea7b743f6c63ec3ab4e85c"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="e0610000000000010000000000000000000000005c5d9fbbf00f9820d09f34ec099698ddf27e5285355bb4a57bbe2ef792816f92b527e4424d37f499dc87c1103dc9c184016fe229cce87f5158b7d34bfbd8d5f548c9327f856e2df8508077520da26617228bb2d4ab941d92fd2e10a30769f7c90a93f91990657b03bc0077341ae42a1298ff1b53318150280829d9ff9fb037c8bd492361714ded0800"/166, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x47, 0x0, 0x20000000) fsetxattr$security_evm(r1, &(0x7f0000000180), &(0x7f00000001c0)=@md5={0x1, "f979a74a832832ccc72760aaadecb339"}, 0x11, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x0, &(0x7f0000000380)=""/246, 0xf6}, &(0x7f00000005c0)=0x40) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x14b042, 0x1d2) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.761080][T18490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.782815][T27694] loop1: detected capacity change from 0 to 2048 [ 419.800034][T27694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.822377][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.865366][T27710] loop3: detected capacity change from 0 to 2048 [ 419.905994][T27716] FAULT_INJECTION: forcing a failure. [ 419.905994][T27716] name failslab, interval 1, probability 0, space 0, times 0 [ 419.909280][T27710] loop3: p1 < > p4 [ 419.918657][T27716] CPU: 0 UID: 0 PID: 27716 Comm: syz.4.6097 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 419.924497][T27710] loop3: p4 size 8388608 extends beyond EOD, [ 419.933139][T27716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.933158][T27716] Call Trace: [ 419.933166][T27716] [ 419.933175][T27716] dump_stack_lvl+0xf2/0x150 [ 419.939253][T27710] truncated [ 419.949284][T27716] dump_stack+0x15/0x20 [ 419.967577][T27716] should_fail_ex+0x223/0x230 [ 419.972400][T27716] ? sel_write_create+0x184/0x4d0 [ 419.977463][T27716] should_failslab+0x8f/0xb0 [ 419.982092][T27716] __kmalloc_noprof+0xa5/0x370 [ 419.986871][T27716] sel_write_create+0x184/0x4d0 [ 419.991823][T27716] selinux_transaction_write+0xba/0x100 [ 419.997375][T27716] ? __pfx_selinux_transaction_write+0x10/0x10 [ 420.003604][T27716] vfs_write+0x26c/0x910 [ 420.007866][T27716] ? __fget_files+0x1d4/0x210 [ 420.012649][T27716] ksys_write+0xeb/0x1b0 [ 420.017024][T27716] __x64_sys_write+0x42/0x50 [ 420.021629][T27716] x64_sys_call+0x27dd/0x2d60 [ 420.026311][T27716] do_syscall_64+0xc9/0x1c0 [ 420.030846][T27716] ? clear_bhb_loop+0x55/0xb0 [ 420.035603][T27716] ? clear_bhb_loop+0x55/0xb0 [ 420.040300][T27716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.046215][T27716] RIP: 0033:0x7f460e50dff9 [ 420.050671][T27716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.070381][T27716] RSP: 002b:00007f460d187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.078807][T27716] RAX: ffffffffffffffda RBX: 00007f460e6c5f80 RCX: 00007f460e50dff9 [ 420.086853][T27716] RDX: 000000000000005d RSI: 0000000020000140 RDI: 0000000000000003 [ 420.094825][T27716] RBP: 00007f460d187090 R08: 0000000000000000 R09: 0000000000000000 [ 420.102796][T27716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.110815][T27716] R13: 0000000000000000 R14: 00007f460e6c5f80 R15: 00007ffd0fc784b8 [ 420.118786][T27716] [ 420.121985][T27717] __nla_validate_parse: 7 callbacks suppressed [ 420.121999][T27717] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6095'. [ 420.141924][T27712] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6095'. [ 420.170686][T27721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6099'. [ 420.189529][T27721] loop4: detected capacity change from 0 to 2048 [ 420.216623][T27723] loop1: detected capacity change from 0 to 2048 [ 420.217463][T27725] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6101'. [ 420.240464][T27725] loop2: detected capacity change from 0 to 2048 [ 420.249584][T27723] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 420.257753][T27723] System zones: 0-7 [ 420.262233][T27723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.265681][T27721] Alternate GPT is invalid, using primary GPT. [ 420.280719][T27721] loop4: p2 p3 p7 [ 420.282805][T27723] bond1: entered promiscuous mode [ 420.289614][T27723] bond1: entered allmulticast mode [ 420.294950][T27723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 420.307304][T27725] Alternate GPT is invalid, using primary GPT. [ 420.308720][T27723] bond1 (unregistering): Released all slaves [ 420.313703][T27725] loop2: p2 p3 p7 [ 420.345404][T27721] sd 0:0:1:0: device reset [ 420.357707][T27725] sd 0:0:1:0: device reset [ 420.413737][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.425595][T27741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6106'. [ 420.445299][T27744] ------------[ cut here ]------------ [ 420.451051][T27744] refcount_t: underflow; use-after-free. [ 420.457023][T27744] WARNING: CPU: 1 PID: 27744 at lib/refcount.c:28 refcount_warn_saturate+0x1c6/0x230 [ 420.466550][T27744] Modules linked in: [ 420.470493][T27744] CPU: 1 UID: 0 PID: 27744 Comm: syz.1.6107 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 420.481320][T27744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.491432][T27744] RIP: 0010:refcount_warn_saturate+0x1c6/0x230 [ 420.497623][T27744] Code: 72 ff ff ff e8 8b 85 71 ff 48 c7 c7 3e d9 b2 86 e8 2f 6b 8a ff c6 05 76 30 f4 04 01 90 48 c7 c7 0c a3 1b 86 e8 0b 4b 53 ff 90 <0f> 0b 90 90 e9 43 ff ff ff e8 5c 85 71 ff 48 c7 c7 3b d9 b2 86 e8 [ 420.503826][T27748] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=27748 comm=( [ 420.517349][T27744] RSP: 0018:ffffc90005cf7b28 EFLAGS: 00010246 [ 420.517372][T27744] RAX: c00a9df51b037c00 RBX: ffff888111e2a0e4 RCX: 0000000000040000 [ 420.543527][T27744] RDX: ffffc90015602000 RSI: 0000000000001318 RDI: 0000000000001319 [ 420.551518][T27744] RBP: 0000000000000003 R08: ffffffff8111f547 R09: 0000000000000000 [ 420.559519][T27744] R10: 0001ffffffffffff R11: ffff8881045f4200 R12: ffff88812b6c9a68 [ 420.567552][T27744] R13: 0000000000000008 R14: ffff888111e2a0e4 R15: 0000000000000000 [ 420.575554][T27744] FS: 00007f82325116c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 420.584503][T27744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.591127][T27744] CR2: 000000110c24a739 CR3: 000000012b6e0000 CR4: 00000000003506f0 [ 420.599176][T27744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.607150][T27744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 420.615214][T27744] Call Trace: [ 420.618491][T27744] [ 420.621510][T27744] ? __warn+0x141/0x350 [ 420.625785][T27744] ? report_bug+0x315/0x420 [ 420.630337][T27744] ? refcount_warn_saturate+0x1c6/0x230 [ 420.635913][T27744] ? handle_bug+0x60/0x90 [ 420.640309][T27744] ? exc_invalid_op+0x1a/0x50 [ 420.645045][T27744] ? asm_exc_invalid_op+0x1a/0x20 [ 420.650102][T27744] ? __warn_printk+0x167/0x1b0 [ 420.654917][T27744] ? refcount_warn_saturate+0x1c6/0x230 [ 420.660523][T27744] ? refcount_warn_saturate+0x1c5/0x230 [ 420.666066][T27744] sk_skb_reason_drop+0xe9/0x290 [ 420.671052][T27744] j1939_session_put+0x157/0x2a0 [ 420.676015][T27744] j1939_sk_sendmsg+0xa71/0xc00 [ 420.680906][T27744] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 420.686334][T27744] __sock_sendmsg+0x140/0x180 [ 420.691144][T27744] ____sys_sendmsg+0x312/0x410 [ 420.695959][T27744] __sys_sendmsg+0x1d9/0x270 [ 420.700677][T27744] ? futex_wait+0x18e/0x1c0 [ 420.705188][T27744] __x64_sys_sendmsg+0x46/0x50 [ 420.709968][T27744] x64_sys_call+0x2689/0x2d60 [ 420.714778][T27744] do_syscall_64+0xc9/0x1c0 [ 420.719376][T27744] ? clear_bhb_loop+0x55/0xb0 [ 420.724123][T27744] ? clear_bhb_loop+0x55/0xb0 [ 420.728872][T27744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.734837][T27744] RIP: 0033:0x7f823389dff9 [ 420.739295][T27744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.758936][T27744] RSP: 002b:00007f8232511038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.767335][T27744] RAX: ffffffffffffffda RBX: 00007f8233a55f80 RCX: 00007f823389dff9 [ 420.775694][T27744] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 420.783929][T27744] RBP: 00007f8233910296 R08: 0000000000000000 R09: 0000000000000000 [ 420.791928][T27744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.800008][T27744] R13: 0000000000000000 R14: 00007f8233a55f80 R15: 00007fff874b0858 [ 420.808031][T27744] [ 420.811105][T27744] ---[ end trace 0000000000000000 ]--- [ 421.005995][T27759] loop4: detected capacity change from 0 to 2048 [ 421.049029][T27759] loop4: p1 < > p4 [ 421.053283][T27759] loop4: p4 size 8388608 extends beyond EOD, truncated [ 421.162961][T27763] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6115'. [ 421.248448][T27768] loop4: detected capacity change from 0 to 2048 [ 421.263959][T27770] loop2: detected capacity change from 0 to 2048 [ 421.279723][T27770] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 421.287928][T27770] System zones: 0-7 [ 421.292209][T27768] loop4: p1 < > p4 [ 421.296587][T27768] loop4: p4 size 8388608 extends beyond EOD, truncated [ 421.297005][T27770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.326192][T27770] bond5: entered promiscuous mode [ 421.331377][T27770] bond5: entered allmulticast mode [ 421.336763][T27770] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.348528][T27770] bond5 (unregistering): Released all slaves [ 421.408211][T27783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6122'. [ 421.421356][T27781] loop1: detected capacity change from 0 to 512 [ 421.430150][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.440396][T27781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.442085][T27783] loop3: detected capacity change from 0 to 2048 [ 421.455910][T27784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6120'. [ 421.472504][T27781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.485678][T27781] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.505113][T27781] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 421.516190][T27783] Alternate GPT is invalid, using primary GPT. [ 421.525961][T27783] loop3: p2 p3 p7 [ 421.564309][T27783] sd 0:0:1:0: device reset [ 421.591011][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.685804][T27794] loop3: detected capacity change from 0 to 8192 [ 421.697297][T27798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6127'. [ 421.716389][T27798] loop2: detected capacity change from 0 to 2048 [ 421.723044][T27794] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 421.743977][T27800] loop1: detected capacity change from 0 to 512 [ 421.763723][T27798] Alternate GPT is invalid, using primary GPT. [ 421.770182][T27798] loop2: p2 p3 p7 [ 421.785271][T27800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.801612][T27800] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.843682][T27798] sd 0:0:1:0: device reset [ 421.855488][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.865782][T27808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6131'. [ 421.887091][T27810] loop2: detected capacity change from 0 to 2048 [ 421.900905][T27810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.927291][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.995830][T27820] loop1: detected capacity change from 0 to 8192 [ 422.003641][T27820] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.417485][T27834] loop0: detected capacity change from 0 to 8192 [ 422.424754][T27834] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.483565][T27838] tipc: Started in network mode [ 422.488484][T27838] tipc: Node identity 62b40fcaba47, cluster identity 4711 [ 422.495809][T27838] tipc: Enabled bearer , priority 10 [ 422.520568][T27837] tipc: Disabling bearer [ 422.657113][T27845] loop0: detected capacity change from 0 to 2048 [ 422.690718][T27845] loop0: p1 < > p4 [ 422.696842][T27845] loop0: p4 size 8388608 extends beyond EOD, truncated [ 422.819936][T27850] loop0: detected capacity change from 0 to 8192 [ 422.827447][T27850] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.840118][ T29] kauditd_printk_skb: 881 callbacks suppressed [ 422.840134][ T29] audit: type=1326 audit(1729204408.350:38193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.870022][ T29] audit: type=1326 audit(1729204408.350:38194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.884945][T27857] loop3: detected capacity change from 0 to 2048 [ 422.893588][ T29] audit: type=1326 audit(1729204408.350:38195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.923574][ T29] audit: type=1326 audit(1729204408.350:38196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.947178][ T29] audit: type=1326 audit(1729204408.350:38197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.970853][ T29] audit: type=1326 audit(1729204408.350:38198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 422.994433][ T29] audit: type=1326 audit(1729204408.350:38199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 423.018129][ T29] audit: type=1326 audit(1729204408.350:38200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 423.041701][ T29] audit: type=1326 audit(1729204408.350:38201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 423.065355][ T29] audit: type=1326 audit(1729204408.350:38202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27849 comm="syz.0.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8627dff9 code=0x7ffc0000 [ 423.084365][T27862] loop0: detected capacity change from 0 to 8192 [ 423.095274][T27863] loop1: detected capacity change from 0 to 256 [ 423.096382][T27862] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.115580][T27857] Alternate GPT is invalid, using primary GPT. [ 423.121893][T27857] loop3: p1 p2 p3 [ 423.133251][T27863] FAT-fs (loop1): Directory bread(block 64) failed [ 423.139887][T27863] FAT-fs (loop1): Directory bread(block 65) failed [ 423.146502][T27863] FAT-fs (loop1): Directory bread(block 66) failed [ 423.153111][T27863] FAT-fs (loop1): Directory bread(block 67) failed [ 423.160915][T27863] FAT-fs (loop1): Directory bread(block 68) failed [ 423.169674][T27863] FAT-fs (loop1): Directory bread(block 69) failed [ 423.176272][T27863] FAT-fs (loop1): Directory bread(block 70) failed [ 423.182911][T27863] FAT-fs (loop1): Directory bread(block 71) failed [ 423.189456][T27863] FAT-fs (loop1): Directory bread(block 72) failed [ 423.195991][T27863] FAT-fs (loop1): Directory bread(block 73) failed [ 423.211877][T27863] bridge0: port 3(vlan2) entered blocking state [ 423.218217][T27863] bridge0: port 3(vlan2) entered disabled state [ 423.229705][T27871] loop0: detected capacity change from 0 to 2048 [ 423.236791][T27863] vlan2: entered allmulticast mode [ 423.237543][T27872] loop3: detected capacity change from 0 to 2048 [ 423.248542][T27863] vlan2: left allmulticast mode [ 423.260158][T27871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.280764][T27872] loop3: p1 < > p4 [ 423.285150][T27872] loop3: p4 size 8388608 extends beyond EOD, truncated [ 423.285596][T27399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.483823][T27885] loop1: detected capacity change from 0 to 8192 [ 423.491543][T27885] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 423.904945][T27900] loop4: detected capacity change from 0 to 8192 [ 423.912554][T27900] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.184231][T27914] loop2: detected capacity change from 0 to 512 [ 424.404709][T27923] loop3: detected capacity change from 0 to 2048 [ 424.433183][T27924] loop0: detected capacity change from 0 to 2048 [ 424.451439][T27923] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 424.459608][T27923] System zones: 0-7 [ 424.464093][T27923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.480478][T27924] loop0: p1 < > p4 [ 424.484111][T27923] bond15: entered promiscuous mode [ 424.484838][T27924] loop0: p4 size 8388608 extends beyond EOD, [ 424.489406][T27923] bond15: entered allmulticast mode [ 424.489691][T27923] 8021q: adding VLAN 0 to HW filter on device bond15 [ 424.495477][T27924] truncated [ 424.513053][T27923] bond15 (unregistering): Released all slaves [ 424.581743][T18490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.612639][T27935] tipc: Enabling of bearer rejected, failed to enable media [ 424.652206][T27937] loop0: detected capacity change from 0 to 2048 [ 424.699006][T27937] loop0: p1 < > p4 [ 424.705478][T27937] loop0: p4 size 8388608 extends beyond EOD, truncated [ 424.768131][T27943] loop4: detected capacity change from 0 to 8192 [ 424.783467][T27943] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 424.864792][T27959] loop4: detected capacity change from 0 to 2048 [ 424.915251][T27959] Alternate GPT is invalid, using primary GPT. [ 424.921811][T27959] loop4: p2 p3 p7 [ 424.957548][T27959] sd 0:0:1:0: device reset [ 425.072340][T27972] loop2: detected capacity change from 0 to 2048 [ 425.108992][T27972] loop2: p1 < > p4 [ 425.113177][T27972] loop2: p4 size 8388608 extends beyond EOD, truncated [ 425.415693][T27982] loop0: detected capacity change from 0 to 512 [ 425.640057][T27988] loop4: detected capacity change from 0 to 512 [ 425.775756][T27995] pim6reg1: entered promiscuous mode [ 425.781204][T27995] pim6reg1: entered allmulticast mode [ 426.080418][T28001] loop0: detected capacity change from 0 to 256 [ 426.125933][T28003] __nla_validate_parse: 5 callbacks suppressed [ 426.125958][T28003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6203'. [ 426.172218][T28001] FAT-fs (loop0): Directory bread(block 64) failed [ 426.189477][T28001] FAT-fs (loop0): Directory bread(block 65) failed [ 426.189989][T28003] loop2: detected capacity change from 0 to 2048 [ 426.196025][T28001] FAT-fs (loop0): Directory bread(block 66) failed [ 426.196048][T28001] FAT-fs (loop0): Directory bread(block 67) failed [ 426.215592][T28001] FAT-fs (loop0): Directory bread(block 68) failed [ 426.222160][T28001] FAT-fs (loop0): Directory bread(block 69) failed [ 426.228781][T28001] FAT-fs (loop0): Directory bread(block 70) failed [ 426.235388][T28001] FAT-fs (loop0): Directory bread(block 71) failed [ 426.242008][T28001] FAT-fs (loop0): Directory bread(block 72) failed [ 426.248547][T28001] FAT-fs (loop0): Directory bread(block 73) failed [ 426.274838][T28001] bridge0: port 3(vlan2) entered blocking state [ 426.281343][T28001] bridge0: port 3(vlan2) entered disabled state [ 426.287721][T28001] vlan2: entered allmulticast mode [ 426.293198][T28001] vlan2: left allmulticast mode [ 426.301580][T28009] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6206'. [ 426.305627][T28003] Alternate GPT is invalid, using primary GPT. [ 426.317313][T28003] loop2: p2 p3 p7 [ 426.341347][T28015] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6208'. [ 426.371036][T28018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6209'. [ 426.384281][T28003] sd 0:0:1:0: device reset [ 426.410351][T28018] loop4: detected capacity change from 0 to 2048 [ 426.421004][T28021] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6211'. [ 426.453655][T28018] Alternate GPT is invalid, using primary GPT. [ 426.460128][T28018] loop4: p2 p3 p7 [ 426.490265][T28018] sd 0:0:1:0: device reset [ 427.142522][T28054] loop3: detected capacity change from 0 to 2048 [ 427.159850][T28054] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 427.167958][T28054] System zones: 0-7 [ 427.172579][T28054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.191051][T28054] bond15: entered promiscuous mode [ 427.196179][T28054] bond15: entered allmulticast mode [ 427.201574][T28054] 8021q: adding VLAN 0 to HW filter on device bond15 [ 427.213015][T28054] bond15 (unregistering): Released all slaves [ 427.270541][T18490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.291532][T28067] loop1: detected capacity change from 0 to 2048 [ 427.303448][T28071] tipc: Enabling of bearer rejected, failed to enable media [ 427.329967][T28067] Alternate GPT is invalid, using primary GPT. [ 427.336316][T28067] loop1: p1 p2 p3 [ 427.380216][T28076] loop0: detected capacity change from 0 to 2048 [ 427.404020][T28081] loop3: detected capacity change from 0 to 2048 [ 427.418997][T28076] loop0: p1 < > p4 [ 427.422119][T28083] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6233'. [ 427.423321][T28076] loop0: p4 size 8388608 extends beyond EOD, truncated [ 427.460477][T28081] loop3: p1 < > p4 [ 427.466292][T28081] loop3: p4 size 8388608 extends beyond EOD, truncated [ 427.536424][T28096] loop1: detected capacity change from 0 to 2048 [ 427.552330][T28097] loop3: detected capacity change from 0 to 2048 [ 427.572277][T28097] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 427.578656][T28105] loop2: detected capacity change from 0 to 256 [ 427.582952][T28097] System zones: 0-7 [ 427.592238][T28096] Alternate GPT is invalid, using primary GPT. [ 427.597989][T28105] FAT-fs (loop2): Directory bread(block 64) failed [ 427.598515][T28096] loop1: p1 p2 p3 [ 427.606502][T28105] FAT-fs (loop2): Directory bread(block 65) failed [ 427.609646][T28097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.615542][T28105] FAT-fs (loop2): Directory bread(block 66) failed [ 427.636229][T28105] FAT-fs (loop2): Directory bread(block 67) failed [ 427.644398][T28105] FAT-fs (loop2): Directory bread(block 68) failed [ 427.648445][T28097] bond15: entered promiscuous mode [ 427.656118][T28097] bond15: entered allmulticast mode [ 427.661385][T28105] FAT-fs (loop2): Directory bread(block 69) failed [ 427.661762][T28097] 8021q: adding VLAN 0 to HW filter on device bond15 [ 427.675629][T28105] FAT-fs (loop2): Directory bread(block 70) failed [ 427.685241][T28105] FAT-fs (loop2): Directory bread(block 71) failed [ 427.691891][T28105] FAT-fs (loop2): Directory bread(block 72) failed [ 427.693921][T28097] bond15 (unregistering): Released all slaves [ 427.698506][T28105] FAT-fs (loop2): Directory bread(block 73) failed [ 427.720841][T28105] bridge0: port 3(vlan2) entered blocking state [ 427.727186][T28105] bridge0: port 3(vlan2) entered disabled state [ 427.734132][T28105] vlan2: entered allmulticast mode [ 427.740240][T28105] vlan2: left allmulticast mode [ 427.778576][T18490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.821409][T28117] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6246'. [ 427.946308][T28126] loop2: detected capacity change from 0 to 8192 [ 427.954147][T28126] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 427.966385][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 427.966397][ T29] audit: type=1326 audit(1729204413.480:38732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.000501][ T29] audit: type=1326 audit(1729204413.510:38733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.024094][ T29] audit: type=1326 audit(1729204413.510:38734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.047823][ T29] audit: type=1326 audit(1729204413.510:38735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.071497][ T29] audit: type=1326 audit(1729204413.510:38736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.095165][ T29] audit: type=1326 audit(1729204413.510:38737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.118779][ T29] audit: type=1326 audit(1729204413.510:38738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.142427][ T29] audit: type=1326 audit(1729204413.510:38739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.166067][ T29] audit: type=1326 audit(1729204413.510:38740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.189791][ T29] audit: type=1326 audit(1729204413.510:38741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28124 comm="syz.2.6250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 428.418263][T28145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6258'. [ 428.439985][T28147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6259'. [ 429.155566][T28169] loop2: detected capacity change from 0 to 512 [ 429.162553][T28178] loop4: detected capacity change from 0 to 2048 [ 429.169189][T28169] EXT4-fs: dax option not supported [ 429.188842][T28178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.266302][T28190] pimreg: entered allmulticast mode [ 429.274072][T28190] pimreg: left allmulticast mode [ 429.327467][T28199] loop1: detected capacity change from 0 to 2048 [ 429.390510][T28199] loop1: p1 < > p4 [ 429.398308][T28199] loop1: p4 size 8388608 extends beyond EOD, truncated [ 429.532595][T28222] loop1: detected capacity change from 0 to 2048 [ 429.565129][T28222] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 429.573878][T28222] System zones: 0-7 [ 429.578257][T28222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.597379][T28222] bond1: entered promiscuous mode [ 429.602486][T28222] bond1: entered allmulticast mode [ 429.607818][T28222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.619617][T28222] bond1 (unregistering): Released all slaves [ 429.638416][T28239] tipc: Enabling of bearer rejected, failed to enable media [ 429.676146][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.725054][T28253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6272'. [ 429.987180][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.047360][T28311] loop2: detected capacity change from 0 to 256 [ 430.054034][T28311] msdos: Bad value for 'gid' [ 430.058678][T28311] msdos: Bad value for 'gid' [ 430.179856][T28324] tipc: Enabling of bearer rejected, failed to enable media [ 430.198081][T28325] loop0: detected capacity change from 0 to 2048 [ 430.238949][T28325] loop0: p1 < > p4 [ 430.243124][T28325] loop0: p4 size 8388608 extends beyond EOD, truncated [ 430.329592][T28335] loop0: detected capacity change from 0 to 2048 [ 430.372778][T28340] loop1: detected capacity change from 0 to 2048 [ 430.384586][T28335] Alternate GPT is invalid, using primary GPT. [ 430.391037][T28335] loop0: p2 p3 p7 [ 430.419431][T28335] sd 0:0:1:0: device reset [ 430.460748][T28340] Alternate GPT is invalid, using primary GPT. [ 430.467025][T28340] loop1: p2 p3 p7 [ 430.516877][T28350] loop0: detected capacity change from 0 to 8192 [ 430.520350][T28340] sd 0:0:1:0: device reset [ 430.530037][T28350] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.585809][T28355] tipc: Enabling of bearer rejected, failed to enable media [ 430.616596][T28359] loop0: detected capacity change from 0 to 256 [ 430.630201][T28359] FAT-fs (loop0): Directory bread(block 64) failed [ 430.638212][T28359] FAT-fs (loop0): Directory bread(block 65) failed [ 430.640472][T28362] loop2: detected capacity change from 0 to 512 [ 430.651664][T28359] FAT-fs (loop0): Directory bread(block 66) failed [ 430.658672][T28359] FAT-fs (loop0): Directory bread(block 67) failed [ 430.666058][T28359] FAT-fs (loop0): Directory bread(block 68) failed [ 430.678677][T28359] FAT-fs (loop0): Directory bread(block 69) failed [ 430.688736][T28363] loop1: detected capacity change from 0 to 2048 [ 430.695181][T28359] FAT-fs (loop0): Directory bread(block 70) failed [ 430.702371][T28359] FAT-fs (loop0): Directory bread(block 71) failed [ 430.709201][T28359] FAT-fs (loop0): Directory bread(block 72) failed [ 430.717547][T28359] FAT-fs (loop0): Directory bread(block 73) failed [ 430.730042][T28369] pim6reg1: entered promiscuous mode [ 430.735504][T28369] pim6reg1: entered allmulticast mode [ 430.743251][T28363] loop1: p1 < > p4 [ 430.746572][T28359] bridge0: port 3(vlan2) entered blocking state [ 430.752411][T28363] loop1: p4 size 8388608 extends beyond EOD, truncated [ 430.753328][T28359] bridge0: port 3(vlan2) entered disabled state [ 430.767057][T28359] vlan2: entered allmulticast mode [ 430.777456][T28359] vlan2: left allmulticast mode [ 430.801689][T28370] loop4: detected capacity change from 0 to 2048 [ 430.827991][T28370] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 430.837689][T28370] System zones: 0-7 [ 430.841980][T28370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.874199][T28370] bond1: entered promiscuous mode [ 430.879424][T28370] bond1: entered allmulticast mode [ 430.895452][T28379] loop3: detected capacity change from 0 to 2048 [ 430.902028][T28370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 430.918107][T28370] bond1 (unregistering): Released all slaves [ 430.932586][T28379] Alternate GPT is invalid, using primary GPT. [ 430.938903][T28379] loop3: p1 p2 p3 [ 430.950975][T28388] loop0: detected capacity change from 0 to 512 [ 430.958559][T28388] EXT4-fs (loop0): inodes count not valid: 1 vs 32 [ 430.983007][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.057958][T28398] loop0: detected capacity change from 0 to 1024 [ 431.074401][T28398] EXT4-fs: Ignoring removed oldalloc option [ 431.081720][T28398] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 431.101097][T28398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.123095][T28411] loop3: detected capacity change from 0 to 2048 [ 431.134557][T28408] loop4: detected capacity change from 0 to 8192 [ 431.142022][T28408] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.179269][T28411] loop3: p1 < > p4 [ 431.183524][T28411] loop3: p4 size 8388608 extends beyond EOD, truncated [ 431.199498][T28398] loop0: detected capacity change from 1024 to 64 [ 431.207873][T28398] syz.0.6310: attempt to access beyond end of device [ 431.207873][T28398] loop0: rw=2049, sector=224, nr_sectors = 2 limit=64 [ 431.221344][T28398] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 112) [ 431.232646][T28398] syz.0.6310: attempt to access beyond end of device [ 431.232646][T28398] loop0: rw=2049, sector=230, nr_sectors = 2 limit=64 [ 431.246041][T28398] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115) [ 431.270578][T28398] Buffer I/O error on device loop0, logical block 115 [ 431.271349][T28418] loop4: detected capacity change from 0 to 2048 [ 431.277351][T28398] Buffer I/O error on device loop0, logical block 112 [ 431.298025][T28419] loop2: detected capacity change from 0 to 2048 [ 431.314566][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.336700][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.340076][T28419] Alternate GPT is invalid, using primary GPT. [ 431.352558][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.356291][T28419] loop2: p1 p2 p3 [ 431.371065][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.373892][T28418] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 431.395386][T28418] System zones: 0-7 [ 431.403310][T28418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.415884][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.429533][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.442979][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.456575][T27399] EXT4-fs warning (device loop0): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 431.475039][T28418] bond1: entered promiscuous mode [ 431.480169][T28418] bond1: entered allmulticast mode [ 431.486729][T28418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.499959][T28418] bond1 (unregistering): Released all slaves [ 431.567567][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.667818][T28442] loop3: detected capacity change from 0 to 8192 [ 431.676672][T27399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.687286][T28442] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 431.699888][T28409] kmmpd-loop0: attempt to access beyond end of device [ 431.699888][T28409] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 431.713524][T28409] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 431.726249][ T3790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.743278][T28445] tipc: Enabling of bearer rejected, failed to enable media [ 431.772327][ T3790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.833024][ T3790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.892784][ T3790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.903819][T28466] loop1: detected capacity change from 0 to 512 [ 431.916551][T28468] loop4: detected capacity change from 0 to 2048 [ 431.966881][ T3790] bridge_slave_1: left allmulticast mode [ 431.972566][ T3790] bridge_slave_1: left promiscuous mode [ 431.978276][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.986825][T28468] Alternate GPT is invalid, using primary GPT. [ 431.993183][T28468] loop4: p1 p2 p3 [ 432.002654][ T3790] bridge_slave_0: left allmulticast mode [ 432.008303][ T3790] bridge_slave_0: left promiscuous mode [ 432.014025][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.131943][ T3790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.142327][ T3790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.152740][ T3790] bond0 (unregistering): Released all slaves [ 432.166190][T28466] pim6reg1: entered promiscuous mode [ 432.171543][T28466] pim6reg1: entered allmulticast mode [ 432.205127][ T3790] tipc: Left network mode [ 432.216882][ T3790] hsr_slave_0: left promiscuous mode [ 432.222978][ T3790] hsr_slave_1: left promiscuous mode [ 432.229098][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.236535][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.245681][ T3790] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.253202][ T3790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.265171][ T3790] veth1_macvtap: left promiscuous mode [ 432.270723][ T3790] veth0_macvtap: left promiscuous mode [ 432.276247][ T3790] veth1_vlan: left promiscuous mode [ 432.281532][ T3790] veth0_vlan: left promiscuous mode [ 432.368256][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 432.381496][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 432.430626][T28483] tipc: Enabling of bearer rejected, failed to enable media [ 432.470532][T28455] chnl_net:caif_netlink_parms(): no params data found [ 432.550887][T28455] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.558171][T28455] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.571410][T28455] bridge_slave_0: entered allmulticast mode [ 432.578088][T28455] bridge_slave_0: entered promiscuous mode [ 432.584899][T28455] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.592273][T28455] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.599508][T28455] bridge_slave_1: entered allmulticast mode [ 432.605954][T28455] bridge_slave_1: entered promiscuous mode [ 432.623113][T28455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.627272][T28508] loop2: detected capacity change from 0 to 2048 [ 432.633771][T28455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.651779][T28510] loop1: detected capacity change from 0 to 256 [ 432.659501][T28455] team0: Port device team_slave_0 added [ 432.666080][T28455] team0: Port device team_slave_1 added [ 432.671320][T28508] Alternate GPT is invalid, using primary GPT. [ 432.677994][T28508] loop2: p1 p2 p3 [ 432.680213][T28510] FAT-fs (loop1): Directory bread(block 64) failed [ 432.688252][T28510] FAT-fs (loop1): Directory bread(block 65) failed [ 432.701592][T28510] FAT-fs (loop1): Directory bread(block 66) failed [ 432.708744][T28455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.715706][T28455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.741635][T28455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.748442][T28513] loop3: detected capacity change from 0 to 2048 [ 432.752753][T28510] FAT-fs (loop1): Directory bread(block 67) failed [ 432.765162][T28510] FAT-fs (loop1): Directory bread(block 68) failed [ 432.771987][T28510] FAT-fs (loop1): Directory bread(block 69) failed [ 432.778812][T28510] FAT-fs (loop1): Directory bread(block 70) failed [ 432.785784][T28455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.792814][T28455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.805626][T28510] FAT-fs (loop1): Directory bread(block 71) failed [ 432.818790][T28455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.828063][T28513] loop3: p1 < > p4 [ 432.837487][T28510] FAT-fs (loop1): Directory bread(block 72) failed [ 432.840207][T28513] loop3: p4 size 8388608 extends beyond EOD, [ 432.846215][T28510] FAT-fs (loop1): Directory bread(block 73) failed [ 432.858958][T28513] truncated [ 432.862246][T28515] __nla_validate_parse: 3 callbacks suppressed [ 432.862260][T28515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6353'. [ 432.886190][T28455] hsr_slave_0: entered promiscuous mode [ 432.897648][T28455] hsr_slave_1: entered promiscuous mode [ 432.905531][T28455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.915392][T28455] Cannot create hsr debugfs directory [ 432.923165][T28510] bridge0: port 3(vlan2) entered blocking state [ 432.929616][T28510] bridge0: port 3(vlan2) entered disabled state [ 432.936218][T28510] vlan2: entered allmulticast mode [ 432.941864][T28510] vlan2: left allmulticast mode [ 432.967139][T28517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6354'. [ 432.970118][T28513] netlink: 'syz.3.6352': attribute type 4 has an invalid length. [ 433.174566][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 433.174579][ T29] audit: type=1326 audit(1729204418.680:39492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.206942][ T29] audit: type=1326 audit(1729204418.690:39493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.230626][ T29] audit: type=1326 audit(1729204418.690:39494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.254225][ T29] audit: type=1326 audit(1729204418.690:39495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.266338][T28544] loop3: detected capacity change from 0 to 2048 [ 433.277827][ T29] audit: type=1326 audit(1729204418.690:39496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.298159][T28543] loop1: detected capacity change from 0 to 2048 [ 433.307714][ T29] audit: type=1326 audit(1729204418.690:39497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.337640][ T29] audit: type=1326 audit(1729204418.690:39498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.361173][ T29] audit: type=1326 audit(1729204418.690:39499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.384831][ T29] audit: type=1326 audit(1729204418.690:39500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.408458][ T29] audit: type=1326 audit(1729204418.690:39501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28538 comm="syz.3.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab0708dff9 code=0x7ffc0000 [ 433.480264][T28543] Alternate GPT is invalid, using primary GPT. [ 433.486538][T28543] loop1: p1 p2 p3 [ 433.493097][T28544] Alternate GPT is invalid, using primary GPT. [ 433.499427][T28544] loop3: p1 p2 p3 [ 433.523411][T28551] loop4: detected capacity change from 0 to 512 [ 433.541152][T28551] EXT4-fs (loop4): orphan cleanup on readonly fs [ 433.567131][T28455] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 433.573193][T28558] loop1: detected capacity change from 0 to 2048 [ 433.582768][T28551] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6365: bg 0: block 248: padding at end of block bitmap is not set [ 433.593706][T28455] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 433.599356][T28551] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.6365: Failed to acquire dquot type 1 [ 433.621241][T28455] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 433.630022][T28455] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 433.637512][T28551] EXT4-fs (loop4): 1 truncate cleaned up [ 433.651608][T28551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.672040][T28455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.686919][T28455] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.696068][T28551] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 433.709522][T28455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 433.711723][T28558] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 433.719870][T28455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 433.729510][T28558] System zones: 0-7 [ 433.743946][T15081] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.751034][T15081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.759424][T28551] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 433.761887][T28558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.771018][T15081] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.788969][T15081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.808997][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.823850][T28558] bond1: entered promiscuous mode [ 433.828928][T28558] bond1: entered allmulticast mode [ 433.841229][T28558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.852595][T28558] bond1 (unregistering): Released all slaves [ 433.896091][T28455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.929454][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.027292][T28455] veth0_vlan: entered promiscuous mode [ 434.038671][T28455] veth1_vlan: entered promiscuous mode [ 434.073328][T28598] loop1: detected capacity change from 0 to 2048 [ 434.081132][T28455] veth0_macvtap: entered promiscuous mode [ 434.090156][T28455] veth1_macvtap: entered promiscuous mode [ 434.100351][T28598] Alternate GPT is invalid, using primary GPT. [ 434.106668][T28598] loop1: p1 p2 p3 [ 434.118507][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.129164][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.139013][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.149550][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.159492][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.165194][T28608] loop1: detected capacity change from 0 to 512 [ 434.170044][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.196175][T28609] loop2: detected capacity change from 0 to 2048 [ 434.200336][T28455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.209073][T28608] EXT4-fs (loop1): orphan cleanup on readonly fs [ 434.214944][T28611] netlink: 204 bytes leftover after parsing attributes in process `syz.4.6384'. [ 434.217627][T28608] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6383: bg 0: block 248: padding at end of block bitmap is not set [ 434.227532][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.249920][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.250354][T28609] Alternate GPT is invalid, using primary GPT. [ 434.259771][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.266005][T28609] loop2: p1 p2 p3 [ 434.276363][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.281458][T28608] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6383: Failed to acquire dquot type 1 [ 434.289903][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.289918][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.289950][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.289966][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.289981][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.333303][T28608] EXT4-fs (loop1): 1 truncate cleaned up [ 434.341841][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.341856][T28455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.354563][T28608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.357871][T28455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.359250][T28455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.409144][T28455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.417841][T28455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.418881][T28608] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 434.426655][T28455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.444649][T28455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.480942][T28608] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 434.542008][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.730649][T28663] loop2: detected capacity change from 0 to 2048 [ 434.740230][T28663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.779320][T28674] loop1: detected capacity change from 0 to 2048 [ 434.810464][T28674] loop1: p1 < > p4 [ 434.815012][T28674] loop1: p4 size 8388608 extends beyond EOD, truncated [ 435.367253][T28783] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6414'. [ 435.410845][T28793] loop0: detected capacity change from 0 to 512 [ 435.425768][T28799] bond15: entered allmulticast mode [ 435.433152][T28799] bond15 (unregistering): Released all slaves [ 435.451961][T28793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.464658][T28793] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.477245][T28810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6416'. [ 435.558548][T28455] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.581467][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.620298][T28840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6421'. [ 435.648472][T28840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6421'. [ 435.681907][T28840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6421'. [ 435.821474][T28863] bond1: entered allmulticast mode [ 435.828370][T28863] bond1 (unregistering): Released all slaves [ 435.868417][T28869] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6429'. [ 435.972293][T28874] loop4: detected capacity change from 0 to 2048 [ 436.019958][T28874] Alternate GPT is invalid, using primary GPT. [ 436.026286][T28874] loop4: p1 p2 p3 [ 436.265005][T28887] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6438'. [ 436.351447][T28895] bond1: entered allmulticast mode [ 436.357727][T28895] bond1 (unregistering): Released all slaves [ 436.432242][T28903] loop3: detected capacity change from 0 to 2048 [ 436.483266][T28903] Alternate GPT is invalid, using primary GPT. [ 436.489723][T28903] loop3: p2 p3 p7 [ 436.514818][T28903] sd 0:0:1:0: device reset [ 436.662315][T28911] loop1: detected capacity change from 0 to 8192 [ 436.670183][T28911] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 436.715612][T28917] loop2: detected capacity change from 0 to 2048 [ 436.720201][T28921] loop1: detected capacity change from 0 to 256 [ 436.734435][T28921] FAT-fs (loop1): Directory bread(block 64) failed [ 436.741261][T28921] FAT-fs (loop1): Directory bread(block 65) failed [ 436.747376][T28917] Alternate GPT is invalid, using primary GPT. [ 436.747776][T28921] FAT-fs (loop1): Directory bread(block 66) failed [ 436.754176][T28917] loop2: p2 p3 p7 [ 436.760514][T28921] FAT-fs (loop1): Directory bread(block 67) failed [ 436.771762][T28921] FAT-fs (loop1): Directory bread(block 68) failed [ 436.778380][T28921] FAT-fs (loop1): Directory bread(block 69) failed [ 436.785022][T28921] FAT-fs (loop1): Directory bread(block 70) failed [ 436.791605][T28921] FAT-fs (loop1): Directory bread(block 71) failed [ 436.797924][T28917] sd 0:0:1:0: device reset [ 436.798158][T28921] FAT-fs (loop1): Directory bread(block 72) failed [ 436.809209][T28921] FAT-fs (loop1): Directory bread(block 73) failed [ 436.831825][T28921] bridge0: port 3(vlan2) entered blocking state [ 436.838219][T28921] bridge0: port 3(vlan2) entered disabled state [ 436.845837][T28921] vlan2: entered allmulticast mode [ 436.851724][T28921] vlan2: left allmulticast mode [ 436.877860][T28926] bond6: entered allmulticast mode [ 437.192819][T28942] loop4: detected capacity change from 0 to 8192 [ 437.200606][T28942] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.276491][T28946] loop4: detected capacity change from 0 to 8192 [ 437.283820][T28946] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.415644][T28954] bond2: entered allmulticast mode [ 437.620493][T28975] loop3: detected capacity change from 0 to 2048 [ 437.629862][T28975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.910044][T29033] bond8: entered allmulticast mode [ 437.916338][T29033] __nla_validate_parse: 9 callbacks suppressed [ 437.916396][T29033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6477'. [ 437.946765][T29044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6478'. [ 437.965499][T29044] loop2: detected capacity change from 0 to 2048 [ 438.018305][T29055] loop4: detected capacity change from 0 to 2048 [ 438.025592][T29044] Alternate GPT is invalid, using primary GPT. [ 438.032060][T29044] loop2: p2 p3 p7 [ 438.037168][T29055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.054128][T29055] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6479: bg 0: block 274: padding at end of block bitmap is not set [ 438.070076][T29055] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 438.082611][T29055] EXT4-fs (loop4): This should not happen!! Data will be lost [ 438.082611][T29055] [ 438.101151][T29044] sd 0:0:1:0: device reset [ 438.123640][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.146657][T29074] loop4: detected capacity change from 0 to 256 [ 438.160308][T29074] FAT-fs (loop4): Directory bread(block 64) failed [ 438.166995][T29074] FAT-fs (loop4): Directory bread(block 65) failed [ 438.173768][T29074] FAT-fs (loop4): Directory bread(block 66) failed [ 438.181814][T29074] FAT-fs (loop4): Directory bread(block 67) failed [ 438.188613][T29074] FAT-fs (loop4): Directory bread(block 68) failed [ 438.195617][T29074] FAT-fs (loop4): Directory bread(block 69) failed [ 438.203778][T29074] FAT-fs (loop4): Directory bread(block 70) failed [ 438.210843][T29074] FAT-fs (loop4): Directory bread(block 71) failed [ 438.217474][T29074] FAT-fs (loop4): Directory bread(block 72) failed [ 438.225403][T29074] FAT-fs (loop4): Directory bread(block 73) failed [ 438.246850][T29074] bridge0: port 3(vlan2) entered blocking state [ 438.253304][T29074] bridge0: port 3(vlan2) entered disabled state [ 438.261057][T29074] vlan2: entered allmulticast mode [ 438.266775][T29074] vlan2: left allmulticast mode [ 438.322084][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 438.322099][ T29] audit: type=1326 audit(1729204423.830:40063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29102 comm="syz.4.6482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f460e50dff9 code=0x0 [ 438.376608][ T29] audit: type=1326 audit(1729204423.880:40064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29111 comm="syz.1.6483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f823389dff9 code=0x0 [ 438.427633][T18490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.498139][ T3769] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.531861][ T3769] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.570061][ T3769] team0: Port device netdevsim1 removed [ 438.577107][ T3769] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.638423][T29137] chnl_net:caif_netlink_parms(): no params data found [ 438.649785][ T3769] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.685616][T29137] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.693774][T29137] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.701054][T29137] bridge_slave_0: entered allmulticast mode [ 438.707510][T29137] bridge_slave_0: entered promiscuous mode [ 438.716567][T29137] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.723819][T29137] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.732633][T29137] bridge_slave_1: entered allmulticast mode [ 438.739320][T29137] bridge_slave_1: entered promiscuous mode [ 438.756846][T29137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.767352][T29137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.792888][T29137] team0: Port device team_slave_0 added [ 438.799446][T29137] team0: Port device team_slave_1 added [ 438.811842][ T3769] bridge_slave_1: left allmulticast mode [ 438.817502][ T3769] bridge_slave_1: left promiscuous mode [ 438.823167][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.831031][ T3769] bridge_slave_0: left allmulticast mode [ 438.836804][ T3769] bridge_slave_0: left promiscuous mode [ 438.842486][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.850535][ T3769] tipc: Resetting bearer [ 438.888692][ T3769] tipc: Disabling bearer [ 438.963699][ T3769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.974624][ T3769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.985777][ T3769] bond0 (unregistering): Released all slaves [ 438.996618][ T3769] bond1 (unregistering): (slave bond2): Releasing backup interface [ 438.998057][T29152] loop2: detected capacity change from 0 to 2048 [ 439.011757][ T3769] bond1 (unregistering): Released all slaves [ 439.021264][ T3769] bond2 (unregistering): Released all slaves [ 439.030432][ T3769] bond3 (unregistering): Released all slaves [ 439.030561][T29152] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 439.044587][T29152] System zones: 0-7 [ 439.044846][ T3769] bond4 (unregistering): (slave bond5): Releasing backup interface [ 439.048946][T29152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.069616][ T3769] bond4 (unregistering): Released all slaves [ 439.078525][ T3769] bond5 (unregistering): Released all slaves [ 439.087510][ T3769] bond6 (unregistering): (slave bond7): Releasing backup interface [ 439.096452][ T3769] bond6 (unregistering): Released all slaves [ 439.105465][ T3769] bond7 (unregistering): Released all slaves [ 439.114911][ T3769] bond8 (unregistering): (slave bond9): Releasing backup interface [ 439.123890][ T3769] bond8 (unregistering): Released all slaves [ 439.133099][ T3769] bond9 (unregistering): Released all slaves [ 439.142575][ T3769] bond10 (unregistering): Released all slaves [ 439.151974][ T3769] bond11 (unregistering): (slave bond12): Releasing backup interface [ 439.160949][ T3769] bond11 (unregistering): Released all slaves [ 439.172700][ T3769] bond12 (unregistering): Released all slaves [ 439.182243][ T3769] bond13 (unregistering): (slave bond14): Releasing backup interface [ 439.191881][ T3769] bond13 (unregistering): Released all slaves [ 439.200887][ T3769] bond14 (unregistering): Released all slaves [ 439.227833][T29152] bond9: entered promiscuous mode [ 439.232942][T29152] bond9: entered allmulticast mode [ 439.238198][T29152] 8021q: adding VLAN 0 to HW filter on device bond9 [ 439.248935][T29152] bond9 (unregistering): Released all slaves [ 439.258309][T29137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.265420][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.291388][T29137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.302419][T29162] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6488'. [ 439.316146][T29160] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6488'. [ 439.327260][T29137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.334614][T29137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.360833][T29137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.382367][ T3769] tipc: Left network mode [ 439.387424][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.392715][T29164] bond2: entered allmulticast mode [ 439.407836][ T3769] hsr_slave_0: left promiscuous mode [ 439.414339][ T3769] hsr_slave_1: left promiscuous mode [ 439.420740][T29168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6490'. [ 439.429924][ T3769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.437897][ T3769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.445425][ T3769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.450868][T29168] loop2: detected capacity change from 0 to 2048 [ 439.461390][ T3769] veth1_macvtap: left promiscuous mode [ 439.466922][ T3769] veth0_macvtap: left promiscuous mode [ 439.472535][ T3769] veth1_vlan: left promiscuous mode [ 439.477771][ T3769] veth0_vlan: left promiscuous mode [ 439.503659][T29168] Alternate GPT is invalid, using primary GPT. [ 439.510101][T29168] loop2: p2 p3 p7 [ 439.535162][T29168] sd 0:0:1:0: device reset [ 439.553980][ T29] audit: type=1326 audit(1729204425.060:40065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.582234][ T29] audit: type=1326 audit(1729204425.060:40066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.606094][ T29] audit: type=1326 audit(1729204425.060:40067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.629931][ T29] audit: type=1326 audit(1729204425.060:40068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.653614][ T29] audit: type=1326 audit(1729204425.060:40069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.677398][ T29] audit: type=1326 audit(1729204425.060:40070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.701118][ T29] audit: type=1326 audit(1729204425.060:40071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.724688][ T29] audit: type=1326 audit(1729204425.060:40072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29172 comm="syz.2.6492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 439.748889][ T3769] team0 (unregistering): Port device team_slave_1 removed [ 439.770609][ T3769] team0 (unregistering): Port device team_slave_0 removed [ 439.779378][T29178] loop2: detected capacity change from 0 to 2048 [ 439.792290][T29178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.822855][T29164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6489'. [ 439.853773][T29137] hsr_slave_0: entered promiscuous mode [ 439.862907][T29137] hsr_slave_1: entered promiscuous mode [ 439.876490][T29137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.892764][T29137] Cannot create hsr debugfs directory [ 440.157977][T29250] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6496'. [ 440.170371][T29240] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6496'. [ 440.263713][T29137] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.272806][T29137] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.283001][T29137] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.293465][T29137] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.341884][T29137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.355157][T29137] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.365670][T15105] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.372766][T15105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.396028][T15105] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.403120][T15105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.467259][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.488379][T29137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.539579][T29316] loop4: detected capacity change from 0 to 512 [ 440.551345][T29137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.595803][T29319] loop2: detected capacity change from 0 to 2048 [ 440.613742][T29322] pim6reg1: entered promiscuous mode [ 440.619214][T29322] pim6reg1: entered allmulticast mode [ 440.628020][T29319] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 440.637885][T29319] System zones: 0-7 [ 440.642690][T29319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.676845][T29319] bond9: entered promiscuous mode [ 440.682072][T29319] bond9: entered allmulticast mode [ 440.687365][T29319] 8021q: adding VLAN 0 to HW filter on device bond9 [ 440.698553][T29319] bond9 (unregistering): Released all slaves [ 440.719432][T29137] veth0_vlan: entered promiscuous mode [ 440.727556][T29137] veth1_vlan: entered promiscuous mode [ 440.742998][T29137] veth0_macvtap: entered promiscuous mode [ 440.750764][T29137] veth1_macvtap: entered promiscuous mode [ 440.760864][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.771488][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.781332][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.791829][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.801679][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.812186][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.822059][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.832600][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.842996][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.844007][T29137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.867483][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.877950][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.887780][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.898209][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.908111][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.918593][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.928447][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.938943][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.948773][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.959279][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.969102][T29137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.979543][T29137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.990795][T29137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.000242][T29137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.009054][T29137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.017819][T29137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.026645][T29137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.052506][T29334] bond10: entered allmulticast mode [ 441.071652][T29334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6502'. [ 441.174213][T29359] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 441.184605][T29357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6511'. [ 441.193561][T29357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.197487][T29346] loop4: detected capacity change from 0 to 2048 [ 441.200989][T29357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.215092][T29357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.222594][T29357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.236803][T29355] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.255957][T29346] Alternate GPT is invalid, using primary GPT. [ 441.262278][T29346] loop4: p1 p2 p3 [ 441.280304][T29363] loop1: detected capacity change from 0 to 512 [ 441.311237][T29363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.323943][T29363] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.348123][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.374670][T29370] bond4: entered allmulticast mode [ 442.073312][T29391] loop1: detected capacity change from 0 to 2048 [ 442.088577][T29393] loop2: detected capacity change from 0 to 512 [ 442.096761][T29393] EXT4-fs (loop2): orphan cleanup on readonly fs [ 442.103873][T29393] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6525: bg 0: block 248: padding at end of block bitmap is not set [ 442.118440][T29393] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.6525: Failed to acquire dquot type 1 [ 442.124234][T29391] Alternate GPT is invalid, using primary GPT. [ 442.136043][T29391] loop1: p2 p3 p7 [ 442.149014][T29393] EXT4-fs (loop2): 1 truncate cleaned up [ 442.160508][T29396] loop4: detected capacity change from 0 to 512 [ 442.162866][T29393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.183532][T29391] sd 0:0:1:0: device reset [ 442.202524][T29396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.215553][T29401] bond5: entered allmulticast mode [ 442.219032][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.229009][T29396] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.254324][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 442.265016][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.265285][T29406] FAULT_INJECTION: forcing a failure. [ 442.265285][T29406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.287032][T29406] CPU: 1 UID: 0 PID: 29406 Comm: syz.1.6529 Tainted: G W 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 442.299396][T29406] Tainted: [W]=WARN [ 442.303181][T29406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.313230][T29406] Call Trace: [ 442.316572][T29406] [ 442.319503][T29406] dump_stack_lvl+0xf2/0x150 [ 442.324136][T29406] dump_stack+0x15/0x20 [ 442.328381][T29406] should_fail_ex+0x223/0x230 [ 442.333083][T29406] should_fail+0xb/0x10 [ 442.337327][T29406] should_fail_usercopy+0x1a/0x20 [ 442.342356][T29406] _copy_to_user+0x1e/0xa0 [ 442.346795][T29406] simple_read_from_buffer+0xa0/0x110 [ 442.352223][T29406] proc_fail_nth_read+0xf9/0x140 [ 442.357228][T29406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.362867][T29406] vfs_read+0x195/0x720 [ 442.367029][T29406] ? __rcu_read_unlock+0x4e/0x70 [ 442.371972][T29406] ? __fget_files+0x1d4/0x210 [ 442.376730][T29406] ksys_read+0xeb/0x1b0 [ 442.380938][T29406] __x64_sys_read+0x42/0x50 [ 442.385484][T29406] x64_sys_call+0x27d3/0x2d60 [ 442.390200][T29406] do_syscall_64+0xc9/0x1c0 [ 442.394771][T29406] ? clear_bhb_loop+0x55/0xb0 [ 442.399529][T29406] ? clear_bhb_loop+0x55/0xb0 [ 442.404212][T29406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.410135][T29406] RIP: 0033:0x7f823389ca3c [ 442.414578][T29406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 442.434182][T29406] RSP: 002b:00007f8232511030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.442598][T29406] RAX: ffffffffffffffda RBX: 00007f8233a55f80 RCX: 00007f823389ca3c [ 442.450579][T29406] RDX: 000000000000000f RSI: 00007f82325110a0 RDI: 0000000000000008 [ 442.458565][T29406] RBP: 00007f8232511090 R08: 0000000000000000 R09: 0000000000000000 [ 442.466597][T29406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.474567][T29406] R13: 0000000000000000 R14: 00007f8233a55f80 R15: 00007fff874b0858 [ 442.482554][T29406] [ 442.587587][T29423] gretap1: entered promiscuous mode [ 442.592977][T29423] gretap1: entered allmulticast mode [ 442.640778][T29425] loop4: detected capacity change from 0 to 2048 [ 442.674339][T29425] Alternate GPT is invalid, using primary GPT. [ 442.680684][T29425] loop4: p2 p3 p7 [ 442.707598][T29425] sd 0:0:1:0: device reset [ 442.835800][T29439] loop4: detected capacity change from 0 to 8192 [ 442.843045][T29439] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.922692][T29445] __nla_validate_parse: 13 callbacks suppressed [ 442.922708][T29445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6546'. [ 443.119230][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6549'. [ 443.128213][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6549'. [ 443.144489][T29451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6549'. [ 443.166118][T29451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.185179][T29451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.196031][T29451] bond0 (unregistering): Released all slaves [ 443.207404][T29453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6548'. [ 443.216580][T29453] netlink: 'syz.1.6548': attribute type 18 has an invalid length. [ 443.226887][T29453] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.235795][T29453] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.244630][T29453] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.253460][T29453] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.262281][T29453] vxlan0: entered promiscuous mode [ 443.353777][T29455] loop2: detected capacity change from 0 to 512 [ 443.538958][T29462] loop4: detected capacity change from 0 to 2048 [ 443.583985][T29462] Alternate GPT is invalid, using primary GPT. [ 443.590419][T29462] loop4: p2 p3 p7 [ 443.613468][T29462] sd 0:0:1:0: device reset [ 443.668512][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 443.668528][ T29] audit: type=1326 audit(1729204429.170:40324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 443.698804][T29466] FAULT_INJECTION: forcing a failure. [ 443.698804][T29466] name failslab, interval 1, probability 0, space 0, times 0 [ 443.711480][T29466] CPU: 0 UID: 0 PID: 29466 Comm: syz.2.6553 Tainted: G W 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 443.723794][T29466] Tainted: [W]=WARN [ 443.725644][ T29] audit: type=1326 audit(1729204429.200:40325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8cb268c990 code=0x7ffc0000 [ 443.727608][T29466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.751173][ T29] audit: type=1326 audit(1729204429.210:40326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8cb268cadf code=0x7ffc0000 [ 443.761129][T29466] Call Trace: [ 443.761138][T29466] [ 443.761147][T29466] dump_stack_lvl+0xf2/0x150 [ 443.795353][T29466] dump_stack+0x15/0x20 [ 443.799540][T29466] should_fail_ex+0x223/0x230 [ 443.804259][T29466] ? __alloc_skb+0x10b/0x310 [ 443.808872][T29466] should_failslab+0x8f/0xb0 [ 443.813492][T29466] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 443.819444][T29466] __alloc_skb+0x10b/0x310 [ 443.823951][T29466] audit_log_start+0x368/0x6b0 [ 443.828779][T29466] audit_seccomp+0x4b/0x130 [ 443.833391][T29466] __seccomp_filter+0x6fa/0x1180 [ 443.838362][T29466] ? proc_fail_nth_write+0x12a/0x150 [ 443.843824][T29466] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 443.849466][T29466] ? vfs_write+0x580/0x910 [ 443.853912][T29466] ? __fget_files+0x1d4/0x210 [ 443.858600][T29466] __secure_computing+0x9f/0x1c0 [ 443.863615][T29466] syscall_trace_enter+0xd1/0x1f0 [ 443.868728][T29466] ? fpregs_assert_state_consistent+0x83/0xa0 [ 443.874873][T29466] do_syscall_64+0xaa/0x1c0 [ 443.879470][T29466] ? clear_bhb_loop+0x55/0xb0 [ 443.884293][T29466] ? clear_bhb_loop+0x55/0xb0 [ 443.889026][T29466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.895086][T29466] RIP: 0033:0x7f8cb268dff9 [ 443.899505][T29466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.919147][T29466] RSP: 002b:00007f8cb1301038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 443.927650][T29466] RAX: ffffffffffffffda RBX: 00007f8cb2845f80 RCX: 00007f8cb268dff9 [ 443.935626][T29466] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 443.943611][T29466] RBP: 00007f8cb1301090 R08: 0000000000000001 R09: 0000000000000000 [ 443.951584][T29466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.959608][T29466] R13: 0000000000000000 R14: 00007f8cb2845f80 R15: 00007ffc4d7c3208 [ 443.967580][T29466] [ 443.970660][T29466] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 443.979342][T29466] audit: out of memory in audit_log_start [ 443.983817][ T29] audit: type=1326 audit(1729204429.490:40327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29467 comm="syz.4.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460e50dff9 code=0x7ffc0000 [ 444.009491][T29468] loop4: detected capacity change from 0 to 512 [ 444.016593][ T29] audit: type=1326 audit(1729204429.490:40328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8cb268ca3c code=0x7ffc0000 [ 444.040075][ T29] audit: type=1326 audit(1729204429.490:40329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8cb268cadf code=0x7ffc0000 [ 444.063524][ T29] audit: type=1326 audit(1729204429.490:40330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8cb268cc8a code=0x7ffc0000 [ 444.086951][ T29] audit: type=1326 audit(1729204429.490:40331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29465 comm="syz.2.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cb268dff9 code=0x7ffc0000 [ 444.099774][T29468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.125548][T29468] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.160791][T27010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.179575][T29479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6558'. [ 444.244110][T29485] loop1: detected capacity change from 0 to 512 [ 444.251904][T29485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 444.259391][T29485] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6561: bg 0: block 248: padding at end of block bitmap is not set [ 444.274054][T29485] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6561: Failed to acquire dquot type 1 [ 444.286895][T29485] EXT4-fs (loop1): 1 truncate cleaned up [ 444.293757][T29485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.310964][T29485] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 444.329307][T29485] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 444.350624][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.360733][T29495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6565'. [ 444.380146][T29495] loop2: detected capacity change from 0 to 2048 [ 444.391500][T29499] bond6: entered allmulticast mode [ 444.397705][T29499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6567'. [ 444.423896][T29495] Alternate GPT is invalid, using primary GPT. [ 444.424029][T29502] loop1: detected capacity change from 0 to 512 [ 444.430210][T29495] loop2: p2 p3 p7 [ 444.459327][T29495] sd 0:0:1:0: device reset [ 444.472485][T29502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.485145][T29502] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.509291][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.647793][T29521] FAULT_INJECTION: forcing a failure. [ 444.647793][T29521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.660923][T29521] CPU: 1 UID: 0 PID: 29521 Comm: syz.1.6576 Tainted: G W 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 444.673254][T29521] Tainted: [W]=WARN [ 444.677078][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 444.683458][T29523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6577'. [ 444.687123][T29521] Call Trace: [ 444.687131][T29521] [ 444.687139][T29521] dump_stack_lvl+0xf2/0x150 [ 444.706848][T29521] dump_stack+0x15/0x20 [ 444.711077][T29521] should_fail_ex+0x223/0x230 [ 444.715796][T29521] should_fail+0xb/0x10 [ 444.720004][T29521] should_fail_usercopy+0x1a/0x20 [ 444.725080][T29521] _copy_to_user+0x1e/0xa0 [ 444.729494][T29521] simple_read_from_buffer+0xa0/0x110 [ 444.734935][T29521] proc_fail_nth_read+0xf9/0x140 [ 444.739876][T29521] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.745430][T29521] vfs_read+0x195/0x720 [ 444.749601][T29521] ? __rcu_read_unlock+0x4e/0x70 [ 444.754606][T29521] ? __fget_files+0x1d4/0x210 [ 444.759313][T29521] ksys_read+0xeb/0x1b0 [ 444.763477][T29521] __x64_sys_read+0x42/0x50 [ 444.768044][T29521] x64_sys_call+0x27d3/0x2d60 [ 444.772732][T29521] do_syscall_64+0xc9/0x1c0 [ 444.777288][T29521] ? clear_bhb_loop+0x55/0xb0 [ 444.781984][T29521] ? clear_bhb_loop+0x55/0xb0 [ 444.786746][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.792647][T29521] RIP: 0033:0x7f823389ca3c [ 444.797100][T29521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 444.816779][T29521] RSP: 002b:00007f8232511030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.825194][T29521] RAX: ffffffffffffffda RBX: 00007f8233a55f80 RCX: 00007f823389ca3c [ 444.833238][T29521] RDX: 000000000000000f RSI: 00007f82325110a0 RDI: 0000000000000004 [ 444.841223][T29521] RBP: 00007f8232511090 R08: 0000000000000000 R09: 0000000000000000 [ 444.849190][T29521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.857155][T29521] R13: 0000000000000000 R14: 00007f8233a55f80 R15: 00007fff874b0858 [ 444.865217][T29521] [ 444.876650][T29527] loop4: detected capacity change from 0 to 128 [ 444.878584][T29523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6577'. [ 444.941482][T29535] loop1: detected capacity change from 0 to 512 [ 444.960367][T29535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.972973][T29535] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.006409][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.071173][T29544] loop2: detected capacity change from 0 to 8192 [ 445.086907][T29544] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.121958][T29554] loop1: detected capacity change from 0 to 2048 [ 445.128705][T29554] ext4: Unknown parameter 'fowner<00000000000000000000' [ 445.193400][T29561] bond11: entered promiscuous mode [ 445.198550][T29561] bond11: entered allmulticast mode [ 445.204090][T29561] 8021q: adding VLAN 0 to HW filter on device bond11 [ 445.216429][T29561] bond11 (unregistering): Released all slaves [ 445.306288][T29579] loop3: detected capacity change from 0 to 512 [ 445.333831][T29579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.346582][T29579] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.383963][T29594] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 445.384890][T29592] loop2: detected capacity change from 0 to 2048 [ 445.391661][T29594] EXT4-fs warning (device sda1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 445.398334][T29137] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.431762][T29592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.454590][T24766] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.726005][T29613] bond3: entered promiscuous mode [ 445.732173][T29613] bond3: entered allmulticast mode [ 445.745740][T29613] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.755625][T29624] loop1: detected capacity change from 0 to 512 [ 445.764002][T29613] bond3 (unregistering): Released all slaves [ 445.771443][T29624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.784123][T29624] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.822458][T26870] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.911335][T29638] loop4: detected capacity change from 0 to 8192 [ 445.918943][T29638] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.969076][T29619] chnl_net:caif_netlink_parms(): no params data found [ 445.983411][T29650] loop3: detected capacity change from 0 to 256 [ 445.991793][T29647] loop1: detected capacity change from 0 to 2048 [ 446.012622][T29650] FAT-fs (loop3): Directory bread(block 64) failed [ 446.034018][T29650] FAT-fs (loop3): Directory bread(block 65) failed [ 446.047180][T29650] FAT-fs (loop3): Directory bread(block 66) failed [ 446.055798][T29650] FAT-fs (loop3): Directory bread(block 67) failed [ 446.062458][T29650] FAT-fs (loop3): Directory bread(block 68) failed [ 446.069653][T29619] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.076707][T29619] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.080196][T29650] FAT-fs (loop3): Directory bread(block 69) failed [ 446.083890][T29619] bridge_slave_0: entered allmulticast mode [ 446.096829][T29619] bridge_slave_0: entered promiscuous mode [ 446.104076][T29619] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.111184][T29619] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.118426][T29619] bridge_slave_1: entered allmulticast mode [ 446.120345][T29650] FAT-fs (loop3): Directory bread(block 70) failed [ 446.125078][T29619] bridge_slave_1: entered promiscuous mode [ 446.143604][T29650] FAT-fs (loop3): Directory bread(block 71) failed [ 446.154906][T29650] FAT-fs (loop3): Directory bread(block 72) failed [ 446.161630][T29650] FAT-fs (loop3): Directory bread(block 73) failed [ 446.170350][T29619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.181018][T29619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.202941][T29619] team0: Port device team_slave_0 added [ 446.211633][T29664] loop1: detected capacity change from 0 to 512 [ 446.215526][T29619] team0: Port device team_slave_1 added [ 446.227477][T29650] bridge0: port 3(vlan2) entered blocking state [ 446.233871][T29650] bridge0: port 3(vlan2) entered disabled state [ 446.241725][T29650] vlan2: entered allmulticast mode [ 446.247526][T29650] vlan2: left allmulticast mode [ 446.262227][T29664] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.273783][T29619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.280757][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.285074][T29666] loop4: detected capacity change from 0 to 2048 [ 446.306759][T29619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.325068][T29619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.332071][T29619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.358035][T29619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.396979][T29619] hsr_slave_0: entered promiscuous mode [ 446.405885][T29619] hsr_slave_1: entered promiscuous mode [ 446.426083][T29619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.433747][T29619] Cannot create hsr debugfs directory [ 446.478664][T29686] loop3: detected capacity change from 0 to 1024 [ 446.485755][T29686] EXT4-fs: Ignoring removed oldalloc option [ 446.505302][T29682] loop1: detected capacity change from 0 to 2048 [ 446.510764][T29687] loop4: detected capacity change from 0 to 8192 [ 446.511845][T29686] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 446.519173][T29687] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.564242][T29682] Alternate GPT is invalid, using primary GPT. [ 446.570625][T29682] loop1: p2 p3 p7 [ 446.611632][T29619] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.612888][T29682] sd 0:0:1:0: device reset [ 446.635606][T29137] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.657963][T29137] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.678029][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.690067][T29137] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.712646][T29137] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.732084][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.743670][T29137] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.744946][T29619] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.765780][T29137] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.794779][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.806462][T29137] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.828077][T29137] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.847254][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.859147][T29137] EXT4-fs error (device loop3): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /17/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.880666][T29137] EXT4-fs error (device loop3): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 446.881652][T29619] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.902164][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.921866][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.933763][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.945840][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.957998][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.969828][T29137] EXT4-fs warning (device loop3): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 446.970951][T29619] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.054129][T29619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 447.063007][T29619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 447.071631][T29619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 447.079958][T29619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 447.114120][T29619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.126331][T29619] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.135395][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.142473][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.153571][T15077] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.160615][T15077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.220515][T29619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.256012][ T3790] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.295292][T29619] veth0_vlan: entered promiscuous mode [ 447.304234][ T3790] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.326287][T29619] veth1_vlan: entered promiscuous mode [ 447.345553][T29716] loop2: detected capacity change from 0 to 512 [ 447.347427][T29619] veth0_macvtap: entered promiscuous mode [ 447.354360][T29716] EXT4-fs error (device loop2): ext4_orphan_get:1388: inode #17: comm syz.2.6640: iget: bogus i_mode (0) [ 447.369465][T29716] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.6640: couldn't read orphan inode 17 (err -117) [ 447.386469][ T3790] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.398481][T29619] veth1_macvtap: entered promiscuous mode [ 447.402771][T29716] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.6640: bg 0: block 7: invalid block bitmap [ 447.409570][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.427110][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.437063][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.441773][T29721] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 447.447498][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.466964][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.477521][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.480811][T29721] SELinux: failed to load policy [ 447.487342][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.502741][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.513670][T29619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.546518][ T3790] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.559223][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.569777][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.579636][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.590222][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.600119][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.610602][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.620506][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.630967][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.640916][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.651986][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.661924][T29619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.672377][T29619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.682978][T29619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.693167][T29619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.701923][T29619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.710694][T29619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.719534][T29619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.741247][T29731] loop4: detected capacity change from 0 to 8192 [ 447.749651][T29731] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.805962][T29735] loop4: detected capacity change from 0 to 1024 [ 447.815302][T29735] EXT4-fs: Ignoring removed oldalloc option [ 447.840883][T29738] loop2: detected capacity change from 0 to 2048 [ 447.851095][T29735] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 447.861453][ T3790] bridge_slave_1: left allmulticast mode [ 447.867247][ T3790] bridge_slave_1: left promiscuous mode [ 447.873008][ T3790] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.881152][ T3790] bridge_slave_0: left allmulticast mode [ 447.886818][ T3790] bridge_slave_0: left promiscuous mode [ 447.892477][ T3790] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.923881][T29738] Alternate GPT is invalid, using primary GPT. [ 447.930366][T29738] loop2: p2 p3 p7 [ 447.950067][T29748] loop1: detected capacity change from 0 to 512 [ 447.971417][T29738] sd 0:0:1:0: device reset [ 447.981784][T27010] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /159/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 447.995554][T29748] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.003943][T27010] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.032983][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.044850][T27010] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /159/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.067426][T27010] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.091376][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.102946][T27010] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /159/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.124862][T27010] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.141814][T29711] chnl_net:caif_netlink_parms(): no params data found [ 448.161046][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.173178][T27010] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /159/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.197854][ T3790] IPVS: stopping master sync thread 29359 ... [ 448.198575][T27010] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.212526][T29758] loop0: detected capacity change from 0 to 8192 [ 448.227437][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.231631][T29758] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.243502][T27010] EXT4-fs error (device loop4): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /159/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.280946][ T3790] hsr_slave_0: left promiscuous mode [ 448.284924][T27010] EXT4-fs error (device loop4): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 448.307337][ T3790] hsr_slave_1: left promiscuous mode [ 448.319214][T29764] loop0: detected capacity change from 0 to 2048 [ 448.326434][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.338280][ T3790] veth1_macvtap: left promiscuous mode [ 448.343950][ T3790] veth0_macvtap: left promiscuous mode [ 448.349485][ T3790] veth1_vlan: left promiscuous mode [ 448.354767][ T3790] veth0_vlan: left promiscuous mode [ 448.360471][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.373814][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.391542][T29764] Alternate GPT is invalid, using primary GPT. [ 448.397926][T29764] loop0: p2 p3 p7 [ 448.402962][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.415989][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.443408][T27010] EXT4-fs warning (device loop4): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 448.461487][T29764] sd 0:0:1:0: device reset [ 448.531375][ T3790] team0 (unregistering): Port device team_slave_1 removed [ 448.541819][ T3790] team0 (unregistering): Port device team_slave_0 removed [ 448.655584][T29711] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.656451][T29782] FAULT_INJECTION: forcing a failure. [ 448.656451][T29782] name failslab, interval 1, probability 0, space 0, times 0 [ 448.662743][T29711] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.675288][T29782] CPU: 1 UID: 0 PID: 29782 Comm: syz.0.6660 Tainted: G W 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 448.682341][T29711] bridge_slave_0: entered allmulticast mode [ 448.694532][T29782] Tainted: [W]=WARN [ 448.694577][T29782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 448.694589][T29782] Call Trace: [ 448.694595][T29782] [ 448.694603][T29782] dump_stack_lvl+0xf2/0x150 [ 448.694628][T29782] dump_stack+0x15/0x20 [ 448.701172][T29711] bridge_slave_0: entered promiscuous mode [ 448.704296][T29782] should_fail_ex+0x223/0x230 [ 448.715171][T29711] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.717631][T29782] ? getname_flags+0x81/0x3b0 [ 448.720693][T29711] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.725065][T29782] should_failslab+0x8f/0xb0 [ 448.729270][T29711] bridge_slave_1: entered allmulticast mode [ 448.734977][T29782] kmem_cache_alloc_noprof+0x4c/0x290 [ 448.740105][T29711] bridge_slave_1: entered promiscuous mode [ 448.746623][T29782] getname_flags+0x81/0x3b0 [ 448.759052][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 448.759067][ T29] audit: type=1326 audit(1729204434.160:41054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11bcfdff9 code=0x7ffc0000 [ 448.762836][T29782] getname+0x17/0x20 [ 448.768846][ T29] audit: type=1326 audit(1729204434.160:41055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11bcfc990 code=0x7ffc0000 [ 448.774060][T29782] do_sys_openat2+0x67/0x120 [ 448.779863][ T29] audit: type=1326 audit(1729204434.160:41056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb11bcfcadf code=0x7ffc0000 [ 448.784316][T29782] __x64_sys_openat+0xf3/0x120 [ 448.790452][ T29] audit: type=1326 audit(1729204434.160:41057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb11bcfc990 code=0x7ffc0000 [ 448.813928][T29782] x64_sys_call+0x1025/0x2d60 [ 448.902411][T29782] do_syscall_64+0xc9/0x1c0 [ 448.906913][T29782] ? clear_bhb_loop+0x55/0xb0 [ 448.911627][T29782] ? clear_bhb_loop+0x55/0xb0 [ 448.916345][T29782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.922250][T29782] RIP: 0033:0x7fb11bcfc990 [ 448.926728][T29782] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 448.946342][T29782] RSP: 002b:00007fb11a976f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 448.954775][T29782] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb11bcfc990 [ 448.962799][T29782] RDX: 0000000000000000 RSI: 00007fb11bd703ae RDI: 00000000ffffff9c [ 448.970763][T29782] RBP: 00007fb11bd703ae R08: 0000000000000000 R09: 0000000000000000 [ 448.978822][T29782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 448.986783][T29782] R13: 0000000000000000 R14: 00007fb11beb5f80 R15: 00007ffdd3858068 [ 448.994754][T29782] [ 449.011154][T29711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.017074][ T29] audit: type=1326 audit(1729204434.510:41058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb11bcfca3c code=0x7ffc0000 [ 449.043770][ T29] audit: type=1326 audit(1729204434.510:41059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb11bcfcadf code=0x7ffc0000 [ 449.067193][ T29] audit: type=1326 audit(1729204434.510:41060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb11bcfcc8a code=0x7ffc0000 [ 449.090814][ T29] audit: type=1326 audit(1729204434.510:41061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11bcfdff9 code=0x7ffc0000 [ 449.100799][T29780] loop1: detected capacity change from 0 to 512 [ 449.114781][ T29] audit: type=1326 audit(1729204434.510:41062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29781 comm="syz.0.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11bcfdff9 code=0x7ffc0000 [ 449.146787][ T29] audit: type=1326 audit(1729204434.600:41063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29779 comm="syz.1.6661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823389dff9 code=0x7ffc0000 [ 449.150435][T29711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.226812][T29780] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.229699][T29789] loop0: detected capacity change from 0 to 8192 [ 449.248411][T29711] team0: Port device team_slave_0 added [ 449.268040][T29789] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.268308][T29711] team0: Port device team_slave_1 added [ 449.301589][T29711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.308551][T29711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.334625][T29711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.345908][T29711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.352926][T29711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.378839][T29711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.436106][T29711] hsr_slave_0: entered promiscuous mode [ 449.453975][T29711] hsr_slave_1: entered promiscuous mode [ 449.461198][T29711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.469559][T29711] Cannot create hsr debugfs directory [ 449.496570][T29807] loop1: detected capacity change from 0 to 2048 [ 449.585430][ T3366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.653370][T29795] chnl_net:caif_netlink_parms(): no params data found [ 449.674493][ T3366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.721504][T29795] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.728679][T29795] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.735930][T29795] bridge_slave_0: entered allmulticast mode [ 449.742431][T29795] bridge_slave_0: entered promiscuous mode [ 449.751467][ T3366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.764295][T29795] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.771508][T29795] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.781718][T29795] bridge_slave_1: entered allmulticast mode [ 449.788039][T29795] bridge_slave_1: entered promiscuous mode [ 449.810159][T29795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.822378][ T3366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.827234][T29836] loop1: detected capacity change from 0 to 1024 [ 449.839869][T29836] EXT4-fs: Ignoring removed oldalloc option [ 449.840943][T29795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.846268][T29836] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 449.878837][T29795] team0: Port device team_slave_0 added [ 449.887609][T29795] team0: Port device team_slave_1 added [ 449.907165][T29711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.918322][T29711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.926910][T26870] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 449.948614][T26870] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 449.948563][T29711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.974558][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 449.979613][T29795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.986179][T26870] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 449.992987][T29795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.016821][T26870] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.040081][T29795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.040398][T29711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.077086][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.091073][T26870] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.114627][T26870] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.136942][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.148432][T26870] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.172524][T26870] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.185832][T29842] loop0: detected capacity change from 0 to 2048 [ 450.192416][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.209760][T26870] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.232519][T26870] EXT4-fs error (device loop1): ext4_empty_dir:3096: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 450.240076][T29795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.255215][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.258739][T29795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.296168][T29795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.297236][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.310402][ T3366] bridge_slave_1: left allmulticast mode [ 450.323892][ T3366] bridge_slave_1: left promiscuous mode [ 450.329570][ T3366] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.337796][ T3366] bridge_slave_0: left allmulticast mode [ 450.343393][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.343518][ T3366] bridge_slave_0: left promiscuous mode [ 450.357067][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.360503][ T3366] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.375472][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.392632][T29846] loop2: detected capacity change from 0 to 2048 [ 450.392671][T26870] EXT4-fs warning (device loop1): ext4_empty_dir:3098: inode #11: comm syz-executor: directory missing '.' [ 450.392785][T29846] ================================================================== [ 450.392829][T29846] BUG: KCSAN: data-race in data_push_tail / string [ 450.392899][T29846] [ 450.392907][T29846] write to 0xffffffff88b9e26a of 1 bytes by task 26870 on cpu 0: [ 450.392924][T29846] string+0x16c/0x210 [ 450.392957][T29846] vsnprintf+0xa09/0xe30 [ 450.392994][T29846] vscnprintf+0x42/0x90 [ 450.393030][T29846] printk_sprint+0x30/0x2d0 [ 450.393064][T29846] vprintk_store+0x570/0x810 [ 450.393098][T29846] vprintk_emit+0x15e/0x680 [ 450.393139][T29846] vprintk_default+0x26/0x30 [ 450.393170][T29846] vprintk+0x75/0x80 [ 450.393192][T29846] _printk+0x7a/0xa0 [ 450.393217][T29846] __ext4_warning_inode+0x17c/0x190 [ 450.393248][T29846] ext4_empty_dir+0x239/0x5a0 [ 450.393269][T29846] ext4_rmdir+0x1b4/0x600 [ 450.393292][T29846] vfs_rmdir+0x270/0x320 [ 450.393327][T29846] do_rmdir+0x194/0x320 [ 450.393361][T29846] __x64_sys_unlinkat+0xa2/0xb0 [ 450.393398][T29846] x64_sys_call+0x25fd/0x2d60 [ 450.393424][T29846] do_syscall_64+0xc9/0x1c0 [ 450.393441][T29846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.393474][T29846] [ 450.393482][T29846] read to 0xffffffff88b9e268 of 8 bytes by task 29846 on cpu 1: [ 450.393503][T29846] data_push_tail+0x102/0x430 [ 450.393529][T29846] data_alloc+0xbe/0x2c0 [ 450.393555][T29846] prb_reserve+0x85e/0xb60 [ 450.393582][T29846] vprintk_store+0x53f/0x810 [ 450.393613][T29846] vprintk_emit+0x15e/0x680 [ 450.393646][T29846] vprintk_default+0x26/0x30 [ 450.393679][T29846] vprintk+0x75/0x80 [ 450.393701][T29846] _printk+0x7a/0xa0 [ 450.393726][T29846] set_capacity_and_notify+0xff/0x160 [ 450.393754][T29846] loop_set_size+0x2e/0x70 [ 450.393782][T29846] loop_configure+0x8a7/0xa30 [ 450.393819][T29846] lo_ioctl+0x5f6/0x11c0 [ 450.393862][T29846] blkdev_ioctl+0x359/0x450 [ 450.393882][T29846] __se_sys_ioctl+0xcd/0x140 [ 450.393915][T29846] __x64_sys_ioctl+0x43/0x50 [ 450.393947][T29846] x64_sys_call+0x15cc/0x2d60 [ 450.393977][T29846] do_syscall_64+0xc9/0x1c0 [ 450.393995][T29846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.394023][T29846] [ 450.394029][T29846] value changed: 0x0000000100000fdb -> 0x203a2931706f6f6c [ 450.394044][T29846] [ 450.394050][T29846] Reported by Kernel Concurrency Sanitizer on: [ 450.394065][T29846] CPU: 1 UID: 0 PID: 29846 Comm: syz.2.6684 Tainted: G W 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 450.394103][T29846] Tainted: [W]=WARN [ 450.394112][T29846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 450.394128][T29846] ================================================================== [ 450.790602][ T3366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.800727][ T3366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.811202][ T3366] bond0 (unregistering): Released all slaves [ 450.819691][ T3366] bond1 (unregistering): Released all slaves [ 450.828251][ T3366] bond2 (unregistering): Released all slaves [ 450.855725][T29795] hsr_slave_0: entered promiscuous mode [ 450.861986][T29795] hsr_slave_1: entered promiscuous mode [ 450.867887][T29795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.875693][T29795] Cannot create hsr debugfs directory [ 450.881890][ T3366] tipc: Left network mode [ 450.888910][ T3366] hsr_slave_0: left promiscuous mode [ 450.894538][ T3366] hsr_slave_1: left promiscuous mode [ 450.900252][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.907638][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.915229][ T3366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.922817][ T3366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.932186][ T3366] veth1_vlan: left promiscuous mode [ 450.937472][ T3366] veth0_vlan: left promiscuous mode [ 451.117301][T29711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.130520][T29711] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.140254][ T3794] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.147336][ T3794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.166677][T29711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.177215][T29711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.192866][ T3794] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.199945][ T3794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.267666][T29711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.343293][T29711] veth0_vlan: entered promiscuous mode [ 451.368889][T29711] veth1_vlan: entered promiscuous mode [ 451.391563][T29711] veth0_macvtap: entered promiscuous mode [ 451.399132][T29711] veth1_macvtap: entered promiscuous mode [ 451.409266][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.419762][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.429634][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.440074][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.449947][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.460424][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.470361][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.480848][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.492214][T29711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.511480][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.522077][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.531975][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.542486][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.552330][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.562777][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.572646][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.583186][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.593000][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.603443][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.613297][T29711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.623776][T29711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.634911][T29711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.650758][T29711] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.659603][T29711] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.668291][T29711] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.677093][T29711] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.690049][T29795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.701279][T29795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.709899][T29795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.718969][T29795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.767543][T29795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.785093][T29795] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.794258][T15077] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.801361][T15077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.815995][T15077] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.823162][T15077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.842701][T29795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.853183][T29795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.922881][T29795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.046097][T29795] veth0_vlan: entered promiscuous mode [ 452.055606][T29795] veth1_vlan: entered promiscuous mode [ 452.073897][T29795] veth0_macvtap: entered promiscuous mode [ 452.083356][T29795] veth1_macvtap: entered promiscuous mode [ 452.095781][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.106264][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.116215][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.126810][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.136711][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.147247][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.157114][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.167558][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.177382][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.187821][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.201319][T29795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.212546][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.223143][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.233120][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.243562][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.253365][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.263800][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.273613][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.284113][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.294071][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.304594][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.314424][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.324851][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.334661][T29795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.345075][T29795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.360975][T29795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.371595][T29795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.380346][T29795] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.389220][T29795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.397981][T29795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0