last executing test programs: 1m44.731228296s ago: executing program 0 (id=36): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f0000000180)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) 1m44.454075075s ago: executing program 0 (id=41): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7fffffffffff}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f0000000780)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x3a) 1m43.930729832s ago: executing program 0 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x2}, {0x0, 0x5}, {0x6, 0xfffffe01}, {0xa, 0x80000000}]}]}, {0x0, [0x30]}}, &(0x7f0000000140)=""/28, 0x47, 0x1c, 0x3, 0x20, 0x10000, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001980)={0x2c, r5, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x48}, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x40}]}, 0x2c}}, 0x8000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4000000) 1m43.926720462s ago: executing program 0 (id=49): gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002b00)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x5, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xade000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x7a1, 0x2, 0x80000000, {0x2, 0x2, 0xf, 0xc2a, 0x5, 0x2}, {0x5, 0x2, 0x5, 0x8, 0x4, 0x8}, 0x4, 0x3, 0x3}}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000900)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000940)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000140)=0x0, &(0x7f0000000580)=0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f080001", 0x17) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001d00"], 0x114}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000001800)=@IORING_OP_UNLINKAT={0x24, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1m43.810456332s ago: executing program 0 (id=54): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.544219681s ago: executing program 0 (id=60): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0xfd, 0x28f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_read_part_table(0x5d7, &(0x7f0000000600)="$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") r1 = inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000001140)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000210000000000004000000000009bc100"/28], 0x48) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000900)={0x8e0, 0x18, [0x4, 0xca, 0xfffffffffffffff1, 0x5f], &(0x7f0000000080)=[0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x4, 0x20000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$packet(r4, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0xe8, "31838c8b979615c34582dbb1184e3020fb8b2c07feef9da2024a3f0535d830438473b0f833dfb6a02b40779f33adc4592be064e161963f3435854a482d1b0aa9bb107b5227b463005c85e694aca59801e336fd2c601b73952ada64c26b50d5e5f9f68f432afcdd317472ed453746154ebbc13728455f332a38af1cdcd518a43d84e7a7836fc022bf19ecce635ab13846451f7d762349dd21e8a1c5e208034c2f6824d9b8a94880df50071a435009394f19cd1e272a68fc87afd52de83a94b6622e86a3dceefcb20e8def18f791fb41823956f6241a663bc25e437074e1e901947530e238de49c219"}, &(0x7f0000000280)=0xf0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r10, 0xc17a) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m28.513384768s ago: executing program 32 (id=60): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0xfd, 0x28f, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_read_part_table(0x5d7, &(0x7f0000000600)="$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") r1 = inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000001140)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000210000000000004000000000009bc100"/28], 0x48) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000900)={0x8e0, 0x18, [0x4, 0xca, 0xfffffffffffffff1, 0x5f], &(0x7f0000000080)=[0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x2, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}}}, 0x32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r9, 0x111, 0x4, 0x20000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$packet(r4, &(0x7f0000000200)={0x11, 0x2, 0x0, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000700)={0x0, 0xe8, "31838c8b979615c34582dbb1184e3020fb8b2c07feef9da2024a3f0535d830438473b0f833dfb6a02b40779f33adc4592be064e161963f3435854a482d1b0aa9bb107b5227b463005c85e694aca59801e336fd2c601b73952ada64c26b50d5e5f9f68f432afcdd317472ed453746154ebbc13728455f332a38af1cdcd518a43d84e7a7836fc022bf19ecce635ab13846451f7d762349dd21e8a1c5e208034c2f6824d9b8a94880df50071a435009394f19cd1e272a68fc87afd52de83a94b6622e86a3dceefcb20e8def18f791fb41823956f6241a663bc25e437074e1e901947530e238de49c219"}, &(0x7f0000000280)=0xf0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r10, 0xc17a) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.5715258s ago: executing program 5 (id=1996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000b000003000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r3}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e000000de0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24d8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x2, 0x0, 0x0, 0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {0x800}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xefa6}, {0x0, 0x1}, {}, {0x0, 0x3c}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x11}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {0x5}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0xa0290150e2b33ba7, &(0x7f0000000640)=ANY=[], 0x1, 0x329, &(0x7f00000000c0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000840)={[{@orlov}, {@grpjquota}, {@errors_remount}]}, 0x1, 0x4af, &(0x7f00000012c0)="$eJzs3c1rXFUbAPBnZpo0SfO+/VCkrWALFeoHzeQDaaJuXKmLglhwo1BjMo01k0zITGoTCm1114ULUSyIC/f+BW7syiKIa92LC6lojaCCMDJ3ZtJ8TRo0nZHc3w+mOeee23nOyfAc7px7b24AqXW89k8moj8ivomI/fXq2h2O138s37k8UXtlolo9+3Mm2a9Wb+7a/H/7IuJqRPRExMvPR7yR2Ri3vLg0PV4sFuYb9XxlZi5fXlw6dWFmfKowVZgdGj09NjY6ODI8tmNjvf7eW9fPfP5i92e/v3v71vtfflHrVn+jbfU4dlJ96F1xcNW2PRHx7P0I1gG5xnh6O90R/pHa5/dARJxI8n9/5JJPE0iDarVa/au6t0VrJmkHdqdscgycyQ5ERL2czQ4M1I/hH4y+bLFUrjx5vrQwO1k/Vj4QXdnzF4qFwcZ3hQPRlanVh5Ly3frwuvpIRHIM/EGuN6kPTJSKk22e64C19q3L/99y9fwHUsJXfkgv+Q/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yGVXjpzpvaqNu9/n7y4uDBdunhqslCeHphZmBiYKM3PDUyVSlPJPTsz93q/Yqk0N/RULFzKVwrlSr68uHRuprQwWzmX3Nd/rtDVllEB23Hw2M3vMhFx9ene5FXT3WiTq7C7Vavu8Ye0ynV6AgI6xtIfpJfv+MAmf6J3jZ5WDXM73xegPbKd7gDQMSePOP8HaWX9H9LL+j+kl2N8wPo/pI/1f0iv/hbP//rfqmd3DUbE/yPi21zX3uazvoDdIPtjpn78P3Vy/6P961u7M38kpwi6I+Ltj89+dGm8Upkfqm3/ZWV75UZj+3An+g9sVzNPm3kMAKTX8p3LE81XO+P+9Fz9IoSN8fc01iZ7knOUfcuZNdcqZHbo2oWr1yLi8GbxM43nndfPfPQt5zbEP9T4mam/RdLfPclz09sT/8iq+I+sin/0X/9WIB1u1uafwc3yL5vkdKzk39r5p3+Hrp1oPf9lV+a/XIv579g2Y7z5yTs/tIx/LeLopvGb8XqSWOvj1/p2cqV2Zcv4t1975aFWbdVP6++zWfymWilfmZnLlxeXTiV/R26qMDs0enpsbHRwZHgsn6xR55sr1Rs9c/jrW1uNv69F/K3GX9v2+JajvuvPh7969fgW8R87sfnnf2iL+L0R8cQ24/86/P3rrdpq8SdbjD+7RfzatpFtxi9/+MLebe4KALRBeXFperxYLMzfs3Aj7r2PgkI7Clf+G93Y1YVOz0zA/XY36TvdEwAAAAAAAAAAAGC72nE5cafHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwG/wdAAD//1v01o8=") r8 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000540)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x0, 0x320, 0xd0, 0x320, 0x1c0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x3, 0x4, 0x1, 0x1, 0x3], 0x6, 0x7}, {0x2, [0x1, 0x1, 0x2, 0x2, 0x7, 0x1], 0x1, 0x1}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'macvtap0\x00', {}, {}, 0x6, 0x1, 0x20}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x2}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'ipvlan1\x00', 'vxcan1\x00', {0xff}, {}, 0x2, 0x1, 0x60}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @empty, 0xff000000, 0x7f, 'veth0_vlan\x00', 'team0\x00', {0xff}, {0xff}, 0x1, 0x4, 0x4}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1000, 0x9cd, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0x2, [0x1, 0x31, 0x17, 0xc, 0x2f, 0x1d, 0x38, 0x3e, 0x3, 0x39, 0x2a, 0x34, 0x11, 0x35, 0x2b, 0x17], 0x0, 0x2, 0xfffffffffffffffb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001880)={'vxcan1\x00'}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mount$nfs(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x202088, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) 1.929139118s ago: executing program 5 (id=2006): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x5115c69fab7f938) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1f, 0x9, 0x6, 0x8, 0x50004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file2\x00', 0x404, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") r4 = openat$nvram(0xffffffffffffff9c, 0x0, 0x123482, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x1a) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) r9 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="00020201"], 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES16=r1, @ANYBLOB="a709fbc4b5f4057164f96c1bc129848bde52790ad498e6f1bb14b6c2e55a6000bddc8c69f34cf10f576962f4b212db2e6cedf70cda5e6ee3562446ac69c2972848ef30244f2aeb3738961392d56583055deabf99fa0f58cb3b7be698bb938a2e802fb09c4f0ef20d280e9f6c97d070aedec49d384cbf378387ac3b99c4e572fe9426f3233cb3ec47b0b5c3ceac4ec61b24d27e36758663cc8c31140cdb1d65719314af9e8e", @ANYRES8=r11, @ANYRES64=0x0, @ANYRESDEC=r6, @ANYRESOCT=r2, @ANYRESHEX=0x0, @ANYRES32=r5, @ANYRES16=r7, @ANYRESHEX=r0, @ANYRES16=r8, @ANYRESDEC=0x0], 0x48) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffffffffd21, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24084040) 1.735513007s ago: executing program 5 (id=2015): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x4}, {0x5, 0x0, 0x200}], "2903"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/113, 0x54, 0x71, 0x0, 0x10000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000708e4284000000000000000000200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.608246456s ago: executing program 5 (id=2017): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x6f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES8=r10, @ANYRESHEX=r10, @ANYRESOCT=r3, @ANYRES8=r7, @ANYRES16, @ANYBLOB="4ebde7a82849d64f6ddad5f51efde528c3164532ab96058df71d38638805e03237c2246dc913e2035b49719de9b9f4813c018e"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='mm_collapse_huge_page_swapin\x00', r11, 0x0, 0x4}, 0x18) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwritev(r13, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x1}], 0x1, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x126a4b5, &(0x7f00000021c0)=ANY=[@ANYRES16=r9, @ANYRES16, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f18bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5408ef8ce33557c02aa87d2a4626d0b0ffd4c855164d14d2513b7b4", @ANYRES16=r8, @ANYRESOCT=r12, @ANYRES16=r6, @ANYRES8=r5, @ANYRES16=r1, @ANYRES8=r5, @ANYRES16=r8], 0x0, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000002c0)={0x19, 0x4000000007, 0xee8, 0x7, 0x7, 0xd}) socket(0x1e, 0x2, 0x0) epoll_create1(0x80000) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r11, @ANYBLOB="00000000c9c2c4dd365264706000b083107a98f0", @ANYRESDEC=r14, @ANYRES16, @ANYBLOB="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"], 0x48) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000030babf91000000000000b7020000000000008500000084000000b700000000000000950000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r17}, 0x10) r18 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r18, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x2, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(r18, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01030000000000000000010000000900010073797a30000000000900030073798430000000005c000000060a010400000000000000000100000008000b40000000003400048030000180080001006e6174002400028008000240000000020800014000000000080003404000000808000740000000100900010073797a30"], 0xd0}}, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbd44a000) syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mlockall(0x3) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.545970846s ago: executing program 1 (id=2018): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000001880)={0x7, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x10000000}}, {{0xa, 0x4e22, 0x2, @mcast1, 0x2000103}}}, 0x108) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x400}, 0x0, 0x0) 1.458643616s ago: executing program 1 (id=2019): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.384373295s ago: executing program 1 (id=2022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') symlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000004940)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x9, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000200)="e9", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x20000, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x1}, {0xab}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', '', [], 0xa, "7bb88525319ecfd185d0190d3aa8cbb58616a5e2afa7f43be06913540338653239f97669b464be9d533b5e709cad11aef71856e86b97751c8d7b95ed0c79eed0fe7e515ebdf60040bdcfaae612b05f11e2a1878d9b0f349f2a9dccb9cedcde15737095e39fcb7cc843fbb51a2018bc3434cbe7f2ccd9b51b246e52123f266a61ddccf67dcf"}, 0x89) 1.319161045s ago: executing program 1 (id=2023): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = msgget$private(0x0, 0xafb0e20fef6483ff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x1053b0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0xe2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x1802}, 0x34004000) 1.269956085s ago: executing program 4 (id=2024): socket(0x28, 0x80801, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x2b, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x4010, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chroot(&(0x7f0000002080)='.\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000300)={0x3, 0x910c, 0x4, 0x2, 0x6, 0x9, 0x0, 0x6}, &(0x7f00000004c0)=0x20) r4 = getpid() syz_pidfd_open(r4, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x0, 0x0, 0xf, 0x100000000, r4}) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000005840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0xfb, 0x0, 0x0, 0x5, 0x72030, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x6, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001"], 0x17d4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000b00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='selinux_audited\x00', r6}, 0x18) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.169692865s ago: executing program 1 (id=2027): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x4}, {0x5, 0x0, 0x200}], "2903"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/113, 0x54, 0x71, 0x0, 0x10000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000708e4284000000000000000000200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 1.169223064s ago: executing program 4 (id=2028): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) setrlimit(0xc, &(0x7f00000004c0)={0x0, 0xe3}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r0}, 0x18) brk(0x5d555ede6000) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)}, {&(0x7f0000000d40)="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", 0x402}], 0x2) io_setup(0x30, &(0x7f0000000600)) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x0, 0xfd, 0x3, 0x0, 0x43, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x8000, 0x2, 0x8}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='/\\\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0), &(0x7f0000000400), 0x2, 0x1) unshare(0x60400) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x15, 0x5, 0x0) recvmsg$can_raw(r5, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.041433204s ago: executing program 1 (id=2030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xfffffff8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/4449], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0xfffb, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}, 0x32) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x500) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[], 0x0) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x591) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="02074007070000000000000000f1fb20eb020005001700000000000a004e2248000000fe8000000000000000000000000000aa06000000000000000eaea1654dbf08e9b662c6b813b66346b88fa55b8b8d3da835a86ceb1f15d92bd76bca1731de1a6deae10f4b9e5e1a60c74a05fffc1c47f2d721c954b6e8e7af14d71a7eeda612a06eff882dfdbb81158c9be631"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYBLOB="6dda2c918fe1d3feca94b433d50dcceaf20ce411cbe7c3d947b6c45edcdf171dcd91bb12ab748de8c8566b564993825a00af17e7a123ab18786b2dd17be2b4fa9df937acba218f8c661044da54d4cfb3b23d7b1ad503d32b448c1fbdd4355ab77dcf0e372113da31005f7d8335868cfccc8dfe18b786e461f8ed12ce6a6aafbd3b12463099279bce9f7964bbff856bfe5bb881", @ANYRES8, @ANYRESDEC, @ANYRES32, @ANYBLOB="000000006014858f4c009c00"/31], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 918.574963ms ago: executing program 2 (id=2032): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 855.920213ms ago: executing program 2 (id=2034): r0 = open(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c80c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", "5d36dc56", "bc3a20b10f4ad11e"}, 0x38) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000000) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x1, 0x4) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000010"], 0x24}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x100, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) close(r1) 705.356272ms ago: executing program 2 (id=2035): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 643.104613ms ago: executing program 2 (id=2037): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x40003, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 307.157811ms ago: executing program 5 (id=2039): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x410c84, &(0x7f0000000340)={[{@nojournal_checksum}]}, 0x1, 0x775, &(0x7f0000001900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) timer_delete(0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 306.691591ms ago: executing program 3 (id=2040): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x4}, {0x5, 0x0, 0x200}], "2903"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/113, 0x54, 0x71, 0x0, 0x10000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000708e4284000000000000000000200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 260.358521ms ago: executing program 3 (id=2041): socket$l2tp(0x2, 0x2, 0x73) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616c653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00a8aace2687064e4c4e06e7c4686fab752a5100082617830de07ab55ff370ea"]) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xd) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048800}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x20, r7, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x10) 215.04036ms ago: executing program 2 (id=2042): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000101010200000000000000000a0000000c00198008000100ad04f4"], 0x24}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1000) r2 = timerfd_create(0x8, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15010000ad190800140012800b0001006d61637365630000ff00028008000500", @ANYRES32=r5], 0x44}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000002c0)={@rand_addr=' \x01\x00', 0x4, r5}) timerfd_settime(r2, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) timerfd_gettime(r7, &(0x7f0000000280)) ioctl$TIOCGPTPEER(r7, 0x5441, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x53a, 0xfffffffb, 0x8, 0x1840, 0x1, 0x2, '\x00', r5, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x4, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r8, &(0x7f00000002c0), &(0x7f0000002240)=""/99}, 0x57) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0xa8, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x228c0, 0x8}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_PROXYARP_WIFI={0x5, 0xc, 0x1}]}}}, @IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'bond_slave_0\x00'}, {0x14}, {0x14, 0x35, 'netpci0\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004840) readv(r2, &(0x7f0000000000)=[{&(0x7f00000020c0)=""/4106, 0x8}], 0x8) 214.814651ms ago: executing program 4 (id=2043): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 169.51357ms ago: executing program 5 (id=2044): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 145.02678ms ago: executing program 2 (id=2045): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, &(0x7f0000000280)}, 0x20) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) syz_io_uring_setup(0x19d1, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x7fffffd, 0x8000000, 0x0, r3}, &(0x7f0000000080), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 143.02252ms ago: executing program 4 (id=2046): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 127.50307ms ago: executing program 4 (id=2047): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) 118.27181ms ago: executing program 3 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) 80.34398ms ago: executing program 4 (id=2049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@bh}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 55.18565ms ago: executing program 3 (id=2050): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)=' ', 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r4) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x87, @initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x3, 'lc\x00', 0x8, 0x8}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='mptcp_subflow_get_send\x00', r5, 0x0, 0x20000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = dup3(0xffffffffffffffff, r7, 0x0) futimesat(r8, 0x0, 0x0) setuid(0xee00) r9 = socket$kcm(0x2, 0x922000000001, 0x106) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18257d3858afcf1f4ee4ceba1b000000000000000000ff000044850000000e0000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x10000000000003}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r10) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r12, 0x30b, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$sock_attach_bpf(r9, 0x1, 0xc, &(0x7f00000002c0), 0x4) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000040)={0x6, @dev={0xac, 0x14, 0x14, 0x23}, 0x4e23, 0x0, 'ovf\x00', 0x22, 0x2000}, 0x2c) 444.779µs ago: executing program 3 (id=2051): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x32, 0x32, 0x8, [@ptr={0xd, 0x0, 0x0, 0x2, 0x2}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x3, 0x3, 0x4}, {0x5, 0x0, 0x200}], "2903"}]}, {0x0, [0x5f, 0x30, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000240)=""/113, 0x54, 0x71, 0x0, 0x10000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="24000000708e4284000000000000000000200000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 0s ago: executing program 3 (id=2052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18030000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x4bd, 0x8) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x3000000) fcntl$setlease(r3, 0x400, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setpgid(0x0, 0x0) kernel console output (not intermixed with test programs): /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.787530][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'. [ 104.797747][ T7691] netlink: 'syz.3.1382': attribute type 21 has an invalid length. [ 104.896148][ T7703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7703 comm=syz.3.1385 [ 104.908818][ T7703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7703 comm=syz.3.1385 [ 104.929373][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'. [ 104.934120][ T7705] loop1: detected capacity change from 0 to 1024 [ 104.939860][ T7703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=7703 comm=syz.3.1385 [ 104.991999][ T7709] loop4: detected capacity change from 0 to 512 [ 105.032850][ T7711] loop3: detected capacity change from 0 to 512 [ 105.041514][ T7711] EXT4-fs: Ignoring removed bh option [ 105.056584][ T7711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.073486][ T7709] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1387: bg 0: block 248: padding at end of block bitmap is not set [ 105.120347][ T7709] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1387: Failed to acquire dquot type 1 [ 105.142459][ T7709] EXT4-fs (loop4): 1 truncate cleaned up [ 105.171587][ T7709] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.183311][ T7724] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 105.191215][ T7724] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1391'. [ 105.210448][ T7711] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.320260][ T7731] loop1: detected capacity change from 0 to 512 [ 105.344432][ T7731] EXT4-fs: Ignoring removed bh option [ 105.364569][ T7731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.453199][ T7731] ext4 filesystem being mounted at /274/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.684629][ T7745] loop1: detected capacity change from 0 to 512 [ 105.710662][ T7745] EXT4-fs: Ignoring removed bh option [ 105.754910][ T7745] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.855370][ T7745] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.878561][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 105.977777][ T7755] loop2: detected capacity change from 0 to 512 [ 106.007538][ T7755] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.069215][ T7755] EXT4-fs (loop2): 1 truncate cleaned up [ 106.154099][ T7755] xt_TCPMSS: Only works on TCP SYN packets [ 106.162479][ T7763] loop1: detected capacity change from 0 to 512 [ 106.177229][ T7761] loop3: detected capacity change from 0 to 512 [ 106.178014][ T7755] netlink: 'syz.2.1401': attribute type 10 has an invalid length. [ 106.202505][ T7761] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.233417][ T7763] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1403: bg 0: block 248: padding at end of block bitmap is not set [ 106.267300][ T7763] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1403: Failed to acquire dquot type 1 [ 106.284464][ T7763] EXT4-fs (loop1): 1 truncate cleaned up [ 106.293970][ T7763] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.295645][ T7761] hub 6-0:1.0: USB hub found [ 106.310052][ T7761] hub 6-0:1.0: 8 ports detected [ 106.347544][ T7776] loop2: detected capacity change from 0 to 512 [ 106.380495][ T7761] Process accounting resumed [ 106.388823][ T7776] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.417477][ T7776] hub 6-0:1.0: USB hub found [ 106.423963][ T7776] hub 6-0:1.0: 8 ports detected [ 106.489467][ T7789] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.506837][ T7782] loop5: detected capacity change from 0 to 512 [ 106.520157][ T7782] EXT4-fs: Ignoring removed bh option [ 106.529636][ T7782] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.543041][ T7791] loop3: detected capacity change from 0 to 512 [ 106.573917][ T7791] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.588812][ T7782] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.603042][ T7791] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 106.645179][ T7791] Process accounting resumed [ 106.689315][ T7799] loop4: detected capacity change from 0 to 512 [ 106.707239][ T7803] loop3: detected capacity change from 0 to 512 [ 106.718352][ T7799] EXT4-fs: Ignoring removed bh option [ 106.732588][ T7803] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.755808][ T7799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.769377][ T7803] EXT4-fs (loop3): 1 truncate cleaned up [ 106.799058][ T7806] loop2: detected capacity change from 0 to 2048 [ 106.808445][ T7799] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.817357][ T7803] xt_TCPMSS: Only works on TCP SYN packets [ 106.858960][ T7806] loop2: p3 < > p4 < > [ 106.863171][ T7806] loop2: partition table partially beyond EOD, truncated [ 106.924319][ T7806] loop2: p3 start 4284289 is beyond EOD, truncated [ 106.972082][ T7816] loop3: detected capacity change from 0 to 512 [ 106.975449][ T7806] syz.2.1418[7806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.979936][ T7806] syz.2.1418[7806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.993997][ T7806] syz.2.1418[7806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.014461][ T7818] loop4: detected capacity change from 0 to 1024 [ 107.021546][ T7814] loop5: detected capacity change from 0 to 512 [ 107.040947][ T7816] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1422: bg 0: block 248: padding at end of block bitmap is not set [ 107.072305][ T7816] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1422: Failed to acquire dquot type 1 [ 107.086901][ T7816] EXT4-fs (loop3): 1 truncate cleaned up [ 107.093119][ T7816] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.109845][ T7814] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.113207][ T7818] __nla_validate_parse: 1 callbacks suppressed [ 107.113229][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 107.161320][ T7818] netlink: 'syz.4.1423': attribute type 21 has an invalid length. [ 107.186476][ T7814] hub 6-0:1.0: USB hub found [ 107.191554][ T7814] hub 6-0:1.0: 8 ports detected [ 107.199430][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 107.300909][ T7836] loop1: detected capacity change from 0 to 2048 [ 107.302838][ T7831] loop4: detected capacity change from 0 to 512 [ 107.338948][ T7831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.372559][ T7831] EXT4-fs (loop4): 1 truncate cleaned up [ 107.411167][ T7847] loop5: detected capacity change from 0 to 1024 [ 107.490958][ T7852] loop2: detected capacity change from 0 to 1024 [ 107.501527][ T7831] xt_TCPMSS: Only works on TCP SYN packets [ 107.556621][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1433'. [ 107.626068][ T7859] loop4: detected capacity change from 0 to 512 [ 107.675639][ T7859] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1435: bg 0: block 248: padding at end of block bitmap is not set [ 107.691643][ T7859] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1435: Failed to acquire dquot type 1 [ 107.704030][ T7859] EXT4-fs (loop4): 1 truncate cleaned up [ 107.710244][ T7859] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.730497][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1439'. [ 107.779703][ T7870] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1437'. [ 107.842083][ T7872] loop4: detected capacity change from 0 to 512 [ 107.884202][ T7872] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.957660][ T7872] hub 6-0:1.0: USB hub found [ 107.962607][ T7872] hub 6-0:1.0: 8 ports detected [ 108.138873][ T7894] loop4: detected capacity change from 0 to 1024 [ 108.157978][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 108.176121][ T7898] xt_hashlimit: max too large, truncated to 1048576 [ 108.222694][ T7903] loop4: detected capacity change from 0 to 1024 [ 108.294483][ T7912] loop5: detected capacity change from 0 to 512 [ 108.294630][ T7911] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1452'. [ 108.308319][ T7912] loop5: detected capacity change from 0 to 1024 [ 108.333012][ T7911] netlink: 'syz.4.1452': attribute type 39 has an invalid length. [ 108.335551][ T7912] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.351626][ T7911] veth1_macvtap: left promiscuous mode [ 108.404085][ T7917] loop5: detected capacity change from 0 to 2048 [ 108.459054][ T7919] loop4: detected capacity change from 0 to 512 [ 108.467844][ T7919] EXT4-fs: Ignoring removed bh option [ 108.480222][ T7919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.503602][ T7919] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.554945][ T7926] loop5: detected capacity change from 0 to 512 [ 108.561931][ T7926] EXT4-fs: Ignoring removed bh option [ 108.570590][ T7926] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.595482][ T7928] loop3: detected capacity change from 0 to 512 [ 108.604449][ T7928] EXT4-fs: Ignoring removed bh option [ 108.610299][ T7928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.620827][ T7926] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.628458][ T7934] loop4: detected capacity change from 0 to 1024 [ 108.642261][ T7928] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.681752][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1459'. [ 108.774552][ T7940] loop3: detected capacity change from 0 to 512 [ 108.781730][ T7942] loop4: detected capacity change from 0 to 1024 [ 108.795280][ T7944] loop1: detected capacity change from 0 to 512 [ 108.803723][ T7944] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 108.807350][ T7940] EXT4-fs: Ignoring removed bh option [ 108.825911][ T7944] EXT4-fs (loop1): 1 truncate cleaned up [ 108.826763][ T7940] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.842271][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 108.852364][ T7942] netlink: 'syz.4.1461': attribute type 21 has an invalid length. [ 108.861919][ T29] kauditd_printk_skb: 659 callbacks suppressed [ 108.861937][ T29] audit: type=1400 audit(1734815092.622:11645): avc: denied { read append } for pid=7943 comm="syz.1.1462" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.863450][ T7944] xt_TCPMSS: Only works on TCP SYN packets [ 108.868177][ T29] audit: type=1400 audit(1734815092.622:11646): avc: denied { open } for pid=7943 comm="syz.1.1462" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.893382][ T7944] netlink: 'syz.1.1462': attribute type 10 has an invalid length. [ 108.897611][ T29] audit: type=1400 audit(1734815092.622:11647): avc: denied { setattr } for pid=7943 comm="syz.1.1462" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.977187][ T29] audit: type=1400 audit(1734815092.752:11648): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 108.988726][ T7940] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.018538][ T29] audit: type=1400 audit(1734815092.752:11649): avc: denied { mount } for pid=7939 comm="syz.3.1460" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 109.040484][ T29] audit: type=1400 audit(1734815092.782:11650): avc: denied { read write } for pid=4167 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.064803][ T29] audit: type=1400 audit(1734815092.782:11651): avc: denied { open } for pid=4167 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.064834][ T29] audit: type=1400 audit(1734815092.782:11652): avc: denied { ioctl } for pid=4167 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.064913][ T29] audit: type=1400 audit(1734815092.782:11653): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 109.065229][ T29] audit: type=1400 audit(1734815092.802:11654): avc: denied { write } for pid=7939 comm="syz.3.1460" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.103791][ T7960] FAULT_INJECTION: forcing a failure. [ 109.103791][ T7960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.103823][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.1.1465 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 109.103880][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.103897][ T7960] Call Trace: [ 109.103905][ T7960] [ 109.103914][ T7960] dump_stack_lvl+0xf2/0x150 [ 109.104021][ T7960] dump_stack+0x15/0x1a [ 109.104055][ T7960] should_fail_ex+0x223/0x230 [ 109.104112][ T7960] should_fail+0xb/0x10 [ 109.104137][ T7960] should_fail_usercopy+0x1a/0x20 [ 109.104164][ T7960] _copy_from_iter+0xd5/0xd00 [ 109.104200][ T7960] ? alloc_pages_mpol_noprof+0xd5/0x1e0 [ 109.104242][ T7960] copy_page_from_iter+0x14f/0x280 [ 109.104300][ T7960] tun_get_user+0x68b/0x25c0 [ 109.104336][ T7960] ? avc_has_perm+0xd4/0x160 [ 109.104376][ T7960] ? ref_tracker_alloc+0x1f5/0x2f0 [ 109.104412][ T7960] tun_chr_write_iter+0x188/0x240 [ 109.104485][ T7960] vfs_write+0x77f/0x920 [ 109.104516][ T7960] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 109.104578][ T7960] ksys_write+0xe8/0x1b0 [ 109.104615][ T7960] __x64_sys_write+0x42/0x50 [ 109.104650][ T7960] x64_sys_call+0x287e/0x2dc0 [ 109.104676][ T7960] do_syscall_64+0xc9/0x1c0 [ 109.104703][ T7960] ? clear_bhb_loop+0x55/0xb0 [ 109.104755][ T7960] ? clear_bhb_loop+0x55/0xb0 [ 109.104894][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.104938][ T7960] RIP: 0033:0x7fd3d63947df [ 109.104958][ T7960] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 109.104983][ T7960] RSP: 002b:00007fd3d4a07000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 109.105006][ T7960] RAX: ffffffffffffffda RBX: 00007fd3d6585fa0 RCX: 00007fd3d63947df [ 109.105020][ T7960] RDX: 0000000000000036 RSI: 0000000020001180 RDI: 00000000000000c8 [ 109.105035][ T7960] RBP: 00007fd3d4a07090 R08: 0000000000000000 R09: 0000000000000000 [ 109.105058][ T7960] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 109.105071][ T7960] R13: 0000000000000000 R14: 00007fd3d6585fa0 R15: 00007ffcc0631318 [ 109.105090][ T7960] [ 109.235181][ T7967] loop3: detected capacity change from 0 to 512 [ 109.432968][ T7967] EXT4-fs: Ignoring removed bh option [ 109.449272][ T7967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.472145][ T7971] loop4: detected capacity change from 0 to 512 [ 109.489382][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 109.492106][ T7967] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.512654][ T7971] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1470: bg 0: block 248: padding at end of block bitmap is not set [ 109.529023][ T7971] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1470: Failed to acquire dquot type 1 [ 109.547122][ T7980] loop5: detected capacity change from 0 to 1024 [ 109.548649][ T7971] EXT4-fs (loop4): 1 truncate cleaned up [ 109.560296][ T7971] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.632422][ T7986] loop3: detected capacity change from 0 to 1024 [ 109.639818][ T7990] loop4: detected capacity change from 0 to 512 [ 109.646783][ T7990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.671930][ T7988] loop5: detected capacity change from 0 to 512 [ 109.678652][ T7988] EXT4-fs: Ignoring removed bh option [ 109.684889][ T7990] EXT4-fs (loop4): 1 truncate cleaned up [ 109.696703][ T7988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.711732][ T7990] xt_TCPMSS: Only works on TCP SYN packets [ 109.712557][ T7988] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.728356][ T7990] netlink: 'syz.4.1476': attribute type 10 has an invalid length. [ 109.786727][ T7997] loop3: detected capacity change from 0 to 1024 [ 109.792868][ T7999] loop4: detected capacity change from 0 to 512 [ 109.804642][ T7999] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.818409][ T7999] EXT4-fs (loop4): 1 truncate cleaned up [ 109.845553][ T7997] netlink: 'syz.3.1478': attribute type 21 has an invalid length. [ 109.846004][ T7999] xt_TCPMSS: Only works on TCP SYN packets [ 109.911381][ T8008] loop3: detected capacity change from 0 to 512 [ 109.922085][ T8008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.941751][ T8004] IPv6: Can't replace route, no match found [ 109.963631][ T8008] EXT4-fs (loop3): 1 truncate cleaned up [ 109.993511][ T8008] xt_TCPMSS: Only works on TCP SYN packets [ 110.000208][ T8008] netlink: 'syz.3.1480': attribute type 10 has an invalid length. [ 110.037137][ T8017] loop3: detected capacity change from 0 to 512 [ 110.047093][ T8017] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.074373][ T8017] EXT4-fs (loop3): 1 truncate cleaned up [ 110.095415][ T8017] xt_TCPMSS: Only works on TCP SYN packets [ 110.153674][ T8025] loop5: detected capacity change from 0 to 512 [ 110.167316][ T8025] EXT4-fs: Ignoring removed bh option [ 110.183674][ T8033] loop4: detected capacity change from 0 to 1024 [ 110.193369][ T8025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.228490][ T8025] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.257677][ T8033] netlink: 'syz.4.1491': attribute type 21 has an invalid length. [ 110.363543][ T8041] loop4: detected capacity change from 0 to 512 [ 110.372307][ T8041] EXT4-fs: Ignoring removed bh option [ 110.381001][ T8041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.415198][ T8041] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.569990][ T8058] loop4: detected capacity change from 0 to 512 [ 110.588932][ T8058] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.621727][ T8058] EXT4-fs (loop4): 1 truncate cleaned up [ 110.666352][ T8058] xt_TCPMSS: Only works on TCP SYN packets [ 110.740260][ T8066] loop4: detected capacity change from 0 to 1024 [ 110.810073][ T8074] loop4: detected capacity change from 0 to 512 [ 110.824366][ T8074] EXT4-fs: Ignoring removed bh option [ 110.832162][ T8074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.872652][ T8074] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.962633][ T8082] loop1: detected capacity change from 0 to 512 [ 110.975960][ T8082] EXT4-fs: Ignoring removed bh option [ 110.994801][ T8082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.012701][ T8090] SELinux: Context system_u:object_r:hwclock_exec_t:s0 is not valid (left unmapped). [ 111.035196][ T8090] loop4: detected capacity change from 0 to 1024 [ 111.093755][ T8087] loop5: detected capacity change from 0 to 512 [ 111.115108][ T8082] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.128093][ T8102] loop2: detected capacity change from 0 to 512 [ 111.135683][ T8087] EXT4-fs: Ignoring removed bh option [ 111.145776][ T8087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.156847][ T8102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.172627][ T8102] EXT4-fs (loop2): 1 truncate cleaned up [ 111.217183][ T8087] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.220019][ T8102] xt_TCPMSS: Only works on TCP SYN packets [ 111.281545][ T8113] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 111.285608][ T8110] loop3: detected capacity change from 0 to 1024 [ 111.391466][ T8119] loop2: detected capacity change from 0 to 512 [ 111.406206][ T8119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.440981][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 111.496156][ T8119] xt_TCPMSS: Only works on TCP SYN packets [ 111.515960][ T8126] loop3: detected capacity change from 0 to 256 [ 111.636606][ T8136] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 111.661589][ T8141] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 111.834057][ T8152] IPv6: Can't replace route, no match found [ 111.847276][ T8159] loop2: detected capacity change from 0 to 512 [ 111.867493][ T8159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.892889][ T8159] EXT4-fs (loop2): 1 truncate cleaned up [ 111.940231][ T8159] xt_TCPMSS: Only works on TCP SYN packets [ 112.031938][ T8165] loop3: detected capacity change from 0 to 512 [ 112.042445][ T8165] EXT4-fs: Ignoring removed bh option [ 112.061712][ T8174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8174 comm=syz.2.1538 [ 112.074365][ T8174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8174 comm=syz.2.1538 [ 112.089352][ T8165] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.122634][ T8174] __nla_validate_parse: 9 callbacks suppressed [ 112.122651][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1538'. [ 112.136636][ T8167] loop5: detected capacity change from 0 to 512 [ 112.139313][ T8174] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8174 comm=syz.2.1538 [ 112.158785][ T8167] EXT4-fs: Ignoring removed bh option [ 112.166520][ T8167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.178062][ T8165] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.218047][ T8167] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.336878][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1541'. [ 112.370427][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 112.434807][ T8193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8193 comm=syz.3.1545 [ 112.442437][ T8191] loop5: detected capacity change from 0 to 2048 [ 112.447346][ T8193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8193 comm=syz.3.1545 [ 112.469822][ T8193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1545'. [ 112.479082][ T8193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8193 comm=syz.3.1545 [ 112.598721][ T8199] loop5: detected capacity change from 0 to 2048 [ 112.805391][ T8212] loop5: detected capacity change from 0 to 512 [ 112.820483][ T8212] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1552: bg 0: block 248: padding at end of block bitmap is not set [ 112.835031][ T8212] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1552: Failed to acquire dquot type 1 [ 112.847288][ T8212] EXT4-fs (loop5): 1 truncate cleaned up [ 112.855012][ T8212] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.916433][ T8218] netlink: 'syz.5.1554': attribute type 1 has an invalid length. [ 112.924330][ T8218] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1554'. [ 112.947462][ T8216] loop2: detected capacity change from 0 to 512 [ 112.960157][ T8216] EXT4-fs: Ignoring removed bh option [ 112.967537][ T8216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.016754][ T8228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8228 comm=syz.5.1557 [ 113.026218][ T8216] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.029245][ T8228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8228 comm=syz.5.1557 [ 113.030295][ T8228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1557'. [ 113.063880][ T8228] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8228 comm=syz.5.1557 [ 113.090513][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1558'. [ 113.499337][ T8249] loop2: detected capacity change from 0 to 512 [ 113.520149][ T8249] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1564: bg 0: block 248: padding at end of block bitmap is not set [ 113.535746][ T8249] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1564: Failed to acquire dquot type 1 [ 113.548971][ T8249] EXT4-fs (loop2): 1 truncate cleaned up [ 113.555108][ T8249] ext4 filesystem being mounted at /326/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.597601][ T8253] loop2: detected capacity change from 0 to 1024 [ 113.613953][ T8255] loop3: detected capacity change from 0 to 512 [ 113.621501][ T8255] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 113.635125][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 113.653562][ T8259] loop5: detected capacity change from 0 to 1024 [ 113.660356][ T8255] EXT4-fs (loop3): 1 truncate cleaned up [ 113.702358][ T8266] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8266 comm=syz.2.1569 [ 113.712897][ T8255] xt_TCPMSS: Only works on TCP SYN packets [ 113.715899][ T8266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1569'. [ 113.723749][ T8255] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 113.764452][ T8268] loop2: detected capacity change from 0 to 512 [ 113.771575][ T8268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 113.783150][ T8268] EXT4-fs (loop2): 1 truncate cleaned up [ 113.797781][ T8271] loop5: detected capacity change from 0 to 512 [ 113.804723][ T8268] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 113.810125][ T8271] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 113.844668][ T8271] EXT4-fs (loop5): 1 truncate cleaned up [ 113.872543][ T8271] tcpmss_tg6_check: 1 callbacks suppressed [ 113.872610][ T8271] xt_TCPMSS: Only works on TCP SYN packets [ 113.929179][ T8274] loop3: detected capacity change from 0 to 512 [ 113.941677][ T8274] EXT4-fs: Ignoring removed bh option [ 113.947361][ T29] kauditd_printk_skb: 907 callbacks suppressed [ 113.947446][ T29] audit: type=1326 audit(1734815097.722:12556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 113.988919][ T29] audit: type=1400 audit(1734815097.762:12557): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 114.000690][ T8274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.011874][ T29] audit: type=1326 audit(1734815097.762:12558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 114.011939][ T29] audit: type=1400 audit(1734815097.762:12559): avc: denied { open } for pid=8275 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.012012][ T29] audit: type=1400 audit(1734815097.762:12560): avc: denied { perfmon } for pid=8275 comm="syz.2.1573" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.012041][ T29] audit: type=1400 audit(1734815097.762:12561): avc: denied { kernel } for pid=8275 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 114.012099][ T29] audit: type=1326 audit(1734815097.762:12562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 114.012127][ T29] audit: type=1326 audit(1734815097.762:12563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.2.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 114.012159][ T29] audit: type=1400 audit(1734815097.762:12564): avc: denied { map_create } for pid=8275 comm="syz.2.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 114.012185][ T29] audit: type=1400 audit(1734815097.762:12565): avc: denied { bpf } for pid=8275 comm="syz.2.1573" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.243117][ T8274] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.389734][ T8290] loop2: detected capacity change from 0 to 512 [ 114.396567][ T8290] EXT4-fs: Ignoring removed bh option [ 114.402737][ T8290] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.432211][ T8290] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.643469][ T8294] loop2: detected capacity change from 0 to 1024 [ 114.662114][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1579'. [ 114.702232][ T8300] loop3: detected capacity change from 0 to 512 [ 114.720343][ T8300] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.742481][ T8306] loop1: detected capacity change from 0 to 1024 [ 114.882708][ T8315] loop3: detected capacity change from 0 to 512 [ 114.905839][ T8315] EXT4-fs: Ignoring removed bh option [ 114.921532][ T8315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.045497][ T8315] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.116299][ T8330] loop1: detected capacity change from 0 to 512 [ 115.125230][ T8330] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.138841][ T8330] EXT4-fs (loop1): 1 truncate cleaned up [ 115.151131][ T8335] loop4: detected capacity change from 0 to 1024 [ 115.178141][ T8330] xt_TCPMSS: Only works on TCP SYN packets [ 115.268057][ T8342] loop1: detected capacity change from 0 to 512 [ 115.276576][ T8342] EXT4-fs: Ignoring removed bh option [ 115.284874][ T8342] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.297546][ T8344] loop4: detected capacity change from 0 to 1024 [ 115.307283][ T8342] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.320583][ T8346] wg2: entered promiscuous mode [ 115.325477][ T8346] wg2: entered allmulticast mode [ 115.373083][ T8352] syz_tun: entered allmulticast mode [ 115.379372][ T8352] syz_tun: left allmulticast mode [ 115.511531][ T8362] loop3: detected capacity change from 0 to 2048 [ 115.584022][ T8367] loop2: detected capacity change from 0 to 512 [ 115.600729][ T8367] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.633531][ T8367] EXT4-fs (loop2): 1 truncate cleaned up [ 115.657696][ T8367] xt_TCPMSS: Only works on TCP SYN packets [ 115.743291][ T8378] loop2: detected capacity change from 0 to 512 [ 115.754750][ T8381] loop3: detected capacity change from 0 to 512 [ 115.763695][ T8381] EXT4-fs: Ignoring removed bh option [ 115.771486][ T8378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.789025][ T8381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.811664][ T8378] EXT4-fs (loop2): 1 truncate cleaned up [ 115.826176][ T8381] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.837089][ T8378] xt_TCPMSS: Only works on TCP SYN packets [ 115.844186][ T8378] netlink: 'syz.2.1608': attribute type 10 has an invalid length. [ 115.844334][ T8389] 9pnet_fd: Insufficient options for proto=fd [ 115.985412][ T8405] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 116.032739][ T8398] loop3: detected capacity change from 0 to 512 [ 116.042786][ T8398] EXT4-fs: Ignoring removed bh option [ 116.053301][ T8398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.060715][ T8411] loop4: detected capacity change from 0 to 128 [ 116.081363][ T8411] ext4 filesystem being mounted at /334/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.109021][ T8398] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.115072][ T8411] FAULT_INJECTION: forcing a failure. [ 116.115072][ T8411] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 116.137235][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.4.1621 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 116.147977][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.158139][ T8411] Call Trace: [ 116.161492][ T8411] [ 116.164505][ T8411] dump_stack_lvl+0xf2/0x150 [ 116.169132][ T8411] dump_stack+0x15/0x1a [ 116.173318][ T8411] should_fail_ex+0x223/0x230 [ 116.178112][ T8411] should_fail_alloc_page+0xfd/0x110 [ 116.183562][ T8411] __alloc_pages_noprof+0x109/0x340 [ 116.188835][ T8411] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 116.194229][ T8411] alloc_pages_noprof+0xe1/0x100 [ 116.199195][ T8411] pipe_write+0x348/0xd20 [ 116.203594][ T8411] vfs_write+0x77f/0x920 [ 116.207921][ T8411] ? __pfx_pipe_write+0x10/0x10 [ 116.212804][ T8411] ksys_write+0xe8/0x1b0 [ 116.217062][ T8411] __x64_sys_write+0x42/0x50 [ 116.221746][ T8411] x64_sys_call+0x287e/0x2dc0 [ 116.226449][ T8411] do_syscall_64+0xc9/0x1c0 [ 116.231043][ T8411] ? clear_bhb_loop+0x55/0xb0 [ 116.235869][ T8411] ? clear_bhb_loop+0x55/0xb0 [ 116.240551][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.246538][ T8411] RIP: 0033:0x7f39deb35d29 [ 116.250968][ T8411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.270787][ T8411] RSP: 002b:00007f39dd1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 116.279206][ T8411] RAX: ffffffffffffffda RBX: 00007f39ded25fa0 RCX: 00007f39deb35d29 [ 116.287257][ T8411] RDX: 00000000fffffecc RSI: 0000000020000000 RDI: 0000000000000005 [ 116.295265][ T8411] RBP: 00007f39dd1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 116.303237][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.311213][ T8411] R13: 0000000000000000 R14: 00007f39ded25fa0 R15: 00007ffdefc2dce8 [ 116.319245][ T8411] [ 116.422591][ T8421] loop4: detected capacity change from 0 to 512 [ 116.428424][ T8427] loop1: detected capacity change from 0 to 512 [ 116.451111][ T8427] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.453780][ T8431] loop3: detected capacity change from 0 to 512 [ 116.469121][ T8431] EXT4-fs: Ignoring removed bh option [ 116.474926][ T8421] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.486059][ T8431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.502534][ T8427] hub 6-0:1.0: USB hub found [ 116.507685][ T8427] hub 6-0:1.0: 8 ports detected [ 116.508854][ T8431] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.530708][ T8421] hub 6-0:1.0: USB hub found [ 116.541919][ T8427] Process accounting resumed [ 116.546636][ T8421] hub 6-0:1.0: 8 ports detected [ 116.593120][ T8441] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 116.597203][ T8421] Process accounting resumed [ 116.664169][ T8449] ip6gre1: entered allmulticast mode [ 116.696240][ T8453] loop4: detected capacity change from 0 to 512 [ 116.703419][ T8453] EXT4-fs: Ignoring removed bh option [ 116.709293][ T8453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.720490][ T8453] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.750353][ T8457] FAULT_INJECTION: forcing a failure. [ 116.750353][ T8457] name failslab, interval 1, probability 0, space 0, times 0 [ 116.763415][ T8457] CPU: 1 UID: 0 PID: 8457 Comm: syz.1.1635 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 116.774127][ T8457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 116.784192][ T8457] Call Trace: [ 116.787479][ T8457] [ 116.790434][ T8457] dump_stack_lvl+0xf2/0x150 [ 116.795062][ T8457] dump_stack+0x15/0x1a [ 116.799292][ T8457] should_fail_ex+0x223/0x230 [ 116.803983][ T8457] ? selinux_netlbl_sock_genattr+0x84/0x260 [ 116.810025][ T8457] should_failslab+0x8f/0xb0 [ 116.814696][ T8457] __kmalloc_cache_noprof+0x4e/0x320 [ 116.819996][ T8457] selinux_netlbl_sock_genattr+0x84/0x260 [ 116.825749][ T8457] selinux_netlbl_socket_post_create+0x69/0x100 [ 116.832044][ T8457] selinux_mptcp_add_subflow+0xb7/0xd0 [ 116.837929][ T8457] security_mptcp_add_subflow+0x3d/0x80 [ 116.843486][ T8457] mptcp_subflow_create_socket+0xe8/0x710 [ 116.849302][ T8457] ? avc_has_perm_noaudit+0x1cc/0x210 [ 116.854703][ T8457] __mptcp_nmpc_sk+0xb4/0x3c0 [ 116.859491][ T8457] mptcp_sendmsg_fastopen+0x94/0x2f0 [ 116.864791][ T8457] mptcp_sendmsg+0xd8f/0xe60 [ 116.869397][ T8457] ? avc_has_perm+0xd4/0x160 [ 116.874005][ T8457] ? selinux_socket_sendmsg+0x185/0x1c0 [ 116.879626][ T8457] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 116.884793][ T8457] inet_sendmsg+0xc5/0xd0 [ 116.889144][ T8457] __sock_sendmsg+0x102/0x180 [ 116.893867][ T8457] ____sys_sendmsg+0x312/0x410 [ 116.898643][ T8457] __sys_sendmsg+0x19d/0x230 [ 116.903308][ T8457] __x64_sys_sendmsg+0x46/0x50 [ 116.908079][ T8457] x64_sys_call+0x2734/0x2dc0 [ 116.912770][ T8457] do_syscall_64+0xc9/0x1c0 [ 116.917296][ T8457] ? clear_bhb_loop+0x55/0xb0 [ 116.921977][ T8457] ? clear_bhb_loop+0x55/0xb0 [ 116.926680][ T8457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.932646][ T8457] RIP: 0033:0x7fd3d6395d29 [ 116.937064][ T8457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.956730][ T8457] RSP: 002b:00007fd3d4a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.965149][ T8457] RAX: ffffffffffffffda RBX: 00007fd3d6585fa0 RCX: 00007fd3d6395d29 [ 116.973232][ T8457] RDX: 0000000034004000 RSI: 0000000020000240 RDI: 0000000000000003 [ 116.981225][ T8457] RBP: 00007fd3d4a07090 R08: 0000000000000000 R09: 0000000000000000 [ 116.989277][ T8457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.997278][ T8457] R13: 0000000000000000 R14: 00007fd3d6585fa0 R15: 00007ffcc0631318 [ 117.005448][ T8457] [ 117.040745][ T8461] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 117.110107][ T8467] loop4: detected capacity change from 0 to 1024 [ 117.152163][ T8467] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.166232][ T8467] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 117.178598][ T8467] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.178598][ T8467] [ 117.188456][ T8467] EXT4-fs (loop4): Total free blocks count 0 [ 117.194465][ T8467] EXT4-fs (loop4): Free/Dirty block details [ 117.200467][ T8467] EXT4-fs (loop4): free_blocks=0 [ 117.205523][ T8467] EXT4-fs (loop4): dirty_blocks=0 [ 117.210639][ T8467] EXT4-fs (loop4): Block reservation details [ 117.216686][ T8467] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 117.223199][ T8476] loop2: detected capacity change from 0 to 512 [ 117.235375][ T8476] EXT4-fs: Ignoring removed bh option [ 117.245659][ T8477] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 117.258208][ T8477] EXT4-fs (loop4): This should not happen!! Data will be lost [ 117.258208][ T8477] [ 117.273228][ T8476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.310410][ T8476] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.561380][ T8494] loop1: detected capacity change from 0 to 512 [ 117.565390][ T8489] loop2: detected capacity change from 0 to 512 [ 117.590912][ T8489] EXT4-fs: Ignoring removed bh option [ 117.596227][ T8494] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.608847][ T8489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.664956][ T8489] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.721590][ T8507] selinux_netlink_send: 8 callbacks suppressed [ 117.721609][ T8507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8507 comm=syz.1.1653 [ 117.740416][ T8507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8507 comm=syz.1.1653 [ 117.754555][ T8507] __nla_validate_parse: 9 callbacks suppressed [ 117.754620][ T8507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1653'. [ 117.770241][ T8507] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8507 comm=syz.1.1653 [ 117.834828][ T8511] loop1: detected capacity change from 0 to 512 [ 117.843328][ T8511] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 117.857430][ T8511] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 117.870792][ T8511] EXT4-fs (loop1): 1 truncate cleaned up [ 117.930293][ T8514] loop2: detected capacity change from 0 to 512 [ 117.939585][ T8514] EXT4-fs: Ignoring removed bh option [ 117.950528][ T8514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.967603][ T8518] loop1: detected capacity change from 0 to 1024 [ 117.984799][ T8514] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.011005][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 118.094770][ T8528] loop1: detected capacity change from 0 to 512 [ 118.114193][ T8528] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1660: bg 0: block 248: padding at end of block bitmap is not set [ 118.129635][ T8528] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1660: Failed to acquire dquot type 1 [ 118.143503][ T8528] EXT4-fs (loop1): 1 truncate cleaned up [ 118.149983][ T8528] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.170506][ T8532] loop2: detected capacity change from 0 to 512 [ 118.195508][ T8532] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.240235][ T8540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8540 comm=syz.5.1664 [ 118.252796][ T8540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8540 comm=syz.5.1664 [ 118.267687][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1664'. [ 118.277637][ T8540] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8540 comm=syz.5.1664 [ 118.299586][ T8541] netlink: 'syz.1.1662': attribute type 10 has an invalid length. [ 118.321460][ T8541] macvlan1: entered allmulticast mode [ 118.345233][ T8541] veth1_vlan: entered allmulticast mode [ 118.356405][ T8547] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.373328][ T8541] veth1_vlan: left allmulticast mode [ 118.440109][ T8554] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 118.447907][ T8554] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1670'. [ 118.451400][ T8552] loop4: detected capacity change from 0 to 512 [ 118.482614][ T8552] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.492507][ T8557] loop5: detected capacity change from 0 to 2048 [ 118.535977][ T8552] EXT4-fs (loop4): 1 truncate cleaned up [ 118.640754][ T8561] loop2: detected capacity change from 0 to 512 [ 118.649500][ T8552] xt_TCPMSS: Only works on TCP SYN packets [ 118.652240][ T8561] EXT4-fs: Ignoring removed bh option [ 118.665340][ T8561] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.799047][ T8577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8577 comm=syz.3.1677 [ 118.812006][ T8577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8577 comm=syz.3.1677 [ 118.818666][ T8576] loop4: detected capacity change from 0 to 512 [ 118.832628][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1677'. [ 118.834429][ T8561] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.841799][ T8577] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8577 comm=syz.3.1677 [ 118.879525][ T8576] EXT4-fs: Ignoring removed bh option [ 118.893220][ T8579] loop3: detected capacity change from 0 to 512 [ 118.903766][ T8576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.921880][ T8576] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.934812][ T8579] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.951801][ T29] kauditd_printk_skb: 817 callbacks suppressed [ 118.951817][ T29] audit: type=1400 audit(1734815102.732:13381): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.007757][ T29] audit: type=1400 audit(1734815102.782:13382): avc: denied { sys_module } for pid=8580 comm="syz.5.1678" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 119.014624][ T8589] loop1: detected capacity change from 0 to 1024 [ 119.149689][ T29] audit: type=1326 audit(1734815102.932:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deb35d29 code=0x7ffc0000 [ 119.196280][ T29] audit: type=1326 audit(1734815102.962:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39deb35d29 code=0x7ffc0000 [ 119.220000][ T29] audit: type=1326 audit(1734815102.962:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39deb35d29 code=0x7ffc0000 [ 119.243648][ T29] audit: type=1326 audit(1734815102.962:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39deb34690 code=0x7ffc0000 [ 119.247217][ T8606] loop4: detected capacity change from 0 to 512 [ 119.267428][ T29] audit: type=1326 audit(1734815102.962:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f39deb37557 code=0x7ffc0000 [ 119.275103][ T8606] EXT4-fs: Ignoring removed bh option [ 119.297394][ T29] audit: type=1326 audit(1734815102.962:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39deb35d29 code=0x7ffc0000 [ 119.326113][ T29] audit: type=1326 audit(1734815102.962:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f39deb37557 code=0x7ffc0000 [ 119.349716][ T29] audit: type=1326 audit(1734815102.962:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.4.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f39deb3498a code=0x7ffc0000 [ 119.351215][ T8606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.440990][ T8606] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.452278][ T8602] loop3: detected capacity change from 0 to 512 [ 119.460973][ T8602] EXT4-fs: Ignoring removed bh option [ 119.467676][ T8612] loop1: detected capacity change from 0 to 512 [ 119.476550][ T8602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.507051][ T8612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.574448][ T8602] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.585098][ T8612] EXT4-fs (loop1): 1 truncate cleaned up [ 119.600051][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1689'. [ 119.613305][ T8621] FAULT_INJECTION: forcing a failure. [ 119.613305][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 119.625959][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.4.1689 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 119.626811][ T8612] xt_TCPMSS: Only works on TCP SYN packets [ 119.636647][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 119.636665][ T8621] Call Trace: [ 119.636673][ T8621] [ 119.636681][ T8621] dump_stack_lvl+0xf2/0x150 [ 119.663524][ T8621] dump_stack+0x15/0x1a [ 119.667724][ T8621] should_fail_ex+0x223/0x230 [ 119.672427][ T8621] should_failslab+0x8f/0xb0 [ 119.677080][ T8621] kmem_cache_alloc_noprof+0x52/0x320 [ 119.682484][ T8621] ? skb_clone+0x154/0x1f0 [ 119.686922][ T8621] skb_clone+0x154/0x1f0 [ 119.691354][ T8621] __netlink_deliver_tap+0x2bd/0x4f0 [ 119.696747][ T8621] netlink_sendskb+0x126/0x150 [ 119.701566][ T8621] netlink_unicast+0x291/0x670 [ 119.706339][ T8621] netlink_ack+0x4bb/0x4f0 [ 119.710765][ T8621] netlink_rcv_skb+0x19c/0x230 [ 119.715594][ T8621] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 119.721288][ T8621] rtnetlink_rcv+0x1c/0x30 [ 119.725758][ T8621] netlink_unicast+0x599/0x670 [ 119.730566][ T8621] netlink_sendmsg+0x5cc/0x6e0 [ 119.735344][ T8621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.740639][ T8621] __sock_sendmsg+0x140/0x180 [ 119.745369][ T8621] ____sys_sendmsg+0x312/0x410 [ 119.750173][ T8621] __sys_sendmsg+0x19d/0x230 [ 119.754856][ T8621] __x64_sys_sendmsg+0x46/0x50 [ 119.759628][ T8621] x64_sys_call+0x2734/0x2dc0 [ 119.764317][ T8621] do_syscall_64+0xc9/0x1c0 [ 119.768837][ T8621] ? clear_bhb_loop+0x55/0xb0 [ 119.773545][ T8621] ? clear_bhb_loop+0x55/0xb0 [ 119.778270][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.784220][ T8621] RIP: 0033:0x7f39deb35d29 [ 119.788672][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.808386][ T8621] RSP: 002b:00007f39dd1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.816803][ T8621] RAX: ffffffffffffffda RBX: 00007f39ded25fa0 RCX: 00007f39deb35d29 [ 119.824843][ T8621] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 119.832926][ T8621] RBP: 00007f39dd1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.840942][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.848960][ T8621] R13: 0000000000000000 R14: 00007f39ded25fa0 R15: 00007ffdefc2dce8 [ 119.857006][ T8621] [ 119.906888][ T8624] loop5: detected capacity change from 0 to 1024 [ 119.917743][ T8626] xt_TCPMSS: Only works on TCP SYN packets [ 119.926310][ T8626] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 119.960679][ T8632] 9pnet_fd: Insufficient options for proto=fd [ 119.983520][ T8630] loop3: detected capacity change from 0 to 512 [ 120.029140][ T8640] loop1: detected capacity change from 0 to 128 [ 120.030465][ T8630] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.040557][ T8640] ext4: Unknown parameter 'hash' [ 120.083580][ T8647] loop4: detected capacity change from 0 to 1024 [ 120.196185][ T8656] loop5: detected capacity change from 0 to 512 [ 120.221613][ T8658] loop3: detected capacity change from 0 to 2048 [ 120.227150][ T8656] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.243782][ T8660] loop4: detected capacity change from 0 to 1024 [ 120.245565][ T8656] EXT4-fs (loop5): 1 truncate cleaned up [ 120.300878][ T8656] xt_TCPMSS: Only works on TCP SYN packets [ 120.362054][ T8671] loop5: detected capacity change from 0 to 1024 [ 120.392799][ T8675] xt_TCPMSS: Only works on TCP SYN packets [ 120.400065][ T8675] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 120.413072][ T8678] loop4: detected capacity change from 0 to 512 [ 120.440146][ T8678] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1707: bg 0: block 248: padding at end of block bitmap is not set [ 120.452357][ T8682] loop5: detected capacity change from 0 to 512 [ 120.466207][ T8678] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1707: Failed to acquire dquot type 1 [ 120.472707][ T8684] loop3: detected capacity change from 0 to 512 [ 120.479646][ T8678] EXT4-fs (loop4): 1 truncate cleaned up [ 120.491928][ T8678] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.509840][ T8682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1708: bg 0: block 248: padding at end of block bitmap is not set [ 120.530109][ T8684] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.531392][ T8682] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1708: Failed to acquire dquot type 1 [ 120.556568][ T8682] EXT4-fs (loop5): 1 truncate cleaned up [ 120.562838][ T8682] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.943516][ T8714] loop1: detected capacity change from 0 to 512 [ 120.956468][ T8714] EXT4-fs: Ignoring removed bh option [ 120.969851][ T8714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.014543][ T8714] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.253324][ T8720] loop1: detected capacity change from 0 to 512 [ 121.260971][ T8720] EXT4-fs: Ignoring removed bh option [ 121.274443][ T8720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.301393][ T8720] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.678382][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 121.946696][ T8744] loop5: detected capacity change from 0 to 512 [ 121.969992][ T8744] EXT4-fs: Ignoring removed bh option [ 121.992532][ T8744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.106560][ T8744] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.267447][ T8755] loop1: detected capacity change from 0 to 2048 [ 122.328998][ T8759] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 122.336779][ T8759] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1732'. [ 122.472778][ T8765] FAULT_INJECTION: forcing a failure. [ 122.472778][ T8765] name failslab, interval 1, probability 0, space 0, times 0 [ 122.485697][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.5.1735 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 122.496510][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.506589][ T8765] Call Trace: [ 122.509980][ T8765] [ 122.513003][ T8765] dump_stack_lvl+0xf2/0x150 [ 122.517690][ T8765] dump_stack+0x15/0x1a [ 122.521939][ T8765] should_fail_ex+0x223/0x230 [ 122.526669][ T8765] ? rtm_new_nexthop+0x1464/0x4ad0 [ 122.526738][ T8765] should_failslab+0x8f/0xb0 [ 122.526779][ T8765] __kmalloc_cache_noprof+0x4e/0x320 [ 122.526806][ T8765] rtm_new_nexthop+0x1464/0x4ad0 [ 122.526830][ T8765] ? memcg_list_lru_alloc+0xce/0x4e0 [ 122.526851][ T8765] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 122.526896][ T8765] ? security_capable+0x81/0x90 [ 122.562560][ T8765] ? ns_capable+0x7d/0xb0 [ 122.566981][ T8765] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 122.572284][ T8765] rtnetlink_rcv_msg+0x6aa/0x710 [ 122.577315][ T8765] ? ref_tracker_free+0x3a5/0x410 [ 122.582353][ T8765] ? __dev_queue_xmit+0x186/0x2090 [ 122.587494][ T8765] netlink_rcv_skb+0x12c/0x230 [ 122.592276][ T8765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 122.597863][ T8765] rtnetlink_rcv+0x1c/0x30 [ 122.602294][ T8765] netlink_unicast+0x599/0x670 [ 122.607103][ T8765] netlink_sendmsg+0x5cc/0x6e0 [ 122.611987][ T8765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.617334][ T8765] __sock_sendmsg+0x140/0x180 [ 122.622110][ T8765] ____sys_sendmsg+0x312/0x410 [ 122.626945][ T8765] __sys_sendmsg+0x19d/0x230 [ 122.631630][ T8765] __x64_sys_sendmsg+0x46/0x50 [ 122.636479][ T8765] x64_sys_call+0x2734/0x2dc0 [ 122.641234][ T8765] do_syscall_64+0xc9/0x1c0 [ 122.645796][ T8765] ? clear_bhb_loop+0x55/0xb0 [ 122.650479][ T8765] ? clear_bhb_loop+0x55/0xb0 [ 122.655164][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.661076][ T8765] RIP: 0033:0x7fe651805d29 [ 122.665495][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.685122][ T8765] RSP: 002b:00007fe64fe77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.693563][ T8765] RAX: ffffffffffffffda RBX: 00007fe6519f5fa0 RCX: 00007fe651805d29 [ 122.701540][ T8765] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 122.709515][ T8765] RBP: 00007fe64fe77090 R08: 0000000000000000 R09: 0000000000000000 [ 122.717570][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.725544][ T8765] R13: 0000000000000000 R14: 00007fe6519f5fa0 R15: 00007fff2c411618 [ 122.733543][ T8765] [ 122.780439][ T8772] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 122.822008][ T8780] loop3: detected capacity change from 0 to 512 [ 122.849723][ T8780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.870591][ T8784] loop1: detected capacity change from 0 to 1024 [ 122.896677][ T8780] EXT4-fs (loop3): 1 truncate cleaned up [ 122.911607][ T8782] loop2: detected capacity change from 0 to 512 [ 122.967343][ T8782] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.989330][ T8793] loop4: detected capacity change from 0 to 1024 [ 122.997290][ T8780] xt_TCPMSS: Only works on TCP SYN packets [ 123.018222][ T8780] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 123.029445][ T8796] netlink: 'syz.5.1745': attribute type 1 has an invalid length. [ 123.037239][ T8796] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1745'. [ 123.050519][ T8782] hub 6-0:1.0: USB hub found [ 123.050655][ T8793] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.066326][ T8782] hub 6-0:1.0: 8 ports detected [ 123.073458][ T8793] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 123.085924][ T8793] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.085924][ T8793] [ 123.095692][ T8793] EXT4-fs (loop4): Total free blocks count 0 [ 123.101739][ T8793] EXT4-fs (loop4): Free/Dirty block details [ 123.107685][ T8793] EXT4-fs (loop4): free_blocks=0 [ 123.112807][ T8793] EXT4-fs (loop4): dirty_blocks=0 [ 123.117895][ T8793] EXT4-fs (loop4): Block reservation details [ 123.123923][ T8793] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 123.144458][ T8808] loop5: detected capacity change from 0 to 512 [ 123.170585][ T8806] Process accounting resumed [ 123.186519][ T8808] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1748: bg 0: block 248: padding at end of block bitmap is not set [ 123.215258][ T8808] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1748: Failed to acquire dquot type 1 [ 123.230524][ T8817] loop4: detected capacity change from 0 to 1024 [ 123.245998][ T8808] EXT4-fs (loop5): 1 truncate cleaned up [ 123.252296][ T8808] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.272233][ T8817] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.285066][ T8817] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 123.296871][ T8817] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.304144][ T8817] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 123.318773][ T8817] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 123.326099][ T8817] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.1749: Freeing blocks not in datazone - block = 0, count = 4096 [ 123.358049][ T8817] EXT4-fs (loop4): Remounting filesystem read-only [ 123.365208][ T8817] EXT4-fs (loop4): 1 orphan inode deleted [ 123.371772][ T8817] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 123.386589][ T8824] loop2: detected capacity change from 0 to 1024 [ 123.455957][ T8829] loop4: detected capacity change from 0 to 512 [ 123.464991][ T8829] EXT4-fs: Ignoring removed bh option [ 123.471457][ T8829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.500696][ T8829] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.552821][ T8838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8838 comm=syz.4.1757 [ 123.565321][ T8838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8838 comm=syz.4.1757 [ 123.584880][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.591509][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.597942][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.605691][ T8836] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.607324][ T8839] loop3: detected capacity change from 0 to 512 [ 123.614748][ T8836] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.620739][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1757'. [ 123.646281][ T8839] EXT4-fs: Ignoring removed bh option [ 123.656223][ T8839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.664378][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.673661][ T8838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8838 comm=syz.4.1757 [ 123.687936][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.695748][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.703330][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.711239][ T8839] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.718561][ T8836] erspan0 speed is unknown, defaulting to 1000 [ 123.772001][ T8847] netlink: 'syz.4.1759': attribute type 1 has an invalid length. [ 123.779864][ T8847] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1759'. [ 123.899198][ T8853] loop4: detected capacity change from 0 to 1024 [ 123.931010][ T8852] loop2: detected capacity change from 0 to 512 [ 123.938809][ T8853] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.962985][ T8852] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.987400][ T8853] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 123.999749][ T8853] EXT4-fs (loop4): This should not happen!! Data will be lost [ 123.999749][ T8853] [ 124.009604][ T8853] EXT4-fs (loop4): Total free blocks count 0 [ 124.015755][ T8853] EXT4-fs (loop4): Free/Dirty block details [ 124.021746][ T8853] EXT4-fs (loop4): free_blocks=0 [ 124.026697][ T8853] EXT4-fs (loop4): dirty_blocks=0 [ 124.031764][ T8853] EXT4-fs (loop4): Block reservation details [ 124.037815][ T8853] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 124.045916][ T8859] loop5: detected capacity change from 0 to 512 [ 124.053397][ T8859] EXT4-fs: Ignoring removed bh option [ 124.070696][ T8859] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.083195][ T8852] hub 6-0:1.0: USB hub found [ 124.092438][ T8852] hub 6-0:1.0: 8 ports detected [ 124.101149][ T8862] loop1: detected capacity change from 0 to 164 [ 124.123453][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 124.123471][ T29] audit: type=1400 audit(1734815107.902:13832): avc: denied { create } for pid=8865 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.150941][ T29] audit: type=1400 audit(1734815107.932:13833): avc: denied { setopt } for pid=8865 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.152540][ T8859] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.170568][ T29] audit: type=1400 audit(1734815107.932:13834): avc: denied { bind } for pid=8865 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 124.200433][ T29] audit: type=1400 audit(1734815107.932:13835): avc: denied { connect } for pid=8865 comm="syz.4.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 124.228988][ T8852] Process accounting resumed [ 124.234067][ T29] audit: type=1400 audit(1734815108.002:13836): avc: denied { mount } for pid=8861 comm="syz.1.1763" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 124.262768][ T8871] loop3: detected capacity change from 0 to 1024 [ 124.271117][ T8862] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 124.289339][ T8862] syz.1.1763[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.289492][ T8862] syz.1.1763[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.314080][ T8875] loop4: detected capacity change from 0 to 2048 [ 124.341508][ T8862] syz.1.1763[8862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.347554][ T8879] loop2: detected capacity change from 0 to 512 [ 124.421874][ T8883] loop3: detected capacity change from 0 to 1024 [ 124.433007][ T8879] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.460157][ T29] audit: type=1400 audit(1734815108.232:13837): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 124.480515][ T29] audit: type=1326 audit(1734815108.232:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 124.526206][ T8879] EXT4-fs (loop2): 1 truncate cleaned up [ 124.529465][ T29] audit: type=1326 audit(1734815108.302:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.5.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 124.562061][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 124.573092][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 124.605723][ T8891] netlink: 'syz.4.1771': attribute type 1 has an invalid length. [ 124.613563][ T8891] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1771'. [ 124.617110][ T29] audit: type=1326 audit(1734815108.402:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 124.630960][ T8879] xt_TCPMSS: Only works on TCP SYN packets [ 124.655997][ T8879] netlink: 'syz.2.1767': attribute type 10 has an invalid length. [ 124.657944][ T8894] loop1: detected capacity change from 0 to 512 [ 124.663940][ T29] audit: type=1326 audit(1734815108.402:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8878 comm="syz.2.1767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65ae565d29 code=0x7ffc0000 [ 124.670484][ T8894] EXT4-fs: Ignoring removed bh option [ 124.699693][ T8894] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.725185][ T8897] loop5: detected capacity change from 0 to 512 [ 124.731867][ T8897] EXT4-fs: Ignoring removed oldalloc option [ 124.738069][ T8897] EXT4-fs: Ignoring removed orlov option [ 124.760919][ T8897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.773184][ T8897] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.779588][ T8897] EXT4-fs error (device loop5): ext4_quota_enable:7108: comm syz.5.1772: Bad quota inum: 783360, type: 0 [ 124.787941][ T8894] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.791822][ T8897] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-117, ino=783360). Please run e2fsck to fix. [ 124.816517][ T8897] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 124.904916][ T8906] loop4: detected capacity change from 0 to 512 [ 124.943313][ T8916] loop2: detected capacity change from 0 to 512 [ 124.945818][ T8906] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.967891][ T8916] EXT4-fs: Ignoring removed bh option [ 124.995121][ T8906] hub 6-0:1.0: USB hub found [ 125.000856][ T8906] hub 6-0:1.0: 8 ports detected [ 125.040006][ T8906] Process accounting resumed [ 125.078693][ T8916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.105831][ T8925] loop4: detected capacity change from 0 to 2048 [ 125.127268][ T8916] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.151078][ T8910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.193504][ T8910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.266559][ T8936] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 125.270897][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 125.274399][ T8936] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1786'. [ 125.289384][ T8937] loop2: detected capacity change from 0 to 512 [ 125.299930][ T8937] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 125.324948][ T8937] EXT4-fs (loop2): 1 truncate cleaned up [ 125.351147][ T8942] loop4: detected capacity change from 0 to 1024 [ 125.360356][ T8937] xt_TCPMSS: Only works on TCP SYN packets [ 125.368403][ T8937] netlink: 'syz.2.1784': attribute type 10 has an invalid length. [ 125.383733][ T8942] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.428085][ T8950] erspan0 speed is unknown, defaulting to 1000 [ 125.458793][ T8955] erspan0 speed is unknown, defaulting to 1000 [ 125.494138][ T8958] syz.2.1793[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.494226][ T8958] syz.2.1793[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.506047][ T8958] syz.2.1793[8958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.521036][ T8958] tmpfs: Unknown parameter '' [ 125.537280][ T8958] FAULT_INJECTION: forcing a failure. [ 125.537280][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.550390][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.2.1793 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 125.561099][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.569438][ T8963] loop1: detected capacity change from 0 to 2048 [ 125.571196][ T8958] Call Trace: [ 125.571206][ T8958] [ 125.571214][ T8958] dump_stack_lvl+0xf2/0x150 [ 125.588402][ T8958] dump_stack+0x15/0x1a [ 125.592612][ T8958] should_fail_ex+0x223/0x230 [ 125.597410][ T8958] should_fail+0xb/0x10 [ 125.601597][ T8958] should_fail_usercopy+0x1a/0x20 [ 125.606656][ T8958] copy_to_user_nofault+0x7d/0x110 [ 125.611879][ T8958] bpf_probe_write_user+0x80/0xc0 [ 125.616928][ T8958] bpf_prog_853ff409725e1ea5+0x44/0x48 [ 125.622440][ T8958] bpf_trace_run2+0x104/0x1d0 [ 125.627140][ T8958] ? vfs_parse_fs_string+0x9c/0xd0 [ 125.632304][ T8958] ? shmem_free_fc+0x56/0x60 [ 125.637051][ T8958] ? shmem_free_fc+0x56/0x60 [ 125.641651][ T8958] kfree+0x247/0x2f0 [ 125.645703][ T8958] shmem_free_fc+0x56/0x60 [ 125.650130][ T8958] ? __pfx_shmem_free_fc+0x10/0x10 [ 125.655311][ T8958] put_fs_context+0xc5/0x4f0 [ 125.659921][ T8958] do_new_mount+0x2b4/0x690 [ 125.664511][ T8958] path_mount+0x49b/0xb30 [ 125.668858][ T8958] __se_sys_mount+0x27c/0x2d0 [ 125.673556][ T8958] __x64_sys_mount+0x67/0x80 [ 125.678168][ T8958] x64_sys_call+0x2c84/0x2dc0 [ 125.682852][ T8958] do_syscall_64+0xc9/0x1c0 [ 125.687394][ T8958] ? clear_bhb_loop+0x55/0xb0 [ 125.692078][ T8958] ? clear_bhb_loop+0x55/0xb0 [ 125.696804][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.702725][ T8958] RIP: 0033:0x7f65ae565d29 [ 125.707145][ T8958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.726761][ T8958] RSP: 002b:00007f65acbd1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.735211][ T8958] RAX: ffffffffffffffda RBX: 00007f65ae755fa0 RCX: 00007f65ae565d29 [ 125.743186][ T8958] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000000000000 [ 125.751757][ T8958] RBP: 00007f65acbd1090 R08: 0000000020000180 R09: 0000000000000000 [ 125.759754][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.767737][ T8958] R13: 0000000000000000 R14: 00007f65ae755fa0 R15: 00007ffff43655e8 [ 125.775728][ T8958] [ 125.805137][ T8966] loop3: detected capacity change from 0 to 512 [ 125.812018][ T8966] EXT4-fs: Ignoring removed bh option [ 125.817955][ T8966] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.909828][ T8966] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.989664][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1797'. [ 126.089950][ T8977] loop5: detected capacity change from 0 to 512 [ 126.107575][ T8977] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.158900][ T8987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8987 comm=syz.4.1802 [ 126.171476][ T8987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8987 comm=syz.4.1802 [ 126.211820][ T8989] xt_NFQUEUE: number of total queues is 0 [ 126.247237][ T8977] hub 6-0:1.0: USB hub found [ 126.263543][ T8977] hub 6-0:1.0: 8 ports detected [ 126.288904][ T8994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1802'. [ 126.328462][ T8987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=8987 comm=syz.4.1802 [ 126.345107][ T8989] erspan0 speed is unknown, defaulting to 1000 [ 126.354692][ T8977] Process accounting resumed [ 126.406892][ T8998] loop5: detected capacity change from 0 to 512 [ 126.412373][ T8996] erspan0 speed is unknown, defaulting to 1000 [ 126.427966][ T8998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.464951][ T8998] EXT4-fs (loop5): 1 truncate cleaned up [ 126.627307][ T8998] xt_TCPMSS: Only works on TCP SYN packets [ 126.781400][ T9014] loop2: detected capacity change from 0 to 512 [ 126.849623][ T9014] EXT4-fs mount: 332 callbacks suppressed [ 126.849666][ T9014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.884237][ T9014] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.942762][ T9026] loop3: detected capacity change from 0 to 1024 [ 127.028837][ T9026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.050822][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.159280][ T9037] loop5: detected capacity change from 0 to 1024 [ 127.214567][ T9037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.237046][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.256426][ T9049] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 127.267344][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.364305][ T9060] loop4: detected capacity change from 0 to 512 [ 127.393390][ T9060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.402484][ T9064] loop3: detected capacity change from 0 to 512 [ 127.410164][ T9060] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.417766][ T9071] loop5: detected capacity change from 0 to 512 [ 127.431081][ T9064] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #32: comm syz.3.1830: iget: special inode unallocated [ 127.441268][ T9072] loop1: detected capacity change from 0 to 512 [ 127.444404][ T9071] EXT4-fs: Ignoring removed bh option [ 127.451286][ T9072] EXT4-fs: Ignoring removed bh option [ 127.461226][ T9071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.472030][ T9072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.480651][ T9064] EXT4-fs (loop3): Remounting filesystem read-only [ 127.487273][ T9064] EXT4-fs (loop3): no journal found [ 127.492665][ T9064] EXT4-fs (loop3): can't get journal size [ 127.505746][ T9064] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 127.515953][ T9072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.517604][ T9071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.538306][ T9072] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.542407][ T9071] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.551665][ T9064] EXT4-fs (loop3): failed to initialize system zone (-117) [ 127.583854][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.585657][ T9064] EXT4-fs (loop3): mount failed [ 127.602212][ T9064] FAULT_INJECTION: forcing a failure. [ 127.602212][ T9064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.615396][ T9064] CPU: 0 UID: 0 PID: 9064 Comm: syz.3.1830 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 127.626094][ T9064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.636298][ T9064] Call Trace: [ 127.639593][ T9064] [ 127.642585][ T9064] dump_stack_lvl+0xf2/0x150 [ 127.647239][ T9064] dump_stack+0x15/0x1a [ 127.651478][ T9064] should_fail_ex+0x223/0x230 [ 127.656240][ T9064] should_fail+0xb/0x10 [ 127.660418][ T9064] should_fail_usercopy+0x1a/0x20 [ 127.665542][ T9064] _copy_from_user+0x1e/0xb0 [ 127.670206][ T9064] bpf_obj_get_info_by_fd+0x2cd/0x1cb0 [ 127.675686][ T9064] ? kstrtoull+0x110/0x140 [ 127.680125][ T9064] ? kstrtouint+0x77/0xc0 [ 127.684468][ T9064] __sys_bpf+0x613/0x7a0 [ 127.688747][ T9064] __x64_sys_bpf+0x43/0x50 [ 127.693181][ T9064] x64_sys_call+0x2914/0x2dc0 [ 127.697879][ T9064] do_syscall_64+0xc9/0x1c0 [ 127.702386][ T9064] ? clear_bhb_loop+0x55/0xb0 [ 127.707185][ T9064] ? clear_bhb_loop+0x55/0xb0 [ 127.711900][ T9064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.717862][ T9064] RIP: 0033:0x7f027c7f5d29 [ 127.722288][ T9064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.741953][ T9064] RSP: 002b:00007f027ae67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.750448][ T9064] RAX: ffffffffffffffda RBX: 00007f027c9e5fa0 RCX: 00007f027c7f5d29 [ 127.758512][ T9064] RDX: 0000000000000010 RSI: 0000000020000340 RDI: 000000000000000f [ 127.766537][ T9064] RBP: 00007f027ae67090 R08: 0000000000000000 R09: 0000000000000000 [ 127.774524][ T9064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.782541][ T9064] R13: 0000000000000000 R14: 00007f027c9e5fa0 R15: 00007ffe346dad48 [ 127.790564][ T9064] [ 127.854172][ T9079] loop4: detected capacity change from 0 to 1024 [ 127.873789][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.889071][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.902676][ T9081] loop3: detected capacity change from 0 to 512 [ 127.909487][ T9079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.910369][ T9081] EXT4-fs: Ignoring removed bh option [ 127.942048][ T9081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.943825][ T9087] loop1: detected capacity change from 0 to 1024 [ 127.972434][ T9081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.985603][ T9081] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.989568][ T9087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.010395][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.048032][ T9097] loop4: detected capacity change from 0 to 1024 [ 128.055008][ T9097] EXT4-fs: Ignoring removed nobh option [ 128.060632][ T9097] EXT4-fs: Ignoring removed mblk_io_submit option [ 128.076378][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.093851][ T9097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.113299][ T9097] __nla_validate_parse: 4 callbacks suppressed [ 128.113317][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1836'. [ 128.128519][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 128.140166][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.176294][ T9097] bond1: entered promiscuous mode [ 128.181497][ T9097] bond1: entered allmulticast mode [ 128.228243][ T9097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.245614][ T9116] loop5: detected capacity change from 0 to 512 [ 128.261274][ T9117] loop3: detected capacity change from 0 to 512 [ 128.282688][ T9117] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #32: comm syz.3.1840: iget: special inode unallocated [ 128.295584][ T9117] EXT4-fs (loop3): Remounting filesystem read-only [ 128.302244][ T9117] EXT4-fs (loop3): no journal found [ 128.307479][ T9117] EXT4-fs (loop3): can't get journal size [ 128.369780][ T9115] loop1: detected capacity change from 0 to 512 [ 128.389646][ T9116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 128.402354][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.418942][ T9115] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.565302][ T9113] loop2: detected capacity change from 0 to 512 [ 128.597553][ T9113] EXT4-fs: Ignoring removed bh option [ 128.646091][ T9113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.808204][ T9117] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 128.828041][ T9117] EXT4-fs (loop3): failed to initialize system zone (-117) [ 128.858045][ T9117] EXT4-fs (loop3): mount failed [ 129.201204][ T9115] EXT4-fs (loop1): 1 truncate cleaned up [ 129.207074][ T9116] EXT4-fs (loop5): 1 truncate cleaned up [ 129.208392][ T9126] netlink: 'syz.4.1845': attribute type 10 has an invalid length. [ 129.213509][ T9115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.233123][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.240465][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.243718][ T9116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.250395][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.266751][ T9126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.274112][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.281201][ T9126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.285196][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 129.285212][ T29] audit: type=1326 audit(1734815113.062:14347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.290431][ T9126] team0: Port device bridge0 added [ 129.312449][ T9113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.330922][ T29] audit: type=1326 audit(1734815113.102:14348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.360607][ T29] audit: type=1326 audit(1734815113.102:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.384380][ T29] audit: type=1326 audit(1734815113.102:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.408215][ T29] audit: type=1326 audit(1734815113.102:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.417295][ T9113] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.431555][ T29] audit: type=1326 audit(1734815113.102:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.431651][ T29] audit: type=1326 audit(1734815113.102:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.431683][ T29] audit: type=1326 audit(1734815113.102:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f027c7f5d63 code=0x7ffc0000 [ 129.431723][ T29] audit: type=1326 audit(1734815113.102:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f027c7f5d63 code=0x7ffc0000 [ 129.431754][ T29] audit: type=1326 audit(1734815113.102:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9127 comm="syz.3.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 129.450038][ T9116] xt_TCPMSS: Only works on TCP SYN packets [ 129.634231][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.647990][ T9115] xt_TCPMSS: Only works on TCP SYN packets [ 129.677617][ T9136] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1847'. [ 129.711774][ T9137] loop4: detected capacity change from 0 to 256 [ 129.739442][ T9137] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.782006][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.822656][ T9137] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.838884][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.856307][ T9137] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1848'. [ 130.025986][ T9143] loop1: detected capacity change from 0 to 512 [ 130.036731][ T9143] EXT4-fs: Ignoring removed bh option [ 130.044350][ T9143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.061778][ T9143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.074643][ T9143] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.133958][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.318318][ T9167] loop3: detected capacity change from 0 to 512 [ 130.359835][ T9159] loop2: detected capacity change from 0 to 4096 [ 130.360303][ T9167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1860: bg 0: block 248: padding at end of block bitmap is not set [ 130.366497][ T9159] ext4: Unknown parameter 'euid<00000000000000000000' [ 130.390668][ T9167] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1860: Failed to acquire dquot type 1 [ 130.406799][ T9167] EXT4-fs (loop3): 1 truncate cleaned up [ 130.413031][ T9167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.420073][ T9159] nfs4: Bad value for 'source' [ 130.425804][ T9167] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.470840][ T9171] loop5: detected capacity change from 0 to 512 [ 130.483048][ T9171] EXT4-fs: Ignoring removed bh option [ 130.501656][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.517392][ T9171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.553906][ T9171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.555695][ T9180] loop2: detected capacity change from 0 to 1024 [ 130.567287][ T9171] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.582407][ T9183] loop3: detected capacity change from 0 to 512 [ 130.597907][ T9183] EXT4-fs: Ignoring removed bh option [ 130.604350][ T9183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.634102][ T9180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.645817][ T9183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.668767][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1864'. [ 130.668885][ T9183] ext4 filesystem being mounted at /402/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.690911][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.703685][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.796858][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.010176][ T9208] wireguard0: entered promiscuous mode [ 131.015708][ T9208] wireguard0: entered allmulticast mode [ 131.046809][ T9215] loop1: detected capacity change from 0 to 512 [ 131.085101][ T9206] wireguard0: entered promiscuous mode [ 131.090750][ T9206] wireguard0: entered allmulticast mode [ 131.097293][ T9215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.123048][ T9210] loop3: detected capacity change from 0 to 512 [ 131.132376][ T9210] EXT4-fs: Ignoring removed bh option [ 131.142495][ T9210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.143412][ T9215] EXT4-fs (loop1): 1 truncate cleaned up [ 131.157987][ T9215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.176442][ T9223] loop4: detected capacity change from 0 to 512 [ 131.187405][ T9223] EXT4-fs: Ignoring removed bh option [ 131.204886][ T9215] xt_TCPMSS: Only works on TCP SYN packets [ 131.207598][ T9226] loop5: detected capacity change from 0 to 512 [ 131.212052][ T9223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.237501][ T9223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.250284][ T9223] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.257917][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.273764][ T9210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.289764][ T9210] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.304601][ T9233] netlink: 'syz.2.1879': attribute type 1 has an invalid length. [ 131.312397][ T9233] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1879'. [ 131.326497][ T9226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.339123][ T9226] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.403449][ T9238] loop1: detected capacity change from 0 to 512 [ 131.410237][ T9238] EXT4-fs: Ignoring removed bh option [ 131.417259][ T9238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.429743][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.502756][ T9238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.549041][ T9238] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.577549][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.591531][ T9243] loop2: detected capacity change from 0 to 512 [ 131.601036][ T9243] EXT4-fs: Ignoring removed bh option [ 131.630793][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.640481][ T9243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.695366][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.733538][ T9254] loop4: detected capacity change from 0 to 512 [ 131.790181][ T9254] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1883: bg 0: block 248: padding at end of block bitmap is not set [ 131.805752][ T9254] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1883: Failed to acquire dquot type 1 [ 131.819758][ T9243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.833248][ T9254] EXT4-fs (loop4): 1 truncate cleaned up [ 131.833669][ T9254] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.833733][ T9254] ext4 filesystem being mounted at /392/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.866355][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.870236][ T9243] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.936911][ T9265] loop3: detected capacity change from 0 to 512 [ 131.956957][ T9265] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.988221][ T9265] EXT4-fs (loop3): 1 truncate cleaned up [ 132.002041][ T9265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.047395][ T9265] xt_TCPMSS: Only works on TCP SYN packets [ 132.105298][ T9269] loop5: detected capacity change from 0 to 2048 [ 132.109009][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.130101][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.141080][ T9269] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.161383][ T9273] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 132.169247][ T9273] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1890'. [ 132.200989][ T9276] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 132.208794][ T9276] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1891'. [ 132.220486][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.312291][ T9281] loop3: detected capacity change from 0 to 512 [ 132.321138][ T9281] EXT4-fs: Ignoring removed bh option [ 132.330656][ T9286] loop5: detected capacity change from 0 to 512 [ 132.334734][ T9287] loop2: detected capacity change from 0 to 512 [ 132.339234][ T9281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.352519][ T9287] EXT4-fs: Ignoring removed bh option [ 132.360612][ T9287] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.382262][ T9286] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.395278][ T9287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.400626][ T9281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.409638][ T9286] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.424456][ T9281] ext4 filesystem being mounted at /409/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.433296][ T9287] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.492250][ T9282] Process accounting resumed [ 132.510054][ T4167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.590100][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.639600][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.681430][ T9305] loop3: detected capacity change from 0 to 512 [ 132.713796][ T9309] loop5: detected capacity change from 0 to 512 [ 132.726879][ T9305] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1897: bg 0: block 248: padding at end of block bitmap is not set [ 132.751550][ T9314] loop2: detected capacity change from 0 to 512 [ 132.787078][ T9314] EXT4-fs: Ignoring removed bh option [ 132.795400][ T9309] EXT4-fs: Ignoring removed bh option [ 132.809734][ T9305] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1897: Failed to acquire dquot type 1 [ 132.825153][ T9314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.827812][ T9317] loop4: detected capacity change from 0 to 512 [ 132.840551][ T9305] EXT4-fs (loop3): 1 truncate cleaned up [ 132.846583][ T9305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.865389][ T9309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.881504][ T9305] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.894364][ T9317] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.909521][ T9317] EXT4-fs (loop4): mount failed [ 132.915645][ T9314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.928270][ T9314] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.970783][ T9326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9326 comm=syz.1.1905 [ 132.972656][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.983473][ T9326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9326 comm=syz.1.1905 [ 132.992403][ T9326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1905'. [ 132.992512][ T9326] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=9326 comm=syz.1.1905 [ 133.006160][ T9309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.039323][ T9309] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.088383][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1900'. [ 133.125396][ T9333] loop1: detected capacity change from 0 to 2048 [ 133.160005][ T9335] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 133.168020][ T9335] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1909'. [ 133.261650][ T9351] loop5: detected capacity change from 0 to 512 [ 133.282034][ T9351] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.343729][ T9337] loop2: detected capacity change from 0 to 512 [ 133.354233][ T9337] EXT4-fs: Ignoring removed bh option [ 133.362872][ T9337] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.376566][ T9359] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 133.413432][ T9363] loop3: detected capacity change from 0 to 512 [ 133.483075][ T9337] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.503704][ T9363] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.569032][ T9370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9370 comm=syz.5.1918 [ 133.581594][ T9370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9370 comm=syz.5.1918 [ 133.629841][ T9370] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1918'. [ 133.655768][ T9370] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=9370 comm=syz.5.1918 [ 133.697220][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 133.792261][ T9384] netlink: 'syz.3.1924': attribute type 1 has an invalid length. [ 133.800193][ T9384] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1924'. [ 133.852897][ T9391] loop2: detected capacity change from 0 to 512 [ 133.867215][ T9389] loop1: detected capacity change from 0 to 512 [ 133.887092][ T9391] EXT4-fs: Ignoring removed bh option [ 133.909449][ T9391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.923286][ T9389] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.982216][ T9391] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.003859][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'. [ 134.089585][ T9403] loop4: detected capacity change from 0 to 512 [ 134.102388][ T9403] EXT4-fs: Ignoring removed bh option [ 134.128783][ T9403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.147200][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 134.190288][ T9403] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.204825][ T9417] loop1: detected capacity change from 0 to 512 [ 134.216855][ T9417] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.235930][ T9417] EXT4-fs (loop1): 1 truncate cleaned up [ 134.237113][ T9420] syz.3.1935[9420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.244070][ T9420] syz.3.1935[9420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.255515][ T9420] syz.3.1935[9420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.298028][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 134.298046][ T29] audit: type=1326 audit(1734815118.072:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6395d29 code=0x7ffc0000 [ 134.299731][ T9417] xt_TCPMSS: Only works on TCP SYN packets [ 134.309628][ T29] audit: type=1326 audit(1734815118.092:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="syz.1.1934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d6395d29 code=0x7ffc0000 [ 134.378566][ T29] audit: type=1400 audit(1734815118.152:15121): avc: denied { ioctl } for pid=9419 comm="+}[@" path="socket:[23273]" dev="sockfs" ino=23273 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 134.403957][ T29] audit: type=1326 audit(1734815118.152:15122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 134.427569][ T29] audit: type=1326 audit(1734815118.152:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 134.437007][ T9429] erspan0 speed is unknown, defaulting to 1000 [ 134.451182][ T29] audit: type=1326 audit(1734815118.152:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 134.493583][ T29] audit: type=1326 audit(1734815118.162:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe651804690 code=0x7ffc0000 [ 134.517224][ T29] audit: type=1326 audit(1734815118.162:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe651807557 code=0x7ffc0000 [ 134.541069][ T29] audit: type=1326 audit(1734815118.162:15127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe651805d29 code=0x7ffc0000 [ 134.564486][ T29] audit: type=1326 audit(1734815118.162:15128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9428 comm="syz.5.1938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe651807557 code=0x7ffc0000 [ 134.625710][ T9437] loop1: detected capacity change from 0 to 512 [ 134.652320][ T9440] loop2: detected capacity change from 0 to 512 [ 134.672402][ T9437] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 134.680727][ T9433] loop4: detected capacity change from 0 to 4096 [ 134.699352][ T9433] ext4: Unknown parameter 'euid<00000000000000000000' [ 134.709546][ T9437] EXT4-fs (loop1): 1 truncate cleaned up [ 134.715742][ T9445] loop3: detected capacity change from 0 to 512 [ 134.728007][ T9440] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.728293][ T9445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 134.758508][ T9440] EXT4-fs (loop2): 1 truncate cleaned up [ 134.767628][ T9433] nfs4: Bad value for 'source' [ 134.776773][ T9445] EXT4-fs (loop3): 1 truncate cleaned up [ 134.800840][ T9437] xt_TCPMSS: Only works on TCP SYN packets [ 134.828572][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 134.867213][ T9440] xt_TCPMSS: Only works on TCP SYN packets [ 134.909289][ T9456] loop5: detected capacity change from 0 to 512 [ 134.921111][ T9445] xt_TCPMSS: Only works on TCP SYN packets [ 134.943007][ T9456] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.980651][ T9464] loop3: detected capacity change from 0 to 164 [ 135.009530][ T9468] loop4: detected capacity change from 0 to 2048 [ 135.057023][ T9470] netlink: 'syz.2.1953': attribute type 2 has an invalid length. [ 135.091737][ T9477] loop3: detected capacity change from 0 to 1024 [ 135.120897][ T9481] loop2: detected capacity change from 0 to 512 [ 135.127830][ T9481] EXT4-fs: Ignoring removed bh option [ 135.137378][ T9481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.148376][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 135.167580][ T9481] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.178008][ T9479] loop1: detected capacity change from 0 to 512 [ 135.218776][ T9493] sctp: [Deprecated]: syz.3.1959 (pid 9493) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.218776][ T9493] Use struct sctp_sack_info instead [ 135.229530][ T9479] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.280969][ T9479] hub 6-0:1.0: USB hub found [ 135.287609][ T9479] hub 6-0:1.0: 8 ports detected [ 135.313004][ T9498] xt_hashlimit: max too large, truncated to 1048576 [ 135.364546][ T9479] Process accounting resumed [ 135.427799][ T9504] loop2: detected capacity change from 0 to 128 [ 135.440494][ T9504] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 135.452831][ T9511] loop4: detected capacity change from 0 to 512 [ 135.488533][ T9511] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 135.496744][ T9511] System zones: 0-2, 18-18, 34-34 [ 135.503320][ T9511] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1961: bg 0: block 248: padding at end of block bitmap is not set [ 135.545192][ T9519] loop3: detected capacity change from 0 to 512 [ 135.547807][ T9511] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1961: Failed to acquire dquot type 1 [ 135.563372][ T9511] EXT4-fs (loop4): 1 truncate cleaned up [ 135.569612][ T9511] ext4 filesystem being mounted at /405/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.585761][ T9519] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1970: bg 0: block 248: padding at end of block bitmap is not set [ 135.604698][ T9517] loop1: detected capacity change from 0 to 512 [ 135.616741][ T9517] EXT4-fs: Ignoring removed bh option [ 135.625637][ T9517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.635912][ T9519] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1970: Failed to acquire dquot type 1 [ 135.649435][ T9519] EXT4-fs (loop3): 1 truncate cleaned up [ 135.655428][ T9519] ext4 filesystem being mounted at /430/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.673123][ T9517] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.725154][ T9530] loop2: detected capacity change from 0 to 512 [ 135.780562][ T9535] loop3: detected capacity change from 0 to 512 [ 135.795430][ T9530] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.805806][ T9535] EXT4-fs: Ignoring removed bh option [ 135.813785][ T9535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.828020][ T9530] EXT4-fs (loop2): 1 truncate cleaned up [ 135.853446][ T9535] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.913672][ T9530] xt_TCPMSS: Only works on TCP SYN packets [ 136.020431][ T9553] loop1: detected capacity change from 0 to 128 [ 136.020497][ T9552] loop5: detected capacity change from 0 to 512 [ 136.030174][ T9553] FAT-fs (loop1): Invalid FSINFO signature: 0x41800000, 0x61417272 (sector = 1) [ 136.057967][ T9552] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.063805][ T9554] loop2: detected capacity change from 0 to 512 [ 136.077487][ T9552] EXT4-fs (loop5): 1 truncate cleaned up [ 136.123388][ T9558] loop1: detected capacity change from 0 to 512 [ 136.158250][ T9554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.180866][ T9552] xt_TCPMSS: Only works on TCP SYN packets [ 136.205605][ T9558] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1984: bg 0: block 248: padding at end of block bitmap is not set [ 136.226993][ T9554] EXT4-fs (loop2): 1 truncate cleaned up [ 136.228693][ T9558] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1984: Failed to acquire dquot type 1 [ 136.309405][ T9554] xt_TCPMSS: Only works on TCP SYN packets [ 136.321239][ T9554] netlink: 'syz.2.1983': attribute type 10 has an invalid length. [ 136.338738][ T9558] EXT4-fs (loop1): 1 truncate cleaned up [ 136.344850][ T9558] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.426593][ T9577] loop2: detected capacity change from 0 to 1024 [ 136.483590][ T9573] loop3: detected capacity change from 0 to 512 [ 136.497913][ T9587] loop5: detected capacity change from 0 to 128 [ 136.512965][ T9587] loop5: detected capacity change from 0 to 512 [ 136.519990][ T9589] loop1: detected capacity change from 0 to 512 [ 136.526595][ T9589] EXT4-fs: Ignoring removed bh option [ 136.530475][ T9573] EXT4-fs: Ignoring removed bh option [ 136.542962][ T9589] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.543606][ T9573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.558390][ T9587] EXT4-fs: Ignoring removed orlov option [ 136.568504][ T9587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.590161][ T9589] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.590937][ T9591] loop2: detected capacity change from 0 to 512 [ 136.615993][ T9587] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.646322][ T9573] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.702169][ T9591] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.756898][ T9591] hub 6-0:1.0: USB hub found [ 136.775291][ T9591] hub 6-0:1.0: 8 ports detected [ 136.820605][ T9590] Process accounting resumed [ 136.874554][ T9587] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1996: bg 0: block 255: padding at end of block bitmap is not set [ 136.877696][ T9607] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 136.896645][ T9607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1999'. [ 136.910170][ T9587] EXT4-fs (loop5): Remounting filesystem read-only [ 136.919353][ T9587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 136.939121][ T9587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 136.974678][ T9615] loop1: detected capacity change from 0 to 512 [ 136.981506][ T9615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.996724][ T9615] EXT4-fs (loop1): 1 truncate cleaned up [ 137.007289][ T9615] xt_TCPMSS: Only works on TCP SYN packets [ 137.007731][ T9613] erspan0 speed is unknown, defaulting to 1000 [ 137.014441][ T9615] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 137.125316][ T9625] loop3: detected capacity change from 0 to 1024 [ 137.197863][ T9635] loop5: detected capacity change from 0 to 512 [ 137.209735][ T9635] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 137.233748][ T9635] EXT4-fs (loop5): 1 truncate cleaned up [ 137.244543][ T9637] macvlan1: entered promiscuous mode [ 137.272369][ T9637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'. [ 137.287715][ T9635] xt_TCPMSS: Only works on TCP SYN packets [ 137.316537][ T9637] macvlan1 (unregistering): left promiscuous mode [ 137.325041][ T9631] loop2: detected capacity change from 0 to 512 [ 137.327459][ T9646] loop3: detected capacity change from 0 to 512 [ 137.336117][ T9631] EXT4-fs: Ignoring removed bh option [ 137.347773][ T9646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.366155][ T9646] EXT4-fs (loop3): 1 truncate cleaned up [ 137.372417][ T9631] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 137.388366][ T9646] xt_TCPMSS: Only works on TCP SYN packets [ 137.395235][ T9646] netlink: 'syz.3.2014': attribute type 10 has an invalid length. [ 137.455149][ T9631] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.483643][ T9656] loop5: detected capacity change from 0 to 128 [ 137.517071][ T9656] ext4 filesystem being mounted at /345/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.622360][ T9667] loop3: detected capacity change from 0 to 512 [ 137.637233][ T9665] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 137.671802][ T9671] loop4: detected capacity change from 0 to 1024 [ 137.678290][ T9667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.745262][ T9667] EXT4-fs (loop3): 1 truncate cleaned up [ 137.768279][ T9667] xt_TCPMSS: Only works on TCP SYN packets [ 137.889329][ T9687] loop2: detected capacity change from 0 to 512 [ 137.905818][ T9689] loop4: detected capacity change from 0 to 128 [ 137.919592][ T9687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.940795][ T9680] loop3: detected capacity change from 0 to 4096 [ 137.947368][ T9680] ext4: Unknown parameter 'euid<00000000000000000000' [ 137.956080][ T9680] nfs4: Bad value for 'source' [ 137.956613][ T9687] EXT4-fs (loop2): 1 truncate cleaned up [ 137.983283][ T9689] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.065095][ T9687] netlink: 'syz.2.2026': attribute type 10 has an invalid length. [ 138.168086][ T9702] loop3: detected capacity change from 0 to 512 [ 138.186831][ T9702] EXT4-fs: Ignoring removed bh option [ 138.197010][ T9702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.232034][ T9702] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.238729][ T9705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9705 comm=syz.2.2034 [ 138.255081][ T9705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9705 comm=syz.2.2034 [ 138.282658][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2034'. [ 138.308592][ T9705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=9705 comm=syz.2.2034 [ 138.351114][ T9711] loop2: detected capacity change from 0 to 1024 [ 138.468769][ T9717] loop1: detected capacity change from 0 to 512 [ 138.599430][ T9717] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.611970][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.620412][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.761207][ T9723] loop5: detected capacity change from 0 to 2048 [ 138.795279][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 138.806220][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2042'. [ 138.815167][ T9729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 138.817598][ T9733] syz.3.2041[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.826645][ T9729] bridge0: entered promiscuous mode [ 138.832219][ T9733] syz.3.2041[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.838221][ T9729] macsec0: entered promiscuous mode [ 138.861488][ T9733] syz.3.2041[9733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.933449][ T9741] loop2: detected capacity change from 0 to 1024 [ 138.935902][ T9745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 139.000495][ T9749] IPVS: set_ctl: invalid protocol: 135 172.30.255.4:0 [ 139.035467][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 139.064793][ T9747] loop4: detected capacity change from 0 to 512 [ 139.074214][ T9747] EXT4-fs: Ignoring removed bh option [ 139.081208][ T8150] ================================================================== [ 139.089325][ T8150] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 139.096758][ T8150] [ 139.099105][ T8150] write to 0xffff888100631d2e of 1 bytes by task 9747 on cpu 0: [ 139.106750][ T8150] set_blocksize+0x218/0x270 [ 139.111364][ T8150] sb_min_blocksize+0x63/0xe0 [ 139.116059][ T8150] ext4_fill_super+0x38b/0x3a10 [ 139.121019][ T8150] get_tree_bdev_flags+0x29f/0x310 [ 139.126153][ T8150] get_tree_bdev+0x1f/0x30 [ 139.130596][ T8150] ext4_get_tree+0x1c/0x30 [ 139.135043][ T8150] vfs_get_tree+0x56/0x1e0 [ 139.139489][ T8150] do_new_mount+0x227/0x690 [ 139.144022][ T8150] path_mount+0x49b/0xb30 [ 139.148377][ T8150] __se_sys_mount+0x27c/0x2d0 [ 139.153082][ T8150] __x64_sys_mount+0x67/0x80 [ 139.157713][ T8150] x64_sys_call+0x2c84/0x2dc0 [ 139.162422][ T8150] do_syscall_64+0xc9/0x1c0 [ 139.166952][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.172894][ T8150] [ 139.175230][ T8150] read to 0xffff888100631d2e of 1 bytes by task 8150 on cpu 1: [ 139.182793][ T8150] do_mpage_readpage+0x55/0xcb0 [ 139.187683][ T8150] mpage_readahead+0x1ad/0x2d0 [ 139.192483][ T8150] blkdev_readahead+0x1c/0x30 [ 139.197188][ T8150] read_pages+0xa0/0x540 [ 139.201447][ T8150] page_cache_ra_unbounded+0x2b8/0x310 [ 139.206923][ T8150] page_cache_sync_ra+0x252/0x670 [ 139.211965][ T8150] filemap_get_pages+0x2c1/0x10e0 [ 139.217024][ T8150] filemap_read+0x221/0x6a0 [ 139.221560][ T8150] blkdev_read_iter+0x20e/0x2c0 [ 139.226460][ T8150] vfs_read+0x5dc/0x700 [ 139.230651][ T8150] ksys_read+0xe8/0x1b0 [ 139.234842][ T8150] __x64_sys_read+0x42/0x50 [ 139.239392][ T8150] x64_sys_call+0x2874/0x2dc0 [ 139.244101][ T8150] do_syscall_64+0xc9/0x1c0 [ 139.248648][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.254589][ T8150] [ 139.256919][ T8150] value changed: 0x0c -> 0x0a [ 139.261600][ T8150] [ 139.263952][ T8150] Reported by Kernel Concurrency Sanitizer on: [ 139.270123][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: udevd Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 139.280387][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.290466][ T8150] ================================================================== [ 139.302757][ T29] kauditd_printk_skb: 1286 callbacks suppressed [ 139.302836][ T29] audit: type=1326 audit(1734815123.082:16405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.309345][ T9747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.351060][ T29] audit: type=1326 audit(1734815123.132:16406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.374788][ T29] audit: type=1326 audit(1734815123.132:16407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.398340][ T29] audit: type=1326 audit(1734815123.132:16408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.421980][ T29] audit: type=1326 audit(1734815123.132:16409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.445489][ T29] audit: type=1326 audit(1734815123.132:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.450849][ T9747] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.469000][ T29] audit: type=1326 audit(1734815123.132:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.469037][ T29] audit: type=1326 audit(1734815123.132:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000 [ 139.469068][ T29] audit: type=1326 audit(1734815123.132:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.3.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027c7f5d29 code=0x7ffc0000