last executing test programs: 30m21.258473453s ago: executing program 32 (id=63): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000fc0)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001, 0x2}) 30m21.251657723s ago: executing program 33 (id=64): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 30m11.092420385s ago: executing program 34 (id=126): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10048, 0xc8, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000c76d000000000000008100000081"], 0x48) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x15) 30m8.186782719s ago: executing program 35 (id=145): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 30m1.974038493s ago: executing program 7 (id=193): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001a00010000000000ffdbdf25022000000000000b"], 0x50}}, 0x0) 30m1.890582024s ago: executing program 7 (id=195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x60, 0x9, 0xa, '\b\x00', "af851e2b"}}, 0x0}, 0x0) 30m1.128272126s ago: executing program 7 (id=199): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="0001dc000000dc0ef9d9855d539b05fb0f4526eb9263e5d04046bd6e16e4b2368edc6907"], 0x0, 0x0, 0x0, 0x0}, 0x0) 30m0.034733112s ago: executing program 7 (id=207): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 29m59.929702534s ago: executing program 7 (id=210): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000040)={[{@prjquota}, {@resuid}, {@data_err_ignore}, {@norecovery}]}, 0x3, 0x4e4, &(0x7f0000001080)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @loopback, 0x6}, 0x1c) write(r0, &(0x7f0000000200)="89", 0xffe3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setuid(0xee01) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) getsockopt$sock_buf(r1, 0x1, 0xa, 0xffffffffffffffff, 0x0) 29m59.782685656s ago: executing program 0 (id=213): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pselect6(0x40, &(0x7f0000000540)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(0x0, 0x60840, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 29m58.968427598s ago: executing program 0 (id=218): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x28}}], 0x2, 0x4) 29m58.87481907s ago: executing program 0 (id=219): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mlockall(0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socket$inet6(0xa, 0x800000000000002, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 29m58.782258201s ago: executing program 0 (id=220): socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 29m58.781768631s ago: executing program 0 (id=221): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 29m58.566459614s ago: executing program 0 (id=223): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414"], 0xfdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e010000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 29m58.546871044s ago: executing program 36 (id=223): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414"], 0xfdef) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e010000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 29m58.17633668s ago: executing program 7 (id=226): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 29m58.1703439s ago: executing program 37 (id=226): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) epoll_create1(0x0) socket(0x1, 0x80802, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000440), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x2, 0x8000, r2, 0x0, 0x0, 0x0, 0x0, 0x1}]) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 27m32.859081727s ago: executing program 8 (id=3438): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10002, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c4000000190001000000000000000000fe8000"/30], 0xc4}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff3f7e, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27m31.735067454s ago: executing program 8 (id=3443): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='rxrpc_local\x00', r1, 0x0, 0x200fffe}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 27m31.550652977s ago: executing program 8 (id=3444): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x400, 0x1}) io_uring_enter(r0, 0x0, 0xf2fb, 0xa, 0x0, 0x0) 27m31.532843968s ago: executing program 8 (id=3445): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$eJzs3c1vHGcZAPBnxrvBaVzsAodSqR+iQUkF2Y1r2loc2iIQt0qgcg+WvbGsrLORd93GVoUc8QcgIQSVOHHigsSNCxLqn4CQKtE7AgRCkMKBAzBoZmdTZztrO+p+JPbvJ72777yzO8/zbryz73xkJoAz67mIeD0i5iLihYhYLNvTssRBv+Sv+/DuO+t5yZvf/HsSSdkWUVTvuVC+bb7/VKm7t39jrd1u7ZTTzd72rWZ3b//K1vbaZmuzdXNlZfnl1VdWX1q9OpZ+5v169Rt//vEPfv7NV3/z5bf/cO2vl7+XJ/31cv6gX+NTfHrxQfFYzz+Le2oRsTPeYDMzV/anPutEAAA4kXyU+pmI+EIx/l+MuWI0Vxge0s1PPzsAAABgHLLXFuI/SUQGAAAAnFqvRcRCJGmjPBdgIdK00eifw/u5eCxtd7q9L13v7N7cyOdFLEU9vb7Vbl0tz6ldinqSTy8X9Y+mXxyaXomIJyLiR4vni+nGeqe9MeudHwAAAHBGXBja/v/XYn/7HwAAADhllmadAAAAADBxo7b/kynnAQAAAEyO4/8AAABwqn3rjTfykg3uf73x1t7ujc5bVzZa3RuN7d31xnpn51Zjs9PZLK7Zt33UsuoR0e50bn0lYvd2s9fq9prdvf1r253dm71rW+4fCAAAALPyxLPvfZBExMFXzxcldy5/mBvxBucKwKmRPsiL/zS5PIDpG/UzfwLnxpkHMH21WScAzM7BrBMAZu2+S31UDAoOn7xz3z6D304uJwAAYLwufb76+H+tPJ//CPb/wyPu8La8YwFwtnyC4//AI85vPpxd9QcaAdyZYCbArBx3q4+RF++oOv5fuWcwy45dFgAAMFELRXk2bZTHAhciTRuNiMeL/+pfT65vtVtXI+LTEfH7xfqn8unl4p2J2wMCAAAAAAAAAAAAAAAAAAAAAAAAwAllWRIZAAAAcKpFpH9Jyvt/XVq8uDC8f+Bc8u/FKG/p9fZP3/zJ7bVeb2c5b//Hvfbeu2X7i7PYgwEAAABnUe3IuYPt9MF2PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM04d331kflGnG/dvXImKpKn4t5ovn+ahHxGP/TKJ26H1JRMyNIf7BnYh4sip+kqcVS2UWw/HTiDg/nfhPZ1lWGf/CGOLDWfZevv55ver7l8ZzxXP1979Wlk/qvvXfuV8dmpPeW//NjVj/PX7CGE+9/8vmyPh3Ip6qVa9/BvGTEfGfr1pgxYfy3e/s73+ssb/wyH4Wcany9ye5L1azt32r2d3bv7K1vbbZ2mzdXFlZfnn1ldWXVq82r2+1W+VjZR9/+PSv/zfU9N+sr+h/jIi/dEz/L+aV+qHGbDhMGez923c/26/WhxZRxL/8fPXf35NHxM//Jr5Y/g7k8y8N6gf9+mHP/OJ3z1QmVsbfGNH/4/79L49a6JAXvv39P57wpQDAFHT39m+stdutnYlX3s2ybFqxTl6J9KQvLoaLU/3EplsZjO4mFmL+YenplCsXH440HqQyjj1bAADAw+ajQf+sMwEAAAAAAAAAAAAAAAAAAICzq7sX6aQvJzYc82A2XQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONL/AwAA///zaNkr") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001480)='./file0/../file0/../file0/../file0\x00') 27m31.109051713s ago: executing program 8 (id=3450): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) 27m25.809651193s ago: executing program 8 (id=3490): r0 = syz_open_procfs(0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) pread64(r0, &(0x7f0000000080)=""/220, 0xdc, 0x4009) 27m25.790385314s ago: executing program 38 (id=3490): r0 = syz_open_procfs(0x0, 0x0) read(r0, &(0x7f0000001180)=""/4096, 0x1000) pread64(r0, &(0x7f0000000080)=""/220, 0xdc, 0x4009) 27m2.78508192s ago: executing program 3 (id=3720): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000300)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlate}, {@fat=@usefree}, {@numtail}, {@utf8no}, {@uni_xlateno}]}, 0x1, 0x362, &(0x7f0000000900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 27m2.621492862s ago: executing program 3 (id=3725): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20048880, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x10) 27m2.550616013s ago: executing program 3 (id=3726): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 27m1.610760658s ago: executing program 3 (id=3734): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet6(0xa, 0x80000, 0x5) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 27m0.692863882s ago: executing program 3 (id=3748): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) open(&(0x7f0000000180)='./file1\x00', 0x1c927e, 0x30) 27m0.574644063s ago: executing program 3 (id=3750): syz_read_part_table(0x107a, &(0x7f0000001080)="$eJzs0L1Nw2AQBuDXiX/yUSDGYQlalkCU9JmDVViCVSiQKCIOfY5BYgBI8zzFa92dTz45XNRLS+aqmrPkVPk4JJmTto2fr9ZHz2nJMpy7U3JMevHwnqTqdd+zahiSVvd3j7un2+TUW+f3Mk49b8Zcrwvj25T0b+1/LpnXHL/L3a8zh2Mf9d1Dy3ZF2uef/hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DdfAQAA//8WARz8") 26m44.083571671s ago: executing program 39 (id=3750): syz_read_part_table(0x107a, &(0x7f0000001080)="$eJzs0L1Nw2AQBuDXiX/yUSDGYQlalkCU9JmDVViCVSiQKCIOfY5BYgBI8zzFa92dTz45XNRLS+aqmrPkVPk4JJmTto2fr9ZHz2nJMpy7U3JMevHwnqTqdd+zahiSVvd3j7un2+TUW+f3Mk49b8Zcrwvj25T0b+1/LpnXHL/L3a8zh2Mf9d1Dy3ZF2uef/hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DdfAQAA//8WARz8") 11m44.126684062s ago: executing program 4 (id=16294): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x16b, 0x1, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x88, 0x3, 0x0, 0x0, "ae771949a0cb35d4"}}, 0x48}}, 0x0) 11m44.030824763s ago: executing program 4 (id=16297): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000a4e84e0104000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000005002100080000000800168004000180140003007465616d3000"/44], 0x44}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) open(0x0, 0x66842, 0x21) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x40047211, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 11m43.674659988s ago: executing program 4 (id=16298): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c280000700030004"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r7 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) 11m43.499569991s ago: executing program 4 (id=16301): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m43.310102504s ago: executing program 4 (id=16302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 11m42.806801851s ago: executing program 4 (id=16310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x40}, 0x1, 0x0, 0x0, 0xc40}, 0x4000010) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x1500, 0x5dd8, 0x7fffffff, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) close_range(r1, 0xffffffffffffffff, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x7) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11m26.538678266s ago: executing program 40 (id=16310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x40}, 0x1, 0x0, 0x0, 0xc40}, 0x4000010) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}, 0x1500, 0x5dd8, 0x7fffffff, 0x8, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) close_range(r1, 0xffffffffffffffff, 0x2) r7 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x7) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.243011887s ago: executing program 5 (id=27495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.242216107s ago: executing program 5 (id=27496): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e0"], 0x48) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000038dbc39501000000000000000c41000000030014"], 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x4, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20) 2.130594009s ago: executing program 1 (id=27531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.089203689s ago: executing program 1 (id=27533): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") 2.06613863s ago: executing program 1 (id=27534): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@random={'security.', 'kfree\x00'}) 2.0281826s ago: executing program 1 (id=27535): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 1.957159421s ago: executing program 1 (id=27536): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@i_version}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pivot_root(0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00100000']) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x8000, 0xffffff65, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x65, 0x0, 0x80, 0x29, 0x0, @empty, @private=0xa010101, {[@rr={0x7, 0xb, 0x3e, [@dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010102]}]}}}}}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 1.794719864s ago: executing program 1 (id=27537): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e0"], 0x48) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000038dbc39501000000000000000c41000000030014"], 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r6, 0x0, 0x4, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20) 1.469176178s ago: executing program 9 (id=27540): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x61801680, 0x0, 0x1f, 0x0, 0x0, 0x0) unshare(0x40020000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fstat(r2, &(0x7f0000000840)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) 1.185058793s ago: executing program 9 (id=27543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = gettid() r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) perf_event_open(0x0, r1, 0xfffffffffffdffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) syz_io_uring_setup(0x507, &(0x7f0000000140)={0x0, 0x1184, 0x80, 0x0, 0x45}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, 0x0) waitid$P_PIDFD(0x3, r9, 0x0, 0x4, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r13, &(0x7f0000000100)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) 1.003470315s ago: executing program 5 (id=27548): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d360000"], 0x48) socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x66, &(0x7f00000007c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x9, 0x6, "c829e4", 0x9, 0x33, 0x1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0xdd18b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000280)={'system_u:object_r:modules_dep_t:s0', 0x20, 'unconfined', 0x20, 0x4}, 0x43) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2}, {0x60}, {0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x1) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) recvmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 819.627988ms ago: executing program 6 (id=27553): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) 802.012668ms ago: executing program 6 (id=27554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@i_version}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pivot_root(0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00100000']) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x8000, 0xffffff65, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x65, 0x0, 0x80, 0x29, 0x0, @empty, @private=0xa010101, {[@rr={0x7, 0xb, 0x3e, [@dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010102]}]}}}}}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 761.772449ms ago: executing program 6 (id=27556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@random={'security.', 'kfree\x00'}) 743.770149ms ago: executing program 6 (id=27557): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 722.90406ms ago: executing program 6 (id=27558): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@random={'security.', 'kfree\x00'}) 702.6152ms ago: executing program 6 (id=27559): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x1000000000000) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="16000000080000000400000001ffff00000000003374831d10ee30ab3dc18d0190dacc382d1eac0c25c284ec73fdd6d25473b83f760b880968bca71bdf3090b46f4bcf45a3fd6f0dd8f582347ad0284e32a0ddf17c77ad8841aaf295448df1f3867b7ff3325e1dcc83cd2f445c6e20fbbab2a67fe61232492800b1a9", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rpcgss_upcall_result\x00', r5, 0x0, 0x4000000}, 0xfffffffffffffe18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x2a59, &(0x7f0000000080)={0x0, 0x69bd, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x447}, 0x18) 397.647584ms ago: executing program 2 (id=27564): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x20000000000000d3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) 382.515275ms ago: executing program 2 (id=27565): mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 366.453575ms ago: executing program 2 (id=27566): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@i_version}, {@auto_da_alloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f}}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pivot_root(0x0, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00100000']) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a40)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x8000, 0xffffff65, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x65, 0x0, 0x80, 0x29, 0x0, @empty, @private=0xa010101, {[@rr={0x7, 0xb, 0x3e, [@dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010102]}]}}}}}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 294.297536ms ago: executing program 2 (id=27567): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x8}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@random={'security.', 'kfree\x00'}) 278.176596ms ago: executing program 2 (id=27568): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 276.639386ms ago: executing program 9 (id=27569): unshare(0x40020000) 253.795316ms ago: executing program 2 (id=27570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_connect(0x5, 0x2eb, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000cc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x5, 0x7, 0x10, 0x7f}, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="050f5e000603100b0a10030008000103ff7f0c100a07c0000000000f0080071002181e03000b10010c2000400101fcf82e100d35f93e140f165334e46181000038ce71f875bb5a303c440c6051d3e83fe7"]}) 213.463557ms ago: executing program 9 (id=27571): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r4, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) syslog(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x7f}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 49.61654ms ago: executing program 5 (id=27572): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f}}, './bus\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") socket$inet_tcp(0x2, 0x1, 0x0) 42.20138ms ago: executing program 9 (id=27573): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x20000000000000d3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(0xffffffffffffffff, r1, 0x0) 30.3618ms ago: executing program 5 (id=27574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002"], 0x118}}, 0x0) 525.34µs ago: executing program 9 (id=27575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$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") socket$key(0xf, 0x3, 0x2) readlink(&(0x7f0000000100)='./file2\x00', &(0x7f0000000240)=""/238, 0xee) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 0s ago: executing program 5 (id=27576): mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): RN [ 1802.837787][ T1345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1802.837801][ T1345] Call Trace: [ 1802.837808][ T1345] [ 1802.837895][ T1345] __dump_stack+0x1d/0x30 [ 1802.837919][ T1345] dump_stack_lvl+0xe8/0x140 [ 1802.837941][ T1345] dump_stack+0x15/0x1b [ 1802.837959][ T1345] should_fail_ex+0x265/0x280 [ 1802.838058][ T1345] should_fail+0xb/0x20 [ 1802.838088][ T1345] should_fail_usercopy+0x1a/0x20 [ 1802.838150][ T1345] _copy_from_user+0x1c/0xb0 [ 1802.838169][ T1345] ___sys_sendmsg+0xc1/0x1d0 [ 1802.838290][ T1345] __x64_sys_sendmsg+0xd4/0x160 [ 1802.838322][ T1345] x64_sys_call+0x2999/0x2fb0 [ 1802.838345][ T1345] do_syscall_64+0xd2/0x200 [ 1802.838404][ T1345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1802.838431][ T1345] ? clear_bhb_loop+0x40/0x90 [ 1802.838482][ T1345] ? clear_bhb_loop+0x40/0x90 [ 1802.838577][ T1345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.838600][ T1345] RIP: 0033:0x7f2a8220e929 [ 1802.838616][ T1345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1802.838693][ T1345] RSP: 002b:00007f2a80877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1802.838795][ T1345] RAX: ffffffffffffffda RBX: 00007f2a82435fa0 RCX: 00007f2a8220e929 [ 1802.838809][ T1345] RDX: 0000000030004001 RSI: 0000200000000080 RDI: 0000000000000006 [ 1802.838893][ T1345] RBP: 00007f2a80877090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.838908][ T1345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.838922][ T1345] R13: 0000000000000000 R14: 00007f2a82435fa0 R15: 00007ffc46c94ef8 [ 1802.838942][ T1345] [ 1802.904820][ T1349] siw: device registration error -23 [ 1802.935363][ T1354] loop9: detected capacity change from 0 to 512 [ 1802.935969][ T1354] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1802.937146][ T1354] EXT4-fs (loop9): 1 truncate cleaned up [ 1802.937460][ T1354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1802.938402][ T1354] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1803.225804][ T1367] bond3: entered promiscuous mode [ 1803.225825][ T1367] bond3: entered allmulticast mode [ 1803.226029][ T1367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1803.229485][ T1367] bond3 (unregistering): Released all slaves [ 1803.450524][ T1443] siw: device registration error -23 [ 1803.463875][ T1454] netlink: 388 bytes leftover after parsing attributes in process `syz.9.26692'. [ 1803.496135][ T1460] netlink: 'syz.9.26695': attribute type 3 has an invalid length. [ 1803.512082][ T1460] loop9: detected capacity change from 0 to 512 [ 1803.538140][ T1460] journal_path: Non-blockdev passed as './bus' [ 1803.544456][ T1460] EXT4-fs: error: could not find journal device path [ 1803.568175][ T1470] bond4: entered promiscuous mode [ 1803.573988][ T1470] bond4: entered allmulticast mode [ 1803.579546][ T1470] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1803.588599][ T1470] bond4 (unregistering): Released all slaves [ 1803.601108][ T1460] netem: incorrect gi model size [ 1803.606919][ T1460] netem: change failed [ 1803.638039][ T1554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26700'. [ 1803.726275][ T1570] loop9: detected capacity change from 0 to 512 [ 1803.737108][ T1580] netlink: 'syz.5.26709': attribute type 3 has an invalid length. [ 1803.750741][ T1580] netem: incorrect gi model size [ 1803.755769][ T1580] netem: change failed [ 1803.800160][ T1586] bond1: entered promiscuous mode [ 1803.805342][ T1586] bond1: entered allmulticast mode [ 1803.810763][ T1586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1803.821274][ T1586] bond1 (unregistering): Released all slaves [ 1803.876231][ T1663] netem: change failed [ 1803.937125][ T1670] 9pnet_fd: Insufficient options for proto=fd [ 1804.161875][ T1682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1804.170832][ T1682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1804.189134][ T1688] loop9: detected capacity change from 0 to 512 [ 1804.196049][ T1688] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1804.205251][ T1688] EXT4-fs (loop9): invalid journal inode [ 1804.736153][ T1702] netem: change failed [ 1804.772720][ T1704] bond4: entered promiscuous mode [ 1804.777839][ T1704] bond4: entered allmulticast mode [ 1804.784256][ T1704] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1804.797492][ T1704] bond4 (unregistering): Released all slaves [ 1804.868975][ T1778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26736'. [ 1804.884983][ T1780] loop9: detected capacity change from 0 to 512 [ 1804.896277][ T1780] EXT4-fs: Ignoring removed i_version option [ 1804.903178][ T1780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1804.985321][ T1780] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1804.996535][ T1780] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26733: bg 0: block 248: padding at end of block bitmap is not set [ 1805.001874][ T1789] bond1: entered promiscuous mode [ 1805.016159][ T1789] bond1: entered allmulticast mode [ 1805.025004][ T1789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1805.036500][ T1780] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26733: Failed to acquire dquot type 1 [ 1805.049774][ T1789] bond1 (unregistering): Released all slaves [ 1805.071179][ T1780] EXT4-fs (loop9): 1 truncate cleaned up [ 1805.079669][ T1780] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1805.094562][ T1780] netlink: 16 bytes leftover after parsing attributes in process `syz.9.26733'. [ 1805.145203][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.170380][ T1861] loop9: detected capacity change from 0 to 512 [ 1805.179139][ T1861] EXT4-fs: Ignoring removed i_version option [ 1805.185885][ T1861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1805.206153][ T1861] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1805.225229][ T1861] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26740: bg 0: block 248: padding at end of block bitmap is not set [ 1805.256213][ T1861] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26740: Failed to acquire dquot type 1 [ 1805.273093][ T1861] EXT4-fs (loop9): 1 truncate cleaned up [ 1805.278997][ T1866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1805.289250][ T1866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1805.294535][ T1861] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1805.346727][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1805.407596][ T1885] loop9: detected capacity change from 0 to 128 [ 1806.103159][ T1910] SELinux: failed to load policy [ 1806.122554][ T1910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=1910 comm=syz.6.26757 [ 1806.215782][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 1806.215801][ T29] audit: type=1326 audit(1702.555:169502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.245943][ T29] audit: type=1326 audit(1702.555:169503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.269338][ T29] audit: type=1326 audit(1702.555:169504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.293237][ T29] audit: type=1326 audit(1702.555:169505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.316562][ T29] audit: type=1326 audit(1702.555:169506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.333696][ T1920] bond1: entered promiscuous mode [ 1806.340408][ T29] audit: type=1326 audit(1702.555:169507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.344863][ T1920] bond1: entered allmulticast mode [ 1806.368691][ T29] audit: type=1326 audit(1702.555:169508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.397166][ T29] audit: type=1326 audit(1702.555:169509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.420429][ T29] audit: type=1326 audit(1702.555:169510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.444215][ T29] audit: type=1326 audit(1702.555:169511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1915 comm="syz.2.26759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1806.477155][ T1920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1806.577515][ T1961] __nla_validate_parse: 4 callbacks suppressed [ 1806.577533][ T1961] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26763'. [ 1807.322032][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.391638][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.003295][ T1982] lo speed is unknown, defaulting to 1000 [ 1808.021461][ T1982] lo speed is unknown, defaulting to 1000 [ 1808.061992][ T2000] netlink: 'syz.6.26772': attribute type 3 has an invalid length. [ 1808.181990][T28677] bond0 (unregistering): Released all slaves [ 1808.190475][T28677] bond1 (unregistering): Released all slaves [ 1808.235482][T28677] bond2 (unregistering): Released all slaves [ 1808.252771][ T2000] netem: incorrect gi model size [ 1808.257794][ T2000] netem: change failed [ 1808.337296][T28677] tipc: Left network mode [ 1808.354250][ T2036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26774'. [ 1808.447690][T28677] hsr_slave_0: left promiscuous mode [ 1808.484830][T28677] hsr_slave_1: left promiscuous mode [ 1808.535847][T28677] pim6reg (unregistering): left allmulticast mode [ 1808.636532][ T2117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.26777'. [ 1808.649946][ T1982] chnl_net:caif_netlink_parms(): no params data found [ 1808.815683][ T2143] SELinux: syz.9.26780 (2143) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1808.925320][ T2141] wireguard0: entered promiscuous mode [ 1808.930996][ T2141] wireguard0: entered allmulticast mode [ 1808.941901][ T1982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1808.949117][ T1982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.965015][ T1982] bridge_slave_0: entered allmulticast mode [ 1808.979857][ T1982] bridge_slave_0: entered promiscuous mode [ 1808.988710][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.995927][ T1982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1809.005109][ T1982] bridge_slave_1: entered allmulticast mode [ 1809.011719][ T1982] bridge_slave_1: entered promiscuous mode [ 1809.014014][ T2194] netlink: 'syz.2.26782': attribute type 3 has an invalid length. [ 1809.037790][ T1982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1809.049169][ T2194] netem: incorrect gi model size [ 1809.054260][ T2194] netem: change failed [ 1809.064489][ T1982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.142952][ T1982] team0: Port device team_slave_0 added [ 1809.154768][ T1982] team0: Port device team_slave_1 added [ 1809.189562][ T1982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1809.197310][ T1982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.223449][ T1982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1809.247896][ T2286] netlink: 'syz.9.26790': attribute type 4 has an invalid length. [ 1809.250714][ T2285] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26791'. [ 1809.268494][ T1982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1809.275665][ T1982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1809.302078][ T1982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1809.402661][ T1982] hsr_slave_0: entered promiscuous mode [ 1809.409159][ T1982] hsr_slave_1: entered promiscuous mode [ 1809.418720][ T1982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1809.426919][ T1982] Cannot create hsr debugfs directory [ 1809.868955][ T1982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1809.973043][ T1982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1809.992168][ T1982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1810.014749][ T1982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1810.079352][ T1982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1810.106537][ T1982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.130287][T28662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.137437][T28662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1810.170274][ T1982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1810.180387][ T2411] netlink: 'syz.9.26794': attribute type 3 has an invalid length. [ 1810.180779][ T1982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1810.206571][ T2411] loop9: detected capacity change from 0 to 512 [ 1810.232891][ T2411] journal_path: Non-blockdev passed as './bus' [ 1810.235576][T28662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.239140][ T2411] EXT4-fs: error: could not find journal device path [ 1810.246189][T28662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1810.308988][ T2411] netem: incorrect gi model size [ 1810.314009][ T2411] netem: change failed [ 1810.352695][ T2418] bond2: entered promiscuous mode [ 1810.357845][ T2418] bond2: entered allmulticast mode [ 1810.363733][ T2418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1810.397834][ T2418] bond2 (unregistering): Released all slaves [ 1810.436332][ T1982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.566763][ T1982] veth0_vlan: entered promiscuous mode [ 1810.596816][ T1982] veth1_vlan: entered promiscuous mode [ 1810.606514][ T2506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26801'. [ 1810.637223][ T1982] veth0_macvtap: entered promiscuous mode [ 1810.662288][ T1982] veth1_macvtap: entered promiscuous mode [ 1810.697851][ T1982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1810.725567][ T1982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.757652][ T1982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.766530][ T1982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.775355][ T1982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.784106][ T1982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1810.846218][ T2523] netlink: 'syz.6.26806': attribute type 3 has an invalid length. [ 1811.023216][ T2544] netlink: 'syz.1.26813': attribute type 3 has an invalid length. [ 1811.047980][ T2539] loop9: detected capacity change from 0 to 1024 [ 1811.055144][ T2539] ext4: Unknown parameter 'min_batch_' [ 1811.067780][ T2544] FAULT_INJECTION: forcing a failure. [ 1811.067780][ T2544] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.080514][ T2544] CPU: 0 UID: 0 PID: 2544 Comm: syz.1.26813 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1811.080593][ T2544] Tainted: [W]=WARN [ 1811.080599][ T2544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1811.080610][ T2544] Call Trace: [ 1811.080616][ T2544] [ 1811.080624][ T2544] __dump_stack+0x1d/0x30 [ 1811.080647][ T2544] dump_stack_lvl+0xe8/0x140 [ 1811.080668][ T2544] dump_stack+0x15/0x1b [ 1811.080704][ T2544] should_fail_ex+0x265/0x280 [ 1811.080737][ T2544] should_failslab+0x8c/0xb0 [ 1811.080814][ T2544] kmem_cache_alloc_noprof+0x50/0x310 [ 1811.080838][ T2544] ? audit_log_start+0x365/0x6c0 [ 1811.080937][ T2544] audit_log_start+0x365/0x6c0 [ 1811.080973][ T2544] audit_seccomp+0x48/0x100 [ 1811.081001][ T2544] ? __seccomp_filter+0x68c/0x10d0 [ 1811.081105][ T2544] __seccomp_filter+0x69d/0x10d0 [ 1811.081131][ T2544] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1811.081222][ T2544] ? vfs_write+0x75e/0x8e0 [ 1811.081253][ T2544] ? __rcu_read_unlock+0x4f/0x70 [ 1811.081278][ T2544] ? __fget_files+0x184/0x1c0 [ 1811.081330][ T2544] __secure_computing+0x82/0x150 [ 1811.081355][ T2544] syscall_trace_enter+0xcf/0x1e0 [ 1811.081414][ T2544] do_syscall_64+0xac/0x200 [ 1811.081443][ T2544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1811.081470][ T2544] ? clear_bhb_loop+0x40/0x90 [ 1811.081553][ T2544] ? clear_bhb_loop+0x40/0x90 [ 1811.081645][ T2544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.081724][ T2544] RIP: 0033:0x7f0a941ee929 [ 1811.081738][ T2544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.081754][ T2544] RSP: 002b:00007f0a92857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1811.081773][ T2544] RAX: ffffffffffffffda RBX: 00007f0a94415fa0 RCX: 00007f0a941ee929 [ 1811.081800][ T2544] RDX: 00000000000000df RSI: 0000200000000440 RDI: 0000000000000004 [ 1811.081815][ T2544] RBP: 00007f0a92857090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.081829][ T2544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.081842][ T2544] R13: 0000000000000000 R14: 00007f0a94415fa0 R15: 00007fff59168dc8 [ 1811.081863][ T2544] [ 1811.428269][ T2552] loop9: detected capacity change from 0 to 512 [ 1811.476077][ T2552] EXT4-fs: Ignoring removed i_version option [ 1811.497274][ T2552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1811.521780][ T2552] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1811.579990][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 1811.580072][ T29] audit: type=1326 audit(1707.578:169898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.26813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1811.609684][ T29] audit: type=1326 audit(1707.578:169899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2543 comm="syz.1.26813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1811.642360][ T2552] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26814: bg 0: block 248: padding at end of block bitmap is not set [ 1811.658884][ T2552] Quota error (device loop9): write_blk: dquota write failed [ 1811.666398][ T2552] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1811.672635][ T2557] bond4: entered promiscuous mode [ 1811.676402][ T2552] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26814: Failed to acquire dquot type 1 [ 1811.681463][ T2557] bond4: entered allmulticast mode [ 1811.714620][ T2557] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1811.718859][ T2552] EXT4-fs (loop9): 1 truncate cleaned up [ 1811.729767][ T2552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1811.743707][ T2557] bond4 (unregistering): Released all slaves [ 1811.754326][ T2552] netlink: 16 bytes leftover after parsing attributes in process `syz.9.26814'. [ 1811.783183][ T29] audit: type=1326 audit(1707.765:169900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1811.806514][ T29] audit: type=1326 audit(1707.765:169901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1811.830892][ T29] audit: type=1326 audit(1707.793:169902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1811.854202][ T29] audit: type=1326 audit(1707.793:169903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1811.877627][ T29] audit: type=1326 audit(1707.793:169904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1811.900970][ T29] audit: type=1326 audit(1707.793:169905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2551 comm="syz.9.26814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1812.016188][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.140338][ T2647] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26825'. [ 1812.175103][ T2651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26827'. [ 1812.280086][ T2653] netlink: 'syz.6.26828': attribute type 1 has an invalid length. [ 1812.436143][ T2661] loop9: detected capacity change from 0 to 1024 [ 1812.444878][ T2661] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1812.461086][ T2663] bond4: entered promiscuous mode [ 1812.466179][ T2663] bond4: entered allmulticast mode [ 1812.473848][ T2661] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26824: Failed to acquire dquot type 0 [ 1812.486850][ T2661] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1812.502800][ T2663] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1812.506107][ T2661] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26824: corrupted inode contents [ 1812.527278][ T2661] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.26824: mark_inode_dirty error [ 1812.541179][ T2663] bond4 (unregistering): Released all slaves [ 1812.552674][ T2661] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26824: corrupted inode contents [ 1812.565459][ T2661] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.26824: mark_inode_dirty error [ 1812.577449][ T2661] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26824: corrupted inode contents [ 1812.590868][ T2661] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1812.601403][ T2661] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26824: corrupted inode contents [ 1812.614160][ T2661] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.26824: mark_inode_dirty error [ 1812.626571][ T2661] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1812.639873][ T2661] EXT4-fs (loop9): 1 truncate cleaned up [ 1812.646127][ T2661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1812.671937][ T2739] netlink: 112 bytes leftover after parsing attributes in process `syz.5.26833'. [ 1812.691217][ T2741] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26834'. [ 1812.760502][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1812.790508][ T2751] random: crng reseeded on system resumption [ 1812.808869][ T2751] lo speed is unknown, defaulting to 1000 [ 1812.815653][ T2755] tipc: Enabling of bearer rejected, failed to enable media [ 1812.827215][ T2751] lo speed is unknown, defaulting to 1000 [ 1812.837369][ T2757] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26839'. [ 1812.865612][ T2758] loop9: detected capacity change from 0 to 1024 [ 1812.879812][ T2758] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1812.882739][ T2763] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 1812.895812][ T2758] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26836: Failed to acquire dquot type 0 [ 1812.911764][ T2767] FAULT_INJECTION: forcing a failure. [ 1812.911764][ T2767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.925006][ T2767] CPU: 0 UID: 0 PID: 2767 Comm: syz.2.26842 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1812.925050][ T2767] Tainted: [W]=WARN [ 1812.925057][ T2767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1812.925070][ T2767] Call Trace: [ 1812.925076][ T2767] [ 1812.925083][ T2767] __dump_stack+0x1d/0x30 [ 1812.925106][ T2767] dump_stack_lvl+0xe8/0x140 [ 1812.925128][ T2767] dump_stack+0x15/0x1b [ 1812.925228][ T2767] should_fail_ex+0x265/0x280 [ 1812.925256][ T2767] should_fail+0xb/0x20 [ 1812.925337][ T2767] should_fail_usercopy+0x1a/0x20 [ 1812.925368][ T2767] _copy_from_iter+0xcf/0xe40 [ 1812.925384][ T2767] ? __build_skb_around+0x1a0/0x200 [ 1812.925457][ T2767] ? __alloc_skb+0x223/0x320 [ 1812.925491][ T2767] netlink_sendmsg+0x471/0x6b0 [ 1812.925533][ T2767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1812.925553][ T2767] __sock_sendmsg+0x145/0x180 [ 1812.925574][ T2767] ____sys_sendmsg+0x31e/0x4e0 [ 1812.925608][ T2767] ___sys_sendmsg+0x17b/0x1d0 [ 1812.925785][ T2767] __x64_sys_sendmsg+0xd4/0x160 [ 1812.925868][ T2767] x64_sys_call+0x2999/0x2fb0 [ 1812.925892][ T2767] do_syscall_64+0xd2/0x200 [ 1812.925908][ T2767] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1812.925973][ T2767] ? clear_bhb_loop+0x40/0x90 [ 1812.925994][ T2767] ? clear_bhb_loop+0x40/0x90 [ 1812.926018][ T2767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.926069][ T2767] RIP: 0033:0x7f2a8220e929 [ 1812.926085][ T2767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1812.926106][ T2767] RSP: 002b:00007f2a80877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1812.926126][ T2767] RAX: ffffffffffffffda RBX: 00007f2a82435fa0 RCX: 00007f2a8220e929 [ 1812.926176][ T2767] RDX: 0000000000000044 RSI: 0000200000000480 RDI: 0000000000000003 [ 1812.926190][ T2767] RBP: 00007f2a80877090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.926204][ T2767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1812.926218][ T2767] R13: 0000000000000000 R14: 00007f2a82435fa0 R15: 00007ffc46c94ef8 [ 1812.926316][ T2767] [ 1812.934795][ T2758] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1813.157524][ T2758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26836: corrupted inode contents [ 1813.191074][ T2758] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.26836: mark_inode_dirty error [ 1813.204876][ T2758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26836: corrupted inode contents [ 1813.220665][ T2758] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.26836: mark_inode_dirty error [ 1813.232534][ T2758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26836: corrupted inode contents [ 1813.245925][ T2758] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1813.259488][ T2758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26836: corrupted inode contents [ 1813.272615][ T2758] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.26836: mark_inode_dirty error [ 1813.285172][ T2758] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1813.294812][ T2758] EXT4-fs (loop9): 1 truncate cleaned up [ 1813.301256][ T2758] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1813.427324][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.791631][ T2810] loop9: detected capacity change from 0 to 1024 [ 1813.800452][ T2810] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1813.807504][ T2810] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26846: Failed to acquire dquot type 0 [ 1813.819488][ T2810] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1813.834116][ T2810] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26846: corrupted inode contents [ 1813.847371][ T2810] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.26846: mark_inode_dirty error [ 1813.859192][ T2810] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26846: corrupted inode contents [ 1813.871474][ T2810] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.26846: mark_inode_dirty error [ 1813.883102][ T2810] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26846: corrupted inode contents [ 1813.895299][ T2810] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1813.904337][ T2810] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.26846: corrupted inode contents [ 1813.920986][ T2810] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.26846: mark_inode_dirty error [ 1813.934185][ T2810] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1813.945038][ T2810] EXT4-fs (loop9): 1 truncate cleaned up [ 1813.951153][ T2810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1813.972411][ T2817] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26850'. [ 1814.008898][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.153042][ T2838] netlink: 'syz.5.26858': attribute type 3 has an invalid length. [ 1814.172193][ T2838] netem: incorrect gi model size [ 1814.177248][ T2838] netem: change failed [ 1814.181883][ T2839] tipc: Enabling of bearer rejected, failed to enable media [ 1814.776220][ T2850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26862'. [ 1814.903891][ T2870] netlink: 'syz.2.26870': attribute type 3 has an invalid length. [ 1814.917944][ T2870] netem: incorrect gi model size [ 1814.922954][ T2870] netem: change failed [ 1815.056790][ T2885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26876'. [ 1815.119722][ T2898] netlink: 'syz.6.26882': attribute type 3 has an invalid length. [ 1815.134514][ T2898] netem: incorrect gi model size [ 1815.139611][ T2898] netem: change failed [ 1815.293773][ T2905] netlink: 'syz.5.26885': attribute type 3 has an invalid length. [ 1815.310459][ T2905] netem: incorrect gi model size [ 1815.315597][ T2905] netem: change failed [ 1815.653379][ T2916] netem: change failed [ 1815.703238][ T2922] netlink: 'syz.5.26893': attribute type 3 has an invalid length. [ 1815.717350][ T2922] netem: incorrect gi model size [ 1815.722337][ T2922] netem: change failed [ 1815.875242][ T2937] loop9: detected capacity change from 0 to 512 [ 1815.900371][ T2937] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1815.908776][ T2937] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1815.915514][ T2937] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1815.931853][ T2937] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1815.939203][ T2937] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26899: bg 0: block 40: padding at end of block bitmap is not set [ 1815.953789][ T2937] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1815.963971][ T2937] EXT4-fs (loop9): 1 truncate cleaned up [ 1815.970032][ T2937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1815.982987][ T2937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.104452][ T2954] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26902'. [ 1816.119765][ T2951] bond2: entered promiscuous mode [ 1816.125017][ T2951] bond2: entered allmulticast mode [ 1816.130425][ T2951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1816.140195][ T2951] bond2 (unregistering): Released all slaves [ 1816.250017][ T3030] netlink: 'syz.2.26906': attribute type 3 has an invalid length. [ 1816.626382][ T3050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26914'. [ 1816.642069][ T3048] netlink: 'syz.9.26913': attribute type 3 has an invalid length. [ 1816.682940][ T3054] loop9: detected capacity change from 0 to 512 [ 1816.692790][ T3054] EXT4-fs: Ignoring removed i_version option [ 1816.701575][ T3054] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1816.710900][ T3054] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1816.719126][ T3054] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26916: bg 0: block 248: padding at end of block bitmap is not set [ 1816.735766][ T3054] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26916: Failed to acquire dquot type 1 [ 1816.749194][ T3054] EXT4-fs (loop9): 1 truncate cleaned up [ 1816.805881][ T3054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1816.867529][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1817.435933][ T29] kauditd_printk_skb: 676 callbacks suppressed [ 1817.435951][ T29] audit: type=1326 audit(1713.050:170573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.6.26920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1817.465969][ T29] audit: type=1326 audit(1713.050:170574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3063 comm="syz.6.26920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1817.588551][ T3082] audit: audit_lost=21 audit_rate_limit=0 audit_backlog_limit=64 [ 1817.596353][ T3082] audit: out of memory in audit_log_start [ 1817.710831][ T3084] __nla_validate_parse: 3 callbacks suppressed [ 1817.710941][ T3084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26926'. [ 1817.865220][ T29] audit: type=1400 audit(1713.452:170575): avc: denied { mount } for pid=3083 comm="syz.5.26926" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1817.950428][ T3098] loop9: detected capacity change from 0 to 512 [ 1817.958520][ T29] audit: type=1400 audit(1713.480:170576): avc: denied { write } for pid=3083 comm="syz.5.26926" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1817.979026][ T29] audit: type=1400 audit(1713.480:170577): avc: denied { open } for pid=3083 comm="syz.5.26926" path="/312/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1817.986887][ T3098] EXT4-fs: Ignoring removed i_version option [ 1818.015426][ T3098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1818.019034][ T29] audit: type=1400 audit(1713.602:170578): avc: denied { unmount } for pid=24532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1818.025199][ T3098] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1818.052101][ T3098] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26928: bg 0: block 248: padding at end of block bitmap is not set [ 1818.067064][ T3098] Quota error (device loop9): write_blk: dquota write failed [ 1818.074945][ T3098] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1818.084938][ T3098] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.26928: Failed to acquire dquot type 1 [ 1818.097107][ T3098] EXT4-fs (loop9): 1 truncate cleaned up [ 1818.103984][ T3098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1818.120451][ T3103] netlink: 36 bytes leftover after parsing attributes in process `syz.5.26929'. [ 1818.130031][ T3098] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1818.145437][ T3098] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1818.156807][ T3098] netlink: 16 bytes leftover after parsing attributes in process `syz.9.26928'. [ 1818.158463][ T3107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26930'. [ 1818.214257][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1818.265409][ T3120] netlink: 40 bytes leftover after parsing attributes in process `syz.9.26935'. [ 1818.284467][ T3120] loop9: detected capacity change from 0 to 512 [ 1818.291445][ T3120] journal_path: Non-blockdev passed as './bus' [ 1818.297799][ T3120] EXT4-fs: error: could not find journal device path [ 1818.495294][ T3136] netlink: 112 bytes leftover after parsing attributes in process `syz.6.26939'. [ 1818.998889][ T3145] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26942'. [ 1819.144917][ T3155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.26946'. [ 1819.408187][ T3162] netlink: 'syz.9.26948': attribute type 3 has an invalid length. [ 1819.525520][ T3163] loop9: detected capacity change from 0 to 512 [ 1819.587081][ T3163] journal_path: Non-blockdev passed as './bus' [ 1819.593328][ T3163] EXT4-fs: error: could not find journal device path [ 1819.602404][ T3162] netem: incorrect gi model size [ 1819.607580][ T3162] netem: change failed [ 1819.640832][ T3168] 9pnet_fd: Insufficient options for proto=fd [ 1819.716040][ T3176] loop9: detected capacity change from 0 to 128 [ 1819.766123][ T3179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.26954'. [ 1819.793972][ T3181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26956'. [ 1819.893476][ T3194] FAULT_INJECTION: forcing a failure. [ 1819.893476][ T3194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1819.906835][ T3194] CPU: 0 UID: 0 PID: 3194 Comm: syz.9.26960 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1819.906868][ T3194] Tainted: [W]=WARN [ 1819.906874][ T3194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1819.906947][ T3194] Call Trace: [ 1819.906955][ T3194] [ 1819.906964][ T3194] __dump_stack+0x1d/0x30 [ 1819.906987][ T3194] dump_stack_lvl+0xe8/0x140 [ 1819.907052][ T3194] dump_stack+0x15/0x1b [ 1819.907070][ T3194] should_fail_ex+0x265/0x280 [ 1819.907102][ T3194] should_fail+0xb/0x20 [ 1819.907183][ T3194] should_fail_usercopy+0x1a/0x20 [ 1819.907285][ T3194] _copy_from_iter+0xcf/0xe40 [ 1819.907304][ T3194] ? __build_skb_around+0x1a0/0x200 [ 1819.907356][ T3194] ? __alloc_skb+0x223/0x320 [ 1819.907382][ T3194] netlink_sendmsg+0x471/0x6b0 [ 1819.907402][ T3194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1819.907423][ T3194] __sock_sendmsg+0x145/0x180 [ 1819.907453][ T3194] ____sys_sendmsg+0x31e/0x4e0 [ 1819.907488][ T3194] ___sys_sendmsg+0x17b/0x1d0 [ 1819.907598][ T3194] __x64_sys_sendmsg+0xd4/0x160 [ 1819.907712][ T3194] x64_sys_call+0x2999/0x2fb0 [ 1819.907820][ T3194] do_syscall_64+0xd2/0x200 [ 1819.907838][ T3194] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1819.907865][ T3194] ? clear_bhb_loop+0x40/0x90 [ 1819.907931][ T3194] ? clear_bhb_loop+0x40/0x90 [ 1819.907955][ T3194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.907975][ T3194] RIP: 0033:0x7f8dd77be929 [ 1819.907992][ T3194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1819.908012][ T3194] RSP: 002b:00007f8dd5e27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.908091][ T3194] RAX: ffffffffffffffda RBX: 00007f8dd79e5fa0 RCX: 00007f8dd77be929 [ 1819.908106][ T3194] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1819.908120][ T3194] RBP: 00007f8dd5e27090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.908133][ T3194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1819.908146][ T3194] R13: 0000000000000000 R14: 00007f8dd79e5fa0 R15: 00007ffd816883d8 [ 1819.908166][ T3194] [ 1820.498928][ T3218] IPv4: Oversized IP packet from 127.202.26.0 [ 1820.725856][ T3233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3233 comm=syz.1.26976 [ 1821.041058][ T3248] netlink: 'syz.1.26981': attribute type 29 has an invalid length. [ 1821.162110][ T3262] loop9: detected capacity change from 0 to 512 [ 1821.206316][ T3262] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1821.250952][ T3262] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1821.282715][ T3262] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1821.345625][ T3262] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1821.362498][ T3262] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.26985: bg 0: block 40: padding at end of block bitmap is not set [ 1821.396038][ T3262] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1821.417214][ T3262] EXT4-fs (loop9): 1 truncate cleaned up [ 1821.428038][ T3262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1821.473127][ T3262] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1821.597876][ T3293] netlink: 'syz.6.26995': attribute type 3 has an invalid length. [ 1821.640936][ T3297] netlink: 'syz.9.26996': attribute type 3 has an invalid length. [ 1821.685918][ T3297] loop9: detected capacity change from 0 to 512 [ 1821.692662][ T3297] journal_path: Non-blockdev passed as './bus' [ 1821.698987][ T3297] EXT4-fs: error: could not find journal device path [ 1821.715738][ T3297] netem: incorrect gi model size [ 1821.720848][ T3297] netem: change failed [ 1821.805254][ T3305] loop9: detected capacity change from 0 to 1024 [ 1821.842796][ T3305] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1821.852647][ T3305] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1821.877118][ T3305] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1821.908652][ T3305] EXT4-fs error (device loop9): ext4_get_journal_inode:5796: inode #5: comm syz.9.26998: unexpected bad inode w/o EXT4_IGET_BAD [ 1821.944808][ T3305] EXT4-fs (loop9): no journal found [ 1821.950334][ T3305] EXT4-fs (loop9): can't get journal size [ 1821.958702][ T3305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1822.048248][ T3305] syzkaller1: entered promiscuous mode [ 1822.053794][ T3305] syzkaller1: entered allmulticast mode [ 1822.258316][ T3321] lo: entered promiscuous mode [ 1822.282873][ T3321] tunl0: entered promiscuous mode [ 1822.324224][ T3321] gre0: entered promiscuous mode [ 1822.366640][ T3321] gretap0: entered promiscuous mode [ 1822.399482][ T3321] erspan0: entered promiscuous mode [ 1822.421101][ T3321] ip_vti0: entered promiscuous mode [ 1822.427278][ T3321] ip6_vti0: entered promiscuous mode [ 1822.465280][ T3321] sit0: entered promiscuous mode [ 1822.473929][ T3321] ip6tnl0: entered promiscuous mode [ 1822.480555][ T3321] ip6gre0: entered promiscuous mode [ 1822.506803][ T3321] ip6gretap0: entered promiscuous mode [ 1822.517435][ T3321] bridge0: entered promiscuous mode [ 1822.532036][ T3321] vcan0: entered promiscuous mode [ 1822.548726][ T3321] bond0: entered promiscuous mode [ 1822.555397][ T3321] dummy0: entered promiscuous mode [ 1822.562131][ T3321] nlmon0: entered promiscuous mode [ 1822.568340][ T3321] caif0: entered promiscuous mode [ 1822.574573][ T3321] batadv0: entered promiscuous mode [ 1822.594448][ T3321] vxcan0: entered promiscuous mode [ 1822.612890][ T3321] vxcan1: entered promiscuous mode [ 1822.618789][ T3321] veth0: entered promiscuous mode [ 1822.630253][ T3321] veth1: entered promiscuous mode [ 1822.647782][ T3321] wg0: entered promiscuous mode [ 1822.654739][ T3321] wg1: entered promiscuous mode [ 1822.661311][ T3321] wg2: entered promiscuous mode [ 1822.667565][ T3321] veth0_to_bridge: entered promiscuous mode [ 1822.674629][ T3321] bridge_slave_0: entered promiscuous mode [ 1822.681626][ T3321] veth1_to_bridge: entered promiscuous mode [ 1822.699735][ T3321] bridge_slave_1: entered promiscuous mode [ 1822.707658][ T3321] veth0_to_bond: entered promiscuous mode [ 1822.715131][ T3321] @ÿ: entered promiscuous mode [ 1822.730636][ T3321] veth1_to_bond: entered promiscuous mode [ 1822.737784][ T3321] bond_slave_1: entered promiscuous mode [ 1822.768136][ T3321] veth0_to_team: entered promiscuous mode [ 1822.775315][ T3321] team_slave_0: entered promiscuous mode [ 1822.794108][ T3321] veth1_to_team: entered promiscuous mode [ 1822.801290][ T3321] team_slave_1: entered promiscuous mode [ 1822.815537][ T3321] veth0_to_batadv: entered promiscuous mode [ 1822.826530][ T3321] batadv_slave_0: entered promiscuous mode [ 1822.838065][ T3321] veth1_to_batadv: entered promiscuous mode [ 1822.846217][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 1822.846235][ T29] audit: type=1326 audit(1718.110:171398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1822.848568][ T3321] batadv_slave_1: entered promiscuous mode [ 1822.852980][ T29] audit: type=1326 audit(1718.110:171399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1822.944918][ T3321] xfrm0: entered promiscuous mode [ 1822.951119][ T3321] veth0_to_hsr: entered promiscuous mode [ 1822.957535][ T29] audit: type=1326 audit(1718.223:171400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1822.993226][ T3321] veth1_to_hsr: entered promiscuous mode [ 1823.009905][ T3321] hsr0: entered promiscuous mode [ 1823.027056][ T3321] veth1_virt_wifi: entered promiscuous mode [ 1823.034729][ T29] audit: type=1326 audit(1718.223:171401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.057988][ T29] audit: type=1326 audit(1718.223:171402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.063570][ T3321] veth0_virt_wifi: entered promiscuous mode [ 1823.081767][ T29] audit: type=1326 audit(1718.241:171403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.111329][ T29] audit: type=1326 audit(1718.241:171404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.134884][ T29] audit: type=1326 audit(1718.241:171405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.158748][ T29] audit: type=1326 audit(1718.251:171406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.176433][ T3321] vlan0: entered promiscuous mode [ 1823.181941][ T29] audit: type=1326 audit(1718.251:171407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3333 comm="syz.6.27008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1823.187291][ T3321] vlan1: entered promiscuous mode [ 1823.218184][ T3321] macvlan0: entered promiscuous mode [ 1823.224821][ T3321] macvlan1: entered promiscuous mode [ 1823.231355][ T3321] ipvlan0: entered promiscuous mode [ 1823.236743][ T3321] ipvlan1: entered promiscuous mode [ 1823.267933][ T3321] geneve0: entered promiscuous mode [ 1823.276760][ T3321] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.285688][ T3321] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.294728][ T3321] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.303983][ T3321] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.313597][ T3321] geneve1: entered promiscuous mode [ 1823.319803][ T3321] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1823.330425][ T3321] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1823.340231][ T3321] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1823.354725][ T3321] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1823.368817][ T3321] : entered promiscuous mode [ 1823.386275][ T3321] gre1: entered promiscuous mode [ 1823.394399][ T3321] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1823.403643][ T3321] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1823.412616][ T3321] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1823.421731][ T3321] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1823.433281][ T3321] geneve2: entered promiscuous mode [ 1823.438645][ T3321] geneve2: left allmulticast mode [ 1823.444869][ T3321] bond1: entered promiscuous mode [ 1823.534347][ T3347] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1823.544091][ T3347] SELinux: failed to load policy [ 1823.550128][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1823.570099][ T3346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3346 comm=syz.2.27011 [ 1823.611531][ T3346] gtp0: entered promiscuous mode [ 1823.881231][ T3364] loop9: detected capacity change from 0 to 128 [ 1823.931473][ T3369] __nla_validate_parse: 4 callbacks suppressed [ 1823.931489][ T3369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.27017'. [ 1823.951789][ T3364] bio_check_eod: 10 callbacks suppressed [ 1823.951805][ T3364] syz.9.27014: attempt to access beyond end of device [ 1823.951805][ T3364] loop9: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 1823.982448][ T3366] netlink: 112 bytes leftover after parsing attributes in process `syz.2.27016'. [ 1824.000866][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.000866][ T3364] loop9: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 1824.015043][ T3364] buffer_io_error: 8 callbacks suppressed [ 1824.015056][ T3364] Buffer I/O error on dev loop9, logical block 156, lost async page write [ 1824.047536][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.047536][ T3364] loop9: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 1824.061170][ T3364] Buffer I/O error on dev loop9, logical block 157, lost async page write [ 1824.077477][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.077477][ T3364] loop9: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 1824.091131][ T3364] Buffer I/O error on dev loop9, logical block 158, lost async page write [ 1824.104017][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.104017][ T3364] loop9: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 1824.118205][ T3364] Buffer I/O error on dev loop9, logical block 159, lost async page write [ 1824.130487][ T3374] Invalid ELF header magic: != ELF [ 1824.140495][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.140495][ T3364] loop9: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 1824.154677][ T3364] Buffer I/O error on dev loop9, logical block 160, lost async page write [ 1824.177241][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.177241][ T3364] loop9: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 1824.191535][ T3364] Buffer I/O error on dev loop9, logical block 161, lost async page write [ 1824.201742][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.201742][ T3364] loop9: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 1824.215355][ T3364] Buffer I/O error on dev loop9, logical block 132, lost async page write [ 1824.231598][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.231598][ T3364] loop9: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 1824.245220][ T3364] Buffer I/O error on dev loop9, logical block 133, lost async page write [ 1824.261249][ T3364] syz.9.27014: attempt to access beyond end of device [ 1824.261249][ T3364] loop9: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 1824.274917][ T3364] Buffer I/O error on dev loop9, logical block 150, lost async page write [ 1824.297461][ T3364] Buffer I/O error on dev loop9, logical block 151, lost async page write [ 1824.403531][ T3395] loop9: detected capacity change from 0 to 512 [ 1824.410965][ T3395] journal_path: Non-blockdev passed as './bus' [ 1824.417308][ T3395] EXT4-fs: error: could not find journal device path [ 1824.505982][ T3407] tipc: Enabling of bearer rejected, failed to enable media [ 1824.530909][ T3406] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.27032'. [ 1824.619040][ T3414] Invalid ELF header magic: != ELF [ 1824.638127][ T3414] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1825.082255][ T3434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.098265][ T3434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.286691][ T3460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.299163][ T3460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.355759][ T3467] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27056'. [ 1825.388777][ T3470] loop9: detected capacity change from 0 to 512 [ 1825.396326][ T3470] journal_path: Non-blockdev passed as './bus' [ 1825.402590][ T3470] EXT4-fs: error: could not find journal device path [ 1825.432929][ T3475] loop9: detected capacity change from 0 to 512 [ 1825.440009][ T3475] EXT4-fs: Ignoring removed i_version option [ 1825.446654][ T3475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1825.456911][ T3475] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1825.464192][ T3475] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27058: bg 0: block 248: padding at end of block bitmap is not set [ 1825.481575][ T3475] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27058: Failed to acquire dquot type 1 [ 1825.501239][ T3475] EXT4-fs (loop9): 1 truncate cleaned up [ 1825.507581][ T3475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1825.524691][ T3475] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1825.545240][ T3475] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1825.555958][ T3475] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27058'. [ 1825.594693][ T3482] netem: change failed [ 1825.618868][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.674235][ T3490] bond4: entered promiscuous mode [ 1825.679341][ T3490] bond4: entered allmulticast mode [ 1825.685232][ T3490] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1825.697577][ T3490] bond4 (unregistering): Released all slaves [ 1825.716906][ T3494] bond1: entered promiscuous mode [ 1825.722006][ T3494] bond1: entered allmulticast mode [ 1825.732478][ T3494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1825.743712][ T3494] bond1 (unregistering): Released all slaves [ 1825.790237][ T3629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1825.799597][ T3629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1825.800615][ T3632] netlink: 'syz.5.27067': attribute type 3 has an invalid length. [ 1826.063691][ T3661] netlink: 'syz.5.27079': attribute type 3 has an invalid length. [ 1826.104472][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.115013][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.341642][ T3677] lo speed is unknown, defaulting to 1000 [ 1826.348494][ T3677] lo speed is unknown, defaulting to 1000 [ 1826.388552][ T3682] loop9: detected capacity change from 0 to 1024 [ 1826.443364][ T3682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1826.472993][ T3682] Invalid ELF header magic: != ELF [ 1826.480476][ T3682] 9pnet_fd: Insufficient options for proto=fd [ 1826.497029][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1826.641050][ T3719] netlink: 61211 bytes leftover after parsing attributes in process `syz.9.27090'. [ 1826.704550][ T3722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27092'. [ 1826.752837][ T3726] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27094'. [ 1826.772698][ T3724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.27093'. [ 1826.889683][ T3741] Invalid ELF header magic: != ELF [ 1826.897046][ T3741] 9pnet_fd: Insufficient options for proto=fd [ 1826.919818][ T3745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.928499][ T3745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.091299][ T3750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27103'. [ 1827.667085][ T3772] FAULT_INJECTION: forcing a failure. [ 1827.667085][ T3772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1827.680270][ T3772] CPU: 0 UID: 0 PID: 3772 Comm: syz.9.27112 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1827.680342][ T3772] Tainted: [W]=WARN [ 1827.680364][ T3772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1827.680422][ T3772] Call Trace: [ 1827.680431][ T3772] [ 1827.680441][ T3772] __dump_stack+0x1d/0x30 [ 1827.680468][ T3772] dump_stack_lvl+0xe8/0x140 [ 1827.680488][ T3772] dump_stack+0x15/0x1b [ 1827.680503][ T3772] should_fail_ex+0x265/0x280 [ 1827.680533][ T3772] should_fail+0xb/0x20 [ 1827.680605][ T3772] should_fail_usercopy+0x1a/0x20 [ 1827.680663][ T3772] _copy_from_user+0x1c/0xb0 [ 1827.680686][ T3772] __sys_bpf+0x178/0x790 [ 1827.680724][ T3772] __x64_sys_bpf+0x41/0x50 [ 1827.680749][ T3772] x64_sys_call+0x2478/0x2fb0 [ 1827.680778][ T3772] do_syscall_64+0xd2/0x200 [ 1827.680807][ T3772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1827.680835][ T3772] ? clear_bhb_loop+0x40/0x90 [ 1827.680911][ T3772] ? clear_bhb_loop+0x40/0x90 [ 1827.680935][ T3772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.680959][ T3772] RIP: 0033:0x7f8dd77be929 [ 1827.680977][ T3772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1827.680997][ T3772] RSP: 002b:00007f8dd5e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1827.681020][ T3772] RAX: ffffffffffffffda RBX: 00007f8dd79e5fa0 RCX: 00007f8dd77be929 [ 1827.681034][ T3772] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 1827.681084][ T3772] RBP: 00007f8dd5e27090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.681097][ T3772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1827.681160][ T3772] R13: 0000000000000001 R14: 00007f8dd79e5fa0 R15: 00007ffd816883d8 [ 1827.681180][ T3772] [ 1828.086718][ T3786] FAULT_INJECTION: forcing a failure. [ 1828.086718][ T3786] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.100039][ T3786] CPU: 1 UID: 0 PID: 3786 Comm: syz.2.27118 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1828.100110][ T3786] Tainted: [W]=WARN [ 1828.100118][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1828.100133][ T3786] Call Trace: [ 1828.100141][ T3786] [ 1828.100150][ T3786] __dump_stack+0x1d/0x30 [ 1828.100174][ T3786] dump_stack_lvl+0xe8/0x140 [ 1828.100234][ T3786] dump_stack+0x15/0x1b [ 1828.100253][ T3786] should_fail_ex+0x265/0x280 [ 1828.100360][ T3786] ? call_usermodehelper_setup+0x72/0x190 [ 1828.100389][ T3786] should_failslab+0x8c/0xb0 [ 1828.100412][ T3786] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1828.100495][ T3786] __kmalloc_cache_noprof+0x4c/0x320 [ 1828.100524][ T3786] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 1828.100552][ T3786] ? __pfx_free_modprobe_argv+0x10/0x10 [ 1828.100606][ T3786] call_usermodehelper_setup+0x72/0x190 [ 1828.100640][ T3786] __request_module+0x264/0x3e0 [ 1828.100717][ T3786] ? capable+0x7c/0xb0 [ 1828.100742][ T3786] dev_load+0x61/0xc0 [ 1828.100764][ T3786] dev_ioctl+0x6f4/0x960 [ 1828.100785][ T3786] sock_do_ioctl+0x197/0x220 [ 1828.100837][ T3786] sock_ioctl+0x41b/0x610 [ 1828.100858][ T3786] ? __pfx_sock_ioctl+0x10/0x10 [ 1828.100898][ T3786] __se_sys_ioctl+0xce/0x140 [ 1828.100934][ T3786] __x64_sys_ioctl+0x43/0x50 [ 1828.100964][ T3786] x64_sys_call+0x19a8/0x2fb0 [ 1828.100987][ T3786] do_syscall_64+0xd2/0x200 [ 1828.101009][ T3786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1828.101132][ T3786] ? clear_bhb_loop+0x40/0x90 [ 1828.101193][ T3786] ? clear_bhb_loop+0x40/0x90 [ 1828.101216][ T3786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.101240][ T3786] RIP: 0033:0x7f2a8220e929 [ 1828.101259][ T3786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.101278][ T3786] RSP: 002b:00007f2a80877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1828.101378][ T3786] RAX: ffffffffffffffda RBX: 00007f2a82435fa0 RCX: 00007f2a8220e929 [ 1828.101392][ T3786] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000007 [ 1828.101407][ T3786] RBP: 00007f2a80877090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.101421][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1828.101435][ T3786] R13: 0000000000000000 R14: 00007f2a82435fa0 R15: 00007ffc46c94ef8 [ 1828.101491][ T3786] [ 1828.367820][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.387799][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.461524][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 1828.461543][ T29] audit: type=1326 audit(1723.367:172019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.491303][ T6920] page_pool_release_retry() stalled pool shutdown: id 1234, 1 inflight 60 sec [ 1828.491702][ T29] audit: type=1326 audit(1723.367:172020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.525022][ T29] audit: type=1326 audit(1723.367:172021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.548861][ T29] audit: type=1326 audit(1723.367:172022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.572675][ T29] audit: type=1326 audit(1723.367:172023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.595939][ T29] audit: type=1326 audit(1723.367:172024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.619895][ T29] audit: type=1326 audit(1723.367:172025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.644236][ T29] audit: type=1326 audit(1723.367:172026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.667412][ T29] audit: type=1326 audit(1723.367:172027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.691369][ T29] audit: type=1326 audit(1723.367:172028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3800 comm="syz.1.27123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1828.861623][ T3806] bond4: entered promiscuous mode [ 1828.866775][ T3806] bond4: entered allmulticast mode [ 1828.873642][ T3806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1828.884271][ T3806] bond4 (unregistering): Released all slaves [ 1829.251456][ T3888] lo speed is unknown, defaulting to 1000 [ 1829.268775][ T3888] lo speed is unknown, defaulting to 1000 [ 1829.949004][ T3905] SELinux: failed to load policy [ 1829.954819][ T3905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=3905 comm=syz.1.27136 [ 1830.065352][ T3908] __nla_validate_parse: 3 callbacks suppressed [ 1830.065368][ T3908] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27137'. [ 1830.315357][ T3914] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.27140'. [ 1830.389991][ T3920] bond1: entered promiscuous mode [ 1830.395111][ T3920] bond1: entered allmulticast mode [ 1830.402888][ T3920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1830.413337][ T3920] bond1 (unregistering): Released all slaves [ 1830.771516][ T4005] SELinux: failed to load policy [ 1830.785603][ T4005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4005 comm=syz.1.27147 [ 1830.940986][ T4015] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27150'. [ 1831.421889][ T4032] tipc: Enabling of bearer rejected, failed to enable media [ 1831.778103][ T4045] Invalid ELF header magic: != ELF [ 1831.783161][ T4043] SELinux: failed to load policy [ 1831.786548][ T4045] 9pnet_fd: Insufficient options for proto=fd [ 1831.789952][ T4043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4043 comm=syz.1.27159 [ 1831.902291][ T4054] netlink: 40 bytes leftover after parsing attributes in process `syz.6.27164'. [ 1831.920451][ T4052] siw: device registration error -23 [ 1832.211680][ T4073] SELinux: failed to load policy [ 1832.219361][ T4073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4073 comm=syz.5.27172 [ 1832.242767][ T4076] bond1: entered promiscuous mode [ 1832.248000][ T4076] bond1: entered allmulticast mode [ 1832.254721][ T4073] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27172'. [ 1832.264255][ T4076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1832.275890][ T4076] bond1 (unregistering): Released all slaves [ 1832.343211][ T4151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27176'. [ 1832.535843][ T4158] loop9: detected capacity change from 0 to 512 [ 1832.824781][ T4158] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1832.848970][ T4158] EXT4-fs (loop9): 1 truncate cleaned up [ 1832.874713][ T4158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1832.898647][ T4158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.111339][ T4176] netlink: 464 bytes leftover after parsing attributes in process `syz.2.27184'. [ 1833.294093][ T4182] SELinux: failed to load policy [ 1833.300009][ T4182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4182 comm=syz.5.27187 [ 1833.316615][ T4182] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27187'. [ 1833.381423][ T4187] bond2: entered promiscuous mode [ 1833.386528][ T4187] bond2: entered allmulticast mode [ 1833.422816][ T4187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1833.469884][ T4187] bond2 (unregistering): Released all slaves [ 1833.482717][ T4227] tipc: Enabling of bearer rejected, failed to enable media [ 1833.556002][ T4225] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.27192'. [ 1833.636057][ T4266] netlink: 'syz.6.27195': attribute type 3 has an invalid length. [ 1833.645288][ T4268] Invalid ELF header magic: != ELF [ 1833.652282][ T4268] 9pnet_fd: Insufficient options for proto=fd [ 1833.817793][ T4275] netlink: 464 bytes leftover after parsing attributes in process `syz.6.27198'. [ 1833.829696][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 1833.829713][ T29] audit: type=1326 audit(1728.390:172628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.859871][ T29] audit: type=1326 audit(1728.390:172629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.883460][ T29] audit: type=1326 audit(1728.390:172630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.906822][ T29] audit: type=1326 audit(1728.390:172631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.930077][ T29] audit: type=1326 audit(1728.390:172632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.953416][ T29] audit: type=1326 audit(1728.390:172633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1833.976923][ T29] audit: type=1326 audit(1728.390:172634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1834.000152][ T29] audit: type=1326 audit(1728.390:172635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1834.025049][ T29] audit: type=1326 audit(1728.390:172636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1834.048326][ T29] audit: type=1326 audit(1728.390:172637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4273 comm="syz.6.27198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1834.534300][ T4284] SELinux: failed to load policy [ 1834.541590][ T4284] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4284 comm=syz.2.27201 [ 1834.733024][ T4286] lo speed is unknown, defaulting to 1000 [ 1834.734358][ T4301] netlink: 'syz.1.27208': attribute type 3 has an invalid length. [ 1834.743648][ T4286] lo speed is unknown, defaulting to 1000 [ 1835.459356][ T4321] SELinux: failed to load policy [ 1835.483976][ T4321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=4321 comm=syz.5.27216 [ 1835.522892][ T4321] __nla_validate_parse: 5 callbacks suppressed [ 1835.522907][ T4321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27216'. [ 1835.622460][ T4327] netlink: 112 bytes leftover after parsing attributes in process `syz.5.27217'. [ 1836.024709][ T4349] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27223'. [ 1836.059065][ T4337] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.27220'. [ 1836.175990][ T4354] bond4: entered promiscuous mode [ 1836.181279][ T4354] bond4: entered allmulticast mode [ 1836.219877][ T4354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1836.247505][ T4354] bond4 (unregistering): Released all slaves [ 1836.292069][ T4360] bond1: entered promiscuous mode [ 1836.297206][ T4360] bond1: entered allmulticast mode [ 1836.307876][ T4360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1836.320902][ T4360] bond1 (unregistering): Released all slaves [ 1836.432986][ T4499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4499 comm=syz.5.27228 [ 1836.924317][ T4522] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.27231'. [ 1837.071859][ T4533] loop9: detected capacity change from 0 to 512 [ 1837.098414][ T4533] journal_path: Non-blockdev passed as './bus' [ 1837.104649][ T4533] EXT4-fs: error: could not find journal device path [ 1837.148074][ T4538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27235'. [ 1837.286294][ T4547] FAULT_INJECTION: forcing a failure. [ 1837.286294][ T4547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1837.299469][ T4547] CPU: 1 UID: 0 PID: 4547 Comm: syz.5.27238 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1837.299504][ T4547] Tainted: [W]=WARN [ 1837.299512][ T4547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1837.299590][ T4547] Call Trace: [ 1837.299597][ T4547] [ 1837.299606][ T4547] __dump_stack+0x1d/0x30 [ 1837.299630][ T4547] dump_stack_lvl+0xe8/0x140 [ 1837.299651][ T4547] dump_stack+0x15/0x1b [ 1837.299669][ T4547] should_fail_ex+0x265/0x280 [ 1837.299725][ T4547] should_fail+0xb/0x20 [ 1837.299754][ T4547] should_fail_usercopy+0x1a/0x20 [ 1837.299833][ T4547] _copy_to_user+0x20/0xa0 [ 1837.299891][ T4547] simple_read_from_buffer+0xb5/0x130 [ 1837.300062][ T4547] proc_fail_nth_read+0x100/0x140 [ 1837.300083][ T4547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1837.300120][ T4547] vfs_read+0x1a0/0x6f0 [ 1837.300146][ T4547] ? __rcu_read_unlock+0x4f/0x70 [ 1837.300243][ T4547] ? __fget_files+0x184/0x1c0 [ 1837.300263][ T4547] ksys_read+0xda/0x1a0 [ 1837.300291][ T4547] __x64_sys_read+0x40/0x50 [ 1837.300340][ T4547] x64_sys_call+0x2d77/0x2fb0 [ 1837.300363][ T4547] do_syscall_64+0xd2/0x200 [ 1837.300455][ T4547] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1837.300482][ T4547] ? clear_bhb_loop+0x40/0x90 [ 1837.300518][ T4547] ? clear_bhb_loop+0x40/0x90 [ 1837.300540][ T4547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.300629][ T4547] RIP: 0033:0x7f07e367d33c [ 1837.300645][ T4547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1837.300664][ T4547] RSP: 002b:00007f07e1ce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1837.300686][ T4547] RAX: ffffffffffffffda RBX: 00007f07e38a5fa0 RCX: 00007f07e367d33c [ 1837.300700][ T4547] RDX: 000000000000000f RSI: 00007f07e1ce70a0 RDI: 0000000000000004 [ 1837.300713][ T4547] RBP: 00007f07e1ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.300785][ T4547] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1837.300799][ T4547] R13: 0000000000000000 R14: 00007f07e38a5fa0 R15: 00007ffd31100988 [ 1837.300817][ T4547] [ 1837.676799][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27241'. [ 1837.727222][ T4559] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27243'. [ 1839.743853][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 1839.743872][ T29] audit: type=1400 audit(1733.919:172914): avc: denied { listen } for pid=4585 comm="syz.9.27250" lport=55363 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1839.786589][ T29] audit: type=1400 audit(1733.947:172915): avc: denied { accept } for pid=4585 comm="syz.9.27250" lport=55363 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1839.836411][ T4600] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1839.862027][ T4600] loop9: detected capacity change from 0 to 1024 [ 1839.903277][ T29] audit: type=1326 audit(1734.059:172916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1839.927385][ T29] audit: type=1326 audit(1734.059:172917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1839.950640][ T29] audit: type=1326 audit(1734.059:172918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1839.974378][ T29] audit: type=1326 audit(1734.059:172919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1839.997579][ T29] audit: type=1326 audit(1734.059:172920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1840.021327][ T29] audit: type=1326 audit(1734.059:172921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1840.044714][ T29] audit: type=1326 audit(1734.059:172922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1840.068054][ T29] audit: type=1326 audit(1734.059:172923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.1.27258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1840.110862][ T4600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1840.131488][ T4600] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.27255: inode #48: comm syz.9.27255: iget: illegal inode # [ 1840.149339][ T4600] EXT4-fs (loop9): Remounting filesystem read-only [ 1840.149369][ T4621] sch_fq: defrate 0 ignored. [ 1840.161788][ T4621] bond2: entered promiscuous mode [ 1840.167061][ T4621] bond2: entered allmulticast mode [ 1840.169988][ T4600] EXT4-fs warning (device loop9): ext4_xattr_block_set:2190: inode #19: comm syz.9.27255: dec ref error=-30 [ 1840.173332][ T4621] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1840.201883][ T4621] bond2 (unregistering): Released all slaves [ 1840.249101][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1840.325035][ T4699] loop9: detected capacity change from 0 to 2048 [ 1840.333746][ T4699] ext4: Unknown parameter 'noacl' [ 1840.470847][ T4710] siw: device registration error -23 [ 1841.258175][ T4736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.267991][ T4736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.381711][ T4744] loop9: detected capacity change from 0 to 1024 [ 1841.397846][ T4744] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1841.407424][ T4744] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27279: Failed to acquire dquot type 0 [ 1841.460073][ T4744] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1841.481100][ T4744] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27279: corrupted inode contents [ 1841.503902][ T4744] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.27279: mark_inode_dirty error [ 1841.515925][ T4744] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27279: corrupted inode contents [ 1841.528904][ T4744] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.27279: mark_inode_dirty error [ 1841.546684][ T4744] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27279: corrupted inode contents [ 1841.572481][ T4744] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1841.601044][ T4744] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27279: corrupted inode contents [ 1841.613955][ T4744] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.27279: mark_inode_dirty error [ 1841.632857][ T4744] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1841.658306][ T4744] EXT4-fs (loop9): 1 truncate cleaned up [ 1841.667365][ T4744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1841.796189][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.865943][ T4750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27280'. [ 1842.038839][ T4760] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.27282'. [ 1842.312031][ T4765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27285'. [ 1842.824809][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.860490][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1843.170558][ T4788] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.27293'. [ 1843.614202][ T4802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27298'. [ 1845.054986][ T4849] loop9: detected capacity change from 0 to 512 [ 1845.076906][ T4849] EXT4-fs: Ignoring removed i_version option [ 1845.105566][ T4849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1845.128344][ T4849] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1845.137843][ T4849] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27317: bg 0: block 248: padding at end of block bitmap is not set [ 1845.180461][ T4849] __quota_error: 557 callbacks suppressed [ 1845.180481][ T4849] Quota error (device loop9): write_blk: dquota write failed [ 1845.194348][ T4849] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1845.204356][ T4849] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27317: Failed to acquire dquot type 1 [ 1845.330638][ T4849] EXT4-fs (loop9): 1 truncate cleaned up [ 1845.351645][ T4849] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1845.442375][ T4849] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27317'. [ 1845.480969][ T29] audit: type=1326 audit(1739.288:173479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.504525][ T29] audit: type=1326 audit(1739.288:173480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.572401][T16485] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1845.618558][ T29] audit: type=1326 audit(1739.316:173481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.642134][ T29] audit: type=1326 audit(1739.316:173482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.665313][ T29] audit: type=1326 audit(1739.316:173483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.688511][ T29] audit: type=1326 audit(1739.316:173484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.711791][ T29] audit: type=1326 audit(1739.316:173485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.735029][ T29] audit: type=1326 audit(1739.316:173486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4848 comm="syz.9.27317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dd77be929 code=0x7ffc0000 [ 1845.874119][ T4858] lo speed is unknown, defaulting to 1000 [ 1845.920209][ T4861] lo speed is unknown, defaulting to 1000 [ 1845.926183][ T4858] lo speed is unknown, defaulting to 1000 [ 1845.961667][ T4861] lo speed is unknown, defaulting to 1000 [ 1846.029421][ T4890] netem: change failed [ 1846.278601][ T4896] lo speed is unknown, defaulting to 1000 [ 1846.313819][ T4896] lo speed is unknown, defaulting to 1000 [ 1846.333736][ T4900] lo speed is unknown, defaulting to 1000 [ 1846.367223][ T4900] lo speed is unknown, defaulting to 1000 [ 1846.380501][ T4904] netlink: 'syz.2.27331': attribute type 10 has an invalid length. [ 1846.390042][ T4904] ipvlan0: left promiscuous mode [ 1846.395009][ T4904] ipvlan0: entered allmulticast mode [ 1846.400386][ T4904] veth0_vlan: entered allmulticast mode [ 1847.724440][ T4861] chnl_net:caif_netlink_parms(): no params data found [ 1847.768434][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27334'. [ 1847.832043][ T4861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.839239][ T4861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.874308][ T4861] bridge_slave_0: entered allmulticast mode [ 1847.882102][ T4861] bridge_slave_0: entered promiscuous mode [ 1847.913251][ T4861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.920547][ T4861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.949905][ T4861] bridge_slave_1: entered allmulticast mode [ 1847.960292][ T4861] bridge_slave_1: entered promiscuous mode [ 1847.998993][ T5146] bond4: entered promiscuous mode [ 1848.004130][ T5146] bond4: entered allmulticast mode [ 1848.026251][ T5146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1848.037564][ T5146] bond4 (unregistering): Released all slaves [ 1848.176836][ T4861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.197653][ T4861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.332591][ T5241] netem: change failed [ 1848.423185][ T4861] team0: Port device team_slave_0 added [ 1848.435459][ T4861] team0: Port device team_slave_1 added [ 1848.463718][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1848.470767][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.496976][ T4861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1848.528832][ T4861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1848.535888][ T4861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.561954][ T4861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1848.684124][ T5267] lo speed is unknown, defaulting to 1000 [ 1848.701745][ T4861] hsr_slave_0: entered promiscuous mode [ 1848.707822][ T4861] hsr_slave_1: entered promiscuous mode [ 1848.741970][ T4861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1848.749603][ T4861] Cannot create hsr debugfs directory [ 1848.755776][ T5267] lo speed is unknown, defaulting to 1000 [ 1848.877757][ T4861] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.957918][ T4861] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.126474][ T4861] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.331259][ T4861] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.442637][ T5403] xt_hashlimit: max too large, truncated to 1048576 [ 1849.503635][ T4861] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1849.555872][ T4861] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1849.573310][ T4861] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1849.596804][ T4861] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1850.009170][ T4861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1850.367636][ T5460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5460 comm=syz.1.27350 [ 1850.420097][ T4861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1850.443878][T28677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.451198][T28677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1850.503467][T28672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.510613][T28672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.533983][ T4861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1850.544678][ T4861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1850.622912][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1850.622928][ T29] audit: type=1326 audit(1744.096:173648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.2.27357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1850.623098][ T4861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1850.630021][ T29] audit: type=1326 audit(1744.096:173649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5480 comm="syz.2.27357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a8220e929 code=0x7ffc0000 [ 1850.708599][ T5485] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1850.708767][ T5487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1850.715183][ T5485] audit: audit_lost=22 audit_rate_limit=0 audit_backlog_limit=64 [ 1850.715202][ T5485] audit: backlog limit exceeded [ 1850.735031][ T5487] audit: audit_lost=23 audit_rate_limit=0 audit_backlog_limit=64 [ 1850.742907][ T5487] audit: backlog limit exceeded [ 1850.748160][ T29] audit: type=1326 audit(1744.133:173650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.6.27356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1850.754759][ T5485] FAULT_INJECTION: forcing a failure. [ 1850.754759][ T5485] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.772125][ T29] audit: type=1326 audit(1744.133:173651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.6.27356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2f13e929 code=0x7ffc0000 [ 1850.784314][ T5485] CPU: 0 UID: 0 PID: 5485 Comm: syz.1.27358 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1850.784357][ T5485] Tainted: [W]=WARN [ 1850.784364][ T5485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1850.784377][ T5485] Call Trace: [ 1850.784385][ T5485] [ 1850.784393][ T5485] __dump_stack+0x1d/0x30 [ 1850.784418][ T5485] dump_stack_lvl+0xe8/0x140 [ 1850.784485][ T5485] dump_stack+0x15/0x1b [ 1850.784547][ T5485] should_fail_ex+0x265/0x280 [ 1850.784598][ T5485] ? ipv6_add_addr+0x389/0x830 [ 1850.784703][ T5485] should_failslab+0x8c/0xb0 [ 1850.784863][ T5485] __kmalloc_cache_noprof+0x4c/0x320 [ 1850.784966][ T5485] ipv6_add_addr+0x389/0x830 [ 1850.784995][ T5485] inet6_addr_add+0x26e/0x6a0 [ 1850.785025][ T5485] ? selinux_capable+0x1f9/0x270 [ 1850.785072][ T5485] ? should_fail_ex+0xdb/0x280 [ 1850.785102][ T5485] addrconf_add_ifaddr+0x1ab/0x270 [ 1850.785157][ T5485] inet6_ioctl+0xb0/0x190 [ 1850.785175][ T5485] ? ioctl_has_perm+0x257/0x2a0 [ 1850.785212][ T5485] sock_do_ioctl+0x73/0x220 [ 1850.785237][ T5485] sock_ioctl+0x41b/0x610 [ 1850.785259][ T5485] ? __pfx_sock_ioctl+0x10/0x10 [ 1850.785279][ T5485] __se_sys_ioctl+0xce/0x140 [ 1850.785373][ T5485] __x64_sys_ioctl+0x43/0x50 [ 1850.785399][ T5485] x64_sys_call+0x19a8/0x2fb0 [ 1850.785428][ T5485] do_syscall_64+0xd2/0x200 [ 1850.785476][ T5485] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1850.785510][ T5485] ? clear_bhb_loop+0x40/0x90 [ 1850.785531][ T5485] ? clear_bhb_loop+0x40/0x90 [ 1850.785604][ T5485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.785626][ T5485] RIP: 0033:0x7f0a941ee929 [ 1850.785643][ T5485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1850.785660][ T5485] RSP: 002b:00007f0a92857038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1850.785681][ T5485] RAX: ffffffffffffffda RBX: 00007f0a94415fa0 RCX: 00007f0a941ee929 [ 1850.785695][ T5485] RDX: 0000200000005b80 RSI: 0000000000008916 RDI: 000000000000000a [ 1850.785765][ T5485] RBP: 00007f0a92857090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.785778][ T5485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.785790][ T5485] R13: 0000000000000000 R14: 00007f0a94415fa0 R15: 00007fff59168dc8 [ 1850.785808][ T5485] [ 1851.185805][ T5509] lo speed is unknown, defaulting to 1000 [ 1851.197916][ T4861] veth0_vlan: entered promiscuous mode [ 1851.207319][ T4861] veth1_vlan: entered promiscuous mode [ 1851.220116][ T5509] lo speed is unknown, defaulting to 1000 [ 1851.225491][ T4861] veth0_macvtap: entered promiscuous mode [ 1851.239178][ T4861] veth1_macvtap: entered promiscuous mode [ 1851.249440][ T5518] lo speed is unknown, defaulting to 1000 [ 1851.258399][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.269263][ T4861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.285808][ T5518] lo speed is unknown, defaulting to 1000 [ 1851.295782][ T4861] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.304737][ T4861] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.313921][ T4861] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.322756][ T4861] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.458640][ T5546] netlink: 112 bytes leftover after parsing attributes in process `syz.9.27321'. [ 1851.675621][ T5587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27374'. [ 1851.733097][ T5597] loop9: detected capacity change from 0 to 1024 [ 1851.741571][ T5597] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1851.748694][ T5597] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27372: Failed to acquire dquot type 0 [ 1851.761155][ T5597] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1851.776476][ T5597] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27372: corrupted inode contents [ 1851.790761][ T5597] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.27372: mark_inode_dirty error [ 1851.802635][ T5597] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27372: corrupted inode contents [ 1851.819905][ T5597] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.27372: mark_inode_dirty error [ 1851.831631][ T5597] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27372: corrupted inode contents [ 1851.843987][ T5597] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1851.853966][ T5597] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27372: corrupted inode contents [ 1851.866384][ T5597] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.27372: mark_inode_dirty error [ 1851.899708][ T5597] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1851.910230][ T5597] EXT4-fs (loop9): 1 truncate cleaned up [ 1851.917103][ T5597] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1851.937580][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27380'. [ 1851.963374][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1851.987802][ T5646] netlink: 112 bytes leftover after parsing attributes in process `syz.2.27383'. [ 1852.015345][ T5652] 9pnet_fd: Insufficient options for proto=fd [ 1852.035650][ T5654] netlink: 16 bytes leftover after parsing attributes in process `syz.5.27385'. [ 1852.056414][ T5656] loop9: detected capacity change from 0 to 512 [ 1852.077782][ T5656] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1852.095307][ T5656] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1852.107700][ T5656] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1852.128100][ T5656] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1852.138029][ T5656] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27386: bg 0: block 40: padding at end of block bitmap is not set [ 1852.154453][ T5656] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1852.167072][ T5656] EXT4-fs (loop9): 1 truncate cleaned up [ 1852.175892][ T5656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1852.180316][ T5671] lo speed is unknown, defaulting to 1000 [ 1852.195240][ T5671] lo speed is unknown, defaulting to 1000 [ 1852.231004][ T5679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27393'. [ 1852.242515][ T5676] 9pnet: Could not find request transport: fdr [ 1852.261060][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.285416][ T5700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5700 comm=syz.2.27395 [ 1852.731854][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27400'. [ 1852.932205][ T5719] bond1: entered promiscuous mode [ 1852.937317][ T5719] bond1: entered allmulticast mode [ 1852.963741][ T5719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1852.982109][ T5763] netlink: 'syz.5.27399': attribute type 10 has an invalid length. [ 1852.990433][ T5763] ipvlan0: entered allmulticast mode [ 1852.995799][ T5763] veth0_vlan: entered allmulticast mode [ 1853.006979][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27405'. [ 1853.008153][ T5722] lo speed is unknown, defaulting to 1000 [ 1853.030026][ T5725] lo speed is unknown, defaulting to 1000 [ 1853.036216][ T5725] lo speed is unknown, defaulting to 1000 [ 1853.053351][ T5722] lo speed is unknown, defaulting to 1000 [ 1853.112132][ T5778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5778 comm=syz.2.27407 [ 1853.207197][ T5806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5806 comm=syz.2.27408 [ 1853.231193][ T5799] netem: change failed [ 1853.371172][ T5832] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27413'. [ 1853.423399][ T5834] bond3: entered promiscuous mode [ 1853.428502][ T5834] bond3: entered allmulticast mode [ 1853.437591][ T5834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1853.449977][ T5834] bond3 (unregistering): Released all slaves [ 1853.704389][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27416'. [ 1854.349511][ T5928] loop9: detected capacity change from 0 to 512 [ 1854.444580][ T5928] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1854.544385][ T5928] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1854.595695][ T5928] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1854.603540][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.2.27426'. [ 1854.674827][ T5928] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1854.702112][ T5928] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27424: bg 0: block 40: padding at end of block bitmap is not set [ 1854.742447][ T5940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27428'. [ 1854.753325][ T5928] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1854.771681][ T5928] EXT4-fs (loop9): 1 truncate cleaned up [ 1854.791512][ T5928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1854.894085][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1854.946906][ T5952] lo speed is unknown, defaulting to 1000 [ 1854.955029][ T5952] lo speed is unknown, defaulting to 1000 [ 1855.051009][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.052417][ T5979] lo speed is unknown, defaulting to 1000 [ 1855.059962][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.071057][ T5979] lo speed is unknown, defaulting to 1000 [ 1855.089260][ T5994] loop9: detected capacity change from 0 to 1024 [ 1855.102544][ T5994] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1855.113198][ T5994] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27436: Failed to acquire dquot type 0 [ 1855.125461][ T5994] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1855.141635][ T5994] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27436: corrupted inode contents [ 1855.143764][ T5994] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.27436: mark_inode_dirty error [ 1855.170466][ T5994] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27436: corrupted inode contents [ 1855.182698][ T5994] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.27436: mark_inode_dirty error [ 1855.194305][ T5994] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27436: corrupted inode contents [ 1855.207787][ T5994] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1855.216600][ T5994] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27436: corrupted inode contents [ 1855.235355][ T5994] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.27436: mark_inode_dirty error [ 1855.247250][ T5994] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1855.259888][ T5994] EXT4-fs (loop9): 1 truncate cleaned up [ 1855.266847][ T5994] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1855.374959][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.419760][ T6025] netlink: 40 bytes leftover after parsing attributes in process `syz.9.27440'. [ 1855.437889][ T6025] loop9: detected capacity change from 0 to 512 [ 1855.446760][ T6025] journal_path: Non-blockdev passed as './bus' [ 1855.452961][ T6025] EXT4-fs: error: could not find journal device path [ 1855.597828][ T6032] lo speed is unknown, defaulting to 1000 [ 1855.607672][ T6032] lo speed is unknown, defaulting to 1000 [ 1855.787843][T28664] bond0 (unregistering): Released all slaves [ 1855.798412][T28664] bond1 (unregistering): Released all slaves [ 1855.807462][T28664] bond2 (unregistering): Released all slaves [ 1856.840301][T28664] tipc: Left network mode [ 1856.842807][ T6032] chnl_net:caif_netlink_parms(): no params data found [ 1856.882611][ T29] kauditd_printk_skb: 752 callbacks suppressed [ 1856.882629][ T29] audit: type=1400 audit(1749.951:174398): avc: denied { kexec_image_load } for pid=6169 comm="syz.5.27450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1857.009521][ T29] audit: type=1326 audit(1750.073:174399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.032885][ T29] audit: type=1326 audit(1750.073:174400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.101918][ T29] audit: type=1326 audit(1750.120:174401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.125510][ T29] audit: type=1326 audit(1750.120:174402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.149160][ T29] audit: type=1326 audit(1750.120:174403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.149186][ T29] audit: type=1326 audit(1750.120:174404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.149267][ T29] audit: type=1326 audit(1750.120:174405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.149358][ T29] audit: type=1326 audit(1750.120:174406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.149380][ T29] audit: type=1326 audit(1750.120:174407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.1.27452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0a941ee929 code=0x7ffc0000 [ 1857.155712][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.6.27453'. [ 1857.155784][ T6227] siw: device registration error -23 [ 1857.255975][T23014] smc: removing ib device syz! [ 1857.370045][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1857.377361][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1857.398412][ T6032] bridge_slave_0: entered allmulticast mode [ 1857.418429][ T6032] bridge_slave_0: entered promiscuous mode [ 1857.442818][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1857.450080][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.474584][ T6032] bridge_slave_1: entered allmulticast mode [ 1857.503479][ T6032] bridge_slave_1: entered promiscuous mode [ 1857.543233][ T6032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1857.555456][ T6032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1857.721447][ T6032] team0: Port device team_slave_0 added [ 1857.747923][ T6032] team0: Port device team_slave_1 added [ 1857.810099][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1857.817168][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.843497][ T6032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1857.928606][ T6032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1857.935816][ T6032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1857.962174][ T6032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1858.044211][ T6032] hsr_slave_0: entered promiscuous mode [ 1858.050430][ T6032] hsr_slave_1: entered promiscuous mode [ 1858.057579][ T6032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1858.065632][ T6032] Cannot create hsr debugfs directory [ 1858.751555][ T6032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1858.772582][ T6032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1858.787234][ T6032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1858.801050][ T6032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1858.838503][ T6466] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27468'. [ 1858.883608][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1858.913305][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1858.955863][ T6481] netem: change failed [ 1858.963856][T23014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.971003][T23014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1858.982521][ T6456] lo speed is unknown, defaulting to 1000 [ 1858.993147][T28677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.000233][T28677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1859.002873][ T6482] loop9: detected capacity change from 0 to 1024 [ 1859.064057][ T6482] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1859.091044][ T6456] lo speed is unknown, defaulting to 1000 [ 1859.101661][ T6482] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27470: Failed to acquire dquot type 0 [ 1859.125404][ T6482] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1859.185803][ T6482] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27470: corrupted inode contents [ 1859.201081][ T6482] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.27470: mark_inode_dirty error [ 1859.241591][ T6482] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27470: corrupted inode contents [ 1859.259455][ T6482] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.27470: mark_inode_dirty error [ 1859.297713][ T6032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1859.304739][ T6482] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27470: corrupted inode contents [ 1859.337453][ T6513] lo speed is unknown, defaulting to 1000 [ 1859.355083][ T6482] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1859.368463][ T6482] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27470: corrupted inode contents [ 1859.404839][ T6482] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.27470: mark_inode_dirty error [ 1859.416664][ T6482] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1859.424098][ T6513] lo speed is unknown, defaulting to 1000 [ 1859.435563][ T6482] EXT4-fs (loop9): 1 truncate cleaned up [ 1859.457915][ T6482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1859.502814][ T6520] lo speed is unknown, defaulting to 1000 [ 1859.520001][ T6520] lo speed is unknown, defaulting to 1000 [ 1859.533420][ T6537] siw: device registration error -23 [ 1859.546945][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.656811][ T6032] veth0_vlan: entered promiscuous mode [ 1859.668789][ T6032] veth1_vlan: entered promiscuous mode [ 1859.758160][ T6556] lo speed is unknown, defaulting to 1000 [ 1859.775754][ T6584] lo speed is unknown, defaulting to 1000 [ 1859.797653][ T6556] lo speed is unknown, defaulting to 1000 [ 1859.801891][ T6032] veth0_macvtap: entered promiscuous mode [ 1859.810838][ T6032] veth1_macvtap: entered promiscuous mode [ 1859.821996][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.832797][ T6032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1859.849166][ T6032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.857964][ T6032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.866885][ T6032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1859.875781][ T6032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1860.281133][ T6584] lo speed is unknown, defaulting to 1000 [ 1860.357643][ T6646] netlink: 'syz.1.27490': attribute type 10 has an invalid length. [ 1860.376520][ T6646] ipvlan0: entered allmulticast mode [ 1860.381959][ T6646] veth0_vlan: entered allmulticast mode [ 1860.389378][ T6646] team0: Device ipvlan0 failed to register rx_handler [ 1860.498956][ T6659] siw: device registration error -23 [ 1860.554171][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27498'. [ 1860.857223][ T6680] lo speed is unknown, defaulting to 1000 [ 1860.881226][ T6680] lo speed is unknown, defaulting to 1000 [ 1861.045862][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27502'. [ 1861.225368][ T6714] netlink: 112 bytes leftover after parsing attributes in process `syz.1.27505'. [ 1861.476742][ T6734] lo speed is unknown, defaulting to 1000 [ 1861.483099][ T6734] lo speed is unknown, defaulting to 1000 [ 1861.811423][ T6758] loop9: detected capacity change from 0 to 1024 [ 1861.847824][ T6758] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1861.886931][ T6758] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27515: Failed to acquire dquot type 0 [ 1861.902716][ T6760] lo speed is unknown, defaulting to 1000 [ 1861.948331][ T6758] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1861.957098][ T6760] lo speed is unknown, defaulting to 1000 [ 1861.977583][ T6758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27515: corrupted inode contents [ 1861.994574][ T6758] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #13: comm syz.9.27515: mark_inode_dirty error [ 1862.009680][ T6758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27515: corrupted inode contents [ 1862.022836][ T6758] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.27515: mark_inode_dirty error [ 1862.039097][ T6758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27515: corrupted inode contents [ 1862.042698][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27516'. [ 1862.053046][ T6758] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 1862.069901][ T6758] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #13: comm syz.9.27515: corrupted inode contents [ 1862.082670][ T6758] EXT4-fs error (device loop9): ext4_truncate:4597: inode #13: comm syz.9.27515: mark_inode_dirty error [ 1862.094330][ T6758] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 1862.105207][ T6758] EXT4-fs (loop9): 1 truncate cleaned up [ 1862.111630][ T6758] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1862.131931][ T6795] netlink: 112 bytes leftover after parsing attributes in process `syz.2.27517'. [ 1862.187350][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.212434][ T6804] loop9: detected capacity change from 0 to 512 [ 1862.219350][ T6804] EXT4-fs: Ignoring removed i_version option [ 1862.232194][ T6804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1862.241778][ T6804] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1862.250709][ T6804] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27520: bg 0: block 248: padding at end of block bitmap is not set [ 1862.269642][ T6804] __quota_error: 677 callbacks suppressed [ 1862.269660][ T6804] Quota error (device loop9): write_blk: dquota write failed [ 1862.282975][ T6804] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1862.293001][ T6804] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.27520: Failed to acquire dquot type 1 [ 1862.308008][ T6804] EXT4-fs (loop9): 1 truncate cleaned up [ 1862.324342][ T6804] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1862.365662][ T29] audit: type=1326 audit(1755.077:175081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.389051][ T29] audit: type=1326 audit(1755.077:175082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.412427][ T29] audit: type=1326 audit(1755.077:175083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.435726][ T29] audit: type=1326 audit(1755.077:175084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.459088][ T29] audit: type=1326 audit(1755.077:175085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.475793][ T6812] lo speed is unknown, defaulting to 1000 [ 1862.482349][ T29] audit: type=1400 audit(1755.077:175086): avc: denied { mounton } for pid=6803 comm="syz.9.27520" path="/27/bus" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1862.482401][ T29] audit: type=1326 audit(1755.077:175087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.482429][ T29] audit: type=1326 audit(1755.077:175088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6803 comm="syz.9.27520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc05cc2e929 code=0x7ffc0000 [ 1862.623485][ T6812] lo speed is unknown, defaulting to 1000 [ 1862.664181][ T4861] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.741130][ T6844] bond1: entered promiscuous mode [ 1862.746280][ T6844] bond1: entered allmulticast mode [ 1862.759144][ T6844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1862.781576][ T6844] bond1 (unregistering): Released all slaves [ 1862.800857][ T6882] loop9: detected capacity change from 0 to 512 [ 1862.878987][ T6882] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1862.898651][ T6882] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1862.909410][ T6882] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1862.965136][ T6882] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1862.991276][ T6882] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27532: bg 0: block 40: padding at end of block bitmap is not set [ 1863.022994][ T6882] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1863.042973][ T6882] EXT4-fs (loop9): 1 truncate cleaned up [ 1863.061239][ T6882] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1863.093496][ T6882] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1863.317693][ T6947] lo speed is unknown, defaulting to 1000 [ 1863.334874][ T6947] lo speed is unknown, defaulting to 1000 [ 1863.402073][ T6951] lo speed is unknown, defaulting to 1000 [ 1863.445946][ T6951] lo speed is unknown, defaulting to 1000 [ 1863.597347][ T7001] netem: change failed [ 1863.829499][ T7015] bond1: entered promiscuous mode [ 1863.834657][ T7015] bond1: entered allmulticast mode [ 1863.845610][ T7015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1863.858901][ T7015] bond1 (unregistering): Released all slaves [ 1864.252891][ T7112] bond1: entered promiscuous mode [ 1864.258040][ T7112] bond1: entered allmulticast mode [ 1864.263548][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1864.273016][ T7112] bond1 (unregistering): Released all slaves [ 1864.389100][ T7184] netlink: 464 bytes leftover after parsing attributes in process `syz.2.27566'. [ 1864.487032][ T7190] lo speed is unknown, defaulting to 1000 [ 1864.493456][ T7190] lo speed is unknown, defaulting to 1000 [ 1864.498403][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1864.507929][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.540000][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.9.27571'. [ 1864.558851][ T7217] loop9: detected capacity change from 0 to 512 [ 1864.565895][ T7217] journal_path: Non-blockdev passed as './bus' [ 1864.572210][ T7217] EXT4-fs: error: could not find journal device path [ 1864.723846][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27574'. [ 1864.756306][ T7229] bond1: entered promiscuous mode [ 1864.761445][ T7229] bond1: entered allmulticast mode [ 1864.766997][ T7229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1864.776275][ T7229] bond1 (unregistering): Released all slaves [ 1864.787712][T28677] ================================================================== [ 1864.795819][T28677] BUG: KCSAN: data-race in alloc_pid / copy_process [ 1864.802436][T28677] [ 1864.804763][T28677] read-write to 0xffffffff86860860 of 4 bytes by task 28666 on cpu 1: [ 1864.812920][T28677] alloc_pid+0x539/0x720 [ 1864.817178][T28677] copy_process+0xe0e/0x1fe0 [ 1864.822129][T28677] kernel_clone+0x16c/0x5b0 [ 1864.826646][T28677] user_mode_thread+0x7d/0xb0 [ 1864.831334][T28677] call_usermodehelper_exec_work+0x41/0x160 [ 1864.837244][T28677] process_scheduled_works+0x4ce/0x9d0 [ 1864.842718][T28677] worker_thread+0x582/0x770 [ 1864.847323][T28677] kthread+0x486/0x510 [ 1864.851409][T28677] ret_from_fork+0xdd/0x150 [ 1864.855919][T28677] ret_from_fork_asm+0x1a/0x30 [ 1864.860692][T28677] [ 1864.863028][T28677] read to 0xffffffff86860860 of 4 bytes by task 28677 on cpu 0: [ 1864.870661][T28677] copy_process+0x148f/0x1fe0 [ 1864.875348][T28677] kernel_clone+0x16c/0x5b0 [ 1864.879868][T28677] user_mode_thread+0x7d/0xb0 [ 1864.884555][T28677] call_usermodehelper_exec_work+0x41/0x160 [ 1864.890466][T28677] process_scheduled_works+0x4ce/0x9d0 [ 1864.895947][T28677] worker_thread+0x582/0x770 [ 1864.900549][T28677] kthread+0x486/0x510 [ 1864.904798][T28677] ret_from_fork+0xdd/0x150 [ 1864.909310][T28677] ret_from_fork_asm+0x1a/0x30 [ 1864.914084][T28677] [ 1864.916410][T28677] value changed: 0x800000f9 -> 0x800000fa [ 1864.922129][T28677] [ 1864.924491][T28677] Reported by Kernel Concurrency Sanitizer on: [ 1864.930670][T28677] CPU: 0 UID: 0 PID: 28677 Comm: kworker/u8:18 Tainted: G W 6.16.0-rc2-syzkaller-00231-g75f5f23f8787 #0 PREEMPT(voluntary) [ 1864.945100][T28677] Tainted: [W]=WARN [ 1864.948905][T28677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1864.958968][T28677] Workqueue: events_unbound call_usermodehelper_exec_work [ 1864.966098][T28677] ================================================================== [ 1864.980469][ T7297] loop9: detected capacity change from 0 to 512 [ 1864.992042][ T7297] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1865.001403][ T7297] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1865.009009][ T7297] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1865.024290][ T7297] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1865.031872][ T7297] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.27575: bg 0: block 40: padding at end of block bitmap is not set [ 1865.046713][ T7297] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 1865.055891][ T7297] EXT4-fs (loop9): 1 truncate cleaned up [ 1865.061914][ T7297] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1865.074819][ T7297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.