last executing test programs: 1m1.957500662s ago: executing program 0 (id=62): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000180)=@ethtool_rxfh={0x46, 0x2800000, 0x80000000, 0xa, 0xf3, 'g/b', 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x8000c62) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f0000000180)=[{}], 0x1, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendfile(r5, r5, 0x0, 0x800000009) 1m1.737236085s ago: executing program 0 (id=63): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r4, 0x0, 0x0}, 0x10) pwrite64(r2, 0x0, 0x0, 0x9000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xc, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) creat(0x0, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, &(0x7f00000018c0)=0x0) timer_settime(r9, 0x1, &(0x7f0000001900)={{0x77359400}, {0x77359400}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004000, 0x0, 0x0) 59.983925151s ago: executing program 0 (id=78): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init() 59.947140862s ago: executing program 0 (id=79): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x6be53a9e97bb733e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r2}, 0x18) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3fffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f2, &(0x7f0000000b00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'rose0\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB="00000000f7ffffffffffffff0000f6ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='afs_flock_ev\x00', r7, 0x0, 0x7}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='mm_page_alloc\x00', r8, 0x0, 0x7}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x1) 59.309470171s ago: executing program 0 (id=86): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000002c0)="daf21a0c3fabed2c01b5949d0a7d60", 0xf}, {&(0x7f0000000c00)="6e410236b704473d60af4a673af7d0d17ef3195187d3e201eae6ad905a1812228d8320db979cfd732c1f9a94c4340933ed50c96d5c2b670e1d6d6621f4d3e409bc44262eb300bb730705087c5ba5a2782e60bfa790375d421127c759903c956fd1e12b7bf608ea5f80cc21995f565e866145a7b731c80df5c26aa373f1a41c8f1b188529cc6efffbcc9822140fed268a624aaa5ecb0e4fdd9782344d69228a7625d78435a2f9d5e9a2c4e3b95b7e58e3f4e22e39a9a5fe3668b24fe51af8147b67a716cca90aec23f25a9444a17686ebf25b7b6eec0f25011ba429a941fac0fe4b93ca70e91ef2112ff1df030c5ff200b809c2e8", 0xf4}, {&(0x7f0000000a80)="7199a8afd07818549ccf36abda343575ee3d5fb446df2d11a9c7ee511e4d63ce45dc11304c74d3ee66afcd2b449a8c62880aba302d5f3c23b193939b212b136ab955668397778b6447ce466766d710796541d057681240b914b9a01e5955e1a068ea11c0a89725d66a2b0bbf5478e0fefe65261df37d7d28c3eaa8d5d2fc11e785", 0x81}, {&(0x7f0000000b40)="7da6c6e1309e9e5cc927d11ff64cc6f1864feb514dbd6d027d16a56c6f469a35acf327a880c1eb021ae9a3ada502098945d3201e5056777dfdf4a1494cd9736b5ca9e3f1865aba2dafc5f1d3767e0b6782aa4ce65b943669f5f9b8ab90d1517280fb4a78c93718b8d97473b4922005cd3626eeafe95b91b4a069d5965198e68d7cba71903eb47a51", 0x88}, {&(0x7f00000009c0)="43e79d1200010000c6b98bff366514e4c2fcd4246bc90e301143c55fe37f81ebf8d67b7c83f069d358282aac4924d8d6cd140694d665ba74830f9d8fd87ec0bd20c8714ce61dd2b3a2e80eb5c6953a6d93125d2f124d00b07458fd7d30b9c5a9deb841c6348147a4853018de772e80035ef78cf8983ec3ed10121b3de8983825d4c347d98cf19d03f35c2a9af06e674b240a03095175be52a9f247f4", 0x9c}], 0x5, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0x48, 0x24000041}}], 0x1, 0x0) 58.999547166s ago: executing program 0 (id=92): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000002c0)="daf21a0c3fabed2c01b5949d0a7d60", 0xf}, {&(0x7f0000000c00)="6e410236b704473d60af4a673af7d0d17ef3195187d3e201eae6ad905a1812228d8320db979cfd732c1f9a94c4340933ed50c96d5c2b670e1d6d6621f4d3e409bc44262eb300bb730705087c5ba5a2782e60bfa790375d421127c759903c956fd1e12b7bf608ea5f80cc21995f565e866145a7b731c80df5c26aa373f1a41c8f1b188529cc6efffbcc9822140fed268a624aaa5ecb0e4fdd9782344d69228a7625d78435a2f9d5e9a2c4e3b95b7e58e3f4e22e39a9a5fe3668b24fe51af8147b67a716cca90aec23f25a9444a17686ebf25b7b6eec0f25011ba429a941fac0fe4b93ca70e91ef2112ff1df030c5ff200b809c2e8", 0xf4}, {&(0x7f0000000a80)="7199a8afd07818549ccf36abda343575ee3d5fb446df2d11a9c7ee511e4d63ce45dc11304c74d3ee66afcd2b449a8c62880aba302d5f3c23b193939b212b136ab955668397778b6447ce466766d710796541d057681240b914b9a01e5955e1a068ea11c0a89725d66a2b0bbf5478e0fefe65261df37d7d28c3eaa8d5d2fc11e785", 0x81}, {&(0x7f0000000b40)="7da6c6e1309e9e5cc927d11ff64cc6f1864feb514dbd6d027d16a56c6f469a35acf327a880c1eb021ae9a3ada502098945d3201e5056777dfdf4a1494cd9736b5ca9e3f1865aba2dafc5f1d3767e0b6782aa4ce65b943669f5f9b8ab90d1517280fb4a78c93718b8d97473b4922005cd3626eeafe95b91b4a069d5965198e68d7cba71903eb47a51", 0x88}, {&(0x7f00000009c0)="43e79d1200010000c6b98bff366514e4c2fcd4246bc90e301143c55fe37f81ebf8d67b7c83f069d358282aac4924d8d6cd140694d665ba74830f9d8fd87ec0bd20c8714ce61dd2b3a2e80eb5c6953a6d93125d2f124d00b07458fd7d30b9c5a9deb841c6348147a4853018de772e80035ef78cf8983ec3ed10121b3de8983825d4c347d98cf19d03f35c2a9af06e674b240a03095175be52a9f247f4", 0x9c}], 0x5, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r0, r0, r3]}}], 0x48, 0x24000041}}], 0x1, 0x0) 58.959280226s ago: executing program 32 (id=92): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000002c0)="daf21a0c3fabed2c01b5949d0a7d60", 0xf}, {&(0x7f0000000c00)="6e410236b704473d60af4a673af7d0d17ef3195187d3e201eae6ad905a1812228d8320db979cfd732c1f9a94c4340933ed50c96d5c2b670e1d6d6621f4d3e409bc44262eb300bb730705087c5ba5a2782e60bfa790375d421127c759903c956fd1e12b7bf608ea5f80cc21995f565e866145a7b731c80df5c26aa373f1a41c8f1b188529cc6efffbcc9822140fed268a624aaa5ecb0e4fdd9782344d69228a7625d78435a2f9d5e9a2c4e3b95b7e58e3f4e22e39a9a5fe3668b24fe51af8147b67a716cca90aec23f25a9444a17686ebf25b7b6eec0f25011ba429a941fac0fe4b93ca70e91ef2112ff1df030c5ff200b809c2e8", 0xf4}, {&(0x7f0000000a80)="7199a8afd07818549ccf36abda343575ee3d5fb446df2d11a9c7ee511e4d63ce45dc11304c74d3ee66afcd2b449a8c62880aba302d5f3c23b193939b212b136ab955668397778b6447ce466766d710796541d057681240b914b9a01e5955e1a068ea11c0a89725d66a2b0bbf5478e0fefe65261df37d7d28c3eaa8d5d2fc11e785", 0x81}, {&(0x7f0000000b40)="7da6c6e1309e9e5cc927d11ff64cc6f1864feb514dbd6d027d16a56c6f469a35acf327a880c1eb021ae9a3ada502098945d3201e5056777dfdf4a1494cd9736b5ca9e3f1865aba2dafc5f1d3767e0b6782aa4ce65b943669f5f9b8ab90d1517280fb4a78c93718b8d97473b4922005cd3626eeafe95b91b4a069d5965198e68d7cba71903eb47a51", 0x88}, {&(0x7f00000009c0)="43e79d1200010000c6b98bff366514e4c2fcd4246bc90e301143c55fe37f81ebf8d67b7c83f069d358282aac4924d8d6cd140694d665ba74830f9d8fd87ec0bd20c8714ce61dd2b3a2e80eb5c6953a6d93125d2f124d00b07458fd7d30b9c5a9deb841c6348147a4853018de772e80035ef78cf8983ec3ed10121b3de8983825d4c347d98cf19d03f35c2a9af06e674b240a03095175be52a9f247f4", 0x9c}], 0x5, &(0x7f0000001180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x24, 0x1, 0x1, [r3, r3, r0, r0, r3]}}], 0x48, 0x24000041}}], 0x1, 0x0) 9.920421523s ago: executing program 3 (id=510): socket(0x2, 0x80805, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x52f}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000001d00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3b, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc8354, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x5}, 0x4005, 0x2, 0xffffffff, 0x0, 0x5, 0x1000004, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f00000003c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xa2e, &(0x7f0000000b40)="$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") 9.4841151s ago: executing program 3 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000170000"], 0x50) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x64ea3a6a}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) 9.45580015s ago: executing program 3 (id=513): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101601) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@private0, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000002c0)) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r6, 0x5, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./bus\x00', 0x1b1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 9.168540705s ago: executing program 2 (id=516): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init() 9.150439045s ago: executing program 2 (id=517): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfcfa, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x0, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}}, 0x24}}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.944479228s ago: executing program 1 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) 8.938692618s ago: executing program 1 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000280)=0x5) socket$inet6(0xa, 0x3, 0x8000000003c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4881) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 8.679094542s ago: executing program 1 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000170000"], 0x50) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x64ea3a6a}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) 8.676448071s ago: executing program 2 (id=525): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c2800007000300"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='qgroup_meta_free_all_pertrans\x00', r4, 0x0, 0x80000001}, 0x18) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000900)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000880)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './bus\x00'}) r8 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r8, &(0x7f0000000080)=[{0x2, 0x31, 0x1800}], 0x1, 0x0) 8.607266013s ago: executing program 1 (id=526): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigsuspend(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 8.573906253s ago: executing program 5 (id=527): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init() 8.573344203s ago: executing program 2 (id=528): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendfile(r1, r1, 0x0, 0x800000009) 8.561613013s ago: executing program 1 (id=529): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) 8.464396615s ago: executing program 5 (id=530): syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd60c5819c00343a00fe800000000000000000000000000000ff0200000000000000000000000000010300907800000000605ad10a00002b00fe88000000000000000000000000000100000000000200000000000000000001aaa12ba2"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0xc, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x1f, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000f40)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000036c0)={0xffffffffffffffff, 0xe0, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000003440)=[0x0, 0x0], &(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f00000034c0)=[{}], 0x8, 0x10, &(0x7f0000003500), &(0x7f0000003540), 0x8, 0x25, 0x8, 0x8, &(0x7f0000003580)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8f, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@iprange={{0x68}, {@ipv6=@mcast1, @ipv6=@private2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@multicast1, 0x20}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2d8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x72, 0x0, "f937610d66b0a3037393c700ddbfd12b4bedf67b46a5d7ba547b16f9fe1e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x538) 8.12818367s ago: executing program 3 (id=533): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 8.12231189s ago: executing program 5 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x38, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x38}}, 0x0) (fail_nth: 3) 8.064257561s ago: executing program 5 (id=536): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x80f01, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r2 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x200000}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@sco}) (async, rerun: 32) io_uring_enter(r2, 0x291c, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) write(r1, &(0x7f0000004200)='t', 0x1) (async, rerun: 32) sendfile(r1, r0, 0x0, 0x7ffff000) (rerun: 32) 8.045238891s ago: executing program 3 (id=537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0xa}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000170000"], 0x50) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x64ea3a6a}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20008844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES16=r6], 0x21c}}, 0x0) 8.018572242s ago: executing program 5 (id=538): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1, r0}, 0x38) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0xffff, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x7794, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") lsm_get_self_attr(0x69, 0x0, &(0x7f00000004c0), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000740)=0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xd, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095", @ANYRES32], &(0x7f0000000300)='GPL\x00', 0x2, 0x520, &(0x7f0000000c40)=""/4112, 0x0, 0x5}, 0x5c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1ffffd47, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x23000402, &(0x7f0000001c80)={[{@block_validity}, {@orlov}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nobh}, {@grpid}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0xffff}}, {@barrier}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020660b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r8, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r9 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 7.800531275s ago: executing program 2 (id=539): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c2800007000300"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='qgroup_meta_free_all_pertrans\x00', r4, 0x0, 0x80000001}, 0x18) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000900)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000880)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './bus\x00'}) r8 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r8, &(0x7f0000000080)=[{0x2, 0x31, 0x1800}], 0x1, 0x0) 7.774020515s ago: executing program 5 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init() 7.773629025s ago: executing program 3 (id=541): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1000) 7.749271016s ago: executing program 33 (id=540): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) inotify_init() 7.43990268s ago: executing program 1 (id=543): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800850000597b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) getpid() chdir(&(0x7f0000000800)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="1ad8cd0ac3f63d5e794f784897a43ac66b9b146f447746494d624f002a5fc84b10a427e73e0550c3eed50892decdf7407e693ebb663c599effca4da74c1d27c3c3ae3b5ed1eecac99dec566edd8971ab09747a54d8e323fcd72e94296bec48ff126f4f5de79e1ffacfae98ba95412079ee0bb24e496a6632fa21ce65af3da2ba4e21264d4cdb5ff67f3f29aeda3772fc0d3b855794b7a98188a821881b7d1e9d521d7988cfd54acf6ebae73033d0485e66b823d01a46ced9610b6e895fbb2ed0a4bb0d459dae842265b4fa720b7a3d71da2d816776"], &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getegid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x800043, &(0x7f0000000a00)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@commit={'commit', 0x3d, 0x8000}}, {@orlov}, {@abort}, {@nombcache}, {@grpquota}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c"], 0x188}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='rxrpc_conn\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff000000008c518a381801000020002020207b1af8ff00000000bfa100000000000007110000f8ffffffb702000008000000b703000000000000850000000600"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.387122291s ago: executing program 34 (id=543): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800850000597b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) getpid() chdir(&(0x7f0000000800)='./bus\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000001040)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="1ad8cd0ac3f63d5e794f784897a43ac66b9b146f447746494d624f002a5fc84b10a427e73e0550c3eed50892decdf7407e693ebb663c599effca4da74c1d27c3c3ae3b5ed1eecac99dec566edd8971ab09747a54d8e323fcd72e94296bec48ff126f4f5de79e1ffacfae98ba95412079ee0bb24e496a6632fa21ce65af3da2ba4e21264d4cdb5ff67f3f29aeda3772fc0d3b855794b7a98188a821881b7d1e9d521d7988cfd54acf6ebae73033d0485e66b823d01a46ced9610b6e895fbb2ed0a4bb0d459dae842265b4fa720b7a3d71da2d816776"], &(0x7f0000000840)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getegid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x800043, &(0x7f0000000a00)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@commit={'commit', 0x3d, 0x8000}}, {@orlov}, {@abort}, {@nombcache}, {@grpquota}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021040100000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000d8000380d40000800800034000000002c8000b80480001800a00010071756f74610000003800028008000240000000030c"], 0x188}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='rxrpc_conn\x00', 0xffffffffffffffff, 0x0, 0x80000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff000000008c518a381801000020002020207b1af8ff00000000bfa100000000000007110000f8ffffffb702000008000000b703000000000000850000000600"/96], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.344591061s ago: executing program 35 (id=541): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) faccessat2(r0, &(0x7f0000000000)='\x00', 0x2, 0x1000) 6.75895527s ago: executing program 2 (id=545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x201000c, &(0x7f00000001c0), 0xff, 0x535, &(0x7f0000002800)="$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") 6.75872282s ago: executing program 36 (id=545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x201000c, &(0x7f00000001c0), 0xff, 0x535, &(0x7f0000002800)="$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") 5.200922083s ago: executing program 4 (id=550): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1c71c1, 0x170) 4.875527078s ago: executing program 4 (id=551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={0x0, r0}, 0x18) 4.804807939s ago: executing program 4 (id=553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c2800007000300"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='qgroup_meta_free_all_pertrans\x00', r4, 0x0, 0x80000001}, 0x18) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000900)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095ffff571e4d5beeb91a8e059e780005acd0803eda37f14d39aa443394f750dce9530356afdea9dc60b7e18db3a2ffcf94029b9b"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syslog(0x4, &(0x7f0000000440)=""/223, 0xdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000880)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2, {0x7}}, './bus\x00'}) r8 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r8, &(0x7f0000000080)=[{0x2, 0x31, 0x1800}], 0x1, 0x0) 4.654651581s ago: executing program 4 (id=554): syz_emit_ethernet(0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') pread64(r3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 2.885596518s ago: executing program 4 (id=555): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x82480207, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x10, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000001, 0x2}, 0x112}) r6 = open_tree(0xffffffffffffffff, 0x0, 0x1001) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newtaction={0x494, 0x30, 0xffff, 0x3, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x56cc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x494}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002000000080008000100000008000b00736970000600010002000000080005"], 0xc4}}, 0x4008800) sendto$inet6(r6, &(0x7f00000001c0)="12339d48aee4c99e3be56d957109a766a5034a15a12a", 0x16, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x100000, @private0, 0x7}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r8 = dup(r6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(0xfffffffffffffffe) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$sock_SIOCBRADDBR(r11, 0x89a0, &(0x7f00000003c0)='macsec0\x00') sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 2.412374905s ago: executing program 4 (id=556): syz_usb_connect(0x6, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x44, 0xbc, 0x2a, 0x20, 0x45e, 0x723, 0xb610, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0x40, 0x5, [{{0x9, 0x4, 0x7c, 0x0, 0x0, 0xe, 0x1, 0x0, 0x2}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000700)="ff02810900000000000000000000e6e5846bc8cf97f1c330227275b706fdbc39b522caa330066e8f418749264fbbcdfdbefacd34e4f62701db04000000db442ef040d8b4b638c81ce2c16888f5769f7645439d4e7161b304efa3525b3aff2be069bb37007cb61c08b1b3dd3be806080d8f5e357dc4e3988816bd507de41c253793f74e5153a4898943594f0945987957a714dac1ac17dd883701ec03e3e26c7cb584aeebc6511dde9b3c46e10aa6bc", 0xaf) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setresgid(0xee00, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) setresuid(0xee00, 0xee01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x85, 0x85, 0x3, [@const={0xe, 0x0, 0x0, 0xa, 0x4}, @ptr={0x2}, @datasec={0x6, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x9, 0x4}, {0x4, 0xffffffff, 0x5}, {0x3, 0x5, 0x3}, {0x5, 0xd, 0x8}], 'k'}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x5, [{0xa, 0x7, 0x4}, {0x2, 0x2, 0x5}, {0x4, 0x2, 0x3}]}]}, {0x0, [0x0]}}, &(0x7f00000000c0)=""/115, 0xa3, 0x73, 0x0, 0x5b}, 0x28) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x57, 0x0}}], 0x62, 0x0) 1.515310158s ago: executing program 6 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) 1.444817359s ago: executing program 6 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xe, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x53) openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="f6ea090003000060009ba53886dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESHEX=r3, @ANYRES32=r5, @ANYRESOCT=r4], &(0x7f0000000080)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x4b4b, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000000000000000000000000000000000000000a53cf7abb3d6259635a4a8c7bf70da144523d553a7282d799228684e52c8a795cabd26979cce6751d07f1fdd76086fcfb2d08a4d39535166e98ba9df1e1777094051a874b551508e3fdac7a147499f1993f8b14096732f196736f35dff139e46d4ef67fbcd8afded7b4d3c56a7112a"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.262972422s ago: executing program 7 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) 1.186832953s ago: executing program 6 (id=558): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_usbip_server_init(0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$cgroup(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x2008002, &(0x7f0000000580)={[{@none}], [{@audit}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@uid_lt={'uid<', r3}}, {@dont_hash}, {@fowner_eq={'fowner', 0x3d, r4}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@subj_type={'subj_type', 0x3d, 'GPL\x00'}}]}) 1.093965804s ago: executing program 7 (id=559): socket$packet(0x11, 0xa, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff01000000000000000000000007010000f8ffffffbfa400000000000800000000000000ffb702000008000000186c0000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0xc35, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='device_pm_callback_end\x00', r6}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2d}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='ext4_fallocate_exit\x00', r1}, 0x18) 1.008784695s ago: executing program 8 (id=544): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101601) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@private0, 0x0}, &(0x7f0000000340)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r3, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r4}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f00000002c0)) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r6 = openat(r5, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r6, 0x5, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) creat(&(0x7f0000000080)='./bus\x00', 0x1b1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 1.003229766s ago: executing program 9 (id=546): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = getpid() (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r3 = socket$inet6(0xa, 0x5, 0x108) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) (async) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000740)={0x0, 0x4, 0x40, 0x2, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x5}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000280)={0x5, 0x1, 0x9}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e40)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}], 0x20, 0x20004800}}], 0x1, 0x0) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_format(r9, &(0x7f0000000800)='-1\x00', 0x3) 901.930697ms ago: executing program 9 (id=560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000124c18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 901.512137ms ago: executing program 9 (id=561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x1, 0x1, 0x7fff, 0x1, 0x4, 0x8, 0xa4, 0x3, 0x3, 0xb69, 0xc1, 0x4, 0x1, 0x20000003, 0x40000008, 0x20101, 0x80000000, 0xa, 0x1, 0xe917, 0x1, 0xfffffffd, 0x3, 0x6, 0x9, 0x2, 0x4, 0x5, 0x66c, 0x200, 0x3, 0x0, 0xe, 0x5, 0x100, 0x3, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x3, 0x11003, 0x8, 0x7, 0xfffffffd, 0x4, 0x1, 0x7b, 0x3ff, 0xa, 0xfffffffb, 0xf, 0x0, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x5, 0x180000, 0x8, 0x8b, 0xb, 0x2af, 0xf5, 0xffffffff, 0x2, 0x6, 0x9, 0x4, 0x7, 0x9, 0x1, 0x4, 0x0, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xfffffff9, 0x8, 0x8, 0x400, 0x8, 0x800, 0x5, 0x2, 0x80, 0x10, 0x5, 0x4, 0x81, 0x2000b, 0x5, 0x400, 0x6, 0x22, 0x8, 0x4, 0xd9a, 0x800809, 0x0, 0x401, 0x4, 0x2, 0x5, 0x8, 0x0, 0x80000000, 0xb57, 0x0, 0x0, 0x4, 0x49b1, 0x401, 0x7, 0xd0a, 0x401, 0x6, 0x200, 0xc5d, 0x2]}}) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000000800)={[&(0x7f0000000000)='}{[^[-\x00']}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 859.330958ms ago: executing program 9 (id=562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01020008000a00", @ANYRES32=0x0, @ANYBLOB="08ddf3b5", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) 857.394668ms ago: executing program 7 (id=563): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x201000c, &(0x7f00000001c0), 0xff, 0x535, &(0x7f0000002800)="$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") 814.543858ms ago: executing program 9 (id=564): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/158, 0x9e) accept4$packet(r0, 0x0, &(0x7f00000004c0), 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) preadv(r5, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/237, 0xed}, {&(0x7f0000000500)=""/47, 0x2f}, {&(0x7f0000000540)=""/53, 0x35}, {&(0x7f0000000840)=""/152, 0x98}, {&(0x7f0000000900)=""/131, 0x83}], 0x5, 0x9, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001900010028bd7000fbdbdf251d01020008000900", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x24}, 0x1, 0x0, 0x0, 0x4048855}, 0x30004016) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x191000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x1ff, 0x8000, 0x2, 0x2000, r8, 0x7348, '\x00', r3, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x1}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) 637.252031ms ago: executing program 7 (id=565): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") 540.379313ms ago: executing program 6 (id=566): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000002c0)='rpm_return_int\x00', r3, 0x0, 0x8}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x143201) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000, @value=r2}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r2, &(0x7f0000000300), 0x10) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r5, 0x7006) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x10010, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x1de, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x9, 0x40, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5c}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd9, 0x7ff, 0x4}, {0x6, 0x24, 0x1a, 0x5, 0x10}, [@mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xe, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x68, 0xf, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0xec, &(0x7f00000007c0)={0x5, 0xf, 0xec, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x9, 0x2099}, @generic={0xd6, 0x10, 0x4, "79e269630875a41b86bf7ce6498c92a3223d49e70c49572b269f71b58f23e7c4f1d1cf8a210086e5836d9d3df535970f0e81b1c84cced0b709fca01edbcefe291141a355aaa8f7208fa675c8d0628a198f4d4fdda90572127420d9222ee46fcc0b88e2b666f323f06c9406866a0946b21be70f4b4103c64c638e38fd0fa931e107107164a7fcaa74d24fbfcb8701311c0533f923084394a083942b684fd5b94e0365d0164fed7a7ea8b9d4a09937c78bbb7d4a046ce685f825dcd866f0c58fd208648fdc2019ba9414a8bd8efca5c9572be475"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x9, 0x101}]}, 0x1, [{0x0, 0x0}]}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000000306030000000000000000000a00000305000100070032bf"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x33d9, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0x0, 0x0}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) 376.129855ms ago: executing program 9 (id=567): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x283c0, 0xa0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) lsetxattr$security_selinux(&(0x7f0000000940)='./file1\x00', &(0x7f0000000100), &(0x7f00000002c0)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x3) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x81, 0xfffffffb}) r3 = socket$inet(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) 314.800836ms ago: executing program 7 (id=568): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x201000c, &(0x7f00000001c0), 0xff, 0x535, &(0x7f0000002800)="$eJzs3d9rZFcdAPDvnWSyyW62SdUHLbRWW8kW3ZmksW3woVYQfSqI9X2NySSETDIhM2k3oWj2LxBEVPBJX3wR/AMEWfDFRxEK+qxQUUS3CvqgvTIzd5I4uZPM1tlMdvL5wN17zrk/vufM5py5d+ZwJ4Ar69mIeC0i3k/T9IWImMnKC9kSh+2lud97D95eaS5JpOkbf00iyco650qy9Y3ssMmI+OqXI76RnI5b3z/YXK5WK7tZvtzY2inX9w9ub2wtr1fWK9uLiwsvL72y9NLS/EDaeTMiXv3iH7/37Z986dVffOatP9z5861vNqs1nW0/2Y6HNH7WxnbTi9cmuw7Y/YDBLqNme4qdzFR/x9x7hPUBAKC35jX+hyLikxHxQszE2NmXswAAAMBjKP38dPw7iUjzTfQoBwAAAB4jhdYc2KRQyuYCTEehUCq15/B+JK4XqrV649Nrtb3t1fZc2dkoFtY2qpX5bK7wbBSTZn6hlT7Ov9iVX4yIJyPiuzNTrXxppVZdHfaHHwAAAHBF3Oi6///HTPv+HwAAABgxs8OuAAAAAPDIuf8HAACA0ef+HwAAAEbaV15/vbmknd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zjtftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZMX0iAAAADglCc/fv93SUQcfm6qtTRNDLtSwIUYP0ol2Tqn9//+ifb63QuqFHAhxvrY591r+eWuE+DxNt5d0KOvA6OnOOwKAEOXnLO95+SdX2frTwy2PgAAwODNfSz/+//CuUcenr8LcKnpxHB1dX3/n84MqyLAhWt9/9/vRB4XCzBSin3NAARG2f/9/f+50vShKgQAAAzcdGtJCqXs473pKBRKpYibrZ8FKCZrG9XKfEQ8ERG/nSlea+YXWkcm594zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAIy0iMKfkl+2n+U/N/P8dPfnAxPJv1o/CTwREW/98I3v311uNHYXmuV/Oypv/CArf3EYn2AAAAAA3Tr36a31P4ddGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGzXsP3l7pLH3sPjWouH/5QkTM5sUfj8nWejKKEXH970mMnzguiYixAcQ/vBcRH82LnzSrdRQyL/4gXoRz4sds9irkxb8xgPhwld1vjj+v5fW/QjzbWuf3v/GI/8l/UL3Hvzga/8Z69P+bfcZ46p2flXvGvxfx1Hj++NOJn/SI/1yf8b/+tYODXtvSH0XMdd5/WiPeyQjHqXJja6dc3z+4vbG1vF5Zr2wvLi68vPTK0ktL8+W1jWol+zc3xnee/vn7Z7X/eu77X3v87bzH5LX/+Zzz5b0n/eeduw8+3Mkcno5/67mc+L/6cbbH6de/kMX5VJZubp/rpA/b6ZOe+elvnjmr/avH7S8+zP//rV4n7Xaqozzd758OAPAI1PcPNper1cruyCaad+mXoBoSlzDxrYGeME3TtNmncjbdj4h+zpNE7qapPg8/nSjk1+c40XMEGPbIBAAADNrxRf+wawIAAAAAAAAAAAAAAAAAAABX10U8Za075vEjkJNBPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAg/hsAAP//eInSOg==") 0s ago: executing program 7 (id=569): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") kernel console output (not intermixed with test programs): [ 65.652038][ T4462] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.666450][ T4462] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 65.682040][ T4462] Symlink component flag not implemented [ 65.687741][ T4462] Symlink component flag not implemented [ 65.707119][ T4462] Symlink component flag not implemented (7) [ 65.713246][ T4462] Symlink component flag not implemented (116) [ 65.788435][ T4477] loop1: detected capacity change from 0 to 1024 [ 65.798738][ T4477] EXT4-fs: Ignoring removed nobh option [ 65.815307][ T4484] bond0: entered promiscuous mode [ 65.820516][ T4484] bond_slave_0: entered promiscuous mode [ 65.826253][ T4484] bond_slave_1: entered promiscuous mode [ 65.840292][ T4484] batadv0: entered promiscuous mode [ 65.846009][ T4484] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 65.854713][ T4484] Cannot create hsr debugfs directory [ 65.861383][ T4484] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 65.972908][ T4494] lo speed is unknown, defaulting to 1000 [ 66.143449][ T4502] loop3: detected capacity change from 0 to 512 [ 66.150551][ T4502] EXT4-fs: Ignoring removed oldalloc option [ 66.160272][ T4502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.238968][ T4494] loop5: detected capacity change from 0 to 2048 [ 66.261312][ T4502] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.269120][ T4502] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.248: Failed to acquire dquot type 1 [ 66.282241][ T4502] EXT4-fs (loop3): 1 truncate cleaned up [ 66.322637][ T4494] ext4: Unknown parameter 'func' [ 66.662178][ T4511] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 67.803498][ T4520] loop4: detected capacity change from 0 to 512 [ 67.810284][ T4520] EXT4-fs: Ignoring removed oldalloc option [ 67.868120][ T4520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.898279][ T4520] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.905552][ T4520] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.250: Failed to acquire dquot type 1 [ 67.918762][ T4520] EXT4-fs (loop4): 1 truncate cleaned up [ 68.402685][ T4513] loop2: detected capacity change from 0 to 1024 [ 68.516526][ T4511] lo speed is unknown, defaulting to 1000 [ 68.640318][ T4536] __nla_validate_parse: 7 callbacks suppressed [ 68.640338][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 68.766823][ T4513] EXT4-fs mount: 35 callbacks suppressed [ 68.766836][ T4513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.999079][ T4546] loop3: detected capacity change from 0 to 128 [ 69.040119][ T4546] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 69.096515][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.121079][ T4546] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.176086][ T4546] ext2 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.198335][ T4550] loop5: detected capacity change from 0 to 1024 [ 69.217831][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.233199][ T4550] EXT4-fs: Ignoring removed nobh option [ 69.253291][ T4555] FAULT_INJECTION: forcing a failure. [ 69.253291][ T4555] name failslab, interval 1, probability 0, space 0, times 0 [ 69.266034][ T4555] CPU: 1 UID: 0 PID: 4555 Comm: syz.1.258 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 69.266072][ T4555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.266085][ T4555] Call Trace: [ 69.266092][ T4555] [ 69.266171][ T4555] __dump_stack+0x1d/0x30 [ 69.266198][ T4555] dump_stack_lvl+0xe8/0x140 [ 69.266222][ T4555] dump_stack+0x15/0x1b [ 69.266242][ T4555] should_fail_ex+0x265/0x280 [ 69.266284][ T4555] should_failslab+0x8c/0xb0 [ 69.266312][ T4555] kmem_cache_alloc_node_noprof+0x57/0x320 [ 69.266345][ T4555] ? __alloc_skb+0x101/0x320 [ 69.266383][ T4555] __alloc_skb+0x101/0x320 [ 69.266434][ T4555] ? audit_log_start+0x365/0x6c0 [ 69.266472][ T4555] audit_log_start+0x380/0x6c0 [ 69.266571][ T4555] audit_seccomp+0x48/0x100 [ 69.266604][ T4555] ? __seccomp_filter+0x68c/0x10d0 [ 69.266632][ T4555] __seccomp_filter+0x69d/0x10d0 [ 69.266662][ T4555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.266800][ T4555] ? vfs_write+0x75e/0x8e0 [ 69.266902][ T4555] __secure_computing+0x82/0x150 [ 69.266932][ T4555] syscall_trace_enter+0xcf/0x1e0 [ 69.266969][ T4555] do_syscall_64+0xac/0x200 [ 69.267030][ T4555] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.267065][ T4555] ? clear_bhb_loop+0x40/0x90 [ 69.267090][ T4555] ? clear_bhb_loop+0x40/0x90 [ 69.267116][ T4555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.267209][ T4555] RIP: 0033:0x7f02579ee929 [ 69.267229][ T4555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.267290][ T4555] RSP: 002b:00007f0256057038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 69.267315][ T4555] RAX: ffffffffffffffda RBX: 00007f0257c15fa0 RCX: 00007f02579ee929 [ 69.267330][ T4555] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000003 [ 69.267346][ T4555] RBP: 00007f0256057090 R08: 0000000000000000 R09: 0000000000000000 [ 69.267380][ T4555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.267395][ T4555] R13: 0000000000000000 R14: 00007f0257c15fa0 R15: 00007fff184dfed8 [ 69.267419][ T4555] [ 69.517588][ T4550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.602220][ T4576] loop4: detected capacity change from 0 to 512 [ 69.609209][ T4576] EXT4-fs: Ignoring removed oldalloc option [ 69.628210][ T4576] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.640077][ T4576] EXT4-fs (loop4): orphan cleanup on readonly fs [ 69.647528][ T4576] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.259: Failed to acquire dquot type 1 [ 69.660265][ T4576] EXT4-fs (loop4): 1 truncate cleaned up [ 69.666803][ T4576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.709869][ T4568] loop2: detected capacity change from 0 to 512 [ 69.737714][ T4568] journal_path: Non-blockdev passed as './bus' [ 69.743964][ T4568] EXT4-fs: error: could not find journal device path [ 69.759753][ T4580] loop1: detected capacity change from 0 to 512 [ 69.780523][ T4580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.261: bg 0: block 248: padding at end of block bitmap is not set [ 69.816259][ T4580] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.261: Failed to acquire dquot type 1 [ 69.861036][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.938990][ T4580] EXT4-fs (loop1): 1 truncate cleaned up [ 69.973037][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.003963][ T4580] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.103503][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.536288][ T4597] netlink: 'syz.3.262': attribute type 5 has an invalid length. [ 70.578092][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.627329][ T4603] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.725393][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 70.725423][ T29] audit: type=1326 audit(1751408300.481:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.877202][ T29] audit: type=1326 audit(1751408300.511:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.900725][ T29] audit: type=1326 audit(1751408300.531:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.924160][ T29] audit: type=1326 audit(1751408300.531:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.947747][ T29] audit: type=1326 audit(1751408300.531:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.971082][ T29] audit: type=1326 audit(1751408300.531:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 70.994501][ T29] audit: type=1326 audit(1751408300.531:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 71.018019][ T29] audit: type=1326 audit(1751408300.531:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 71.041405][ T29] audit: type=1326 audit(1751408300.531:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 71.064756][ T29] audit: type=1326 audit(1751408300.531:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4611 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb43fdbe929 code=0x7ffc0000 [ 71.111885][ T4619] loop1: detected capacity change from 0 to 1024 [ 71.183739][ T4603] lo speed is unknown, defaulting to 1000 [ 71.280576][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.441811][ T4619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.558373][ T4643] netlink: 16 bytes leftover after parsing attributes in process `syz.5.273'. [ 71.567421][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.273'. [ 71.691903][ T4640] loop2: detected capacity change from 0 to 8192 [ 71.705824][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.747540][ T3825] loop2: p1 p3 p4 [ 71.751739][ T3825] loop2: p1 size 8390912 extends beyond EOD, truncated [ 71.785780][ T3825] loop2: p3 size 589824 extends beyond EOD, truncated [ 71.797957][ T4664] loop5: detected capacity change from 0 to 512 [ 71.816438][ T4640] loop2: p1 p3 p4 [ 71.821437][ T4664] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 71.824215][ T4640] loop2: p1 size 8390912 extends beyond EOD, truncated [ 71.847640][ T4640] loop2: p3 size 589824 extends beyond EOD, truncated [ 71.860325][ T4664] EXT4-fs (loop5): 1 truncate cleaned up [ 71.899698][ T4664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.942193][ T4664] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.278361][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.283'. [ 73.550018][ T4715] loop3: detected capacity change from 0 to 512 [ 73.557046][ T4715] EXT4-fs: Ignoring removed oldalloc option [ 73.568772][ T4721] loop4: detected capacity change from 0 to 512 [ 73.575588][ T4721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.277236][ T4721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.307077][ T4715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.582878][ T4721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 74.731384][ T4716] loop5: detected capacity change from 0 to 512 [ 74.738202][ T4716] EXT4-fs: Ignoring removed oldalloc option [ 74.780029][ T4715] EXT4-fs (loop3): orphan cleanup on readonly fs [ 74.790972][ T4715] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.282: Failed to acquire dquot type 1 [ 74.812827][ T4715] EXT4-fs (loop3): 1 truncate cleaned up [ 74.820483][ T4715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.878780][ T4716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.909330][ T4716] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.918925][ T4716] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.284: Failed to acquire dquot type 1 [ 74.932382][ T4716] EXT4-fs (loop5): 1 truncate cleaned up [ 74.951366][ T4716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.072773][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.303617][ T4732] FAULT_INJECTION: forcing a failure. [ 75.303617][ T4732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.316836][ T4732] CPU: 0 UID: 0 PID: 4732 Comm: syz.2.286 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 75.316916][ T4732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.316935][ T4732] Call Trace: [ 75.316941][ T4732] [ 75.316950][ T4732] __dump_stack+0x1d/0x30 [ 75.316974][ T4732] dump_stack_lvl+0xe8/0x140 [ 75.317028][ T4732] dump_stack+0x15/0x1b [ 75.317047][ T4732] should_fail_ex+0x265/0x280 [ 75.317084][ T4732] should_fail+0xb/0x20 [ 75.317173][ T4732] should_fail_usercopy+0x1a/0x20 [ 75.317206][ T4732] strncpy_from_user+0x25/0x230 [ 75.317308][ T4732] ? __kmalloc_cache_noprof+0x189/0x320 [ 75.317392][ T4732] __se_sys_memfd_create+0x1ff/0x590 [ 75.317450][ T4732] __x64_sys_memfd_create+0x31/0x40 [ 75.317482][ T4732] x64_sys_call+0x122f/0x2fb0 [ 75.317504][ T4732] do_syscall_64+0xd2/0x200 [ 75.317520][ T4732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.317592][ T4732] ? clear_bhb_loop+0x40/0x90 [ 75.317618][ T4732] ? clear_bhb_loop+0x40/0x90 [ 75.317645][ T4732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.317669][ T4732] RIP: 0033:0x7fb43fdbe929 [ 75.317762][ T4732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.317781][ T4732] RSP: 002b:00007fb43e426d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 75.317803][ T4732] RAX: ffffffffffffffda RBX: 000000000000104f RCX: 00007fb43fdbe929 [ 75.317814][ T4732] RDX: 00007fb43e426dec RSI: 0000000000000000 RDI: 00007fb43fe414cc [ 75.317825][ T4732] RBP: 0000200000001200 R08: 00007fb43e426b07 R09: 0000000000000000 [ 75.317835][ T4732] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 75.317847][ T4732] R13: 00007fb43e426dec R14: 00007fb43e426df0 R15: 00007ffe081d0b68 [ 75.317864][ T4732] [ 75.550263][ T4721] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.578210][ T4737] FAULT_INJECTION: forcing a failure. [ 75.578210][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 75.590915][ T4737] CPU: 0 UID: 0 PID: 4737 Comm: wÞ£ÿ Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 75.590951][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.590966][ T4737] Call Trace: [ 75.590972][ T4737] [ 75.591046][ T4737] __dump_stack+0x1d/0x30 [ 75.591066][ T4737] dump_stack_lvl+0xe8/0x140 [ 75.591085][ T4737] dump_stack+0x15/0x1b [ 75.591102][ T4737] should_fail_ex+0x265/0x280 [ 75.591148][ T4737] should_failslab+0x8c/0xb0 [ 75.591172][ T4737] kmem_cache_alloc_node_noprof+0x57/0x320 [ 75.591202][ T4737] ? __alloc_skb+0x101/0x320 [ 75.591242][ T4737] __alloc_skb+0x101/0x320 [ 75.591292][ T4737] ? audit_log_start+0x365/0x6c0 [ 75.591337][ T4737] audit_log_start+0x380/0x6c0 [ 75.591376][ T4737] audit_seccomp+0x48/0x100 [ 75.591424][ T4737] ? __seccomp_filter+0x68c/0x10d0 [ 75.591528][ T4737] __seccomp_filter+0x69d/0x10d0 [ 75.591559][ T4737] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 75.591598][ T4737] ? vfs_write+0x75e/0x8e0 [ 75.591709][ T4737] ? __rcu_read_unlock+0x4f/0x70 [ 75.591735][ T4737] ? __fget_files+0x184/0x1c0 [ 75.591757][ T4737] __secure_computing+0x82/0x150 [ 75.591785][ T4737] syscall_trace_enter+0xcf/0x1e0 [ 75.591816][ T4737] do_syscall_64+0xac/0x200 [ 75.591876][ T4737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.591910][ T4737] ? clear_bhb_loop+0x40/0x90 [ 75.591963][ T4737] ? clear_bhb_loop+0x40/0x90 [ 75.591987][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.592014][ T4737] RIP: 0033:0x7f02579ee929 [ 75.592033][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.592084][ T4737] RSP: 002b:00007f0256057038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 75.592107][ T4737] RAX: ffffffffffffffda RBX: 00007f0257c15fa0 RCX: 00007f02579ee929 [ 75.592178][ T4737] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000140 [ 75.592194][ T4737] RBP: 00007f0256057090 R08: 0000200000000240 R09: 0000000000000002 [ 75.592255][ T4737] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 75.592270][ T4737] R13: 0000000000000000 R14: 00007f0257c15fa0 R15: 00007fff184dfed8 [ 75.592295][ T4737] [ 75.818600][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 75.818616][ T29] audit: type=1326 audit(1751408305.331:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.848071][ T29] audit: type=1326 audit(1751408305.331:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.871477][ T29] audit: type=1326 audit(1751408305.331:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm="syz.1.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.894992][ T29] audit: type=1326 audit(1751408305.331:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.918667][ T29] audit: type=1326 audit(1751408305.331:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.942109][ T29] audit: type=1326 audit(1751408305.331:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.965677][ T29] audit: type=1326 audit(1751408305.331:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 75.989118][ T29] audit: type=1326 audit(1751408305.341:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 76.012612][ T29] audit: type=1326 audit(1751408305.341:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02579ed290 code=0x7ffc0000 [ 76.036066][ T29] audit: type=1326 audit(1751408305.341:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4736 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f02579ed3df code=0x7ffc0000 [ 76.066916][ T4739] loop2: detected capacity change from 0 to 512 [ 76.073928][ T4739] journal_path: Non-blockdev passed as './bus' [ 76.080219][ T4739] EXT4-fs: error: could not find journal device path [ 76.099690][ T4739] Zero length message leads to an empty skb [ 76.114602][ T4739] loop2: detected capacity change from 0 to 2048 [ 76.141501][ T4721] EXT4-fs (loop4): 1 truncate cleaned up [ 76.147645][ T4721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.233636][ T4739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.346456][ T4752] loop1: detected capacity change from 0 to 512 [ 76.353140][ T4752] EXT4-fs: Ignoring removed oldalloc option [ 76.386007][ T4752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.396569][ T4752] EXT4-fs (loop1): orphan cleanup on readonly fs [ 76.404035][ T4752] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.291: Failed to acquire dquot type 1 [ 76.415880][ T4752] EXT4-fs (loop1): 1 truncate cleaned up [ 76.422551][ T4752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.450198][ T4757] loop3: detected capacity change from 0 to 512 [ 76.458928][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.467450][ T4757] EXT4-fs: Ignoring removed orlov option [ 76.504018][ T4757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.520674][ T4757] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 76.550076][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.607211][ T4754] netlink: 32 bytes leftover after parsing attributes in process `syz.3.288'. [ 76.823303][ T4757] loop3: detected capacity change from 0 to 1024 [ 76.868628][ T4757] EXT4-fs: Ignoring removed orlov option [ 76.874419][ T4757] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.015919][ T4757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.261878][ T4767] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.290371][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.317703][ T4767] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.431101][ T4767] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.521889][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.618498][ T4767] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.095779][ T4767] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179743][ T4801] loop2: detected capacity change from 0 to 512 [ 78.245244][ T4767] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.340396][ T4801] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.417628][ T4767] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432941][ T4767] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.441737][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.569934][ T4801] EXT4-fs (loop2): 1 truncate cleaned up [ 78.586120][ T4804] loop1: detected capacity change from 0 to 1024 [ 78.597509][ T4801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.620156][ T4804] EXT4-fs: Ignoring removed nobh option [ 78.650122][ T4801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.664718][ T4806] loop5: detected capacity change from 0 to 512 [ 78.760000][ T4806] EXT4-fs (loop5): filesystem is read-only [ 78.786848][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.804033][ T4811] loop3: detected capacity change from 0 to 1024 [ 78.861492][ T4811] EXT4-fs: Ignoring removed nobh option [ 78.888673][ T4804] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.300: Allocating blocks 385-513 which overlap fs metadata [ 78.921827][ T4811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.977909][ T4817] EXT4-fs (loop1): pa ffff8881069908c0: logic 16, phys. 129, len 24 [ 78.985999][ T4817] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 79.008547][ T4811] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.297: Allocating blocks 385-513 which overlap fs metadata [ 79.040851][ T4811] EXT4-fs (loop3): pa ffff888106a15460: logic 16, phys. 129, len 24 [ 79.048960][ T4811] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 79.071252][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.101509][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.113547][ T4821] loop2: detected capacity change from 0 to 512 [ 79.136356][ T4821] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.171662][ T4821] EXT4-fs (loop2): 1 truncate cleaned up [ 79.200421][ T4834] loop3: detected capacity change from 0 to 512 [ 79.208517][ T4834] EXT4-fs: Ignoring removed orlov option [ 79.217567][ T4821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.248444][ T4821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.268309][ T4834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.281742][ T4829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 79.323872][ T4834] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 79.355833][ T4834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.307'. [ 79.371143][ T4847] loop5: detected capacity change from 0 to 512 [ 79.398575][ T4851] loop2: detected capacity change from 0 to 1024 [ 79.418346][ T4847] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.311: bg 0: block 248: padding at end of block bitmap is not set [ 79.450048][ T4851] EXT4-fs: Ignoring removed nobh option [ 79.455831][ T4858] loop3: detected capacity change from 0 to 1024 [ 79.463170][ T4858] EXT4-fs: Ignoring removed orlov option [ 79.468963][ T4858] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.486684][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.516478][ T4851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.531696][ T4847] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.311: Failed to acquire dquot type 1 [ 79.691269][ T4847] EXT4-fs (loop5): 1 truncate cleaned up [ 79.700839][ T4851] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.315: Allocating blocks 385-513 which overlap fs metadata [ 79.734771][ T4847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.759560][ T4851] EXT4-fs (loop2): pa ffff8881069908c0: logic 16, phys. 129, len 24 [ 79.767635][ T4851] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 79.777889][ T4847] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.894911][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.942559][ T4869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 79.951553][ T4869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.319'. [ 80.098276][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.164650][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.249609][ T4869] bridge0: entered promiscuous mode [ 80.282037][ T4869] syz_tun: entered promiscuous mode [ 80.320670][ T4869] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 80.333333][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 80.377676][ T4869] Cannot create hsr debugfs directory [ 80.435486][ T4890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.326'. [ 80.574874][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 80.583928][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 80.621134][ T4901] bridge0: entered promiscuous mode [ 80.656361][ T4901] syz_tun: entered promiscuous mode [ 80.661784][ T4908] loop3: detected capacity change from 0 to 1024 [ 80.662174][ T4901] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 80.677493][ T4901] Cannot create hsr debugfs directory [ 80.679090][ T4908] EXT4-fs: Ignoring removed nobh option [ 80.683235][ T4901] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 80.719622][ T4910] loop4: detected capacity change from 0 to 512 [ 80.727486][ T4910] EXT4-fs: Ignoring removed orlov option [ 80.728598][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.750180][ T4910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.785493][ T4908] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.331: Allocating blocks 385-513 which overlap fs metadata [ 80.799473][ T4910] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 80.832656][ T4910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.332'. [ 80.843834][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 80.843847][ T29] audit: type=1326 audit(1751408310.611:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 80.873491][ T29] audit: type=1326 audit(1751408310.611:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 80.875700][ T4917] EXT4-fs (loop3): pa ffff8881069908c0: logic 16, phys. 129, len 24 [ 80.897124][ T29] audit: type=1326 audit(1751408310.611:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 80.904947][ T4917] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 80.938488][ T29] audit: type=1326 audit(1751408310.611:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 80.962084][ T29] audit: type=1326 audit(1751408310.611:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 80.985456][ T29] audit: type=1326 audit(1751408310.611:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 81.008797][ T29] audit: type=1326 audit(1751408310.611:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 81.032265][ T29] audit: type=1326 audit(1751408310.611:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 81.057728][ T29] audit: type=1326 audit(1751408310.621:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 81.081210][ T29] audit: type=1326 audit(1751408310.621:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4915 comm="syz.5.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3eef2e929 code=0x7ffc0000 [ 81.111126][ T4910] loop4: detected capacity change from 0 to 1024 [ 81.127134][ T4910] EXT4-fs: Ignoring removed orlov option [ 81.132928][ T4910] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.133378][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.151815][ T4922] loop5: detected capacity change from 0 to 2048 [ 81.169155][ T4910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.185120][ T4922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.342600][ T4938] loop1: detected capacity change from 0 to 2048 [ 81.368754][ T4938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.385939][ T4938] EXT4-fs (loop1): shut down requested (2) [ 81.410026][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.433213][ T4951] loop3: detected capacity change from 0 to 1024 [ 81.450320][ T4951] EXT4-fs: Ignoring removed nobh option [ 81.469197][ T4951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.493469][ T4951] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.344: Allocating blocks 385-513 which overlap fs metadata [ 81.545730][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.569950][ T4951] EXT4-fs (loop3): pa ffff888106990a10: logic 16, phys. 129, len 24 [ 81.578086][ T4951] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 81.703017][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.765603][ T4977] __nla_validate_parse: 2 callbacks suppressed [ 81.765618][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'. [ 81.890284][ T4993] loop2: detected capacity change from 0 to 512 [ 81.901501][ T4993] EXT4-fs: Ignoring removed orlov option [ 81.908104][ T4993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 81.916754][ T4993] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 81.928614][ T4993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.357'. [ 81.950611][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.348'. [ 81.959577][ T4994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.348'. [ 81.998335][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.011975][ T4996] loop2: detected capacity change from 0 to 1024 [ 82.034691][ T4996] EXT4-fs: Ignoring removed orlov option [ 82.040446][ T4996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.078781][ T4996] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.154103][ T5003] loop5: detected capacity change from 0 to 512 [ 82.161291][ T5003] EXT4-fs: Ignoring removed oldalloc option [ 82.174640][ T5003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.213808][ T5003] EXT4-fs (loop5): orphan cleanup on readonly fs [ 82.222129][ T5003] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.358: Failed to acquire dquot type 1 [ 82.236087][ T5003] EXT4-fs (loop5): 1 truncate cleaned up [ 82.244009][ T5003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.798821][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.081758][ T5016] FAULT_INJECTION: forcing a failure. [ 83.081758][ T5016] name failslab, interval 1, probability 0, space 0, times 0 [ 83.094455][ T5016] CPU: 0 UID: 0 PID: 5016 Comm: syz.3.365 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 83.094478][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.094488][ T5016] Call Trace: [ 83.094495][ T5016] [ 83.094502][ T5016] __dump_stack+0x1d/0x30 [ 83.094524][ T5016] dump_stack_lvl+0xe8/0x140 [ 83.094559][ T5016] dump_stack+0x15/0x1b [ 83.094577][ T5016] should_fail_ex+0x265/0x280 [ 83.094609][ T5016] should_failslab+0x8c/0xb0 [ 83.094628][ T5016] kmem_cache_alloc_noprof+0x50/0x310 [ 83.094651][ T5016] ? dst_alloc+0xbd/0x100 [ 83.094756][ T5016] dst_alloc+0xbd/0x100 [ 83.094786][ T5016] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 83.094814][ T5016] ip_route_output_flow+0x7b/0x130 [ 83.094846][ T5016] raw_sendmsg+0x9f5/0xe50 [ 83.094911][ T5016] ? __pfx_raw_sendmsg+0x10/0x10 [ 83.094995][ T5016] inet_sendmsg+0xc5/0xd0 [ 83.095010][ T5016] __sock_sendmsg+0x102/0x180 [ 83.095038][ T5016] __sys_sendto+0x268/0x330 [ 83.095069][ T5016] __x64_sys_sendto+0x76/0x90 [ 83.095150][ T5016] x64_sys_call+0x2eb6/0x2fb0 [ 83.095168][ T5016] do_syscall_64+0xd2/0x200 [ 83.095251][ T5016] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.095326][ T5016] ? clear_bhb_loop+0x40/0x90 [ 83.095412][ T5016] ? clear_bhb_loop+0x40/0x90 [ 83.095440][ T5016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.095457][ T5016] RIP: 0033:0x7f522e1be929 [ 83.095469][ T5016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.095484][ T5016] RSP: 002b:00007f522c827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 83.095544][ T5016] RAX: ffffffffffffffda RBX: 00007f522e3e5fa0 RCX: 00007f522e1be929 [ 83.095557][ T5016] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 83.095570][ T5016] RBP: 00007f522c827090 R08: 0000200000001080 R09: 0000000000000010 [ 83.095583][ T5016] R10: 0000000020000800 R11: 0000000000000246 R12: 0000000000000001 [ 83.095596][ T5016] R13: 0000000000000000 R14: 00007f522e3e5fa0 R15: 00007fffc2c1b6e8 [ 83.095616][ T5016] [ 83.464072][ T5030] loop1: detected capacity change from 0 to 512 [ 83.491823][ T5030] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.512769][ T5030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.525114][ T5030] EXT4-fs (loop1): 1 truncate cleaned up [ 83.531589][ T5030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.559661][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.665161][ T5040] loop3: detected capacity change from 0 to 512 [ 83.679476][ T5040] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.374: bg 0: block 248: padding at end of block bitmap is not set [ 83.698651][ T5040] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.374: Failed to acquire dquot type 1 [ 83.710507][ T5040] EXT4-fs (loop3): 1 truncate cleaned up [ 83.716778][ T5040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.730798][ T5040] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.754753][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.820880][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.857278][ T5047] loop3: detected capacity change from 0 to 1024 [ 83.864357][ T5047] EXT4-fs: Ignoring removed nobh option [ 83.889420][ T5047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.909815][ T5052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 83.918850][ T5052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 83.964945][ T5047] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.376: Allocating blocks 385-513 which overlap fs metadata [ 84.112379][ T5047] EXT4-fs (loop3): pa ffff888106990a80: logic 16, phys. 129, len 24 [ 84.120596][ T5047] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 84.273249][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.376566][ T5061] loop2: detected capacity change from 0 to 1024 [ 84.429575][ T5061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.443548][ T5069] loop3: detected capacity change from 0 to 256 [ 84.476464][ T5072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 84.600449][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 84.723675][ T5061] hsr_slave_0 (unregistering): left promiscuous mode [ 84.885765][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.953564][ T5082] loop3: detected capacity change from 0 to 512 [ 85.045429][ T5082] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.386: bg 0: block 248: padding at end of block bitmap is not set [ 85.093472][ T5082] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.386: Failed to acquire dquot type 1 [ 85.108590][ T5082] EXT4-fs (loop3): 1 truncate cleaned up [ 85.117948][ T5082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.137570][ T5082] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.736637][ T5089] syz.2.388 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 85.750746][ T5089] CPU: 1 UID: 0 PID: 5089 Comm: syz.2.388 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 85.750772][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.750812][ T5089] Call Trace: [ 85.750818][ T5089] [ 85.750825][ T5089] __dump_stack+0x1d/0x30 [ 85.750845][ T5089] dump_stack_lvl+0xe8/0x140 [ 85.750868][ T5089] dump_stack+0x15/0x1b [ 85.750888][ T5089] dump_header+0x81/0x220 [ 85.750922][ T5089] oom_kill_process+0x334/0x3f0 [ 85.751010][ T5089] out_of_memory+0x979/0xb80 [ 85.751094][ T5089] try_charge_memcg+0x5e6/0x9e0 [ 85.751189][ T5089] obj_cgroup_charge_pages+0xa6/0x150 [ 85.751224][ T5089] __memcg_kmem_charge_page+0x9f/0x170 [ 85.751297][ T5089] __alloc_frozen_pages_noprof+0x188/0x360 [ 85.751483][ T5089] alloc_pages_mpol+0xb3/0x250 [ 85.751512][ T5089] alloc_pages_noprof+0x90/0x130 [ 85.751589][ T5089] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 85.751678][ T5089] __kvmalloc_node_noprof+0x30f/0x4e0 [ 85.751711][ T5089] ? ip_set_alloc+0x1f/0x30 [ 85.751767][ T5089] ? ip_set_alloc+0x1f/0x30 [ 85.751799][ T5089] ? __kmalloc_cache_noprof+0x189/0x320 [ 85.751833][ T5089] ip_set_alloc+0x1f/0x30 [ 85.751910][ T5089] hash_netiface_create+0x282/0x740 [ 85.751983][ T5089] ? __pfx_hash_netiface_create+0x10/0x10 [ 85.752093][ T5089] ip_set_create+0x3cc/0x960 [ 85.752159][ T5089] nfnetlink_rcv_msg+0x4c3/0x590 [ 85.752287][ T5089] ? selinux_capable+0x1f9/0x270 [ 85.752397][ T5089] netlink_rcv_skb+0x123/0x220 [ 85.752463][ T5089] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 85.752537][ T5089] nfnetlink_rcv+0x16b/0x1690 [ 85.752570][ T5089] ? __kfree_skb+0x109/0x150 [ 85.752608][ T5089] ? nlmon_xmit+0x4f/0x60 [ 85.752650][ T5089] ? consume_skb+0x49/0x150 [ 85.752751][ T5089] ? nlmon_xmit+0x4f/0x60 [ 85.752777][ T5089] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 85.752823][ T5089] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 85.752866][ T5089] ? __dev_queue_xmit+0x182/0x1fb0 [ 85.752954][ T5089] ? ref_tracker_free+0x37d/0x3e0 [ 85.753003][ T5089] ? __netlink_deliver_tap+0x4dc/0x500 [ 85.753046][ T5089] netlink_unicast+0x59e/0x670 [ 85.753122][ T5089] netlink_sendmsg+0x58b/0x6b0 [ 85.753151][ T5089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.753177][ T5089] __sock_sendmsg+0x145/0x180 [ 85.753209][ T5089] ____sys_sendmsg+0x31e/0x4e0 [ 85.753289][ T5089] ___sys_sendmsg+0x17b/0x1d0 [ 85.753331][ T5089] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 85.753439][ T5089] __x64_sys_sendmsg+0xd4/0x160 [ 85.753477][ T5089] x64_sys_call+0x2999/0x2fb0 [ 85.753505][ T5089] do_syscall_64+0xd2/0x200 [ 85.753581][ T5089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.753616][ T5089] ? clear_bhb_loop+0x40/0x90 [ 85.753645][ T5089] ? clear_bhb_loop+0x40/0x90 [ 85.753729][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.753750][ T5089] RIP: 0033:0x7fb43fdbe929 [ 85.753765][ T5089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.753785][ T5089] RSP: 002b:00007fb43e427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.753808][ T5089] RAX: ffffffffffffffda RBX: 00007fb43ffe5fa0 RCX: 00007fb43fdbe929 [ 85.753823][ T5089] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 85.753839][ T5089] RBP: 00007fb43fe40b39 R08: 0000000000000000 R09: 0000000000000000 [ 85.753857][ T5089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 85.753872][ T5089] R13: 0000000000000000 R14: 00007fb43ffe5fa0 R15: 00007ffe081d0b68 [ 85.753897][ T5089] [ 85.753904][ T5089] memory: usage 307200kB, limit 307200kB, failcnt 474 [ 86.056860][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 86.056880][ T29] audit: type=1400 audit(1751408315.771:2098): avc: denied { mounton } for pid=5108 comm="syz.4.394" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.059660][ T5089] memory+swap: usage 311744kB, limit 9007199254740988kB, failcnt 0 [ 86.147379][ T5089] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 86.154901][ T5089] Memory cgroup stats for /syz2: [ 86.155115][ T5089] cache 0 [ 86.163191][ T5089] rss 0 [ 86.166061][ T5089] shmem 0 [ 86.169019][ T5089] mapped_file 0 [ 86.172495][ T5089] dirty 0 [ 86.175430][ T5089] writeback 0 [ 86.178739][ T5089] workingset_refault_anon 92 [ 86.183442][ T5089] workingset_refault_file 248 [ 86.188145][ T5089] swap 4653056 [ 86.191517][ T5089] swapcached 8192 [ 86.195137][ T5089] pgpgin 18329 [ 86.198575][ T5089] pgpgout 18327 [ 86.202046][ T5089] pgfault 22652 [ 86.205615][ T5089] pgmajfault 53 [ 86.209120][ T5089] inactive_anon 8192 [ 86.213025][ T5089] active_anon 0 [ 86.216547][ T5089] inactive_file 0 [ 86.220204][ T5089] active_file 0 [ 86.223670][ T5089] unevictable 0 [ 86.227254][ T5089] hierarchical_memory_limit 314572800 [ 86.232631][ T5089] hierarchical_memsw_limit 9223372036854771712 [ 86.238822][ T5089] total_cache 0 [ 86.242288][ T5089] total_rss 0 [ 86.245568][ T5089] total_shmem 0 [ 86.249132][ T5089] total_mapped_file 0 [ 86.253120][ T5089] total_dirty 0 [ 86.256565][ T5089] total_writeback 0 [ 86.260400][ T5089] total_workingset_refault_anon 92 [ 86.265525][ T5089] total_workingset_refault_file 248 [ 86.270851][ T5089] total_swap 4653056 [ 86.274836][ T5089] total_swapcached 8192 [ 86.279008][ T5089] total_pgpgin 18329 [ 86.282917][ T5089] total_pgpgout 18327 [ 86.286892][ T5089] total_pgfault 22652 [ 86.290939][ T5089] total_pgmajfault 53 [ 86.294912][ T5089] total_inactive_anon 8192 [ 86.299417][ T5089] total_active_anon 0 [ 86.303404][ T5089] total_inactive_file 0 [ 86.307577][ T5089] total_active_file 0 [ 86.311576][ T5089] total_unevictable 0 [ 86.315551][ T5089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.388,pid=5087,uid=0 [ 86.330119][ T5089] Memory cgroup out of memory: Killed process 5087 (syz.2.388) total-vm:95932kB, anon-rss:936kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 86.439165][ T29] audit: type=1400 audit(1751408316.201:2099): avc: denied { create } for pid=5117 comm="syz.4.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 86.497036][ T29] audit: type=1326 audit(1751408316.231:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.500371][ T5119] syz.4.398: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 86.520530][ T29] audit: type=1326 audit(1751408316.231:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.520567][ T29] audit: type=1326 audit(1751408316.231:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.532956][ T5119] ,cpuset= [ 86.556185][ T29] audit: type=1326 audit(1751408316.231:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.579728][ T5119] / [ 86.582687][ T29] audit: type=1326 audit(1751408316.231:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.606277][ T5119] ,mems_allowed=0 [ 86.608434][ T29] audit: type=1326 audit(1751408316.231:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.631784][ T5119] [ 86.631812][ T5119] CPU: 1 UID: 0 PID: 5119 Comm: syz.4.398 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 86.631842][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.631856][ T5119] Call Trace: [ 86.631861][ T5119] [ 86.631870][ T5119] __dump_stack+0x1d/0x30 [ 86.631924][ T5119] dump_stack_lvl+0xe8/0x140 [ 86.631953][ T5119] dump_stack+0x15/0x1b [ 86.631976][ T5119] warn_alloc+0x12b/0x1a0 [ 86.632027][ T5119] __vmalloc_node_range_noprof+0x9c/0xe00 [ 86.632174][ T5119] ? audit_log_end+0x1d7/0x1f0 [ 86.632198][ T5119] ? __traceiter_kmem_cache_free+0x38/0x60 [ 86.632282][ T5119] ? audit_log_end+0x1d7/0x1f0 [ 86.632311][ T5119] ? kmem_cache_free+0xdf/0x300 [ 86.632347][ T5119] ? __rcu_read_unlock+0x4f/0x70 [ 86.632376][ T5119] ? avc_has_perm_noaudit+0x1b1/0x200 [ 86.632483][ T5119] ? should_fail_ex+0x30/0x280 [ 86.632524][ T5119] ? xskq_create+0x36/0xe0 [ 86.632556][ T5119] vmalloc_user_noprof+0x7d/0xb0 [ 86.632806][ T5119] ? xskq_create+0x80/0xe0 [ 86.632836][ T5119] xskq_create+0x80/0xe0 [ 86.632865][ T5119] xsk_init_queue+0x95/0xf0 [ 86.632894][ T5119] xsk_setsockopt+0x35c/0x510 [ 86.632982][ T5119] ? __pfx_xsk_setsockopt+0x10/0x10 [ 86.633085][ T5119] __sys_setsockopt+0x184/0x200 [ 86.633128][ T5119] ? __secure_computing+0x82/0x150 [ 86.633160][ T5119] __x64_sys_setsockopt+0x64/0x80 [ 86.633227][ T5119] x64_sys_call+0x2bd5/0x2fb0 [ 86.633256][ T5119] do_syscall_64+0xd2/0x200 [ 86.633280][ T5119] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.633320][ T5119] ? clear_bhb_loop+0x40/0x90 [ 86.633349][ T5119] ? clear_bhb_loop+0x40/0x90 [ 86.633380][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.633479][ T5119] RIP: 0033:0x7f11af83e929 [ 86.633498][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.633589][ T5119] RSP: 002b:00007f11adea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 86.633613][ T5119] RAX: ffffffffffffffda RBX: 00007f11afa65fa0 RCX: 00007f11af83e929 [ 86.633629][ T5119] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 86.633645][ T5119] RBP: 00007f11af8c0b39 R08: 0000000000000004 R09: 0000000000000000 [ 86.633661][ T5119] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.633677][ T5119] R13: 0000000000000000 R14: 00007f11afa65fa0 R15: 00007ffcb1ab9828 [ 86.633703][ T5119] [ 86.633711][ T5119] Mem-Info: [ 86.635561][ T29] audit: type=1326 audit(1751408316.231:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.658916][ T5119] active_anon:7475 inactive_anon:14 isolated_anon:0 [ 86.658916][ T5119] active_file:6344 inactive_file:2247 isolated_file:0 [ 86.658916][ T5119] unevictable:0 dirty:10 writeback:0 [ 86.658916][ T5119] slab_reclaimable:3103 slab_unreclaimable:14908 [ 86.658916][ T5119] mapped:29472 shmem:200 pagetables:1239 [ 86.658916][ T5119] sec_pagetables:0 bounce:0 [ 86.658916][ T5119] kernel_misc_reclaimable:0 [ 86.658916][ T5119] free:1825011 free_pcp:63057 free_cma:0 [ 86.661319][ T29] audit: type=1326 audit(1751408316.231:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5117 comm="syz.4.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 86.744765][ T5126] loop3: detected capacity change from 0 to 512 [ 86.749290][ T5119] Node 0 active_anon:30016kB inactive_anon:0kB active_file:25380kB inactive_file:8992kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117892kB dirty:152kB writeback:4kB shmem:1032kB writeback_tmp:0kB kernel_stack:3600kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 86.814419][ T5126] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.400: bg 0: block 248: padding at end of block bitmap is not set [ 86.816841][ T5119] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 86.828801][ T5126] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.400: Failed to acquire dquot type 1 [ 86.831948][ T5119] lowmem_reserve[]: 0 2882 7860 [ 86.860742][ T5126] EXT4-fs (loop3): 1 truncate cleaned up [ 86.868031][ T5119] 7860 [ 86.868057][ T5119] Node 0 DMA32 free:2947724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 86.878015][ T5126] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.884099][ T5119] lowmem_reserve[]: 0 0 4978 4978 [ 87.141851][ T5119] Node 0 Normal free:4366076kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30132kB inactive_anon:0kB active_file:25380kB inactive_file:8992kB unevictable:0kB writepending:272kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:297864kB local_pcp:143160kB free_cma:0kB [ 87.179514][ T5119] lowmem_reserve[]: 0 0 0 0 [ 87.184168][ T5119] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 87.197138][ T5119] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947724kB [ 87.213338][ T5119] Node 0 Normal: 1391*4kB (UME) 512*8kB (UME) 88*16kB (UME) 33*32kB (UM) 187*64kB (UM) 248*128kB (UM) 207*256kB (UME) 103*512kB (UME) 120*1024kB (U) 63*2048kB (UME) 965*4096kB (UM) = 4366108kB [ 87.232742][ T5119] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 87.242067][ T5119] 8835 total pagecache pages [ 87.246663][ T5119] 17 pages in swap cache [ 87.250922][ T5119] Free swap = 120580kB [ 87.255078][ T5119] Total swap = 124996kB [ 87.259262][ T5119] 2097051 pages RAM [ 87.263248][ T5119] 0 pages HighMem/MovableOnly [ 87.267960][ T5119] 80813 pages reserved [ 87.276025][ T5139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.401'. [ 87.302888][ T9] IPVS: starting estimator thread 0... [ 87.380582][ T5150] loop3: detected capacity change from 0 to 1024 [ 87.400996][ T5133] lo speed is unknown, defaulting to 1000 [ 87.406999][ T5140] IPVS: using max 2544 ests per chain, 127200 per kthread [ 87.420028][ T5150] journal_path: Lookup failure for './file0' [ 87.426146][ T5150] EXT4-fs: error: could not find journal device path [ 87.440216][ T5148] loop2: detected capacity change from 0 to 512 [ 87.462125][ T5148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.474311][ T5148] EXT4-fs (loop2): 1 truncate cleaned up [ 87.501521][ T5142] lo speed is unknown, defaulting to 1000 [ 87.521772][ T5153] loop4: detected capacity change from 0 to 512 [ 87.541621][ T5158] loop2: detected capacity change from 0 to 512 [ 87.552871][ T5158] EXT4-fs: inline encryption not supported [ 87.583429][ T5153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.406: bg 0: block 248: padding at end of block bitmap is not set [ 87.599255][ T5158] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.625572][ T5153] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.406: Failed to acquire dquot type 1 [ 87.653637][ T5153] EXT4-fs (loop4): 1 truncate cleaned up [ 87.660036][ T5153] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.695649][ T5158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 87.738917][ T5158] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.746406][ T5158] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.754877][ T5158] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 87.885211][ T5176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 87.894275][ T5174] loop1: detected capacity change from 0 to 512 [ 87.921984][ T5174] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.413: bg 0: block 248: padding at end of block bitmap is not set [ 87.937060][ T5174] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.413: Failed to acquire dquot type 1 [ 87.951664][ T5174] EXT4-fs (loop1): 1 truncate cleaned up [ 87.957846][ T5174] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.974559][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 87.998334][ T5188] loop1: detected capacity change from 0 to 256 [ 88.010916][ T5188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 88.028346][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 88.037263][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.044810][ T5192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.053786][ T5192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.061379][ T5192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.078466][ T5192] batadv0 (unregistering): left promiscuous mode [ 88.092059][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 88.092317][ T5195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.417'. [ 88.101146][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 88.136294][ T5197] loop1: detected capacity change from 0 to 1024 [ 88.145459][ T5197] EXT4-fs: Ignoring removed nobh option [ 88.165946][ T5197] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.418: Allocating blocks 385-513 which overlap fs metadata [ 88.209915][ T5197] EXT4-fs (loop1): pa ffff888106990b60: logic 16, phys. 129, len 24 [ 88.218027][ T5197] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 88.257975][ T5208] loop4: detected capacity change from 0 to 1024 [ 88.272326][ T5205] lo speed is unknown, defaulting to 1000 [ 88.281867][ T5208] EXT4-fs: Ignoring removed nobh option [ 88.289207][ T5207] loop5: detected capacity change from 0 to 1024 [ 88.296264][ T5207] journal_path: Lookup failure for './file0' [ 88.302378][ T5207] EXT4-fs: error: could not find journal device path [ 88.324467][ T5210] FAULT_INJECTION: forcing a failure. [ 88.324467][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 88.337133][ T5210] CPU: 1 UID: 0 PID: 5210 Comm: syz.1.421 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 88.337224][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.337235][ T5210] Call Trace: [ 88.337240][ T5210] [ 88.337246][ T5210] __dump_stack+0x1d/0x30 [ 88.337269][ T5210] dump_stack_lvl+0xe8/0x140 [ 88.337378][ T5210] dump_stack+0x15/0x1b [ 88.337393][ T5210] should_fail_ex+0x265/0x280 [ 88.337421][ T5210] should_failslab+0x8c/0xb0 [ 88.337448][ T5210] __kvmalloc_node_noprof+0x123/0x4e0 [ 88.337556][ T5210] ? alloc_fdtable+0xa5/0x1b0 [ 88.337589][ T5210] ? __kmalloc_cache_noprof+0x22e/0x320 [ 88.337622][ T5210] alloc_fdtable+0xa5/0x1b0 [ 88.337668][ T5210] dup_fd+0x4c7/0x540 [ 88.337705][ T5210] copy_files+0x98/0xf0 [ 88.337733][ T5210] copy_process+0xc44/0x1fe0 [ 88.337802][ T5210] kernel_clone+0x16c/0x5b0 [ 88.337887][ T5210] __se_sys_clone3+0x1c2/0x200 [ 88.337927][ T5210] __x64_sys_clone3+0x31/0x40 [ 88.338010][ T5210] x64_sys_call+0x10c9/0x2fb0 [ 88.338036][ T5210] do_syscall_64+0xd2/0x200 [ 88.338057][ T5210] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 88.338089][ T5210] ? clear_bhb_loop+0x40/0x90 [ 88.338176][ T5210] ? clear_bhb_loop+0x40/0x90 [ 88.338197][ T5210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.338222][ T5210] RIP: 0033:0x7f02579ee929 [ 88.338239][ T5210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.338337][ T5210] RSP: 002b:00007f0256056f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 88.338355][ T5210] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f02579ee929 [ 88.338366][ T5210] RDX: 00007f0256056f20 RSI: 0000000000000058 RDI: 00007f0256056f20 [ 88.338377][ T5210] RBP: 00007f0256057090 R08: 0000000000000000 R09: 0000000000000058 [ 88.338389][ T5210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.338463][ T5210] R13: 0000000000000000 R14: 00007f0257c15fa0 R15: 00007fff184dfed8 [ 88.338480][ T5210] [ 88.635218][ T5208] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.420: Allocating blocks 385-513 which overlap fs metadata [ 88.682917][ T5208] EXT4-fs (loop4): pa ffff888106a15540: logic 16, phys. 129, len 24 [ 88.691100][ T5208] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 88.860424][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 88.953841][ T5230] loop4: detected capacity change from 0 to 512 [ 88.983059][ T5232] loop5: detected capacity change from 0 to 1024 [ 88.995955][ T5230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.426: bg 0: block 248: padding at end of block bitmap is not set [ 89.034450][ T5232] EXT4-fs: Ignoring removed nobh option [ 89.051076][ T5236] loop3: detected capacity change from 0 to 2048 [ 89.074362][ T5230] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.426: Failed to acquire dquot type 1 [ 89.138451][ T5230] EXT4-fs (loop4): 1 truncate cleaned up [ 89.157465][ T5232] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.427: Allocating blocks 385-513 which overlap fs metadata [ 89.179250][ T5230] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.258831][ T5232] EXT4-fs (loop5): pa ffff888106a155b0: logic 16, phys. 129, len 24 [ 89.267025][ T5232] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 89.519900][ T5248] loop2: detected capacity change from 0 to 512 [ 89.547038][ T5248] EXT4-fs: Ignoring removed orlov option [ 89.577021][ T5248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.597082][ T5248] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 89.606045][ T5245] 9pnet_fd: Insufficient options for proto=fd [ 89.735868][ T5252] loop2: detected capacity change from 0 to 1024 [ 89.776750][ T5252] EXT4-fs: Ignoring removed orlov option [ 89.782786][ T5252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.980766][ T5255] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.005207][ T5255] loop5: detected capacity change from 0 to 164 [ 90.288154][ T5263] loop4: detected capacity change from 0 to 764 [ 90.304962][ T5263] iso9660: Unknown parameter '' [ 90.428408][ T5280] loop4: detected capacity change from 0 to 512 [ 90.442823][ T5280] EXT4-fs: Ignoring removed orlov option [ 90.449583][ T5282] netlink: 'syz.5.442': attribute type 4 has an invalid length. [ 90.458675][ T5280] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.472971][ T5282] loop5: detected capacity change from 0 to 164 [ 90.480787][ T5280] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 90.481230][ T5282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.559198][ T5284] loop2: detected capacity change from 0 to 512 [ 90.566221][ T5284] EXT4-fs: Ignoring removed oldalloc option [ 90.575480][ T5284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.679287][ T5282] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 90.688721][ T5282] Symlink component flag not implemented [ 90.694384][ T5282] Symlink component flag not implemented [ 90.706048][ T5284] EXT4-fs (loop2): orphan cleanup on readonly fs [ 90.713535][ T5284] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.440: Failed to acquire dquot type 1 [ 90.725941][ T5284] EXT4-fs (loop2): 1 truncate cleaned up [ 90.776594][ T5282] Symlink component flag not implemented (7) [ 90.782673][ T5282] Symlink component flag not implemented (116) [ 91.191804][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 91.191820][ T29] audit: type=1400 audit(1751408320.951:2402): avc: denied { append } for pid=5289 comm="syz.5.444" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.221409][ T29] audit: type=1400 audit(1751408320.951:2403): avc: denied { open } for pid=5289 comm="syz.5.444" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.344763][ T29] audit: type=1326 audit(1751408321.071:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522e1be929 code=0x7ffc0000 [ 91.368253][ T29] audit: type=1326 audit(1751408321.071:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f522e1be929 code=0x7ffc0000 [ 91.391612][ T29] audit: type=1326 audit(1751408321.071:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.3.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f522e1be929 code=0x7ffc0000 [ 91.414962][ T29] audit: type=1326 audit(1751408321.071:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5292 comm="syz.3.445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522e1be929 code=0x0 [ 91.484838][ T29] audit: type=1326 audit(1751408321.241:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 91.508340][ T29] audit: type=1326 audit(1751408321.241:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02579ee929 code=0x7ffc0000 [ 91.537519][ T5295] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 91.537815][ T5296] loop4: detected capacity change from 0 to 1024 [ 91.545241][ T5295] audit: out of memory in audit_log_start [ 91.552083][ T5296] EXT4-fs: Ignoring removed orlov option [ 91.563080][ T5296] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.590474][ T5291] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.759120][ T5307] loop1: detected capacity change from 0 to 512 [ 91.773574][ T5307] EXT4-fs: test_dummy_encryption option not supported [ 91.831745][ T5307] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 91.838305][ T5307] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.846006][ T5307] vhci_hcd vhci_hcd.0: Device attached [ 91.882800][ T5308] vhci_hcd: cannot find the pending unlink 3994 [ 91.890869][ T5308] usbip_core: unknown command [ 91.895638][ T5308] vhci_hcd: unknown pdu 0 [ 91.900018][ T5308] usbip_core: unknown command [ 91.925248][ T2106] vhci_hcd: stop threads [ 91.929686][ T2106] vhci_hcd: release socket [ 91.934123][ T2106] vhci_hcd: disconnect device [ 92.151272][ T5311] loop4: detected capacity change from 0 to 512 [ 92.172577][ T5311] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.194108][ T5311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 92.205381][ T5311] System zones: 1-12 [ 92.215867][ T5311] EXT4-fs (loop4): 1 truncate cleaned up [ 92.290066][ T5335] loop3: detected capacity change from 0 to 512 [ 92.307071][ T5335] EXT4-fs: Ignoring removed orlov option [ 92.320099][ T5335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.328875][ T5335] EXT4-fs (loop3): can't mount with commit=, fs mounted w/o journal [ 92.342112][ T5335] __nla_validate_parse: 6 callbacks suppressed [ 92.342128][ T5335] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'. [ 92.343266][ T5333] loop2: detected capacity change from 0 to 512 [ 92.364063][ T5333] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.376015][ T5333] EXT4-fs (loop2): 1 truncate cleaned up [ 92.422957][ T5342] loop3: detected capacity change from 0 to 1024 [ 92.430416][ T5342] EXT4-fs: Ignoring removed orlov option [ 92.436182][ T5342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.539846][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 92.595804][ T5361] xt_hashlimit: size too large, truncated to 1048576 [ 92.613439][ T5362] loop5: detected capacity change from 0 to 512 [ 92.641077][ T5362] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.459: bg 0: block 248: padding at end of block bitmap is not set [ 92.656664][ T5362] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.459: Failed to acquire dquot type 1 [ 92.669458][ T5362] EXT4-fs (loop5): 1 truncate cleaned up [ 92.691175][ T5367] FAULT_INJECTION: forcing a failure. [ 92.691175][ T5367] name failslab, interval 1, probability 0, space 0, times 0 [ 92.703980][ T5367] CPU: 0 UID: 0 PID: 5367 Comm: syz.1.464 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 92.704012][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.704090][ T5367] Call Trace: [ 92.704098][ T5367] [ 92.704107][ T5367] __dump_stack+0x1d/0x30 [ 92.704128][ T5367] dump_stack_lvl+0xe8/0x140 [ 92.704152][ T5367] dump_stack+0x15/0x1b [ 92.704173][ T5367] should_fail_ex+0x265/0x280 [ 92.704213][ T5367] should_failslab+0x8c/0xb0 [ 92.704248][ T5367] kmem_cache_alloc_noprof+0x50/0x310 [ 92.704325][ T5367] ? security_file_alloc+0x32/0x100 [ 92.704354][ T5367] security_file_alloc+0x32/0x100 [ 92.704379][ T5367] init_file+0x5c/0x1d0 [ 92.704426][ T5367] alloc_empty_file+0x8b/0x200 [ 92.704450][ T5367] alloc_file_pseudo+0xc6/0x160 [ 92.704486][ T5367] anon_inode_getfd+0xc1/0x150 [ 92.704510][ T5367] __se_sys_fsopen+0x193/0x1e0 [ 92.704591][ T5367] __x64_sys_fsopen+0x31/0x40 [ 92.704613][ T5367] x64_sys_call+0x2a54/0x2fb0 [ 92.704639][ T5367] do_syscall_64+0xd2/0x200 [ 92.704657][ T5367] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.704718][ T5367] ? clear_bhb_loop+0x40/0x90 [ 92.704803][ T5367] ? clear_bhb_loop+0x40/0x90 [ 92.704827][ T5367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.704878][ T5367] RIP: 0033:0x7f02579ee929 [ 92.704895][ T5367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.704916][ T5367] RSP: 002b:00007f0256036038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 92.704980][ T5367] RAX: ffffffffffffffda RBX: 00007f0257c16080 RCX: 00007f02579ee929 [ 92.704992][ T5367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 92.705006][ T5367] RBP: 00007f0256036090 R08: 0000000000000000 R09: 0000000000000000 [ 92.705027][ T5367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.705042][ T5367] R13: 0000000000000000 R14: 00007f0257c16080 R15: 00007fff184dfed8 [ 92.705063][ T5367] [ 92.705947][ T5362] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.927284][ T5363] loop2: detected capacity change from 0 to 512 [ 92.934323][ T5363] EXT4-fs: Ignoring removed oldalloc option [ 92.942960][ T5363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.026265][ T5363] EXT4-fs (loop2): orphan cleanup on readonly fs [ 93.033966][ T5363] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.462: Failed to acquire dquot type 1 [ 93.046857][ T5363] EXT4-fs (loop2): 1 truncate cleaned up [ 93.489903][ T5374] loop4: detected capacity change from 0 to 128 [ 93.511283][ T5376] loop1: detected capacity change from 0 to 1024 [ 93.524485][ T5374] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.563002][ T5376] EXT4-fs: Ignoring removed nobh option [ 93.594657][ T5376] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.468: Allocating blocks 385-513 which overlap fs metadata [ 93.615656][ T5376] EXT4-fs (loop1): pa ffff888106a155b0: logic 16, phys. 129, len 24 [ 93.623772][ T5376] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 93.665979][ T5373] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.465: No space for directory leaf checksum. Please run e2fsck -D. [ 93.681616][ T5373] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.465: checksumming directory block 0 [ 93.759194][ T5389] loop3: detected capacity change from 0 to 128 [ 93.833528][ T5389] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.853457][ T5395] loop5: detected capacity change from 0 to 512 [ 93.869669][ T5395] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.373450][ T5402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 94.393587][ T5414] loop2: detected capacity change from 0 to 256 [ 94.432219][ T5414] FAULT_INJECTION: forcing a failure. [ 94.432219][ T5414] name failslab, interval 1, probability 0, space 0, times 0 [ 94.445010][ T5414] CPU: 0 UID: 0 PID: 5414 Comm: syz.2.477 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 94.445036][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.445051][ T5414] Call Trace: [ 94.445059][ T5414] [ 94.445081][ T5414] __dump_stack+0x1d/0x30 [ 94.445107][ T5414] dump_stack_lvl+0xe8/0x140 [ 94.445207][ T5414] dump_stack+0x15/0x1b [ 94.445229][ T5414] should_fail_ex+0x265/0x280 [ 94.445281][ T5414] ? alloc_pipe_info+0xae/0x350 [ 94.445304][ T5414] should_failslab+0x8c/0xb0 [ 94.445373][ T5414] __kmalloc_cache_noprof+0x4c/0x320 [ 94.445432][ T5414] alloc_pipe_info+0xae/0x350 [ 94.445458][ T5414] splice_direct_to_actor+0x592/0x680 [ 94.445501][ T5414] ? __pfx_direct_splice_actor+0x10/0x10 [ 94.445532][ T5414] ? __seccomp_filter+0x69d/0x10d0 [ 94.445559][ T5414] ? avc_policy_seqno+0x15/0x30 [ 94.445621][ T5414] ? selinux_file_permission+0x1e4/0x320 [ 94.445645][ T5414] do_splice_direct+0xda/0x150 [ 94.445740][ T5414] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 94.445830][ T5414] do_sendfile+0x380/0x650 [ 94.445866][ T5414] __x64_sys_sendfile64+0x105/0x150 [ 94.445898][ T5414] x64_sys_call+0xb39/0x2fb0 [ 94.445927][ T5414] do_syscall_64+0xd2/0x200 [ 94.445993][ T5414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.446019][ T5414] ? clear_bhb_loop+0x40/0x90 [ 94.446045][ T5414] ? clear_bhb_loop+0x40/0x90 [ 94.446152][ T5414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.446179][ T5414] RIP: 0033:0x7fb43fdbe929 [ 94.446193][ T5414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.446213][ T5414] RSP: 002b:00007fb43e427038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 94.446237][ T5414] RAX: ffffffffffffffda RBX: 00007fb43ffe5fa0 RCX: 00007fb43fdbe929 [ 94.446278][ T5414] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 94.446298][ T5414] RBP: 00007fb43e427090 R08: 0000000000000000 R09: 0000000000000000 [ 94.446311][ T5414] R10: 000000000000e065 R11: 0000000000000246 R12: 0000000000000001 [ 94.446323][ T5414] R13: 0000000000000000 R14: 00007fb43ffe5fa0 R15: 00007ffe081d0b68 [ 94.446343][ T5414] [ 94.695381][ T5429] xt_hashlimit: size too large, truncated to 1048576 [ 94.779983][ T5430] netlink: 'syz.4.479': attribute type 4 has an invalid length. [ 94.787838][ T5430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 94.843223][ T5431] : renamed from veth0_to_batadv (while UP) [ 94.871283][ T5437] netlink: 32 bytes leftover after parsing attributes in process `syz.5.482'. [ 94.884284][ T3382] IPVS: starting estimator thread 0... [ 94.972589][ T5435] lo speed is unknown, defaulting to 1000 [ 94.978424][ T5439] IPVS: using max 2592 ests per chain, 129600 per kthread [ 95.250402][ T5449] loop3: detected capacity change from 0 to 512 [ 95.259195][ T5449] EXT4-fs: inline encryption not supported [ 95.272009][ T5449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.339362][ T5451] loop2: detected capacity change from 0 to 512 [ 95.346083][ T5451] EXT4-fs: Ignoring removed oldalloc option [ 95.354767][ T5451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.448571][ T5451] EXT4-fs (loop2): orphan cleanup on readonly fs [ 95.456192][ T5451] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.485: Failed to acquire dquot type 1 [ 95.470074][ T5451] EXT4-fs (loop2): 1 truncate cleaned up [ 96.142365][ T5458] netlink: 'syz.4.488': attribute type 4 has an invalid length. [ 96.169630][ T5458] loop4: detected capacity change from 0 to 164 [ 96.188038][ T5458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.207502][ T5458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 96.242028][ T5458] Symlink component flag not implemented [ 96.247811][ T5458] Symlink component flag not implemented [ 96.257437][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 96.257451][ T29] audit: type=1400 audit(1751408327.021:2639): avc: denied { mount } for pid=5448 comm="syz.3.486" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 96.309611][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 96.319076][ T5458] Symlink component flag not implemented (7) [ 96.325104][ T5458] Symlink component flag not implemented (116) [ 96.341991][ T29] audit: type=1400 audit(1751408327.051:2640): avc: denied { mount } for pid=5448 comm="syz.3.486" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.363952][ T29] audit: type=1400 audit(1751408327.061:2641): avc: denied { create } for pid=5448 comm="syz.3.486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.384120][ T29] audit: type=1400 audit(1751408327.071:2642): avc: denied { ioctl } for pid=5448 comm="syz.3.486" path="socket:[10559]" dev="sockfs" ino=10559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 96.411964][ T5461] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.419444][ T5461] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 96.467130][ T5461] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 96.487537][ T5462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.498'. [ 96.496443][ T5462] netlink: 28 bytes leftover after parsing attributes in process `syz.5.498'. [ 96.655529][ T29] audit: type=1400 audit(1751408327.391:2643): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 96.691669][ T5465] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 96.699483][ T5465] audit: out of memory in audit_log_start [ 96.724689][ T5465] sd 0:0:1:0: device reset [ 96.738969][ T29] audit: type=1326 audit(1751408327.441:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 96.762370][ T29] audit: type=1326 audit(1751408327.441:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 96.785713][ T29] audit: type=1326 audit(1751408327.451:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz.4.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 96.867714][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 97.008933][ T5484] loop1: detected capacity change from 0 to 256 [ 97.034832][ T5485] loop4: detected capacity change from 0 to 512 [ 97.074135][ T5487] loop3: detected capacity change from 0 to 512 [ 97.107230][ T5485] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.129931][ T5487] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 97.192045][ T5485] EXT4-fs (loop4): 1 truncate cleaned up [ 97.329132][ T5499] FAULT_INJECTION: forcing a failure. [ 97.329132][ T5499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.342439][ T5499] CPU: 0 UID: 0 PID: 5499 Comm: syz.3.501 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 97.342473][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.342487][ T5499] Call Trace: [ 97.342495][ T5499] [ 97.342503][ T5499] __dump_stack+0x1d/0x30 [ 97.342527][ T5499] dump_stack_lvl+0xe8/0x140 [ 97.342549][ T5499] dump_stack+0x15/0x1b [ 97.342597][ T5499] should_fail_ex+0x265/0x280 [ 97.342683][ T5499] should_fail+0xb/0x20 [ 97.342717][ T5499] should_fail_usercopy+0x1a/0x20 [ 97.342755][ T5499] _copy_from_user+0x1c/0xb0 [ 97.342773][ T5499] ___sys_sendmsg+0xc1/0x1d0 [ 97.342950][ T5499] __x64_sys_sendmsg+0xd4/0x160 [ 97.343017][ T5499] x64_sys_call+0x2999/0x2fb0 [ 97.343044][ T5499] do_syscall_64+0xd2/0x200 [ 97.343063][ T5499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.343091][ T5499] ? clear_bhb_loop+0x40/0x90 [ 97.343118][ T5499] ? clear_bhb_loop+0x40/0x90 [ 97.343174][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.343215][ T5499] RIP: 0033:0x7f522e1be929 [ 97.343231][ T5499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.343303][ T5499] RSP: 002b:00007f522c827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.343321][ T5499] RAX: ffffffffffffffda RBX: 00007f522e3e5fa0 RCX: 00007f522e1be929 [ 97.343410][ T5499] RDX: 0000000020008800 RSI: 0000200000001100 RDI: 0000000000000003 [ 97.343426][ T5499] RBP: 00007f522c827090 R08: 0000000000000000 R09: 0000000000000000 [ 97.343441][ T5499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.343454][ T5499] R13: 0000000000000000 R14: 00007f522e3e5fa0 R15: 00007fffc2c1b6e8 [ 97.343472][ T5499] [ 97.358297][ T5491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'. [ 97.556778][ T5509] loop3: detected capacity change from 0 to 164 [ 97.573352][ T5509] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.675021][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 97.707882][ T5517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 97.748225][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 97.836279][ T5530] batman_adv: batadv0: Adding interface: dummy0 [ 97.842637][ T5530] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.903813][ T5530] batman_adv: batadv0: Interface activated: dummy0 [ 98.022076][ T5520] loop5: detected capacity change from 0 to 512 [ 98.030817][ T5533] batadv0: mtu less than device minimum [ 98.036792][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.047506][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.058408][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.069259][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.080122][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.091088][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.101966][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.112929][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.123653][ T5533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 98.140552][ T5520] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.169028][ T5532] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 98.185763][ T5520] EXT4-fs (loop5): 1 truncate cleaned up [ 98.386335][ T5543] loop5: detected capacity change from 0 to 1024 [ 98.544269][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.513'. [ 98.553276][ T5550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.513'. [ 98.598985][ T5552] vlan2: entered allmulticast mode [ 98.618521][ T5552] dummy0: entered allmulticast mode [ 98.645309][ T5556] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 98.925447][ T5568] IPv6: NLM_F_CREATE should be specified when creating new route [ 98.935555][ T5568] loop4: detected capacity change from 0 to 164 [ 99.116091][ T3812] EXT4-fs unmount: 50 callbacks suppressed [ 99.116105][ T3812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.135815][ T5577] loop4: detected capacity change from 0 to 512 [ 99.161069][ T5577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.201987][ T5577] EXT4-fs (loop4): 1 truncate cleaned up [ 99.215175][ T5586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.530'. [ 99.217755][ T5577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.234391][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.243582][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.252952][ T5577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.263858][ T5586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.271369][ T5586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.307449][ T5589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'. [ 99.375181][ T5593] FAULT_INJECTION: forcing a failure. [ 99.375181][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.388474][ T5593] CPU: 0 UID: 0 PID: 5593 Comm: syz.4.532 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 99.388499][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.388512][ T5593] Call Trace: [ 99.388518][ T5593] [ 99.388568][ T5593] __dump_stack+0x1d/0x30 [ 99.388650][ T5593] dump_stack_lvl+0xe8/0x140 [ 99.388673][ T5593] dump_stack+0x15/0x1b [ 99.388722][ T5593] should_fail_ex+0x265/0x280 [ 99.388798][ T5593] should_fail+0xb/0x20 [ 99.388835][ T5593] should_fail_usercopy+0x1a/0x20 [ 99.388882][ T5593] _copy_from_user+0x1c/0xb0 [ 99.388977][ T5593] ___sys_sendmsg+0xc1/0x1d0 [ 99.389067][ T5593] __x64_sys_sendmsg+0xd4/0x160 [ 99.389146][ T5593] x64_sys_call+0x2999/0x2fb0 [ 99.389217][ T5593] do_syscall_64+0xd2/0x200 [ 99.389241][ T5593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.389274][ T5593] ? clear_bhb_loop+0x40/0x90 [ 99.389296][ T5593] ? clear_bhb_loop+0x40/0x90 [ 99.389334][ T5593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.389403][ T5593] RIP: 0033:0x7f11af83e929 [ 99.389422][ T5593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.389466][ T5593] RSP: 002b:00007f11adea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.389484][ T5593] RAX: ffffffffffffffda RBX: 00007f11afa65fa0 RCX: 00007f11af83e929 [ 99.389497][ T5593] RDX: 0000000000004004 RSI: 0000200000000040 RDI: 0000000000000005 [ 99.389581][ T5593] RBP: 00007f11adea7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.389596][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.389613][ T5593] R13: 0000000000000000 R14: 00007f11afa65fa0 R15: 00007ffcb1ab9828 [ 99.389638][ T5593] [ 99.708722][ T5609] loop4: detected capacity change from 0 to 164 [ 99.715399][ T5609] iso9660: Unknown parameter '' [ 99.733107][ T5610] loop5: detected capacity change from 0 to 1024 [ 99.752189][ T5607] syz_tun (unregistering): left promiscuous mode [ 99.949067][ T294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.000112][ T294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.034253][ T3314] syz_tun (unregistering): left promiscuous mode [ 100.060657][ T294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.140809][ T294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.246086][ T5616] syz_tun (unregistering): left promiscuous mode [ 100.289715][ T294] bridge_slave_1: left allmulticast mode [ 100.295457][ T294] bridge_slave_1: left promiscuous mode [ 100.301212][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.309428][ T294] bridge_slave_0: left allmulticast mode [ 100.315242][ T294] bridge_slave_0: left promiscuous mode [ 100.321145][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.375358][ T294] bridge0 (unregistering): left promiscuous mode [ 100.429569][ T294] bond0 (unregistering): left promiscuous mode [ 100.435820][ T294] bond_slave_0: left promiscuous mode [ 100.441407][ T294] bond_slave_1: left promiscuous mode [ 100.447814][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.458212][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.468764][ T294] bond0 (unregistering): Released all slaves [ 100.536355][ T294] batadv0: left promiscuous mode [ 100.544546][ T294] hsr_slave_0: left promiscuous mode [ 100.551125][ T294] hsr_slave_1: left promiscuous mode [ 100.557012][ T294] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.563783][ T294] batman_adv: batadv0: Removing interface: dummy0 [ 100.571601][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.579087][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.587927][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.595402][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.603146][ T294] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 100.610113][ T294] batman_adv: batadv0: Removing interface: ipvlan2 [ 100.618783][ T294] veth1_macvtap: left promiscuous mode [ 100.624263][ T294] veth0_macvtap: left promiscuous mode [ 100.630328][ T294] veth1_vlan: left promiscuous mode [ 100.635631][ T294] veth0_vlan: left promiscuous mode [ 100.699842][ T294] team0 (unregistering): Port device team_slave_1 removed [ 100.709785][ T294] team0 (unregistering): Port device team_slave_0 removed [ 101.219709][ T294] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.247164][ T5676] lo speed is unknown, defaulting to 1000 [ 101.273837][ T294] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.325997][ T5677] lo speed is unknown, defaulting to 1000 [ 101.332916][ T294] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.363696][ T5682] lo speed is unknown, defaulting to 1000 [ 101.370848][ T294] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.400336][ T5676] chnl_net:caif_netlink_parms(): no params data found [ 101.468111][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz.4.547'. [ 101.482559][ T10] IPVS: starting estimator thread 0... [ 101.543084][ T5727] lo speed is unknown, defaulting to 1000 [ 101.549183][ T294] bridge_slave_1: left allmulticast mode [ 101.554944][ T294] bridge_slave_1: left promiscuous mode [ 101.560691][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.572148][ T294] bridge_slave_0: left allmulticast mode [ 101.577102][ T5734] IPVS: using max 1920 ests per chain, 96000 per kthread [ 101.577863][ T294] bridge_slave_0: left promiscuous mode [ 101.590867][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.599329][ T294] bridge_slave_1: left allmulticast mode [ 101.605006][ T294] bridge_slave_1: left promiscuous mode [ 101.610828][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.618792][ T294] bridge_slave_0: left allmulticast mode [ 101.624487][ T294] bridge_slave_0: left promiscuous mode [ 101.630206][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.682487][ T294] bridge0 (unregistering): left promiscuous mode [ 101.729898][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.739800][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.748731][ T294] bond0 (unregistering): Released all slaves [ 101.773753][ T294] bridge0 (unregistering): left promiscuous mode [ 101.848776][ T294] bond0 (unregistering): left promiscuous mode [ 101.854991][ T294] bond_slave_0: left promiscuous mode [ 101.860485][ T294] bond_slave_1: left promiscuous mode [ 101.868671][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.878572][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.888301][ T294] bond0 (unregistering): Released all slaves [ 101.902741][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.909855][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.917234][ T5676] bridge_slave_0: entered allmulticast mode [ 101.923551][ T5676] bridge_slave_0: entered promiscuous mode [ 101.932080][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.939188][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.946345][ T5676] bridge_slave_1: entered allmulticast mode [ 101.952835][ T5676] bridge_slave_1: entered promiscuous mode [ 101.974624][ T5682] chnl_net:caif_netlink_parms(): no params data found [ 102.050508][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.071172][ T294] hsr_slave_1: left promiscuous mode [ 102.079552][ T294] hsr_slave_0: left promiscuous mode [ 102.085280][ T294] hsr_slave_1: left promiscuous mode [ 102.094701][ T294] veth1_macvtap: left promiscuous mode [ 102.100272][ T294] veth0_macvtap: left promiscuous mode [ 102.105825][ T294] veth1_vlan: left promiscuous mode [ 102.111174][ T294] veth0_vlan: left promiscuous mode [ 102.173172][ T294] team0 (unregistering): Port device team_slave_1 removed [ 102.183478][ T294] team0 (unregistering): Port device team_slave_0 removed [ 102.191097][ T51] smc: removing ib device syz! [ 102.254141][ T294] team0 (unregistering): Port device team_slave_1 removed [ 102.263648][ T294] team0 (unregistering): Port device team_slave_0 removed [ 102.292206][ T5677] chnl_net:caif_netlink_parms(): no params data found [ 102.298090][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 102.298109][ T29] audit: type=1400 audit(1751408333.061:2876): avc: denied { append } for pid=5764 comm="syz.4.548" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.329550][ T29] audit: type=1400 audit(1751408333.061:2877): avc: denied { ioctl } for pid=5764 comm="syz.4.548" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 102.359296][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.370684][ T3400] lo speed is unknown, defaulting to 1000 [ 102.376501][ T3400] infiniband syz0: ib_query_port failed (-19) [ 102.406323][ T5773] loop4: detected capacity change from 0 to 1024 [ 102.413975][ T5773] EXT4-fs: Ignoring removed nobh option [ 102.434603][ T5773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.450188][ T5773] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.549: Allocating blocks 385-513 which overlap fs metadata [ 102.470845][ T5773] EXT4-fs (loop4): pa ffff888106a155b0: logic 16, phys. 129, len 24 [ 102.478951][ T5773] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 102.491337][ T5676] team0: Port device team_slave_0 added [ 102.515722][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.540306][ T5778] loop4: detected capacity change from 0 to 512 [ 102.547548][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.554653][ T5682] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.566701][ T5682] bridge_slave_0: entered allmulticast mode [ 102.575090][ T5778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.589573][ T5778] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.593660][ T5682] bridge_slave_0: entered promiscuous mode [ 102.611066][ T5778] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.550: corrupted inode contents [ 102.623383][ T29] audit: type=1400 audit(1751408333.371:2878): avc: denied { setattr } for pid=5777 comm="syz.4.550" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.628894][ T5778] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.550: mark_inode_dirty error [ 102.661440][ T5778] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.550: corrupted inode contents [ 102.663204][ T5676] team0: Port device team_slave_1 added [ 102.684902][ T5682] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.688898][ T5778] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.550: corrupted inode contents [ 102.692081][ T5682] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.705478][ T5778] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.550: mark_inode_dirty error [ 102.710994][ T5682] bridge_slave_1: entered allmulticast mode [ 102.722618][ T5778] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.550: corrupted inode contents [ 102.730054][ T5682] bridge_slave_1: entered promiscuous mode [ 102.740383][ T5778] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.550: mark_inode_dirty error [ 102.756871][ T5778] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.550: corrupted inode contents [ 102.768819][ T5778] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.550: mark_inode_dirty error [ 102.796763][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.803912][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.829946][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.842807][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.859230][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.866374][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.874681][ T5677] bridge_slave_0: entered allmulticast mode [ 102.882739][ T5677] bridge_slave_0: entered promiscuous mode [ 102.889864][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.897045][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.904642][ T5677] bridge_slave_1: entered allmulticast mode [ 102.914336][ T5677] bridge_slave_1: entered promiscuous mode [ 102.920705][ T29] audit: type=1326 audit(1751408333.681:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 102.944133][ T29] audit: type=1326 audit(1751408333.681:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 102.967589][ T29] audit: type=1326 audit(1751408333.681:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 102.990963][ T29] audit: type=1326 audit(1751408333.681:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 103.014517][ T29] audit: type=1326 audit(1751408333.681:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 103.037927][ T29] audit: type=1326 audit(1751408333.681:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 103.044896][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.061393][ T29] audit: type=1326 audit(1751408333.681:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5785 comm="syz.4.553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11af83e929 code=0x7ffc0000 [ 103.068232][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.117654][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.133093][ T5682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.168384][ T5682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.183962][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.194578][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.225123][ T5676] hsr_slave_0: entered promiscuous mode [ 103.231364][ T5676] hsr_slave_1: entered promiscuous mode [ 103.242888][ T5733] chnl_net:caif_netlink_parms(): no params data found [ 103.261912][ T5792] loop4: detected capacity change from 0 to 512 [ 103.268568][ T5792] EXT4-fs: Ignoring removed oldalloc option [ 103.277178][ T5792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.340878][ T5792] EXT4-fs (loop4): orphan cleanup on readonly fs [ 103.348846][ T5792] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.554: Failed to acquire dquot type 1 [ 103.362082][ T5792] EXT4-fs (loop4): 1 truncate cleaned up [ 103.369245][ T5792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.401905][ T5682] team0: Port device team_slave_0 added [ 103.430927][ T5677] team0: Port device team_slave_0 added [ 103.444874][ T5682] team0: Port device team_slave_1 added [ 103.451526][ T294] IPVS: stop unused estimator thread 0... [ 103.486450][ T5677] team0: Port device team_slave_1 added [ 103.608753][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.615845][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.641870][ T5682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.756925][ T5682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.764004][ T5682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.790097][ T5682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.856704][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.863746][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.889850][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.057344][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.064518][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.093099][ T5733] bridge_slave_0: entered allmulticast mode [ 104.113822][ T5733] bridge_slave_0: entered promiscuous mode [ 104.144277][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.151298][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.177296][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.203884][ T5682] hsr_slave_0: entered promiscuous mode [ 104.211084][ T5682] hsr_slave_1: entered promiscuous mode [ 104.217236][ T5682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.224821][ T5682] Cannot create hsr debugfs directory [ 104.230513][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.237717][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.245983][ T5733] bridge_slave_1: entered allmulticast mode [ 104.253038][ T5733] bridge_slave_1: entered promiscuous mode [ 104.288264][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.341682][ T5677] hsr_slave_0: entered promiscuous mode [ 104.352511][ T5677] hsr_slave_1: entered promiscuous mode [ 104.360533][ T5677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.368273][ T5677] Cannot create hsr debugfs directory [ 104.384893][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.423452][ T5676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.484549][ T5676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.508461][ T5733] team0: Port device team_slave_0 added [ 104.530783][ T5676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.543342][ T5733] team0: Port device team_slave_1 added [ 104.570657][ T5676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.641818][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.648853][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.674940][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.710693][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.717838][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.744110][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.801009][ T5682] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 104.829597][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.840798][ T5682] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 104.851055][ T5682] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 104.876892][ T5682] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 104.921644][ T5733] hsr_slave_0: entered promiscuous mode [ 104.929691][ T5733] hsr_slave_1: entered promiscuous mode [ 104.935683][ T5733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.944299][ T5733] Cannot create hsr debugfs directory [ 104.966013][ T5854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.555'. [ 105.002404][ T5677] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.011256][ T5677] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.030814][ T5677] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.041457][ T5677] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.075954][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.123297][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.152810][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.159980][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.173584][ T5733] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 105.184367][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.191489][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.204128][ T5733] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.220827][ T5733] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.251664][ T5682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.302844][ T5676] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.313280][ T5676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.369757][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.379001][ T5733] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.402290][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.432159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.439367][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.449752][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 105.458779][ T5885] netlink: 212 bytes leftover after parsing attributes in process `syz.4.556'. [ 105.481391][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.488528][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.501020][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.545365][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.565929][ T1457] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.573052][ T1457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.591481][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.598593][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.665578][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.694323][ T5682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.706805][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.729871][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.737044][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.772046][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.779273][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.819144][ T5676] veth0_vlan: entered promiscuous mode [ 105.842434][ T5676] veth1_vlan: entered promiscuous mode [ 105.897485][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.917657][ T5676] veth0_macvtap: entered promiscuous mode [ 105.933189][ T5676] veth1_macvtap: entered promiscuous mode [ 105.970144][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.000954][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.028840][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.045782][ T5676] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.054685][ T5676] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.063491][ T5676] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.072272][ T5676] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.091573][ T5682] veth0_vlan: entered promiscuous mode [ 106.119840][ T5682] veth1_vlan: entered promiscuous mode [ 106.169350][ T5682] veth0_macvtap: entered promiscuous mode [ 106.192373][ T5682] veth1_macvtap: entered promiscuous mode [ 106.230711][ T5677] veth0_vlan: entered promiscuous mode [ 106.249570][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.260857][ T5677] veth1_vlan: entered promiscuous mode [ 106.272591][ T5682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.287508][ T5677] veth0_macvtap: entered promiscuous mode [ 106.300410][ T5682] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.309305][ T5682] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.318183][ T5682] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.326999][ T5682] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.356200][ T5677] veth1_macvtap: entered promiscuous mode [ 106.383044][ T5733] veth0_vlan: entered promiscuous mode [ 106.406008][ T5733] veth1_vlan: entered promiscuous mode [ 106.422454][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.444898][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.468639][ T5733] veth0_macvtap: entered promiscuous mode [ 106.482062][ T5677] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.491065][ T5677] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.499885][ T5677] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.508737][ T5677] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.522733][ T5733] veth1_macvtap: entered promiscuous mode [ 106.529288][ T6002] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 106.535895][ T6002] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 106.537647][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.543652][ T6002] vhci_hcd vhci_hcd.0: Device attached [ 106.572021][ T6005] vhci_hcd: connection closed [ 106.572515][ T51] vhci_hcd: stop threads [ 106.581862][ T51] vhci_hcd: release socket [ 106.586342][ T51] vhci_hcd: disconnect device [ 106.609322][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.621438][ T5733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.630406][ T5733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.639474][ T5733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.648259][ T5733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.714875][ T6014] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.829315][ T6038] process 'syz.9.561' launched './file1' with NULL argv: empty string added [ 106.879789][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.562'. [ 106.922845][ T6050] hsr0: entered promiscuous mode [ 106.934056][ T6047] loop7: detected capacity change from 0 to 512 [ 106.965143][ T6047] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.563: bg 0: block 248: padding at end of block bitmap is not set [ 106.981781][ T6047] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.563: Failed to acquire dquot type 1 [ 107.002632][ T6047] EXT4-fs (loop7): 1 truncate cleaned up [ 107.012151][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.8.544'. [ 107.016235][ T6047] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.021114][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.8.544'. [ 107.034830][ T6047] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.076157][ T6062] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 107.088474][ T6059] bridge0: entered promiscuous mode [ 107.091590][ T5682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.094840][ T6059] syz_tun: entered promiscuous mode [ 107.201391][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.566'. [ 107.210473][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.566'. [ 107.269767][ T6072] loop7: detected capacity change from 0 to 512 [ 107.298508][ T6072] journal_path: Non-blockdev passed as './bus' [ 107.304749][ T6072] EXT4-fs: error: could not find journal device path [ 107.340506][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.566'. [ 107.349878][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 107.349893][ T29] audit: type=1400 audit(1751408338.101:2987): avc: denied { write } for pid=6065 comm="syz.6.566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.393806][ T6079] loop9: detected capacity change from 0 to 512 [ 107.405831][ T29] audit: type=1400 audit(1751408338.151:2988): avc: denied { read } for pid=6065 comm="syz.6.566" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.443704][ T6079] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.456489][ T6079] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.471535][ T29] audit: type=1400 audit(1751408338.231:2989): avc: denied { add_name } for pid=6078 comm="syz.9.567" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.472066][ T6079] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.567: corrupted xattr block 19: overlapping e_value [ 107.492460][ T29] audit: type=1400 audit(1751408338.231:2990): avc: denied { create } for pid=6078 comm="syz.9.567" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.538846][ T6081] loop7: detected capacity change from 0 to 512 [ 107.547538][ T6079] EXT4-fs (loop9): Remounting filesystem read-only [ 107.554125][ T6079] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.579354][ T6081] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.568: bg 0: block 248: padding at end of block bitmap is not set [ 107.609596][ T6081] Quota error (device loop7): write_blk: dquota write failed [ 107.617064][ T6081] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 107.628536][ T6081] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.568: Failed to acquire dquot type 1 [ 107.641628][ T6081] EXT4-fs (loop7): 1 truncate cleaned up [ 107.651028][ T6081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.664922][ T6081] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.718555][ T6079] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 107.728339][ T5682] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.737894][ T6079] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 107.737899][ T29] audit: type=1400 audit(1751408338.501:2991): avc: denied { mac_admin } for pid=6078 comm="syz.9.567" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.738041][ T6079] ================================================================== [ 107.738083][ T6079] BUG: KCSAN: data-race in data_push_tail / string [ 107.738134][ T6079] [ 107.738142][ T6079] write to 0xffffffff88e3bff0 of 1 bytes by task 29 on cpu 1: [ 107.738163][ T6079] string+0x187/0x220 [ 107.738194][ T6079] vsnprintf+0x532/0x890 [ 107.738218][ T6079] vscnprintf+0x41/0x90 [ 107.738243][ T6079] printk_sprint+0x30/0x2d0 [ 107.738262][ T6079] vprintk_store+0x599/0x860 [ 107.738280][ T6079] vprintk_emit+0x178/0x650 [ 107.738298][ T6079] vprintk_default+0x26/0x30 [ 107.738322][ T6079] vprintk+0x1d/0x30 [ 107.738354][ T6079] _printk+0x79/0xa0 [ 107.738390][ T6079] kauditd_hold_skb+0x1b1/0x1c0 [ 107.738416][ T6079] kauditd_send_queue+0x273/0x2c0 [ 107.738442][ T6079] kauditd_thread+0x421/0x630 [ 107.738465][ T6079] kthread+0x489/0x510 [ 107.738489][ T6079] ret_from_fork+0xda/0x150 [ 107.738514][ T6079] ret_from_fork_asm+0x1a/0x30 [ 107.738539][ T6079] [ 107.738546][ T6079] read to 0xffffffff88e3bff0 of 8 bytes by task 6079 on cpu 0: [ 107.738562][ T6079] data_push_tail+0xfd/0x420 [ 107.738595][ T6079] data_alloc+0xbf/0x2b0 [ 107.738631][ T6079] prb_reserve+0x808/0xaf0 [ 107.738676][ T6079] vprintk_store+0x56d/0x860 [ 107.738699][ T6079] vprintk_emit+0x178/0x650 [ 107.738722][ T6079] vprintk_default+0x26/0x30 [ 107.738746][ T6079] vprintk+0x1d/0x30 [ 107.738772][ T6079] _printk+0x79/0xa0 [ 107.738803][ T6079] sidtab_context_to_sid+0x5bf/0x5e0 [ 107.738832][ T6079] security_context_to_sid_core+0x294/0x3b0 [ 107.738859][ T6079] security_context_to_sid_force+0x30/0x40 [ 107.738883][ T6079] selinux_inode_setxattr+0x4e8/0x6e0 [ 107.738905][ T6079] security_inode_setxattr+0x13a/0x1b0 [ 107.738950][ T6079] __vfs_setxattr_locked+0x83/0x1d0 [ 107.738993][ T6079] vfs_setxattr+0x132/0x270 [ 107.739033][ T6079] filename_setxattr+0x1ad/0x400 [ 107.739057][ T6079] path_setxattrat+0x2c9/0x310 [ 107.739089][ T6079] __x64_sys_lsetxattr+0x71/0x90 [ 107.739115][ T6079] x64_sys_call+0x1e36/0x2fb0 [ 107.739145][ T6079] do_syscall_64+0xd2/0x200 [ 107.739169][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.739195][ T6079] [ 107.739201][ T6079] value changed: 0x00000000ffffe348 -> 0x65696e656420203a [ 107.739214][ T6079] [ 107.739219][ T6079] Reported by Kernel Concurrency Sanitizer on: [ 107.739232][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.9.567 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(voluntary) [ 107.739268][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.739285][ T6079] ================================================================== [ 108.032124][ T29] audit: type=1400 audit(1751408338.791:2992): avc: denied { relabelto } for pid=6078 comm="syz.9.567" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 108.060395][ T29] audit: type=1400 audit(1751408338.821:2993): avc: denied { name_bind } for pid=6078 comm="syz.9.567" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 108.107298][ T5677] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.153413][ T6108] loop7: detected capacity change from 0 to 1024 [ 108.171963][ T6108] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 108.182994][ T6108] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 108.199219][ T6108] JBD2: no valid journal superblock found [ 108.205021][ T6108] EXT4-fs (loop7): Could not load journal inode