last executing test programs: 4m29.524585361s ago: executing program 4 (id=937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m29.524221001s ago: executing program 4 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0xce3, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX, @ANYBLOB, @ANYBLOB]) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000030000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bc0900000000000035090100000000009500000000000000b702000000000000db9af8fff1000000b5090000000000007b9af8ff00000000be8a00000000000007080000f8ffffffbf9400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m29.433959363s ago: executing program 4 (id=939): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioprio_set$uid(0x0, r2, 0x4004) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000ef060000050000000400000000000000", @ANYRES32=r0, @ANYBLOB="3201000000ffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000040000000500"/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2240, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(r10, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000440)="e2bb1ed63a57576cc2dcd86b8604be154e8a7600393346db8d", 0x19}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=r10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="000000002800000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r9, @ANYRESDEC, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r7, @ANYRES8, @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000002c0000000000000001000000010000", @ANYRES32=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xe8, 0x200400d1}, 0x80) r12 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r12, @ANYRESDEC, @ANYRESHEX=r12], 0x1, 0x522, &(0x7f0000000a80)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev, @in6=@empty}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) r13 = geteuid() mount$9p_rdma(&(0x7f0000000580), &(0x7f0000000700)='./file1\x00', &(0x7f0000000740), 0x400, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,sq=0x0000000000000004,loose,timeout=0x0000000000000002,rq=0x0000000000000002,hash,euid=', @ANYRESDEC=r1, @ANYBLOB="2c6f626a5f757368deeafeef1a4365723d26053a2f5e23", @ANYRESDEC=r2, @ANYBLOB=',euid=', @ANYRESDEC=r12, @ANYBLOB=',euid<', @ANYRESDEC=r13, @ANYBLOB=',hash,\x00']) 4m29.255485795s ago: executing program 4 (id=941): r0 = shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000af0d05ee15675c000000000000000002006f0000000700000095000000001d5ebe7a65000000aba68bd167def8f71124bd46bea1aa7ca9965ff844a5826c09c9d9b1b412317f0586cab26066f8c9e49bf1cdc58e492e1f87a3966cb03984405280708fddaec615295a51a9ad85d2af5bd6a74a49e2f4b4f80599be177e36df6e5eea640c9bda6776e10810bd06e3d7be8f3e3b9c206a808830ca9220607b4db96818fcf05ce3eabadbf5bdc6a8cf4f17e9a4b4d61395d6d1418b6e5f754125bec771134dfb10557f50db"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x6, 0x10000, 0x1, 0x0, 0x4, 0x0, 0x5}, &(0x7f0000000280)={0x18, 0x0, 0x0, 0x7, 0x0, 0x3, 0x4}, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='netfs_rreq\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@nojournal_checksum}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r3}, 0x38) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x8]}, 0x8, 0x80000) setfsuid(0xee00) r4 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r4, 0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r5, 0x1000000, 0x0) 4m29.063395008s ago: executing program 4 (id=942): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000400)="240000001a005f0400f9020700090401800000000000f91df26af2b45a141e0040000000", 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xf, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x5, 0x5, 0x0, 0xe}, @func, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff80}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m28.819156682s ago: executing program 4 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m28.766922062s ago: executing program 32 (id=945): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m17.578313111s ago: executing program 3 (id=3910): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000380)="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", 0x3fd}], 0x1}}], 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m16.654044214s ago: executing program 3 (id=3919): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f000000a0c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f000000a100), 0x1, 0x7ae, &(0x7f000000a300)="$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") r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000440)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd']) r2 = socket$packet(0x11, 0x3, 0x300) setgroups(0x1, &(0x7f0000000180)=[0xffffffffffffffff]) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x27dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) 1m16.483360217s ago: executing program 3 (id=3923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1m16.460505737s ago: executing program 3 (id=3925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8000000}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)='g', 0x1}], 0x1, 0x0, 0x0, 0x40800}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1054, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x5, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000a40000850000000100000095", @ANYRESOCT=r7, @ANYRES64=r2, @ANYRES32=r2, @ANYRES16=r9], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 1m16.095736251s ago: executing program 3 (id=3929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801200020073797a5f74756e000000000000000000100002800400010008000380"], 0x3c}}, 0x0) 1m15.701151147s ago: executing program 3 (id=3936): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1m15.50844353s ago: executing program 33 (id=3936): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.611860846s ago: executing program 2 (id=5157): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.093292797s ago: executing program 2 (id=5172): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 2.679472393s ago: executing program 2 (id=5179): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2.678162183s ago: executing program 6 (id=5180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801200020073797a"], 0x3c}}, 0x0) 2.622358224s ago: executing program 6 (id=5181): symlinkat(&(0x7f0000000400)='./file0/../file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) creat(&(0x7f0000000200)='./file0\x00', 0x20) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2.543346515s ago: executing program 2 (id=5183): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.542947685s ago: executing program 6 (id=5184): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) syz_read_part_table(0x104f, &(0x7f0000001200)="$eJzsz8EJwkAQBdC/GyPuyZZswiZswtiGdy+24EWr8qgEE0gDIsJ7h93PDHyY8FO3epzjZTu+LbmXlHRJDknW8/p5Ki01w5jPSX116bNZVLUhKTWtrJL0n9kjU+fim+yS7K9fPQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/sQ7AAD//4vpCY8=") 2.371148598s ago: executing program 6 (id=5186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a5"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1.600629188s ago: executing program 0 (id=5191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801200020073797a"], 0x3c}}, 0x0) 1.517188929s ago: executing program 0 (id=5192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) readv(r1, &(0x7f0000000180)=[{0x0}, {&(0x7f00000012c0)=""/73, 0xfdef}], 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x42) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xfffffee9) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x3}}, 0x2e) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000022c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006c6f7770616e00000400028008000500", @ANYRES32=r5, @ANYBLOB="d5e24d28181a611d77ce3a8fc4481fed1bf066c105629db97be38e798293286779368715a8d1b7469c8359ea46736a1e129ab9c2a505b856f617fb27fdf4ed849ed31cdb880e00f800000000000000009f3a9f3113e3b81b82e36927925624380c5cb2a4769a2359c98f62a8f3dc49afe5c75135d7563e9f68e03be73f64162ece8e8226b02d84e0f5079708dc6632cb024cc65e93bd9304230ce6c57cfbdeabc253c7c545a964c6436f48b45796a51f43c2da612c9488c4d99fdadc91ef8efc36c6d2870a4b0f26f6a254805d3a505706f73fa033079353b448c9259aa771173154bac16e6524d9df26615e6397df0cc2ce2af45732e7880eb96d4ed94e2bae254b745d23910e7c5f3dec347e9b8a84688ba0554270b5c5e41154b36a1818e69acd0000007995a38bd9af6a11edb20caa00"/323], 0x3c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x40042) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') pread64(r8, &(0x7f0000001280)=""/4107, 0x100b, 0x0) 1.48108613s ago: executing program 6 (id=5194): socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x4000000) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) fcntl$setown(r2, 0x8, r1) 1.407678021s ago: executing program 0 (id=5196): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd82, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendfile(r1, r0, 0x0, 0x7ffff000) 1.262894913s ago: executing program 1 (id=5200): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1f) 1.107563145s ago: executing program 1 (id=5201): r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 1.049684996s ago: executing program 1 (id=5202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801200020073797a"], 0x3c}}, 0x0) 1.006773887s ago: executing program 1 (id=5203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8040) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x40000}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x19, r4, 0x1, 0x1, 0x6, @broadcast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r7], 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c00058008000140", @ANYRES8], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r8) 906.347848ms ago: executing program 1 (id=5204): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 876.048818ms ago: executing program 2 (id=5205): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100627269646765000010000280"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX], 0x50}}, 0x4008840) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r3, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 738.62559ms ago: executing program 2 (id=5206): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000600), 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002b00)={0x8000, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b40)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], &(0x7f0000000800)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = mq_open(0x0, 0x80, 0x118, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='sock_exceed_buf_limit\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000700)='devices.allow\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r6}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 612.801702ms ago: executing program 6 (id=5207): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd82, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 521.962323ms ago: executing program 5 (id=5208): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 445.202574ms ago: executing program 5 (id=5209): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) timerfd_create(0x7, 0x0) 413.529315ms ago: executing program 5 (id=5210): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 412.736325ms ago: executing program 0 (id=5211): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRES32], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100000030000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100627269646765000010000280"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX], 0x50}}, 0x4008840) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000780)="d2", 0xffe0, 0xc0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, &(0x7f00000003c0)={'icmp6\x00'}, &(0x7f0000000500)=0x1e) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x5a56, r3, &(0x7f0000000300)=0x4, 0x7fffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 271.221057ms ago: executing program 5 (id=5212): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1f) 234.781827ms ago: executing program 5 (id=5213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801200020073797a"], 0x3c}}, 0x0) 208.032787ms ago: executing program 0 (id=5214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 140.992809ms ago: executing program 5 (id=5215): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@nojournal_checksum}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 31.72414ms ago: executing program 1 (id=5216): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = dup2(r3, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 0s ago: executing program 0 (id=5217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x100) pwrite64(r2, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 319.392335][T15725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.410931][T16463] bond1: entered promiscuous mode [ 319.416253][T16463] bond1: entered allmulticast mode [ 319.426555][T16463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.442765][T16463] bond1 (unregistering): Released all slaves [ 319.477349][T16478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.506949][T16480] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4192'. [ 319.517854][T16480] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 319.559535][T16488] loop0: detected capacity change from 0 to 128 [ 319.606308][ T29] audit: type=1326 audit(1746956500.879:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16490 comm="syz.5.4197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1bdee969 code=0x0 [ 319.698225][ T29] audit: type=1400 audit(1746956500.969:7712): avc: denied { accept } for pid=16504 comm="syz.6.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 319.698313][T16505] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4203'. [ 319.750037][T16507] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4204'. [ 319.761294][T16507] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 319.809216][T16512] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.843305][T16517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.899739][T16526] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 319.908016][T16528] loop6: detected capacity change from 0 to 2048 [ 319.936551][T16528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.942560][T16533] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 319.952163][T16528] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.4214: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 319.959314][T16532] siw: device registration error -23 [ 319.979272][T16528] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.4214: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 319.992115][T16532] loop0: detected capacity change from 0 to 2048 [ 320.043353][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.057566][T16542] siw: device registration error -23 [ 320.078996][T16542] loop0: detected capacity change from 0 to 2048 [ 320.100879][ T29] audit: type=1326 audit(1746956501.369:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16547 comm="syz.6.4220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x0 [ 320.134255][ T29] audit: type=1326 audit(1746956501.399:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 320.158005][ T29] audit: type=1326 audit(1746956501.399:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 320.182451][T16552] FAULT_INJECTION: forcing a failure. [ 320.182451][T16552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.195599][T16552] CPU: 0 UID: 0 PID: 16552 Comm: syz.0.4221 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 320.195627][T16552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 320.195640][T16552] Call Trace: [ 320.195648][T16552] [ 320.195657][T16552] __dump_stack+0x1d/0x30 [ 320.195678][T16552] dump_stack_lvl+0xe8/0x140 [ 320.195696][T16552] dump_stack+0x15/0x1b [ 320.195785][T16552] should_fail_ex+0x265/0x280 [ 320.195869][T16552] should_fail+0xb/0x20 [ 320.195912][T16552] should_fail_usercopy+0x1a/0x20 [ 320.195937][T16552] _copy_from_user+0x1c/0xb0 [ 320.195971][T16552] set_user_sigmask+0x61/0x190 [ 320.196034][T16552] __se_sys_epoll_pwait+0x129/0x270 [ 320.196074][T16552] __x64_sys_epoll_pwait+0x78/0x90 [ 320.196118][T16552] x64_sys_call+0x298e/0x2fb0 [ 320.196139][T16552] do_syscall_64+0xd0/0x1a0 [ 320.196166][T16552] ? clear_bhb_loop+0x25/0x80 [ 320.196197][T16552] ? clear_bhb_loop+0x25/0x80 [ 320.196294][T16552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.196322][T16552] RIP: 0033:0x7fda6e91e969 [ 320.196345][T16552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.196435][T16552] RSP: 002b:00007fda6cf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000119 [ 320.196453][T16552] RAX: ffffffffffffffda RBX: 00007fda6eb45fa0 RCX: 00007fda6e91e969 [ 320.196467][T16552] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 320.196483][T16552] RBP: 00007fda6cf87090 R08: 0000200000000080 R09: 0000000000000008 [ 320.196512][T16552] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 320.196527][T16552] R13: 0000000000000000 R14: 00007fda6eb45fa0 R15: 00007ffd927361e8 [ 320.196550][T16552] [ 320.199031][T16555] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 320.227045][ T29] audit: type=1326 audit(1746956501.459:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 320.389135][T16555] loop6: detected capacity change from 0 to 2048 [ 320.409933][ T29] audit: type=1326 audit(1746956501.459:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 320.416771][T16555] EXT4-fs: Ignoring removed i_version option [ 320.439903][ T29] audit: type=1326 audit(1746956501.459:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16551 comm="syz.0.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 320.470603][T16563] loop0: detected capacity change from 0 to 512 [ 320.477755][T16563] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.495468][T16563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.521624][T16554] loop1: detected capacity change from 0 to 512 [ 320.529784][T16554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 320.536204][T16554] EXT4-fs error (device loop1): ext4_quota_enable:7126: comm syz.1.4223: inode #16777216: comm syz.1.4223: iget: illegal inode # [ 320.550365][T16554] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.4223: Bad quota inode: 16777216, type: 2 [ 320.562725][T16554] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 320.564238][T16555] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.578366][T16554] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 320.597661][T16554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 320.612715][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.632563][T16573] siw: device registration error -23 [ 320.645547][T16573] loop0: detected capacity change from 0 to 2048 [ 320.877021][T16584] siw: device registration error -23 [ 320.891765][T16584] loop0: detected capacity change from 0 to 2048 [ 320.947484][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.963448][T16590] loop0: detected capacity change from 0 to 512 [ 320.970422][T16590] EXT4-fs: Ignoring removed mblk_io_submit option [ 320.977073][T16590] EXT4-fs: Invalid want_extra_isize 2 [ 321.035658][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 321.059102][T16600] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.167800][T16607] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 321.171967][T16606] siw: device registration error -23 [ 321.202774][T16606] loop6: detected capacity change from 0 to 2048 [ 321.292841][T16622] loop6: detected capacity change from 0 to 512 [ 321.300809][T16622] EXT4-fs: test_dummy_encryption option not supported [ 321.301199][T16392] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.329211][T16392] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.351614][T16392] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.363502][T16392] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.418153][T16629] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.468439][T16620] wireguard0: entered promiscuous mode [ 321.473977][T16620] wireguard0: entered allmulticast mode [ 321.597439][T16640] siw: device registration error -23 [ 321.611932][T16640] loop2: detected capacity change from 0 to 2048 [ 321.654171][T16635] loop5: detected capacity change from 0 to 512 [ 321.662798][T16635] EXT4-fs (loop5): orphan cleanup on readonly fs [ 321.669446][T16635] EXT4-fs error (device loop5): ext4_quota_enable:7126: comm syz.5.4251: inode #16777216: comm syz.5.4251: iget: illegal inode # [ 321.684100][T16635] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.4251: Bad quota inode: 16777216, type: 2 [ 321.716351][T16650] loop6: detected capacity change from 0 to 2048 [ 321.739272][T16635] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 321.745082][T16652] loop1: detected capacity change from 0 to 2048 [ 321.758876][T16650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.789749][T16635] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 321.798431][T16635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 321.839578][T16660] bond1: entered promiscuous mode [ 321.844747][T16660] bond1: entered allmulticast mode [ 321.850309][T16660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.879739][T16660] bond1 (unregistering): Released all slaves [ 321.992502][T16675] loop7: detected capacity change from 0 to 7 [ 322.122399][T16687] siw: device registration error -23 [ 322.138006][T16687] loop2: detected capacity change from 0 to 2048 [ 322.173375][T16690] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.233924][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 322.299494][T16696] bond1: entered promiscuous mode [ 322.304665][T16696] bond1: entered allmulticast mode [ 322.321522][T16701] netlink: 'syz.5.4281': attribute type 21 has an invalid length. [ 322.329727][T16696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.340730][T16696] bond1 (unregistering): Released all slaves [ 322.371978][T16703] Invalid ELF header magic: != ELF [ 322.491893][T16716] loop2: detected capacity change from 0 to 2048 [ 322.516407][T16716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.689788][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.700718][T16722] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.797680][T16729] __nla_validate_parse: 20 callbacks suppressed [ 322.797698][T16729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4292'. [ 322.839583][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4294'. [ 322.858960][T16731] bond1: entered promiscuous mode [ 322.864100][T16731] bond1: entered allmulticast mode [ 322.869636][T16731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 322.880486][T16731] bond1 (unregistering): Released all slaves [ 322.889033][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4288'. [ 322.942261][T16735] loop5: detected capacity change from 0 to 512 [ 322.956769][T16735] EXT4-fs (loop5): orphan cleanup on readonly fs [ 322.963216][T16735] EXT4-fs error (device loop5): ext4_quota_enable:7126: comm syz.5.4288: inode #16777216: comm syz.5.4288: iget: illegal inode # [ 322.982141][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 322.991478][T16735] EXT4-fs error (device loop5): ext4_quota_enable:7129: comm syz.5.4288: Bad quota inode: 16777216, type: 2 [ 323.007149][T16735] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 323.037828][T16735] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 323.048407][T16735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 323.050715][T16744] loop7: detected capacity change from 0 to 7 [ 323.137327][T16752] loop1: detected capacity change from 0 to 2048 [ 323.152861][T16756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4304'. [ 323.176561][T16752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.201598][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 323.201612][ T29] audit: type=1326 audit(1746956504.469:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x0 [ 323.305294][T16768] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 323.339162][T16770] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4308'. [ 323.348282][T16770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4308'. [ 323.361628][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.388366][T16772] loop6: detected capacity change from 0 to 512 [ 323.395716][T16772] EXT4-fs: Ignoring removed nobh option [ 323.403246][T16772] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4310: invalid indirect mapped block 256 (level 2) [ 323.417957][T16772] EXT4-fs (loop6): 2 truncates cleaned up [ 323.424326][T16772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.439158][T16772] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4310: bg 0: block 5: invalid block bitmap [ 323.451770][ T29] audit: type=1326 audit(1746956504.719:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.475372][ T29] audit: type=1326 audit(1746956504.719:7734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.498926][ T29] audit: type=1326 audit(1746956504.719:7735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.522518][ T29] audit: type=1326 audit(1746956504.719:7736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.547799][ T29] audit: type=1326 audit(1746956504.829:7737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.584117][ T29] audit: type=1326 audit(1746956504.849:7738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.612112][ T29] audit: type=1326 audit(1746956504.879:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.635751][ T29] audit: type=1326 audit(1746956504.879:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.659384][ T29] audit: type=1326 audit(1746956504.879:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16762 comm="syz.0.4306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 323.685629][T16768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4306'. [ 323.696814][T16779] FAULT_INJECTION: forcing a failure. [ 323.696814][T16779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.710128][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.2.4311 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 323.710173][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 323.710188][T16779] Call Trace: [ 323.710194][T16779] [ 323.710202][T16779] __dump_stack+0x1d/0x30 [ 323.710228][T16779] dump_stack_lvl+0xe8/0x140 [ 323.710340][T16779] dump_stack+0x15/0x1b [ 323.710367][T16779] should_fail_ex+0x265/0x280 [ 323.710404][T16779] should_fail+0xb/0x20 [ 323.710440][T16779] should_fail_usercopy+0x1a/0x20 [ 323.710508][T16779] _copy_from_user+0x1c/0xb0 [ 323.710536][T16779] __sys_connect+0xd0/0x2b0 [ 323.710614][T16779] __x64_sys_connect+0x3f/0x50 [ 323.710672][T16779] x64_sys_call+0x1daa/0x2fb0 [ 323.710697][T16779] do_syscall_64+0xd0/0x1a0 [ 323.710767][T16779] ? clear_bhb_loop+0x25/0x80 [ 323.710874][T16779] ? clear_bhb_loop+0x25/0x80 [ 323.710923][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.710943][T16779] RIP: 0033:0x7fe06e84e969 [ 323.710958][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.711061][T16779] RSP: 002b:00007fe06ceb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 323.711081][T16779] RAX: ffffffffffffffda RBX: 00007fe06ea75fa0 RCX: 00007fe06e84e969 [ 323.711097][T16779] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000007 [ 323.711113][T16779] RBP: 00007fe06ceb7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.711128][T16779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.711144][T16779] R13: 0000000000000000 R14: 00007fe06ea75fa0 R15: 00007ffefc91f108 [ 323.711169][T16779] [ 323.728374][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 323.789245][T16785] loop7: detected capacity change from 0 to 7 [ 323.858540][T16787] SELinux: failed to load policy [ 323.931312][T16791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4317'. [ 323.963894][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4315'. [ 323.984166][T16796] loop6: detected capacity change from 0 to 2048 [ 324.033364][T16804] wireguard0: entered promiscuous mode [ 324.038953][T16804] wireguard0: entered allmulticast mode [ 324.089002][T16807] loop1: detected capacity change from 0 to 512 [ 324.095898][T16807] EXT4-fs: Ignoring removed nobh option [ 324.103944][T16807] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4322: invalid indirect mapped block 256 (level 2) [ 324.118110][T16807] EXT4-fs (loop1): 2 truncates cleaned up [ 324.128768][T16807] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4322: bg 0: block 5: invalid block bitmap [ 324.431129][T16817] loop0: detected capacity change from 0 to 512 [ 324.439180][T16817] EXT4-fs (loop0): orphan cleanup on readonly fs [ 324.445699][T16817] EXT4-fs error (device loop0): ext4_quota_enable:7126: comm syz.0.4323: inode #16777216: comm syz.0.4323: iget: illegal inode # [ 324.459842][T16817] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.4323: Bad quota inode: 16777216, type: 2 [ 324.487735][T16817] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 324.503592][T16817] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 324.856637][T16825] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.905939][T16829] loop7: detected capacity change from 0 to 7 [ 324.913512][T16825] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.968923][T16831] SELinux: failed to load policy [ 324.978802][T16825] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.020580][ T23] kernel write not supported for file /349/sched (pid: 23 comm: kworker/1:0) [ 325.030526][T16825] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.056736][T16841] loop1: detected capacity change from 0 to 512 [ 325.063589][T16841] EXT4-fs: Ignoring removed nobh option [ 325.089525][T16841] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4334: invalid indirect mapped block 256 (level 2) [ 325.110056][T16841] EXT4-fs (loop1): 2 truncates cleaned up [ 325.123893][T16825] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.127334][T16841] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4334: bg 0: block 5: invalid block bitmap [ 325.159906][T16825] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.175822][T16825] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.187812][T16825] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.198563][T16849] siw: device registration error -23 [ 325.213216][T16849] loop5: detected capacity change from 0 to 2048 [ 325.272756][T16859] loop7: detected capacity change from 0 to 7 [ 325.308884][T16866] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 325.318928][T16866] SELinux: failed to load policy [ 325.352102][T16863] SELinux: failed to load policy [ 325.381406][T16867] bond1: entered promiscuous mode [ 325.386541][T16867] bond1: entered allmulticast mode [ 325.392114][T16867] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.403071][T16867] bond1 (unregistering): Released all slaves [ 325.465317][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.484043][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.509629][T16878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.518337][T16878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.643823][T16888] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.683764][T16895] loop7: detected capacity change from 0 to 7 [ 325.767928][T16902] SELinux: failed to load policy [ 325.802900][T16901] syz.5.4347: attempt to access beyond end of device [ 325.802900][T16901] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 325.899575][T16914] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 325.941278][T16916] syzkaller0: entered promiscuous mode [ 325.946843][T16916] syzkaller0: entered allmulticast mode [ 326.058684][T16920] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.115800][T16924] siw: device registration error -23 [ 326.267664][T16933] loop7: detected capacity change from 0 to 7 [ 326.277056][T16930] SELinux: failed to load policy [ 326.421144][T16947] netlink: 'syz.2.4374': attribute type 2 has an invalid length. [ 326.458056][T16947] loop2: detected capacity change from 0 to 164 [ 326.478933][T16947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 326.507244][T16951] bond1: entered promiscuous mode [ 326.512334][T16951] bond1: entered allmulticast mode [ 326.541806][T16951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.593859][T16951] bond1 (unregistering): Released all slaves [ 326.671864][T16958] siw: device registration error -23 [ 326.686966][T16958] loop6: detected capacity change from 0 to 2048 [ 326.789423][T16962] SELinux: failed to load policy [ 326.840448][T16970] loop7: detected capacity change from 0 to 7 [ 326.905088][T16973] loop1: detected capacity change from 0 to 2048 [ 327.144434][T16994] SELinux: failed to load policy [ 327.373128][T17024] bond1: entered promiscuous mode [ 327.378342][T17024] bond1: entered allmulticast mode [ 327.383821][T17024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.398678][T17024] bond1 (unregistering): Released all slaves [ 327.449375][T17004] loop0: detected capacity change from 0 to 512 [ 327.458707][T17030] SELinux: failed to load policy [ 327.477851][T17004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 327.484289][T17004] EXT4-fs error (device loop0): ext4_quota_enable:7126: comm syz.0.4391: inode #16777216: comm syz.0.4391: iget: illegal inode # [ 327.499065][T17004] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.4391: Bad quota inode: 16777216, type: 2 [ 327.512401][T17004] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 327.545412][T17004] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 327.574791][T17040] loop6: detected capacity change from 0 to 2048 [ 327.599692][T17042] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 327.738727][T17061] bond1: entered promiscuous mode [ 327.743812][T17061] bond1: entered allmulticast mode [ 327.749607][T17061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.762843][T17061] bond1 (unregistering): Released all slaves [ 327.787040][T17064] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.826268][T17064] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.877359][T17064] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.928645][T17069] SELinux: failed to load policy [ 327.946445][T17064] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.969104][T17069] __nla_validate_parse: 28 callbacks suppressed [ 327.969124][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4422'. [ 328.004094][T17064] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.021551][T17064] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.041036][T17064] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.057961][T17064] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.176924][T17091] bond1: entered promiscuous mode [ 328.182061][T17091] bond1: entered allmulticast mode [ 328.187708][T17091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.198632][T17091] bond1 (unregistering): Released all slaves [ 328.331516][T17104] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 328.339683][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4434'. [ 328.437718][T17114] loop7: detected capacity change from 0 to 7 [ 328.485045][T17118] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4442'. [ 328.537162][T17122] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 328.564338][T17125] loop5: detected capacity change from 0 to 2048 [ 328.573358][T17118] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 328.608232][T17125] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4445: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 328.625299][T17125] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4445: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 328.813507][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4445'. [ 328.827219][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4446'. [ 329.064688][T17146] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.385170][T17151] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.402771][T17163] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4456'. [ 329.420083][T17163] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 329.480380][T17173] loop2: detected capacity change from 0 to 2048 [ 329.487802][T17174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.511632][T17173] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.4461: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 329.528769][T17173] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.4461: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 329.531983][T17178] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.551936][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4464'. [ 329.564991][T17174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.575862][T17173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4461'. [ 329.591375][T17181] bond1: entered promiscuous mode [ 329.596509][T17181] bond1: entered allmulticast mode [ 329.601898][T17181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.618199][T17174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.706498][T17174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.956880][T17174] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.014251][T17174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.085482][T17174] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.129062][T17208] loop1: detected capacity change from 0 to 2048 [ 330.150520][T17174] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.163429][T17210] loop5: detected capacity change from 0 to 2048 [ 330.198717][T17210] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4475: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 330.245214][T17210] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4475: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 330.857856][T17232] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 330.926469][T17238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 331.186445][T17250] loop1: detected capacity change from 0 to 2048 [ 331.199794][T17254] loop5: detected capacity change from 0 to 2048 [ 331.505590][T17272] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 331.581618][T17250] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.4489: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 331.646173][T17275] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.4489: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 331.740897][T17283] sel_write_load: 2 callbacks suppressed [ 331.740924][T17283] SELinux: failed to load policy [ 331.816667][T17289] bond1: entered promiscuous mode [ 331.821827][T17289] bond1: entered allmulticast mode [ 331.827280][T17289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.290907][T17296] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.305223][T17301] siw: device registration error -23 [ 332.328332][T17297] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 332.341310][T17301] loop5: detected capacity change from 0 to 2048 [ 332.352565][T17297] syzkaller0: entered promiscuous mode [ 332.358258][T17297] syzkaller0: entered allmulticast mode [ 332.367246][T17296] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.411389][T17306] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 332.436440][T17296] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.482437][T17311] wireguard0: entered promiscuous mode [ 332.485789][T17314] loop5: detected capacity change from 0 to 2048 [ 332.488129][T17311] wireguard0: entered allmulticast mode [ 332.517782][T17314] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.4513: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 332.556430][T17296] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.570560][T17318] SELinux: failed to load policy [ 332.652777][T17296] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.667025][T17296] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.689228][T17328] loop6: detected capacity change from 0 to 2048 [ 332.706428][T17330] bond1: entered promiscuous mode [ 332.711557][T17330] bond1: entered allmulticast mode [ 332.717722][T17330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.730952][T17296] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.752548][T17296] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.247623][T17353] loop2: detected capacity change from 0 to 2048 [ 333.272971][T17353] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.4525: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 333.358030][T17353] __nla_validate_parse: 11 callbacks suppressed [ 333.358051][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4525'. [ 333.402606][T17360] bond2: entered promiscuous mode [ 333.407777][T17360] bond2: entered allmulticast mode [ 333.413197][T17360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.424667][T17360] bond2 (unregistering): Released all slaves [ 333.494464][T17363] SELinux: failed to load policy [ 333.523855][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4527'. [ 333.560572][T17373] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 333.664944][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 333.664961][ T29] audit: type=1326 audit(1746956514.939:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17378 comm="syz.2.4534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe06e84e969 code=0x0 [ 334.169468][T17393] wireguard1: entered promiscuous mode [ 334.174979][T17393] wireguard1: entered allmulticast mode [ 334.279206][T17403] loop1: detected capacity change from 0 to 2048 [ 334.504020][T17412] bond1: entered promiscuous mode [ 334.509153][T17412] bond1: entered allmulticast mode [ 334.515207][T17412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.537615][T17412] bond1 (unregistering): Released all slaves [ 334.555817][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.569063][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.596604][T17423] syzkaller0: entered promiscuous mode [ 334.602143][T17423] syzkaller0: entered allmulticast mode [ 334.610387][T17421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.618967][T17421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.791809][T17429] loop5: detected capacity change from 0 to 2048 [ 334.937871][T17434] syz.2.4546: attempt to access beyond end of device [ 334.937871][T17434] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 334.980289][T17425] wireguard0: entered promiscuous mode [ 334.985877][T17425] wireguard0: entered allmulticast mode [ 335.393081][T17444] loop7: detected capacity change from 0 to 7 [ 335.548459][ T29] audit: type=1326 audit(1746956516.819:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz.0.4554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6e91e969 code=0x0 [ 335.881073][T17458] wireguard2: entered promiscuous mode [ 335.886858][T17458] wireguard2: entered allmulticast mode [ 335.925058][T17462] bond1: entered promiscuous mode [ 335.930221][T17462] bond1: entered allmulticast mode [ 335.951046][T17462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.961661][T17462] bond1 (unregistering): Released all slaves [ 336.110314][T17466] loop1: detected capacity change from 0 to 2048 [ 336.479409][ T29] audit: type=1326 audit(1746956517.749:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17481 comm="syz.0.4566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6e91e969 code=0x0 [ 336.509083][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4568'. [ 336.764118][T17494] bridge_slave_0: left allmulticast mode [ 336.769861][T17494] bridge_slave_0: left promiscuous mode [ 336.775763][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.939660][T17498] loop5: detected capacity change from 0 to 128 [ 336.970023][T17498] EXT4-fs: Ignoring removed nobh option [ 337.007678][T17498] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.111207][T17498] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4570'. [ 337.497563][T17494] bridge_slave_1: left allmulticast mode [ 337.503266][T17494] bridge_slave_1: left promiscuous mode [ 337.508973][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.536623][T17494] bond0: (slave bond_slave_0): Releasing backup interface [ 337.557798][T17494] bond0: (slave bond_slave_1): Releasing backup interface [ 337.578961][T17494] team0: Port device team_slave_0 removed [ 337.636333][ T29] audit: type=1326 audit(1746956518.909:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.660047][ T29] audit: type=1326 audit(1746956518.909:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.683652][ T29] audit: type=1326 audit(1746956518.909:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.732285][T17494] team0: Port device team_slave_1 removed [ 337.781850][ T29] audit: type=1326 audit(1746956518.909:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.805594][ T29] audit: type=1326 audit(1746956518.909:7865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.829129][ T29] audit: type=1326 audit(1746956518.909:7866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.852694][ T29] audit: type=1326 audit(1746956518.909:7867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17504 comm="syz.2.4573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 337.903162][T17503] bond1: entered promiscuous mode [ 337.908295][T17503] bond1: entered allmulticast mode [ 337.933938][T17503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.957889][T17503] bond1 (unregistering): Released all slaves [ 338.110506][T17526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4579'. [ 338.204367][T17515] loop2: detected capacity change from 0 to 256 [ 338.442022][T17540] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4586'. [ 338.505686][T17542] bond2: entered promiscuous mode [ 338.510832][T17542] bond2: entered allmulticast mode [ 338.535301][T17540] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 338.560617][T17542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.584014][T17542] bond2 (unregistering): Released all slaves [ 338.961919][T17561] loop2: detected capacity change from 0 to 2048 [ 339.094853][T17570] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 339.147333][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 339.147351][ T29] audit: type=1326 audit(1746956520.419:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.200677][ T29] audit: type=1326 audit(1746956520.449:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.224359][ T29] audit: type=1326 audit(1746956520.449:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.248390][ T29] audit: type=1326 audit(1746956520.449:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.272117][ T29] audit: type=1326 audit(1746956520.449:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.295813][ T29] audit: type=1326 audit(1746956520.449:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.319360][ T29] audit: type=1326 audit(1746956520.449:7917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.342973][ T29] audit: type=1326 audit(1746956520.449:7918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda6e91e969 code=0x7ffc0000 [ 339.366550][ T29] audit: type=1326 audit(1746956520.449:7919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda6e91d2d0 code=0x7ffc0000 [ 339.390092][ T29] audit: type=1326 audit(1746956520.449:7920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17573 comm="syz.0.4598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fda6e920197 code=0x7ffc0000 [ 339.478256][T17578] bond2: entered promiscuous mode [ 339.483376][T17578] bond2: entered allmulticast mode [ 339.489068][T17578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.514794][T17586] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4601'. [ 339.532672][T17564] loop6: detected capacity change from 0 to 512 [ 339.555775][T17564] EXT4-fs (loop6): orphan cleanup on readonly fs [ 339.562197][T17564] EXT4-fs error (device loop6): ext4_quota_enable:7126: comm syz.6.4594: inode #16777216: comm syz.6.4594: iget: illegal inode # [ 339.563265][T17586] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 339.581803][T17564] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.4594: Bad quota inode: 16777216, type: 2 [ 339.625082][T17564] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 339.640799][T17564] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 339.648603][T17564] EXT4-fs mount: 41 callbacks suppressed [ 339.648620][T17564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 339.666958][T17600] loop5: detected capacity change from 0 to 2048 [ 339.674895][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.689942][T17598] bond2: entered promiscuous mode [ 339.695049][T17598] bond2: entered allmulticast mode [ 339.700439][T17598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.706196][T17600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.728799][T17596] bond3: entered promiscuous mode [ 339.733899][T17596] bond3: entered allmulticast mode [ 339.779969][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 339.789634][T17596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.812045][T17596] bond3 (unregistering): Released all slaves [ 339.879688][T17610] loop1: detected capacity change from 0 to 2048 [ 339.912287][T17611] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.472235][T17610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.948752][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.998587][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.029168][T17637] loop7: detected capacity change from 0 to 7 [ 341.088196][T17641] bond1: entered promiscuous mode [ 341.093285][T17641] bond1: entered allmulticast mode [ 341.100420][T17641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.113284][T17641] bond1 (unregistering): Released all slaves [ 341.215509][T17648] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 341.267097][T17644] loop1: detected capacity change from 0 to 512 [ 341.274857][T17644] EXT4-fs (loop1): orphan cleanup on readonly fs [ 341.281207][T17644] EXT4-fs error (device loop1): ext4_quota_enable:7126: comm syz.1.4619: inode #16777216: comm syz.1.4619: iget: illegal inode # [ 341.295052][T17644] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.4619: Bad quota inode: 16777216, type: 2 [ 341.307023][T17644] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 341.322695][T17644] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 341.330049][T17644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 341.392731][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4625'. [ 341.498711][T17657] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 341.562499][T17659] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4627'. [ 341.752168][T17673] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.799546][T17673] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.846430][T17673] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.847462][T17679] loop5: detected capacity change from 0 to 128 [ 341.863009][T17679] EXT4-fs: Ignoring removed nobh option [ 341.877182][T17679] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.899722][T17679] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.911677][T17673] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.976826][T17683] wireguard0: entered promiscuous mode [ 341.982346][T17683] wireguard0: entered allmulticast mode [ 342.007927][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 342.023771][T17673] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.046140][T17673] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.076135][T17673] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.085983][T17687] loop1: detected capacity change from 0 to 2048 [ 342.101727][T17673] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.121310][T17687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.136888][T14521] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.199474][T17693] loop5: detected capacity change from 0 to 2048 [ 342.210743][T17695] wireguard0: entered promiscuous mode [ 342.213666][T17698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4642'. [ 342.216289][T17695] wireguard0: entered allmulticast mode [ 342.236746][T17693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.259533][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4643'. [ 342.274987][T17702] siw: device registration error -23 [ 342.298856][T17702] loop0: detected capacity change from 0 to 2048 [ 342.450577][T17706] syzkaller0: entered promiscuous mode [ 342.456206][T17706] syzkaller0: entered allmulticast mode [ 343.069004][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.166490][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.394310][T17725] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.449134][T17719] loop1: detected capacity change from 0 to 512 [ 343.475331][T17719] EXT4-fs (loop1): orphan cleanup on readonly fs [ 343.481741][T17719] EXT4-fs error (device loop1): ext4_quota_enable:7126: comm syz.1.4648: inode #16777216: comm syz.1.4648: iget: illegal inode # [ 343.506417][T17725] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.518712][T17719] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.4648: Bad quota inode: 16777216, type: 2 [ 343.531643][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4654'. [ 343.541291][T17719] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-117, ino=16777216). Please run e2fsck to fix. [ 343.557707][T17719] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 343.564987][T17719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 ro without journal. Quota mode: writeback. [ 343.565817][T17725] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.604959][T17737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4655'. [ 343.620291][T17737] siw: device registration error -23 [ 343.627629][T17725] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.637608][T17737] loop0: detected capacity change from 0 to 2048 [ 343.707002][T17725] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.725034][T17725] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.737657][T17725] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.750113][T17725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.834968][T17749] loop5: detected capacity change from 0 to 2048 [ 343.857304][T17744] wireguard0: entered promiscuous mode [ 343.862904][T17744] wireguard0: entered allmulticast mode [ 343.869568][T17749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.186229][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 344.256902][T17758] wireguard2: entered promiscuous mode [ 344.262443][T17758] wireguard2: entered allmulticast mode [ 344.472046][T17767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4664'. [ 344.534327][T17771] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4666'. [ 344.553938][T17771] siw: device registration error -23 [ 344.576815][T17771] loop2: detected capacity change from 0 to 2048 [ 344.630344][T17775] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 344.685588][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.744418][T17783] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.802209][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 344.802226][ T29] audit: type=1326 audit(1746956526.069:8047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.1.4673" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7effc28ce969 code=0x0 [ 344.833989][T17783] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.845599][ T29] audit: type=1326 audit(1746956526.109:8048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.869271][ T29] audit: type=1326 audit(1746956526.109:8049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.892859][ T29] audit: type=1326 audit(1746956526.109:8050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.916653][ T29] audit: type=1326 audit(1746956526.109:8051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.940440][ T29] audit: type=1326 audit(1746956526.109:8052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.964069][ T29] audit: type=1326 audit(1746956526.109:8053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 344.987808][ T29] audit: type=1326 audit(1746956526.109:8054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 345.010436][T17792] loop2: detected capacity change from 0 to 256 [ 345.011398][ T29] audit: type=1326 audit(1746956526.109:8055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 345.041317][ T29] audit: type=1326 audit(1746956526.109:8056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17787 comm="syz.2.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 345.087575][T17783] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.177186][T17783] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.194339][T17796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4676'. [ 345.236803][T17798] loop0: detected capacity change from 0 to 2048 [ 345.246069][T17798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.261161][T17798] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.4677: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 345.320932][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4677'. [ 345.343970][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.442663][T17806] loop0: detected capacity change from 0 to 2048 [ 345.456547][T17806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.662782][T17815] SELinux: failed to load policy [ 345.687015][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4682'. [ 345.794344][T17821] loop1: detected capacity change from 0 to 2048 [ 345.827554][T17821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.934945][T17831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 346.427203][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.713575][T17854] loop6: detected capacity change from 0 to 256 [ 346.755932][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.788072][T17857] loop1: detected capacity change from 0 to 2048 [ 346.806947][T17857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.567668][T17783] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.590128][T17783] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.608526][T17783] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.633256][T17783] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.664745][T17874] loop7: detected capacity change from 0 to 7 [ 347.681355][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.744508][T17887] loop6: detected capacity change from 0 to 2048 [ 347.825533][T17882] loop5: detected capacity change from 0 to 128 [ 347.832292][T17882] EXT4-fs: Ignoring removed nobh option [ 347.880211][T17882] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.899348][T17882] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.910956][T17887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.927091][T17887] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.4710: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 347.985222][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4710'. [ 348.017178][T17907] loop2: detected capacity change from 0 to 128 [ 348.023537][T17888] netlink: 256 bytes leftover after parsing attributes in process `syz.5.4708'. [ 348.023898][T17907] EXT4-fs: Ignoring removed nobh option [ 348.063952][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.087812][T17907] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.129520][T17907] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.185398][T17914] wireguard2: entered promiscuous mode [ 348.191027][T17914] wireguard2: entered allmulticast mode [ 348.223182][T17917] FAULT_INJECTION: forcing a failure. [ 348.223182][T17917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.236384][T17917] CPU: 0 UID: 0 PID: 17917 Comm: syz.6.4719 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 348.236414][T17917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 348.236426][T17917] Call Trace: [ 348.236463][T17917] [ 348.236470][T17917] __dump_stack+0x1d/0x30 [ 348.236491][T17917] dump_stack_lvl+0xe8/0x140 [ 348.236510][T17917] dump_stack+0x15/0x1b [ 348.236589][T17917] should_fail_ex+0x265/0x280 [ 348.236634][T17917] should_fail+0xb/0x20 [ 348.236709][T17917] should_fail_usercopy+0x1a/0x20 [ 348.236728][T17917] _copy_from_user+0x1c/0xb0 [ 348.236820][T17917] ___sys_sendmsg+0xc1/0x1d0 [ 348.236923][T17917] __x64_sys_sendmsg+0xd4/0x160 [ 348.236947][T17917] x64_sys_call+0x2999/0x2fb0 [ 348.236973][T17917] do_syscall_64+0xd0/0x1a0 [ 348.237032][T17917] ? clear_bhb_loop+0x25/0x80 [ 348.237058][T17917] ? clear_bhb_loop+0x25/0x80 [ 348.237079][T17917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.237116][T17917] RIP: 0033:0x7f2c37d5e969 [ 348.237133][T17917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.237154][T17917] RSP: 002b:00007f2c363c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.237177][T17917] RAX: ffffffffffffffda RBX: 00007f2c37f85fa0 RCX: 00007f2c37d5e969 [ 348.237192][T17917] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 348.237206][T17917] RBP: 00007f2c363c7090 R08: 0000000000000000 R09: 0000000000000000 [ 348.237217][T17917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.237228][T17917] R13: 0000000000000000 R14: 00007f2c37f85fa0 R15: 00007ffe84da55a8 [ 348.237293][T17917] [ 348.238543][T17907] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4715'. [ 348.669549][T17927] wireguard0: entered promiscuous mode [ 348.675129][T17927] wireguard0: entered allmulticast mode [ 349.384281][T17946] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 349.572184][T17954] __nla_validate_parse: 2 callbacks suppressed [ 349.572205][T17954] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4733'. [ 349.611800][T17959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4735'. [ 349.621471][T17954] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 349.850206][T14521] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.936468][T17972] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.951636][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 349.951654][ T29] audit: type=1400 audit(1746956531.219:8187): avc: denied { prog_load } for pid=17964 comm="syz.0.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.977196][ T29] audit: type=1400 audit(1746956531.219:8188): avc: denied { bpf } for pid=17964 comm="syz.0.4737" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.997882][ T29] audit: type=1400 audit(1746956531.219:8189): avc: denied { perfmon } for pid=17964 comm="syz.0.4737" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.126869][T17972] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.144719][ T29] audit: type=1400 audit(1746956531.339:8190): avc: denied { read write } for pid=14250 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.169074][ T29] audit: type=1400 audit(1746956531.339:8191): avc: denied { open } for pid=14250 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.193317][ T29] audit: type=1400 audit(1746956531.339:8192): avc: denied { ioctl } for pid=14250 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.219201][ T29] audit: type=1400 audit(1746956531.349:8193): avc: denied { map_create } for pid=17975 comm="syz.0.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.238519][ T29] audit: type=1400 audit(1746956531.349:8194): avc: denied { map_read map_write } for pid=17975 comm="syz.0.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.258608][ T29] audit: type=1400 audit(1746956531.349:8195): avc: denied { prog_run } for pid=17975 comm="syz.0.4740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.279306][ T29] audit: type=1400 audit(1746956531.449:8196): avc: denied { create } for pid=17978 comm="syz.0.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 350.331843][T17972] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.390123][T17974] loop6: detected capacity change from 0 to 256 [ 350.404410][T17972] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.421582][T17983] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 350.429589][T17985] loop0: detected capacity change from 0 to 2048 [ 350.478782][T17985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.672005][T17992] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4746'. [ 350.710146][T17992] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 350.735253][T12193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.776802][T17997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4747'. [ 350.800583][T17999] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4749'. [ 350.902876][T18003] loop6: detected capacity change from 0 to 128 [ 350.915633][T18003] EXT4-fs: Ignoring removed nobh option [ 350.932186][T18003] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.963861][T18003] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.022246][T18011] bond1: entered promiscuous mode [ 351.027393][T18011] bond1: entered allmulticast mode [ 351.060833][T18014] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4751'. [ 351.074826][T18011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.099389][T18011] bond1 (unregistering): Released all slaves [ 351.201698][T17972] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.234377][T17972] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.273148][T17972] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.326258][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.341532][T18021] loop2: detected capacity change from 0 to 8192 [ 351.350201][T17972] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.385465][T18021] loop2: p1 p3 p4 [ 351.389601][T18021] loop2: p1 size 8390912 extends beyond EOD, truncated [ 351.407137][T17972] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.418964][T18021] loop2: p3 size 589824 extends beyond EOD, truncated [ 351.426036][T18025] loop0: detected capacity change from 0 to 512 [ 351.446972][T17972] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.458888][T18025] EXT4-fs (loop0): 1 orphan inode deleted [ 351.469543][T18025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.482446][T10507] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 351.497244][T18025] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.539849][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.559022][T18031] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4760'. [ 351.654869][T18041] loop2: detected capacity change from 0 to 2048 [ 351.669043][T18043] loop0: detected capacity change from 0 to 2048 [ 351.677738][T18041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.706410][T18043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.122539][T18057] loop1: detected capacity change from 0 to 8192 [ 352.175727][T18057] loop1: p1 p3 p4 [ 352.179726][T18057] loop1: p1 size 8390912 extends beyond EOD, truncated [ 352.187889][T18057] loop1: p3 size 589824 extends beyond EOD, truncated [ 352.251849][T18059] wireguard2: entered promiscuous mode [ 352.257484][T18059] wireguard2: entered allmulticast mode [ 352.591713][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.786773][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.023976][T15725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.075996][T18077] loop7: detected capacity change from 0 to 7 [ 353.079780][T18075] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 353.133417][T18082] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4779'. [ 353.143396][T18082] siw: device registration error -23 [ 353.159641][T18082] loop6: detected capacity change from 0 to 2048 [ 353.351147][T18095] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 353.475316][T18110] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 353.543738][T18118] loop2: detected capacity change from 0 to 512 [ 353.553045][T18116] loop1: detected capacity change from 0 to 2048 [ 353.561454][T18118] EXT4-fs: Ignoring removed nobh option [ 353.594325][T18118] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4795: invalid indirect mapped block 256 (level 2) [ 353.608589][T18118] EXT4-fs (loop2): 2 truncates cleaned up [ 353.615167][T18118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.632012][T18124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.640756][T18124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.650082][T18124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.658613][T18124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.679595][T18118] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4795: bg 0: block 5: invalid block bitmap [ 353.707713][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.297862][T18143] loop0: detected capacity change from 0 to 256 [ 354.332352][T18145] loop2: detected capacity change from 0 to 8192 [ 354.384818][T18145] loop2: p1 p3 p4 [ 354.388649][T18145] loop2: p1 size 8390912 extends beyond EOD, truncated [ 354.396723][T18145] loop2: p3 size 589824 extends beyond EOD, truncated [ 354.489367][T18151] siw: device registration error -23 [ 354.505639][T18151] loop0: detected capacity change from 0 to 2048 [ 354.571478][T18153] wireguard0: entered promiscuous mode [ 354.577105][T18153] wireguard0: entered allmulticast mode [ 354.704745][T18157] bond1: entered promiscuous mode [ 354.709879][T18157] bond1: entered allmulticast mode [ 354.724742][T18157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.743995][T18157] bond1 (unregistering): Released all slaves [ 355.089490][T18158] loop0: detected capacity change from 0 to 8192 [ 355.151409][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 355.151446][ T29] audit: type=1400 audit(1746956536.419:8337): avc: denied { block_suspend } for pid=18173 comm=98B0 capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 355.180826][T18158] loop0: p1 p3 p4 [ 355.185892][T18158] loop0: p1 size 8390912 extends beyond EOD, truncated [ 355.331450][T18158] loop0: p3 size 589824 extends beyond EOD, truncated [ 355.345862][ T29] audit: type=1326 audit(1746956536.589:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.369585][ T29] audit: type=1326 audit(1746956536.589:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.393149][ T29] audit: type=1326 audit(1746956536.589:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.416838][ T29] audit: type=1326 audit(1746956536.589:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.440505][ T29] audit: type=1326 audit(1746956536.589:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.464184][ T29] audit: type=1326 audit(1746956536.589:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.488013][ T29] audit: type=1326 audit(1746956536.589:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.511644][ T29] audit: type=1326 audit(1746956536.589:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.535208][ T29] audit: type=1326 audit(1746956536.589:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18173 comm="syz.2.4817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe06e84e969 code=0x7ffc0000 [ 355.725879][T18183] __nla_validate_parse: 3 callbacks suppressed [ 355.725899][T18183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4820'. [ 355.742378][T18183] siw: device registration error -23 [ 355.750581][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4821'. [ 355.759698][T18183] loop2: detected capacity change from 0 to 2048 [ 355.840060][T18196] bond3: entered promiscuous mode [ 355.845184][T18196] bond3: entered allmulticast mode [ 355.850630][T18196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.861229][T18196] bond3 (unregistering): Released all slaves [ 356.257100][T18209] loop6: detected capacity change from 0 to 512 [ 356.280050][T18209] EXT4-fs: Ignoring removed nobh option [ 356.362074][T18209] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4829: invalid indirect mapped block 256 (level 2) [ 356.445137][T18219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4832'. [ 356.457153][T18209] EXT4-fs (loop6): 2 truncates cleaned up [ 356.463961][T18209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.520057][T18209] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4829: bg 0: block 5: invalid block bitmap [ 356.730994][T18227] loop0: detected capacity change from 0 to 8192 [ 356.798126][T18227] loop0: p1 p3 p4 [ 356.801944][T18227] loop0: p1 size 8390912 extends beyond EOD, truncated [ 356.865604][T18227] loop0: p3 size 589824 extends beyond EOD, truncated [ 357.014761][T18204] Set syz1 is full, maxelem 65536 reached [ 357.044155][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.069720][T18241] loop7: detected capacity change from 0 to 7 [ 357.089128][T18239] loop0: detected capacity change from 0 to 8192 [ 357.122982][T18244] loop1: detected capacity change from 0 to 256 [ 357.134175][T18247] loop6: detected capacity change from 0 to 2048 [ 357.156244][T18239] loop0: p1 p3 p4 [ 357.160140][T18239] loop0: p1 size 8390912 extends beyond EOD, truncated [ 357.167737][T18239] loop0: p3 size 589824 extends beyond EOD, truncated [ 357.222348][T18247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.268463][T18257] loop2: detected capacity change from 0 to 256 [ 357.854260][T18272] loop2: detected capacity change from 0 to 2048 [ 357.876561][T18272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.888837][T18270] loop0: detected capacity change from 0 to 8192 [ 357.905706][T18272] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.4854: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 357.954903][T18270] loop0: p1 p3 p4 [ 357.961934][T18270] loop0: p1 size 8390912 extends beyond EOD, truncated [ 357.976059][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.031457][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.043987][T18270] loop0: p3 size 589824 extends beyond EOD, truncated [ 358.116786][T18289] SELinux: failed to load policy [ 358.138211][T18301] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4862'. [ 358.147632][T18295] wireguard2: entered promiscuous mode [ 358.153166][T18295] wireguard2: entered allmulticast mode [ 358.161520][T18289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4859'. [ 358.187878][T18298] wireguard0: entered promiscuous mode [ 358.193485][T18298] wireguard0: entered allmulticast mode [ 358.269830][T18312] loop2: detected capacity change from 0 to 2048 [ 358.284305][T18314] loop0: detected capacity change from 0 to 2048 [ 358.292934][T18312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.341150][T18314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.429849][T18314] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.4869: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 358.452801][T18328] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4873'. [ 358.477282][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.520818][T18331] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4875'. [ 358.881846][T18339] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 358.894601][T18339] SELinux: failed to load policy [ 358.922277][T18339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4876'. [ 358.988141][T18354] bond2: entered promiscuous mode [ 358.993341][T18354] bond2: entered allmulticast mode [ 359.004804][T18354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.021483][T18354] bond2 (unregistering): Released all slaves [ 359.035145][T18357] wireguard0: entered promiscuous mode [ 359.040678][T18357] wireguard0: entered allmulticast mode [ 359.102246][T18360] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4884'. [ 359.112187][T18360] siw: device registration error -23 [ 359.127728][T18360] loop5: detected capacity change from 0 to 2048 [ 359.138174][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.316603][T18383] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.331499][T18389] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4898'. [ 359.342833][T18389] siw: device registration error -23 [ 359.343441][T18390] siw: device registration error -23 [ 359.357836][T18389] loop6: detected capacity change from 0 to 2048 [ 359.366840][T18390] loop2: detected capacity change from 0 to 2048 [ 359.381666][T18393] loop5: detected capacity change from 0 to 512 [ 359.388598][T18393] EXT4-fs: Ignoring removed nobh option [ 359.429247][T18393] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4899: invalid indirect mapped block 256 (level 2) [ 359.443874][T18383] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.460867][T18393] EXT4-fs (loop5): 2 truncates cleaned up [ 359.494916][T18383] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.502786][T18393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.559426][T18393] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.4899: bg 0: block 5: invalid block bitmap [ 359.575215][T18383] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.599888][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.619646][T18415] siw: device registration error -23 [ 359.634261][T18383] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.648021][T18416] loop6: detected capacity change from 0 to 2048 [ 359.662767][T18383] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.676244][T18383] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.687404][T18415] loop2: detected capacity change from 0 to 2048 [ 359.695696][T18416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.717394][T18383] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.731117][T18416] EXT4-fs error (device loop6): ext4_find_extent:938: inode #2: comm syz.6.4907: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 359.768910][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.801222][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.812447][T18424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.839003][T18424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.865334][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.064456][T18443] loop6: detected capacity change from 0 to 8192 [ 360.168035][T18450] syz.2.4912: attempt to access beyond end of device [ 360.168035][T18450] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 360.218286][T18443] loop6: p1 p3 p4 [ 360.222352][T18443] loop6: p1 size 8390912 extends beyond EOD, truncated [ 360.255055][T18443] loop6: p3 size 589824 extends beyond EOD, truncated [ 360.331175][T18459] bond2: entered promiscuous mode [ 360.336355][T18459] bond2: entered allmulticast mode [ 360.341825][T18459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.353843][T18459] bond2 (unregistering): Released all slaves [ 360.597190][T18473] loop5: detected capacity change from 0 to 2048 [ 360.614010][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.623449][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.635122][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.643983][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.744549][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 360.745015][T18473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.750789][ T29] audit: type=1326 audit(1746956541.839:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.786288][ T29] audit: type=1326 audit(1746956541.839:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.809829][ T29] audit: type=1326 audit(1746956541.849:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.833385][ T29] audit: type=1326 audit(1746956541.849:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.856918][ T29] audit: type=1326 audit(1746956541.849:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.880546][ T29] audit: type=1326 audit(1746956541.849:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.904193][ T29] audit: type=1326 audit(1746956541.849:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.927722][ T29] audit: type=1326 audit(1746956541.849:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.951328][ T29] audit: type=1326 audit(1746956541.849:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 360.974925][ T29] audit: type=1326 audit(1746956541.849:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.6.4928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f2c37d5e969 code=0x7ffc0000 [ 361.033444][T18488] syz.6.4930: attempt to access beyond end of device [ 361.033444][T18488] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 361.250919][T18490] team0: Port device team_slave_1 removed [ 361.426884][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.464102][T18494] loop0: detected capacity change from 0 to 512 [ 361.471478][T18494] EXT4-fs: Ignoring removed oldalloc option [ 361.487041][T18493] SELinux: failed to load policy [ 361.518485][T18493] __nla_validate_parse: 6 callbacks suppressed [ 361.518503][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4933'. [ 361.534275][T18494] EXT4-fs (loop0): 1 truncate cleaned up [ 361.540821][T18494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.681049][T18504] wireguard2: entered promiscuous mode [ 361.681879][T18507] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4937'. [ 361.686725][T18504] wireguard2: entered allmulticast mode [ 361.707776][T18507] siw: device registration error -23 [ 361.723687][T18507] loop5: detected capacity change from 0 to 2048 [ 361.906798][T18525] loop1: detected capacity change from 0 to 256 [ 361.920664][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.021113][T18539] loop0: detected capacity change from 0 to 2048 [ 362.036676][T18539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.169111][T18548] loop1: detected capacity change from 0 to 256 [ 363.053862][T18573] loop1: detected capacity change from 0 to 8192 [ 363.055743][T18575] loop0: detected capacity change from 0 to 2048 [ 363.086673][T18577] loop2: detected capacity change from 0 to 256 [ 363.097147][T18573] loop1: p1 p3 p4 [ 363.116807][T18573] loop1: p1 size 8390912 extends beyond EOD, truncated [ 363.128138][T18573] loop1: p3 size 589824 extends beyond EOD, truncated [ 363.143516][T18583] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4970'. [ 363.200566][T18588] loop7: detected capacity change from 0 to 7 [ 363.207268][T18586] loop5: detected capacity change from 0 to 2048 [ 363.328925][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4974'. [ 363.339363][T18594] siw: device registration error -23 [ 363.361674][T18594] loop2: detected capacity change from 0 to 2048 [ 363.939778][T18609] loop6: detected capacity change from 0 to 2048 [ 364.043107][T18615] loop0: detected capacity change from 0 to 8192 [ 364.184968][T18615] loop0: p1 p3 p4 [ 364.189693][T18615] loop0: p1 size 8390912 extends beyond EOD, truncated [ 364.198919][T18615] loop0: p3 size 589824 extends beyond EOD, truncated [ 364.236278][T18624] loop1: detected capacity change from 0 to 2048 [ 364.253936][T18627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4985'. [ 364.266020][T18627] siw: device registration error -23 [ 364.290323][T18627] loop5: detected capacity change from 0 to 2048 [ 364.304050][T18624] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.4986: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 364.352193][T18631] SELinux: failed to load policy [ 364.397728][T18631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4987'. [ 364.438839][T18644] wireguard0: entered promiscuous mode [ 364.444421][T18644] wireguard0: entered allmulticast mode [ 364.473721][T18647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4993'. [ 364.526093][T18654] loop5: detected capacity change from 0 to 2048 [ 364.657838][T18660] loop2: detected capacity change from 0 to 256 [ 364.669514][T18662] loop1: detected capacity change from 0 to 128 [ 364.676900][T18662] vfat: Unknown parameter 'õ³ò8' [ 364.978392][T18666] loop1: detected capacity change from 0 to 8192 [ 365.059055][T18666] loop1: p1 p3 p4 [ 365.107962][T18666] loop1: p1 size 8390912 extends beyond EOD, truncated [ 365.120831][T18666] loop1: p3 size 589824 extends beyond EOD, truncated [ 365.164312][T18668] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5000'. [ 365.178192][T18670] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.179163][T18668] siw: device registration error -23 [ 365.213080][T18668] loop6: detected capacity change from 0 to 2048 [ 365.247565][T18670] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.296220][T18670] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.318964][T18678] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5005'. [ 365.361382][T18670] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.463075][T18686] wireguard0: entered promiscuous mode [ 365.468699][T18686] wireguard0: entered allmulticast mode [ 365.499019][T18670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.510965][T18670] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.523477][T18670] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.547385][T18670] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.586414][T18704] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5015'. [ 365.774365][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 365.774384][ T29] audit: type=1326 audit(1746956547.039:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18705 comm="syz.5.5016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e1bdee969 code=0x0 [ 365.831948][ T29] audit: type=1400 audit(1746956547.099:8828): avc: denied { create } for pid=18705 comm="syz.5.5016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 365.890042][T18728] FAULT_INJECTION: forcing a failure. [ 365.890042][T18728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.903384][T18728] CPU: 1 UID: 0 PID: 18728 Comm: syz.0.5023 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 365.903423][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 365.903436][T18728] Call Trace: [ 365.903443][T18728] [ 365.903452][T18728] __dump_stack+0x1d/0x30 [ 365.903478][T18728] dump_stack_lvl+0xe8/0x140 [ 365.903502][T18728] dump_stack+0x15/0x1b [ 365.903599][T18728] should_fail_ex+0x265/0x280 [ 365.903633][T18728] should_fail+0xb/0x20 [ 365.903665][T18728] should_fail_usercopy+0x1a/0x20 [ 365.903684][T18728] _copy_from_iter+0xcf/0xdd0 [ 365.903707][T18728] ? alloc_pages_mpol+0x202/0x250 [ 365.903735][T18728] copy_page_from_iter+0x15a/0x290 [ 365.903781][T18728] tun_get_user+0x5c7/0x24d0 [ 365.903812][T18728] ? ref_tracker_alloc+0x1f2/0x2f0 [ 365.903849][T18728] tun_chr_write_iter+0x15e/0x210 [ 365.903874][T18728] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 365.903897][T18728] vfs_write+0x49d/0x8d0 [ 365.904007][T18728] ksys_write+0xda/0x1a0 [ 365.904041][T18728] __x64_sys_write+0x40/0x50 [ 365.904066][T18728] x64_sys_call+0x2cdd/0x2fb0 [ 365.904109][T18728] do_syscall_64+0xd0/0x1a0 [ 365.904209][T18728] ? clear_bhb_loop+0x25/0x80 [ 365.904264][T18728] ? clear_bhb_loop+0x25/0x80 [ 365.904286][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.904314][T18728] RIP: 0033:0x7fda6e91d41f [ 365.904329][T18728] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 365.904347][T18728] RSP: 002b:00007fda6cf87000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 365.904366][T18728] RAX: ffffffffffffffda RBX: 00007fda6eb45fa0 RCX: 00007fda6e91d41f [ 365.904378][T18728] RDX: 0000000000000066 RSI: 0000200000000a40 RDI: 00000000000000c8 [ 365.904390][T18728] RBP: 00007fda6cf87090 R08: 0000000000000000 R09: 0000000000000000 [ 365.904464][T18728] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 365.904476][T18728] R13: 0000000000000000 R14: 00007fda6eb45fa0 R15: 00007ffd927361e8 [ 365.904495][T18728] [ 366.162107][T18736] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.181040][T18737] wireguard0: entered promiscuous mode [ 366.186725][T18737] wireguard0: entered allmulticast mode [ 366.248526][T18736] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.270379][ T29] audit: type=1326 audit(1746956547.539:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18729 comm="syz.6.5025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c37d5e969 code=0x0 [ 366.326530][T18736] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.438921][T18736] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.518053][ T29] audit: type=1326 audit(1746956547.779:8830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.525423][T18736] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.541711][ T29] audit: type=1326 audit(1746956547.779:8831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.572330][T18736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.573297][ T29] audit: type=1326 audit(1746956547.779:8832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.604987][ T29] audit: type=1326 audit(1746956547.779:8833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.606159][T18736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.628586][ T29] audit: type=1326 audit(1746956547.779:8834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.628622][ T29] audit: type=1326 audit(1746956547.779:8835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.628655][ T29] audit: type=1326 audit(1746956547.789:8836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18749 comm="syz.5.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1bdee969 code=0x7ffc0000 [ 366.711166][T18736] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.831060][T18766] loop0: detected capacity change from 0 to 256 [ 366.845988][T18764] __nla_validate_parse: 2 callbacks suppressed [ 366.846004][T18764] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5036'. [ 366.869630][T18771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5040'. [ 366.873953][T18764] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5036'. [ 366.895724][T18772] loop2: detected capacity change from 0 to 2048 [ 366.922102][T18779] loop5: detected capacity change from 0 to 512 [ 366.960113][T18779] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 367.287097][T18803] loop6: detected capacity change from 0 to 2048 [ 367.304631][T18804] wireguard0: entered promiscuous mode [ 367.310203][T18804] wireguard0: entered allmulticast mode [ 368.087719][T18839] wireguard0: entered promiscuous mode [ 368.093281][T18839] wireguard0: entered allmulticast mode [ 368.137648][T18842] wireguard0: entered promiscuous mode [ 368.143186][T18842] wireguard0: entered allmulticast mode [ 368.232205][T18849] loop1: detected capacity change from 0 to 8192 [ 368.305499][T18849] loop1: p1 p3 p4 [ 368.309357][T18849] loop1: p1 size 8390912 extends beyond EOD, truncated [ 368.368965][T18849] loop1: p3 size 589824 extends beyond EOD, truncated [ 368.457907][T18865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5079'. [ 368.467514][T18868] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5078'. [ 368.487158][T18867] loop2: detected capacity change from 0 to 2048 [ 368.503864][T18868] netlink: 28 bytes leftover after parsing attributes in process `wg1'. [ 368.530573][T18875] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.565483][T18877] wireguard0: entered promiscuous mode [ 368.571078][T18877] wireguard0: entered allmulticast mode [ 368.594128][T18875] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.640122][T18884] wireguard0: entered promiscuous mode [ 368.645681][T18884] wireguard0: entered allmulticast mode [ 368.685066][T18875] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.717736][T18891] loop0: detected capacity change from 0 to 8192 [ 368.766025][T18891] loop0: p1 p3 p4 [ 368.769895][T18891] loop0: p1 size 8390912 extends beyond EOD, truncated [ 368.778631][T18875] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.790704][T18891] loop0: p3 size 589824 extends beyond EOD, truncated [ 368.861599][T18900] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5091'. [ 368.939417][T18905] loop6: detected capacity change from 0 to 8192 [ 369.022697][T18907] SELinux: failed to load policy [ 369.048303][T18905] loop6: p1 p3 p4 [ 369.052187][T18905] loop6: p1 size 8390912 extends beyond EOD, truncated [ 369.088192][T18905] loop6: p3 size 589824 extends beyond EOD, truncated [ 369.099869][T18910] loop7: detected capacity change from 0 to 7 [ 369.147467][T18907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5095'. [ 369.266483][T18916] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5099'. [ 369.276104][T18916] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5099'. [ 369.300165][T18930] loop6: detected capacity change from 0 to 256 [ 369.389589][T18931] loop0: detected capacity change from 0 to 8192 [ 369.390659][T18933] loop5: detected capacity change from 0 to 128 [ 369.402950][T18933] EXT4-fs: Ignoring removed nobh option [ 369.414217][T18935] bond1: entered promiscuous mode [ 369.419426][T18935] bond1: entered allmulticast mode [ 369.420082][T18931] loop0: p1 p3 p4 [ 369.424906][T18935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.429999][T18933] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.437137][T18931] loop0: p1 size 8390912 extends beyond EOD, truncated [ 369.454015][T18931] loop0: p3 size 589824 extends beyond EOD, truncated [ 369.461707][T18935] bond1 (unregistering): Released all slaves [ 369.559518][T18948] loop7: detected capacity change from 0 to 7 [ 369.588027][T18943] wireguard1: entered promiscuous mode [ 369.593571][T18943] wireguard1: entered allmulticast mode [ 369.681533][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.692127][T18961] loop6: detected capacity change from 0 to 2048 [ 369.709283][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.730143][T18958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.738779][T18958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.837132][T18961] EXT4-fs mount: 20 callbacks suppressed [ 369.837148][T18961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.055707][T18875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.086061][T18875] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.121259][T18875] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.207455][T18875] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.276351][T18875] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.356102][T18875] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.594320][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.768921][T18975] loop6: detected capacity change from 0 to 8192 [ 370.816940][T18975] loop6: p1 p3 p4 [ 370.820812][T18975] loop6: p1 size 8390912 extends beyond EOD, truncated [ 370.872164][T14521] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.884349][T18975] loop6: p3 size 589824 extends beyond EOD, truncated [ 370.972542][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 370.972558][ T29] audit: type=1400 audit(1746956552.239:9090): avc: denied { create } for pid=18988 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 370.999155][ T29] audit: type=1400 audit(1746956552.239:9091): avc: denied { connect } for pid=18988 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.018851][ T29] audit: type=1400 audit(1746956552.239:9092): avc: denied { write } for pid=18988 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 371.043296][ T29] audit: type=1400 audit(1746956552.319:9093): avc: denied { ioctl } for pid=18986 comm="syz.2.5121" path="socket:[58534]" dev="sockfs" ino=58534 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.109675][ T29] audit: type=1400 audit(1746956552.379:9094): avc: denied { create } for pid=18986 comm="syz.2.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.185509][ T29] audit: type=1400 audit(1746956552.409:9095): avc: denied { connect } for pid=18986 comm="syz.2.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 371.205348][ T29] audit: type=1400 audit(1746956552.429:9096): avc: denied { block_suspend } for pid=18996 comm="syz.5.5126" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 371.231485][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.240102][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.249130][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.257662][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.365629][T19007] loop6: detected capacity change from 0 to 128 [ 371.372318][T19007] EXT4-fs: Ignoring removed nobh option [ 371.380486][T19007] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.393467][T19007] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.403038][ T29] audit: type=1400 audit(1746956552.669:9097): avc: denied { mount } for pid=19015 comm="syz.5.5133" name="/" dev="ramfs" ino=58556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 371.468589][T19017] syz.2.5127: attempt to access beyond end of device [ 371.468589][T19017] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 371.751694][ T29] audit: type=1400 audit(1746956553.019:9098): avc: denied { mounton } for pid=19015 comm="syz.5.5133" path="/266/file0" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.002910][T19025] __nla_validate_parse: 6 callbacks suppressed [ 372.002990][T19025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5135'. [ 372.265023][T19034] loop5: detected capacity change from 0 to 512 [ 372.271735][T19034] EXT4-fs: Ignoring removed nobh option [ 372.278720][ T29] audit: type=1400 audit(1746956553.529:9099): avc: denied { write } for pid=19033 comm="syz.5.5139" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 372.302985][T19034] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5139: invalid indirect mapped block 256 (level 2) [ 372.319596][T19034] EXT4-fs (loop5): 2 truncates cleaned up [ 372.325958][T19034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.340683][T19034] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.5139: bg 0: block 5: invalid block bitmap [ 372.369894][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.450473][T19042] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5141'. [ 372.460040][T19042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5141'. [ 372.510993][T19050] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5143'. [ 372.760755][T15725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.815725][T19066] loop6: detected capacity change from 0 to 128 [ 372.822490][T19066] vfat: Unknown parameter '18446744073709551615' [ 372.829207][T19067] loop0: detected capacity change from 0 to 2048 [ 372.851523][T19067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.897487][T19072] loop6: detected capacity change from 0 to 512 [ 372.905940][T19072] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 372.930003][T19073] netlink: 'syz.5.5148': attribute type 7 has an invalid length. [ 373.007852][T19072] EXT4-fs (loop6): 1 truncate cleaned up [ 373.020666][T19072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.620305][ T37] kworker/u8:2 invoked oom-killer: gfp_mask=0x100c0a(GFP_NOIO|__GFP_HIGHMEM|__GFP_MOVABLE|__GFP_HARDWALL), order=0, oom_score_adj=0 [ 373.634179][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 373.634248][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 373.634262][ T37] Workqueue: loop6 loop_rootcg_workfn [ 373.634296][ T37] Call Trace: [ 373.634305][ T37] [ 373.634315][ T37] __dump_stack+0x1d/0x30 [ 373.634350][ T37] dump_stack_lvl+0xe8/0x140 [ 373.634372][ T37] dump_stack+0x15/0x1b [ 373.634440][ T37] dump_header+0x81/0x220 [ 373.634559][ T37] oom_kill_process+0x334/0x3f0 [ 373.634650][ T37] out_of_memory+0x979/0xb80 [ 373.634719][ T37] ? css_next_descendant_pre+0x138/0x160 [ 373.634761][ T37] mem_cgroup_out_of_memory+0x13d/0x190 [ 373.634840][ T37] try_charge_memcg+0x5e2/0x870 [ 373.634869][ T37] charge_memcg+0x51/0xc0 [ 373.634898][ T37] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 373.635021][ T37] __read_swap_cache_async+0x1df/0x350 [ 373.635055][ T37] swap_cluster_readahead+0x376/0x3e0 [ 373.635084][ T37] shmem_swapin_folio+0x722/0xe50 [ 373.635255][ T37] ? __rcu_read_unlock+0x4f/0x70 [ 373.635288][ T37] shmem_get_folio_gfp+0x26c/0xd40 [ 373.635376][ T37] ? __rb_insert_augmented+0x292/0x2c0 [ 373.635404][ T37] shmem_write_begin+0xa8/0x190 [ 373.635438][ T37] generic_perform_write+0x181/0x490 [ 373.635557][ T37] shmem_file_write_iter+0xc5/0xf0 [ 373.635593][ T37] lo_rw_aio+0x5f7/0x7c0 [ 373.635713][ T37] loop_process_work+0x52d/0xa60 [ 373.635757][ T37] ? wb_workfn+0x7f0/0x910 [ 373.635790][ T37] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 373.635825][ T37] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 373.635936][ T37] ? try_to_wake_up+0x212/0x630 [ 373.635960][ T37] loop_rootcg_workfn+0x22/0x30 [ 373.635989][ T37] process_scheduled_works+0x4cb/0x9d0 [ 373.636158][ T37] worker_thread+0x582/0x770 [ 373.636203][ T37] kthread+0x486/0x510 [ 373.636228][ T37] ? finish_task_switch+0xad/0x2b0 [ 373.636252][ T37] ? __pfx_worker_thread+0x10/0x10 [ 373.636340][ T37] ? __pfx_kthread+0x10/0x10 [ 373.636364][ T37] ret_from_fork+0x4b/0x60 [ 373.636524][ T37] ? __pfx_kthread+0x10/0x10 [ 373.636548][ T37] ret_from_fork_asm+0x1a/0x30 [ 373.636577][ T37] [ 373.850664][ T37] memory: usage 307200kB, limit 307200kB, failcnt 181 [ 373.857486][ T37] memory+swap: usage 308200kB, limit 9007199254740988kB, failcnt 0 [ 373.865597][ T37] kmem: usage 307096kB, limit 9007199254740988kB, failcnt 0 [ 373.873075][ T37] Memory cgroup stats for /syz6: [ 373.873473][ T37] cache 86016 [ 373.881821][ T37] rss 4096 [ 373.885061][ T37] shmem 0 [ 373.888020][ T37] mapped_file 0 [ 373.891757][ T37] dirty 0 [ 373.894813][ T37] writeback 77824 [ 373.898677][ T37] workingset_refault_anon 183 [ 373.903500][ T37] workingset_refault_file 2 [ 373.908054][ T37] swap 1024000 [ 373.911439][ T37] swapcached 12288 [ 373.915191][ T37] pgpgin 78229 [ 373.918621][ T37] pgpgout 78203 [ 373.922090][ T37] pgfault 121745 [ 373.925684][ T37] pgmajfault 55 [ 373.929221][ T37] inactive_anon 12288 [ 373.933218][ T37] active_anon 0 [ 373.936726][ T37] inactive_file 94208 [ 373.940814][ T37] active_file 0 [ 373.944289][ T37] unevictable 0 [ 373.947864][ T37] hierarchical_memory_limit 314572800 [ 373.953279][ T37] hierarchical_memsw_limit 9223372036854771712 [ 373.959534][ T37] total_cache 86016 [ 373.963518][ T37] total_rss 4096 [ 373.967096][ T37] total_shmem 0 [ 373.970575][ T37] total_mapped_file 0 [ 373.974635][ T37] total_dirty 0 [ 373.978100][ T37] total_writeback 77824 [ 373.982301][ T37] total_workingset_refault_anon 183 [ 373.987684][ T37] total_workingset_refault_file 2 [ 373.992959][ T37] total_swap 1024000 [ 373.996914][ T37] total_swapcached 12288 [ 374.001170][ T37] total_pgpgin 78229 [ 374.005099][ T37] total_pgpgout 78203 [ 374.009099][ T37] total_pgfault 121745 [ 374.013233][ T37] total_pgmajfault 55 [ 374.017322][ T37] total_inactive_anon 12288 [ 374.021842][ T37] total_active_anon 0 [ 374.025878][ T37] total_inactive_file 94208 [ 374.030461][ T37] total_active_file 0 [ 374.034729][ T37] total_unevictable 0 [ 374.038725][ T37] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5150,pid=19065,uid=0 [ 374.053559][ T37] Memory cgroup out of memory: Killed process 19065 (syz.6.5150) total-vm:95796kB, anon-rss:936kB, file-rss:22704kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 374.072965][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.281654][T19083] loop2: detected capacity change from 0 to 512 [ 374.319720][T19083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.333209][T19083] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.353558][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.368635][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.377844][T12193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.388036][T19087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.396583][T19087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.550961][T19090] loop2: detected capacity change from 0 to 128 [ 374.557816][T19090] EXT4-fs: Ignoring removed nobh option [ 374.568452][T19090] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 374.596222][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.663491][T19098] loop5: detected capacity change from 0 to 2048 [ 374.665303][T19090] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 374.721953][T19098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.771406][T19111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5165'. [ 374.800596][T19114] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5157'. [ 374.813431][T19113] loop1: detected capacity change from 0 to 512 [ 374.820287][T19113] EXT4-fs: Ignoring removed nobh option [ 374.841481][T19113] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5166: invalid indirect mapped block 256 (level 2) [ 374.863344][T19113] EXT4-fs (loop1): 2 truncates cleaned up [ 374.933433][T19113] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.972025][T19119] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.5167' sets config #0 [ 375.077967][T19113] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5166: bg 0: block 5: invalid block bitmap [ 375.123670][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5167'. [ 375.165169][T19120] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.317958][T19120] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.346153][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.378059][T19120] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.436500][T19120] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.605490][T19120] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.616239][T14521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.652344][T19120] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.683550][T19120] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.708137][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5170'. [ 375.722667][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5170'. [ 375.742849][T19120] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.752323][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5170'. [ 375.897206][T12193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.977284][T19138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.028643][T19138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.055694][T19140] loop6: detected capacity change from 0 to 8192 [ 376.085028][T19140] loop6: p1 p3 p4 [ 376.088925][T19140] loop6: p1 size 8390912 extends beyond EOD, truncated [ 376.093079][T19138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.106910][T19140] loop6: p3 size 589824 extends beyond EOD, truncated [ 376.143046][T19138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.188823][T19144] bond1: entered promiscuous mode [ 376.193898][T19144] bond1: entered allmulticast mode [ 376.199383][T19144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.209361][T19144] bond1 (unregistering): Released all slaves [ 376.225561][T19138] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.237379][T19138] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.249053][T19138] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.261711][T19138] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.278451][T19147] loop1: detected capacity change from 0 to 512 [ 376.285870][T19147] EXT4-fs: Ignoring removed nobh option [ 376.306482][T19147] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.5178: invalid indirect mapped block 256 (level 2) [ 376.321384][T19147] EXT4-fs (loop1): 2 truncates cleaned up [ 376.327989][T19147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.344462][T19147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.5178: bg 0: block 5: invalid block bitmap [ 376.368437][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 376.368450][ T29] audit: type=1400 audit(1746956557.639:9200): avc: denied { mounton } for pid=19153 comm="syz.6.5181" path="/278/file0" dev="tmpfs" ino=1497 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 376.399658][T19154] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 376.421378][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.479132][T19158] loop6: detected capacity change from 0 to 8192 [ 376.495886][T19157] loop2: detected capacity change from 0 to 128 [ 376.502771][T19157] EXT4-fs: Ignoring removed nobh option [ 376.521601][T19157] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.535612][T19158] loop6: p1 p3 p4 [ 376.536163][T19157] ext4 filesystem being mounted at /450/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.539500][T19158] loop6: p1 size 8390912 extends beyond EOD, truncated [ 376.564683][T19158] loop6: p3 size 589824 extends beyond EOD, truncated [ 376.627786][T19166] loop1: detected capacity change from 0 to 2048 [ 376.648721][T19166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.663142][ T29] audit: type=1400 audit(1746956557.929:9201): avc: denied { read write } for pid=19167 comm="syz.6.5186" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 376.686901][ T29] audit: type=1400 audit(1746956557.929:9202): avc: denied { open } for pid=19167 comm="syz.6.5186" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 376.837969][ T29] audit: type=1400 audit(1746956558.109:9203): avc: denied { load_policy } for pid=19173 comm="syz.5.5188" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 376.840922][T19174] SELinux: failed to load policy [ 376.882532][ T29] audit: type=1400 audit(1746956558.149:9204): avc: denied { ioctl } for pid=19173 comm="syz.5.5188" path="socket:[58979]" dev="sockfs" ino=58979 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 376.924260][ T29] audit: type=1400 audit(1746956558.189:9205): avc: denied { sys_module } for pid=19173 comm="syz.5.5188" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 377.192346][ T29] audit: type=1400 audit(1746956558.459:9206): avc: denied { read } for pid=19167 comm="syz.6.5186" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 377.216744][ T29] audit: type=1400 audit(1746956558.469:9207): avc: denied { read write } for pid=14521 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.241291][ T29] audit: type=1400 audit(1746956558.469:9208): avc: denied { open } for pid=14521 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.265715][ T29] audit: type=1400 audit(1746956558.469:9209): avc: denied { ioctl } for pid=14521 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.314749][T19182] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.327181][T19182] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.390274][T19184] __nla_validate_parse: 3 callbacks suppressed [ 377.390306][T19184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5191'. [ 377.409087][T19182] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.444431][T19182] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.489876][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.542299][T19191] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5195'. [ 377.618326][T19196] loop0: detected capacity change from 0 to 2048 [ 377.637238][T19196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.945288][T19213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5202'. [ 378.039129][T19215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5203'. [ 378.048982][T19215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5203'. [ 378.093106][T19217] loop1: detected capacity change from 0 to 2048 [ 378.108459][T12193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.137451][T19217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.442578][T19227] loop6: detected capacity change from 0 to 2048 [ 378.571207][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.583408][T19233] wireguard0: entered promiscuous mode [ 378.589007][T19233] wireguard0: entered allmulticast mode [ 378.600097][T19227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.782908][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5213'. [ 378.923548][T19249] loop5: detected capacity change from 0 to 128 [ 378.939705][T19249] EXT4-fs: Ignoring removed nobh option [ 378.952491][T13065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.969422][T19249] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 378.991838][T19252] loop0: detected capacity change from 0 to 256 [ 379.003300][T19249] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.035151][ T23] ================================================================== [ 379.043289][ T23] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 379.050313][ T23] [ 379.052652][ T23] read-write to 0xffff888237c299e4 of 4 bytes by task 3389 on cpu 0: [ 379.060733][ T23] wq_worker_running+0x95/0x120 [ 379.065584][ T23] schedule_timeout+0xb7/0x170 [ 379.070351][ T23] msleep+0x50/0x90 [ 379.074164][ T23] nsim_fib_event_work+0x1ebc/0x21a0 [ 379.079539][ T23] process_scheduled_works+0x4cb/0x9d0 [ 379.085007][ T23] worker_thread+0x582/0x770 [ 379.089605][ T23] kthread+0x486/0x510 [ 379.093671][ T23] ret_from_fork+0x4b/0x60 [ 379.098088][ T23] ret_from_fork_asm+0x1a/0x30 [ 379.102859][ T23] [ 379.105177][ T23] read to 0xffff888237c299e4 of 4 bytes by task 23 on cpu 1: [ 379.112546][ T23] kick_pool+0x49/0x2d0 [ 379.116741][ T23] __queue_work+0x8d6/0xb60 [ 379.121242][ T23] queue_work_on+0xd1/0x160 [ 379.125742][ T23] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 379.131642][ T23] wg_packet_encrypt_worker+0x9e1/0xb80 [ 379.137197][ T23] process_scheduled_works+0x4cb/0x9d0 [ 379.142664][ T23] worker_thread+0x582/0x770 [ 379.147276][ T23] kthread+0x486/0x510 [ 379.151345][ T23] ret_from_fork+0x4b/0x60 [ 379.155757][ T23] ret_from_fork_asm+0x1a/0x30 [ 379.160523][ T23] [ 379.162864][ T23] value changed: 0x00000000 -> 0x00000001 [ 379.168576][ T23] [ 379.170908][ T23] Reported by Kernel Concurrency Sanitizer on: [ 379.177056][ T23] CPU: 1 UID: 0 PID: 23 Comm: kworker/1:0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(voluntary) [ 379.189384][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 379.199465][ T23] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 379.205999][ T23] ================================================================== [ 379.267318][T19256] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5215'. [ 379.288908][T19254] wireguard2: entered promiscuous mode [ 379.294445][T19254] wireguard2: entered allmulticast mode [ 379.321736][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.622776][T14521] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.