last executing test programs: 1m27.313308207s ago: executing program 0 (id=303): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1be5350000000000000000000000040000783520", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x68, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) io_destroy(0x0) 1m27.243142008s ago: executing program 0 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffe9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff2a0c000008003950323030302e75"], 0x15) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000ffffdffff0e00000000000000030000000700000003000000fffdffff00000000000000002e"], 0x0, 0x46, 0x0, 0x8, 0xfffffffe, 0x0, @void, @value}, 0x28) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x21}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="183f000003000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000000000b70300000000e2ff840000000c000000b7000000000000008db4180000000000"], &(0x7f0000000500)='GPL\x00', 0x5e08, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x10000, 0xfff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2c11, 0x54f, 0x6, &(0x7f00000003c0), 0x8) write$binfmt_script(r6, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '\'#'}, {0x20, '!/\'$%'}], 0xa, "2e22cc951520bea178eb3f2ab73674fd8c62777b81483047af5c400191fb38c2490862fc57258ac540c07a6fecfe07e8c17f1b9d09ebe60fa31b6179628abc756bb5e829df510cf293dae7ab306c96ec812a0713315eec4e7739be2dce41a27c7e82feab4da11fbfe58ad16f85d21ddb4399a7eeb7b7983e7cc287651a9b7aae6825e03c0b08761f8698e155f986b96c73c440e64a77ab317098e4ec"}, 0xb0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 1m27.175604759s ago: executing program 0 (id=307): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8044, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m27.10665987s ago: executing program 0 (id=311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 1m25.984861007s ago: executing program 0 (id=322): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[], 0x1, 0x66f, &(0x7f0000008580)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9001) sendmsg$802154_raw(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x24, @short={0x2, 0x0, 0x555f}}, 0x14, &(0x7f0000000440)={&(0x7f0000000400)="8c4698690e7c9b0a9ddeeeff360a6c67e9958908cf0b29c681bd", 0x1a}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@llc={0x1a, 0x322, 0x4, 0x3, 0x2, 0xd1, @multicast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="63b6ca524320eb5438f82253a0d969f2e9f6242ebd32ff488b2192499da453c81a3d23aa8ccf535845bfdf673a9b5950a982ceadcaad760d0c6060c9bc32938d4d5097c8661693cc6eb06887cc763438fbf3d1b0627ef27f8c43cc53e85613de56770ca8dc1d6afcec846f826ede997d708185999d", 0x75}], 0x1, &(0x7f00000007c0)=[{0x50, 0x11, 0x2e3, "bc74d5d66856a375925179e8250d9a5d79f7496927680a57ee0b97b35593bc0d476534e7751d982c3e183e8fffc2ccaa959c71e446cfed1cd1e86493de"}, {0xd0, 0x10d, 0x3, "a21590f1fc4e1341d49b66f592fb6d73abe7284137c14c0524c804280ee51acf9935017cd621300e03089c0d35c74f1ca8a63abf62ced4db6c2ceb15d65eae5b3190ae47496d3b894b3a782f11e3862c965352f7b73af7ff7fec1e6e6481091a096145d7ecd0e5c6bb6574bf21c0dd606200cb29078955c84e18e9e5930d66910ad188b2224c965d403c1cbadef3d21c8234535a8f0f794617d8da18062205208a865efa37c708183f9681a7d54d1773c7501ee454def813adc9df"}, {0x100, 0xcecd4b6d4cc39a4b, 0x4, "42009e86ecbcc30d759fc35961f86e8f988a3a5db2e6259ff31a6fee823cd6680d19738d16aae3ebee8ee40a4a17f704100d0ef66ef6ee6c197d5df9ae39c6f055fcee1dcf757ca4afdfc15bb35b2c7bb53c7ff702031f3acca8789043dc4c3b30ebc920a0ff3191124af0b9d295d908dd783f919b7c9b081b2e69f5ac7adb9006ef84da6fb43a33407abc8c8ba456a214593be492e5f6326ade8541fbdf2063419eef9b0af3d23fd64d8c7349862132950836c3565142a305614cb5c5643bf3ea1eed157cb34cc2b21860231b0a46ec69ec9eda7e2c9154b2014672f5ec273c51b33e37791621663a986ba3"}, {0xa8, 0xff, 0x0, "efc767b4b5520e20a0c766228bc3c124d7ec3ccefc216a9f37fe3ddac8049d808932bdde268fcf953069826a3a9ddba566b2e3c06d5744961b2de01ac250aa81a7d06f5e1152e9e395688596a6aba95f130c6908bf45cf3cdc122689382cda444a520c068237ed04d415a1c3a19070f94d896234b2d07f4e74ff90c4a8d6670533190730e31cf8ead368079f45ea2638ee7f"}, {0xc0, 0x115, 0xa, "a531fee02aa008a8a21c9553f0289a0f7ff9db892ed8523028232157258da313630f1ce024f01c26a84a02f753c5173acbf35e776b547df55b00239dc2befa5a4267c92221617492b3c9528f5aa475e914f65ba238392ddcc547e3df7748b3bd24988485e743b375040ab63b491c212dfb5c52108745151853da4aa850bbebd9dbaa096bf9a35f06f2f352594ad4370940b93a67258ffaa9c422f0bf78fcb05276b5be6dd4e8e0f8de"}, {0x40, 0x112, 0x1, "7c1d87d1d8a207c7e9467ea95475883b813fce41cbef7f291e12c51024e99d51bff2d05fe32f5b946d"}, {0x50, 0x0, 0x4, "a4d122350c56b781190451bf814bf022a8eb3a2d33f0efe4761595b3e115a507fcace3cabe8d85346b5d2d211e22d6adbfebfce9bacf974b59241f9d129f34a7"}], 0x418}, 0x44040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000a2400f32ed64624cd6ba2bb5f72d00009500"/102], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="2eb6d36607080e3ece422ba4a9be9b3d0007e03d", 0x14}, {&(0x7f0000000180)="89", 0x1}], 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf250c0000000800040004007e4f"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000c80)={&(0x7f0000000680), 0xc, &(0x7f0000000700)={&(0x7f0000000c00)={0x74, r8, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x52}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000580)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000080000000000000001000085000000540000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m25.351658406s ago: executing program 0 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 1m10.309582443s ago: executing program 32 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000200)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 8.185307287s ago: executing program 4 (id=980): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x80000001, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.977515316s ago: executing program 4 (id=995): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.952808906s ago: executing program 4 (id=996): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000097", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x80000001, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d58643e6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324458b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.502463282s ago: executing program 1 (id=1000): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xb8, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="35a5a5b0ca49"}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(0xffffffffffffffff, 0x5, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f, 0x0, 0x0, @void, @value}, 0x20) 4.156150348s ago: executing program 1 (id=1004): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) write$selinux_validatetrans(r0, &(0x7f0000000440)={'system_u:object_r:udev_helper_exec_t:s0', 0x20, 'system_u:object_r:src_t:s0', 0x20, 0x9, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x7d) r1 = creat(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sigaltstack(0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 4.073849159s ago: executing program 2 (id=1005): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$kcm(r0, &(0x7f0000001140)={&(0x7f00000003c0)=@nfc_llcp={0x27, r1, 0x1, 0x0, 0x9, 0x40, "708d014e2f5660456bc541dda1b898e3e3b5e56ffc29d81bf99383ecc86cb066afde7710f927accd31538c131433f7275dd06d9c5c9810bd5b2e9feeb330f2", 0x2d}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="8643e7f54ebee9902cf081ae742fcacec9e291c4431cae47d5ce40f0c8595ae3dd0831486285d330070d728f5e6366", 0x2f}, {&(0x7f0000000500)="52d8b27ca180e03f2fb5947d6f7288eaffeeba85c4f9c1af757637a685fae4cf336fbb937abdb3c30e3b4fdae6c86802bae2be1b59104bb1cb2caa239da7744ae45a1ed9dd1ab3517bb342438eea407f7ed95a3c34ca0d035787233bf2227e51fda14f6c0b6c22dbcfd08494982c6f4a891220698aa13513b116a001c5b646afbd9002e54b024a226518f299720620d1b02cd39b6ace8d04d33c5047779b4475dead4cd2ed6576c605d746ed85", 0xad}, {&(0x7f0000000d80)="22ed6e7e979d935ef137159a7f17115d8ea7ed224b9ca1aea2a294ece2bd13d941170858a2d53a729aea0943e2e95c6df3d4a263ec4756cf99e9729f74d671d87564488965d63bbc69ed8971592fa69721d8799ff15ac0177205ec65865ef836e0a3f716528f3fb0310b6010223e2a516f0d4d10106734b8e4cbbd1072e4dd81b67ec7dd86fae822a1205f663a435000f69c818edd5e58ffead5651e2cd6218a2720460c9e2f4110603b6cd9acd56c586ca6f2", 0xb3}, {&(0x7f0000000740)="86a09871ee509718141cdcc8de9eab07885ca37d2e33bda4f006", 0x1a}], 0x4, &(0x7f0000000e40)=[{0xb8, 0x107, 0x9, "cfdc8c55fd22b0ba08de3b6d4ffac1a27e7d38e26dfabd0fac3ad2cfb9dc35f7db718806fd1158d1266fe4f754e3acb3f63f24242ca2fa11a2466be6b02e03e1c36aad3c07888e23eba08195ec6e0b5e17919f110b889659f10591d2e056cf85bf8a1505d6b757495c4380a8b5e20522609ede89dc13270075d06269361fdcfd6d43da8f4835490c8eb758272f611a05741229285b223c392fccc8d772082540a8821246becc37a1"}, {0xd8, 0x115, 0x0, "6e45f99b76245cc92812697aba4a184b8149582255bee56cca8f4838cb2ecd847362d99ce78d7f6f70c6f5b8db4c35bf6c47272bb66a5dcafc17d017734a7ce7488b985b595c5fca9797f25715fc26a6abe835c9e583ff5a7bed03dd81d71c19c0e774d600ca6e5959eeb09289ace3fdfb113daa2e881db0915af2f5cf57752c6f2a56691dc4f3023eb47ce97cd82241c83744952c9c47b6f88187b2f4b92773283e3fedd4916d0e05998885e1117fe842cbe4a7f264e6f5d8cd2228cd6ac93568c352a9a4bdbf"}, {0x108, 0x29, 0x1, "5aabc493d4c19a7ed19ef30fcbd1827c6b81e6ae3d59fbbb1c44d8184d534031b3c51174a167b3e1b5eb0f9c1675e6e821b97ef80cf19ed9f86f5e50143cd38e83004d601832169bdad4e9f1af6d59c2f813b07ffcded07cadbf29270364165af0ef76cd2fa07c2606da1a76862f7a94383c1d9e15aec8d4e08a5828fd9dc65376e25444816cb8f75992584c279d476ac4a744dbff445153210a57f8a641e02d8175300b7fba955a8a3f5e193b69a203ae45490fbd480249428ce76c91093808f415244c50a5bbe2afa720c929b876c4b748d64d080eb265b75ac395b4c92661efa8dc6fa87b549449285f8eb7cbafc6a2b79e9eb9c492"}, {0x10, 0x10e, 0xc5b}], 0x2a8}, 0x20000000) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="00000000e5af64d644901f0000000000000000000000f0ffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xe2a4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) setpgid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000040)=""/30, &(0x7f0000000240), &(0x7f0000000280), 0x1, r5}, 0x38) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r8, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000540)=ANY=[], 0x0) 3.925483311s ago: executing program 1 (id=1007): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x80000001, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 3.146454893s ago: executing program 4 (id=1009): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) read$eventfd(r1, &(0x7f0000000040), 0x8) 2.62598412s ago: executing program 2 (id=1015): syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x90}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r8, 0x0, 0x0, 0x1001f0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x2, 0x1, 0x4, 0x4, r1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25010000000000000008410000004c00180101000573797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/98], 0xfffffde4}, 0x1, 0x0, 0x0, 0x4c805}, 0x4048080) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 2.133101798s ago: executing program 4 (id=1020): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000097", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x80000001, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d58643e6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324458b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.9978755s ago: executing program 3 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r2) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7, 0x1, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) getresuid(0x0, &(0x7f0000000140), &(0x7f0000000180)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r10], 0x14}, {0x0}, {&(0x7f0000002540)={0x1e0, 0x3a, 0x10, 0x70bd29, 0x25dfdbfd, "", [@nested={0x1ce, 0xda, 0x0, 0x1, [@nested={0x14b, 0xd5, 0x0, 0x1, [@nested={0x79, 0x13e, 0x0, 0x1, [@generic="9737b6f909c6299cb1f4702ddb51aad2cb", @nested={0x62, 0x148, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}, @generic="15a4c412a06508521dafa76c5b8528dc9252cc8c8676ddc8c8dc7516c18087993f6701d3205f64958257d4590f9696ad56a2279059973d4bed04b924b079a014210e5e932ee8c365ee59c2c8b2631218ab4985317c28"]}, @generic]}, @generic="f90f414f9f7f75f84bd632d87a9bd1e3c9d454bec4718ffe586aba9b935ad2f91f896c85a049135daa558ed5f34bfeb1cf8225acd66fbe895c28c17f696923e11912fdd6b9242de048446c7f96c822497edefa08e1480258329a9c80a40e9c6a6c550629851e1f133817742f37e3f38b7c3bafd36bca25b47e879101b03791139169544865eb2c5d83a02349ad2ea45365e06ddbc15932f5556b065b9cae700a46323b17f4feb48473dec04de9ce616768ac5f72a0c329e35dc269", @typed={0x8, 0x84, 0x0, 0x0, @str='GPL\x00'}, @typed={0x4, 0xa}, @nested={0x4, 0x68}]}, @typed={0x8, 0x54, 0x0, 0x0, @pid}, @generic="4c881cddc68067be7e8674879205cb935643bef6b1ddcfcbc735259fda8693358867d0fb23c617adeef41cf56c90d12c78527516d91612238e0c39a026969181f758988a7c3ce30f9d7d66452a8196a23e1efa65130948219bf6bf8d5ba497ba", @generic="1b71fbb0f18be5855359c8c7f3674558e84cc2581e0b"]}]}, 0x1e0}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000001d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x40, 0x24040094}, 0x80) r11 = io_uring_setup(0x7884, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) close_range(r11, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r12, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1.845960342s ago: executing program 5 (id=1022): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x127c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x200000000000010) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e37e", 0x2}, {&(0x7f0000000340)="4080392929d4", 0x6}, {&(0x7f0000000800)="7d171b", 0x3}], 0x4, 0x6) signalfd4(r7, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x700, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)={0x178, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x38}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff5}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) 1.845358673s ago: executing program 1 (id=1023): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c"], 0x8c}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x47d, 0x2041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xfd, [{{0x9, 0x4, 0x0, 0xea, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x155}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0xff, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x66}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0xaa, 0x79, 0x10, 0x80}, 0x71, &(0x7f00000001c0)={0x5, 0xf, 0x71, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x7, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x0, 0xf0f, 0x8, [0x0]}, @generic={0x4f, 0x10, 0x2, "45b6a2fbef89cf0abf59a0ea8cf9a4e25f335f3d95a1b8ae9102cd85799d2ff5d3c117fd94d63a489a26356f1bb03d0556c8a5c285528d29d563bea4feac2e7416ca0f5ba3222fba42bc9b76"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42d}}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 1.738554534s ago: executing program 3 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffe9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff2a0c000008003950323030302e75"], 0x15) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000ffffdffff0e00000000000000030000000700000003000000fffdffff00000000000000002e"], 0x0, 0x46, 0x0, 0x8, 0xfffffffe, 0x0, @void, @value}, 0x28) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x21}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="183f000003000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=r3, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000e2ff840000000c000000b7000000000000008db4180000000000"], &(0x7f0000000500)='GPL\x00', 0x5e08, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x10000, 0xfff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2c11, 0x54f, 0x6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '\'#'}, {0x20, '!/\'$%'}], 0xa, "2e22cc951520bea178eb3f2ab73674fd8c62777b81483047af5c400191fb38c2490862fc57258ac540c07a6fecfe07e8c17f1b9d09ebe60fa31b6179628abc756bb5e829df510cf293dae7ab306c96ec812a0713315eec4e7739be2dce41a27c7e82feab4da11fbfe58ad16f85d21ddb4399a7eeb7b7983e7cc287651a9b7aae6825e03c0b08761f8698e155f986b96c73c440e64a77ab317098e4ec"}, 0xb0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 1.681809325s ago: executing program 3 (id=1025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0, 0xa}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1.528101097s ago: executing program 2 (id=1026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x26, &(0x7f00000000c0)}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1005c0e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x703, &(0x7f0000001580)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}}, 0x0) 1.480280398s ago: executing program 5 (id=1027): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x1ff, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x8, 0x10}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xb8, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}]}, @IPSET_ATTR_DATA={0x64, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x32}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="35a5a5b0ca49"}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(0xffffffffffffffff, 0x5, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r4, r4, 0x2f, 0x0, 0x0, @void, @value}, 0x20) 1.32969349s ago: executing program 2 (id=1028): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3], 0x8c}}, 0x0) 1.32400686s ago: executing program 5 (id=1029): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.229413582s ago: executing program 1 (id=1030): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, 0x0) 1.207690882s ago: executing program 3 (id=1031): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) read$eventfd(r1, 0x0, 0x0) 1.181767182s ago: executing program 2 (id=1032): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) getdents64(0xffffffffffffffff, &(0x7f0000000680)=""/1029, 0x405) r2 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001000)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="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"], 0x8c}}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) 1.178876143s ago: executing program 5 (id=1033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) close_range(0xffffffffffffffff, r0, 0x0) personality(0x6000003) 1.116066744s ago: executing program 1 (id=1034): socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x100, &(0x7f0000000080)=0x80000001, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125", 0xab}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r7, 0x0, 0x8000000000000}, 0x18) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.115659664s ago: executing program 3 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setgroups(0x0, 0x0) setregid(0xffffffffffffffff, r2) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7, 0x1, 0x2}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=0x0) getresuid(0x0, &(0x7f0000000140), &(0x7f0000000180)) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, &(0x7f0000001b80)=[{&(0x7f00000003c0)=ANY=[@ANYRESHEX=r10], 0x14}, {0x0}, {&(0x7f0000002540)={0x218, 0x3a, 0x10, 0x70bd29, 0x25dfdbfd, "", [@nested={0x206, 0xda, 0x0, 0x1, [@nested={0x183, 0xd5, 0x0, 0x1, [@nested={0xb2, 0x13e, 0x0, 0x1, [@generic="9737b6f909c6299cb1f4702ddb51aad2cb", @nested={0x62, 0x148, 0x0, 0x1, [@typed={0x8, 0xf2, 0x0, 0x0, @uid}, @generic="15a4c412a06508521dafa76c5b8528dc9252cc8c8676ddc8c8dc7516c18087993f6701d3205f64958257d4590f9696ad56a2279059973d4bed04b924b079a014210e5e932ee8c365ee59c2c8b2631218ab4985317c28"]}, @generic="fb759e0a520d5afa86788988f3943cf3c7a642b56286c8167071b005d118eabc94ef91ae291e0d66463226b661275f740661e576e94e03b16e"]}, @generic="f90f414f9f7f75f84bd632d87a9bd1e3c9d454bec4718ffe586aba9b935ad2f91f896c85a049135daa558ed5f34bfeb1cf8225acd66fbe895c28c17f696923e11912fdd6b9242de048446c7f96c822497edefa08e1480258329a9c80a40e9c6a6c550629851e1f133817742f37e3f38b7c3bafd36bca25b47e879101b03791139169544865eb2c5d83a02349ad2ea45365e06ddbc15932f5556b065b9cae700a46323b17f4feb48473dec04de9ce616768ac5f72a0c329e35dc269", @typed={0x8, 0x84, 0x0, 0x0, @str='GPL\x00'}, @typed={0x4, 0xa}, @nested={0x4, 0x68}]}, @typed={0x8, 0x54, 0x0, 0x0, @pid}, @generic="4c881cddc68067be7e8674879205cb935643bef6b1ddcfcbc735259fda8693358867d0fb23c617adeef41cf56c90d12c78527516d91612238e0c39a026969181f758988a7c3ce30f9d7d66452a8196a23e1efa65130948219bf6bf8d5ba497ba", @generic="1b71fbb0f18be5855359c8c7f3674558e84cc2581e0b"]}]}, 0x218}, {&(0x7f0000001b40)=ANY=[@ANYBLOB], 0x24}], 0x4, &(0x7f0000001d00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x40, 0x24040094}, 0x80) r11 = io_uring_setup(0x7884, &(0x7f0000000180)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) close_range(r11, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r12, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 1.019487065s ago: executing program 5 (id=1036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffe9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000065ffff2a0c000008003950323030302e75"], 0x15) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000ffffdffff0e00000000000000030000000700000003000000fffdffff00000000000000002e"], 0x0, 0x46, 0x0, 0x8, 0xfffffffe, 0x0, @void, @value}, 0x28) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3, {0x21}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x14, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="183f000003000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018160000", @ANYRES32=r3, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000e2ff840000000c000000b7000000000000008db4180000000000"], &(0x7f0000000500)='GPL\x00', 0x5e08, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0xa, 0x10000, 0xfff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2c11, 0x54f, 0x6, 0x0, 0x0) write$binfmt_script(r6, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '\'#'}, {0x20, '!/\'$%'}], 0xa, "2e22cc951520bea178eb3f2ab73674fd8c62777b81483047af5c400191fb38c2490862fc57258ac540c07a6fecfe07e8c17f1b9d09ebe60fa31b6179628abc756bb5e829df510cf293dae7ab306c96ec812a0713315eec4e7739be2dce41a27c7e82feab4da11fbfe58ad16f85d21ddb4399a7eeb7b7983e7cc287651a9b7aae6825e03c0b08761f8698e155f986b96c73c440e64a77ab317098e4ec"}, 0xb0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9, 0x0, 0x178}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 534.367612ms ago: executing program 5 (id=1037): syz_init_net_socket$llc(0x1a, 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x90}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r8, 0x0, 0x0, 0x1001f0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x2, 0x1, 0x4, 0x4, r1}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25010000000000000008410000004c00180101000573797a31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/98], 0xfffffde4}, 0x1, 0x0, 0x0, 0x4c805}, 0x4048080) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 144.844458ms ago: executing program 3 (id=1038): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x127c, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000001c0)=0x200000000000010) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000780)="e37e", 0x2}, {&(0x7f0000000340)="4080392929d4", 0x6}, {&(0x7f0000000800)="7d171b", 0x3}], 0x4, 0x6) signalfd4(r7, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x569, &(0x7f0000000700)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xb, 0x8, &(0x7f00000017c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x700, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000c80)={0x178, r11, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x38}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff5}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) 138.086218ms ago: executing program 4 (id=1039): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x26, &(0x7f00000000c0)}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYRES16=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1005c0e, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x703, &(0x7f0000001580)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001800800010000000000040003"], 0x44}}, 0x0) 0s ago: executing program 2 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c"], 0x8c}}, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x47d, 0x2041, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0xfd, [{{0x9, 0x4, 0x0, 0xea, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x155}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0xff, 0xfc}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x4, 0x66}}]}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x3, 0xaa, 0x79, 0x10, 0x80}, 0x71, &(0x7f00000001c0)={0x5, 0xf, 0x71, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x7, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x0, 0xf0f, 0x8, [0x0]}, @generic={0x4f, 0x10, 0x2, "45b6a2fbef89cf0abf59a0ea8cf9a4e25f335f3d95a1b8ae9102cd85799d2ff5d3c117fd94d63a489a26356f1bb03d0556c8a5c285528d29d563bea4feac2e7416ca0f5ba3222fba42bc9b76"}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42d}}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x178, 0xe138, 0x198, 0x0, 0x198, 0x230, 0x358, 0x358, 0x230, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x1, 0x9, 0xf, 'pptp\x00', {0xe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) kernel console output (not intermixed with test programs): 1][ T5193] should_fail_ex+0x265/0x280 [ 83.238579][ T5193] should_fail+0xb/0x20 [ 83.238614][ T5193] should_fail_usercopy+0x1a/0x20 [ 83.238651][ T5193] _copy_from_user+0x1c/0xb0 [ 83.238677][ T5193] kstrtouint_from_user+0x69/0xf0 [ 83.238718][ T5193] ? 0xffffffff81000000 [ 83.238735][ T5193] ? selinux_file_permission+0x1e4/0x320 [ 83.238766][ T5193] proc_fail_nth_write+0x50/0x160 [ 83.238857][ T5193] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 83.238895][ T5193] vfs_write+0x266/0x8e0 [ 83.238973][ T5193] ? vfs_read+0x47f/0x6f0 [ 83.239001][ T5193] ? __rcu_read_unlock+0x4f/0x70 [ 83.239059][ T5193] ? __fget_files+0x184/0x1c0 [ 83.239088][ T5193] ksys_write+0xda/0x1a0 [ 83.239175][ T5193] __x64_sys_write+0x40/0x50 [ 83.239197][ T5193] x64_sys_call+0x2cdd/0x2fb0 [ 83.239219][ T5193] do_syscall_64+0xd2/0x200 [ 83.239236][ T5193] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.239263][ T5193] ? clear_bhb_loop+0x40/0x90 [ 83.239343][ T5193] ? clear_bhb_loop+0x40/0x90 [ 83.239364][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.239395][ T5193] RIP: 0033:0x7ff2465dd3df [ 83.239409][ T5193] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 83.239426][ T5193] RSP: 002b:00007ff244c47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 83.239444][ T5193] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2465dd3df [ 83.239456][ T5193] RDX: 0000000000000001 RSI: 00007ff244c470a0 RDI: 0000000000000004 [ 83.239468][ T5193] RBP: 00007ff244c47090 R08: 0000000000000000 R09: 0000000000000000 [ 83.239479][ T5193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 83.239545][ T5193] R13: 0000000000000000 R14: 00007ff246805fa0 R15: 00007fff42bdbfd8 [ 83.239563][ T5193] [ 83.239689][ T5148] bridge_slave_0: entered allmulticast mode [ 83.515583][ T5191] loop2: detected capacity change from 0 to 8192 [ 83.540916][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 83.551915][ T29] audit: type=1326 audit(1750708639.228:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 83.575561][ T29] audit: type=1326 audit(1750708639.228:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 83.598915][ T29] audit: type=1326 audit(1750708639.228:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 83.622334][ T29] audit: type=1326 audit(1750708639.228:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 83.645663][ T29] audit: type=1326 audit(1750708639.228:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 83.688384][ T3299] loop2: p3 [ 83.723746][ T5191] loop2: p3 [ 83.731884][ T5202] Cannot find del_set index 0 as target [ 83.804085][ T5204] Cannot find set identified by id 0 to match [ 83.823998][ T5148] bridge_slave_0: entered promiscuous mode [ 83.858997][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.866266][ T5148] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.876977][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.912595][ T5214] loop2: detected capacity change from 0 to 164 [ 83.919747][ T5148] bridge_slave_1: entered allmulticast mode [ 83.929466][ T5148] bridge_slave_1: entered promiscuous mode [ 83.937159][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 84.016054][ T5220] 9pnet_virtio: no channels available for device 127.0.0.1 [ 84.028342][ T5148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.057300][ T5221] loop2: detected capacity change from 0 to 1024 [ 84.072320][ T5148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.116849][ T3394] IPVS: starting estimator thread 0... [ 84.118620][ T5148] team0: Port device team_slave_0 added [ 84.131017][ T5225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.136294][ T5148] team0: Port device team_slave_1 added [ 84.148571][ T3447] bridge_slave_1: left allmulticast mode [ 84.154441][ T3447] bridge_slave_1: left promiscuous mode [ 84.160644][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.177846][ T3447] bridge_slave_0: left allmulticast mode [ 84.183729][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.186479][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.510'. [ 84.205115][ T5226] IPVS: using max 1920 ests per chain, 96000 per kthread [ 84.226273][ T5235] netlink: 76 bytes leftover after parsing attributes in process `syz.3.511'. [ 84.257577][ T3447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.267192][ T3447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.276389][ T3447] bond0 (unregistering): Released all slaves [ 84.292678][ T5235] lo speed is unknown, defaulting to 1000 [ 84.301934][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.309055][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.335162][ T5148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.346663][ T5235] lo speed is unknown, defaulting to 1000 [ 84.353485][ T5148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.360518][ T5148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.386590][ T5148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.400746][ T5235] lo speed is unknown, defaulting to 1000 [ 84.417966][ T5235] infiniband swz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.448198][ T5235] lo speed is unknown, defaulting to 1000 [ 84.456781][ T5235] lo speed is unknown, defaulting to 1000 [ 84.460360][ T5148] hsr_slave_0: entered promiscuous mode [ 84.471947][ T5148] hsr_slave_1: entered promiscuous mode [ 84.478349][ T5148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.487838][ T5148] Cannot create hsr debugfs directory [ 84.493465][ T5235] lo speed is unknown, defaulting to 1000 [ 84.503307][ T5235] lo speed is unknown, defaulting to 1000 [ 84.512425][ T5235] lo speed is unknown, defaulting to 1000 [ 84.529388][ T5235] lo speed is unknown, defaulting to 1000 [ 84.578346][ T5253] loop1: detected capacity change from 0 to 512 [ 84.633937][ T3447] hsr_slave_0: left promiscuous mode [ 84.647098][ T3447] hsr_slave_1: left promiscuous mode [ 84.661959][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.673501][ T3447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.721225][ T5267] loop1: detected capacity change from 0 to 164 [ 84.747233][ T3447] team0 (unregistering): Port device team_slave_1 removed [ 84.781654][ T3447] team0 (unregistering): Port device team_slave_0 removed [ 84.839340][ T5272] Cannot find set identified by id 0 to match [ 84.909501][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 85.087972][ T5284] cgroup: noprefix used incorrectly [ 85.188529][ T5287] loop2: detected capacity change from 0 to 1024 [ 85.246376][ T5148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.287977][ T5148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.319496][ T5148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.353397][ T5148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.503659][ T5148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.547087][ T5148] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.619983][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.627126][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.664815][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.672156][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.708863][ T5148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.719379][ T5148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.914589][ T5148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.047784][ T5334] Cannot find del_set index 0 as target [ 86.108496][ T5335] netlink: 'syz.2.526': attribute type 13 has an invalid length. [ 86.183694][ T5335] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.230876][ T5338] loop1: detected capacity change from 0 to 1024 [ 86.283033][ T5349] 9pnet_virtio: no channels available for device 127.0.0.1 [ 86.313203][ T5338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.357140][ T5357] loop2: detected capacity change from 0 to 164 [ 86.471058][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 86.494190][ T5148] veth0_vlan: entered promiscuous mode [ 86.512983][ T5148] veth1_vlan: entered promiscuous mode [ 86.566817][ T5148] veth0_macvtap: entered promiscuous mode [ 86.584788][ T5148] veth1_macvtap: entered promiscuous mode [ 86.611778][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.636983][ T5148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.659132][ T5148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.668039][ T5148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.676871][ T5148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.685643][ T5148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.771516][ T5392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 86.784810][ T5392] FAULT_INJECTION: forcing a failure. [ 86.784810][ T5392] name failslab, interval 1, probability 0, space 0, times 0 [ 86.797680][ T5392] CPU: 0 UID: 0 PID: 5392 Comm: syz.5.484 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 86.797713][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.797728][ T5392] Call Trace: [ 86.797737][ T5392] [ 86.797746][ T5392] __dump_stack+0x1d/0x30 [ 86.797778][ T5392] dump_stack_lvl+0xe8/0x140 [ 86.797801][ T5392] dump_stack+0x15/0x1b [ 86.797816][ T5392] should_fail_ex+0x265/0x280 [ 86.797847][ T5392] should_failslab+0x8c/0xb0 [ 86.797869][ T5392] kmem_cache_alloc_noprof+0x50/0x310 [ 86.797897][ T5392] ? mas_alloc_nodes+0x265/0x520 [ 86.797917][ T5392] mas_alloc_nodes+0x265/0x520 [ 86.797943][ T5392] mas_preallocate+0x32b/0x510 [ 86.797989][ T5392] mmap_region+0xb7e/0x1580 [ 86.798039][ T5392] do_mmap+0x9b3/0xbe0 [ 86.798074][ T5392] vm_mmap_pgoff+0x17a/0x2e0 [ 86.798112][ T5392] ksys_mmap_pgoff+0xc2/0x310 [ 86.798150][ T5392] ? __x64_sys_mmap+0x49/0x70 [ 86.798178][ T5392] x64_sys_call+0x1602/0x2fb0 [ 86.798205][ T5392] do_syscall_64+0xd2/0x200 [ 86.798226][ T5392] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.798258][ T5392] ? clear_bhb_loop+0x40/0x90 [ 86.798284][ T5392] ? clear_bhb_loop+0x40/0x90 [ 86.798320][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.798347][ T5392] RIP: 0033:0x7f59571de963 [ 86.798365][ T5392] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 86.798386][ T5392] RSP: 002b:00007f5955846e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 86.798409][ T5392] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f59571de963 [ 86.798424][ T5392] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 86.798439][ T5392] RBP: 0000200000000cc2 R08: 00000000ffffffff R09: 0000000000000000 [ 86.798454][ T5392] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000a [ 86.798468][ T5392] R13: 00007f5955846ef0 R14: 00007f5955846eb0 R15: 0000200000000100 [ 86.798492][ T5392] [ 87.031847][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.340501][ T5431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.538'. [ 87.350588][ T5431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.538'. [ 87.381839][ T5422] wg2: entered promiscuous mode [ 87.386808][ T5422] wg2: entered allmulticast mode [ 87.423660][ T5433] netlink: 76 bytes leftover after parsing attributes in process `syz.3.539'. [ 87.478567][ T5441] loop5: detected capacity change from 0 to 164 [ 87.644330][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.544'. [ 87.667437][ T5451] loop2: detected capacity change from 0 to 1024 [ 88.643532][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 88.643551][ T29] audit: type=1326 audit(1750708643.738:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ab77358e7 code=0x7ffc0000 [ 88.673135][ T29] audit: type=1326 audit(1750708643.738:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ab76dab19 code=0x7ffc0000 [ 88.696511][ T29] audit: type=1326 audit(1750708643.738:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ab77358e7 code=0x7ffc0000 [ 88.719875][ T29] audit: type=1326 audit(1750708643.738:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ab76dab19 code=0x7ffc0000 [ 88.743394][ T29] audit: type=1326 audit(1750708643.738:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ab77358e7 code=0x7ffc0000 [ 88.766763][ T29] audit: type=1326 audit(1750708643.738:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ab76dab19 code=0x7ffc0000 [ 88.790034][ T29] audit: type=1326 audit(1750708643.738:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ab77358e7 code=0x7ffc0000 [ 88.813540][ T29] audit: type=1326 audit(1750708643.738:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ab76dab19 code=0x7ffc0000 [ 88.836856][ T29] audit: type=1326 audit(1750708643.738:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9ab77358e7 code=0x7ffc0000 [ 88.860219][ T29] audit: type=1326 audit(1750708643.738:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5443 comm="syz.3.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ab76dab19 code=0x7ffc0000 [ 89.660706][ T5451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.925309][ T5460] IPVS: stopping backup sync thread 5461 ... [ 90.647916][ T5464] netlink: 76 bytes leftover after parsing attributes in process `syz.5.548'. [ 90.663292][ T5464] siw: device registration error -23 [ 90.757770][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.844611][ T5478] loop5: detected capacity change from 0 to 164 [ 90.871638][ T5482] loop3: detected capacity change from 0 to 164 [ 90.888981][ T5482] rock: directory entry would overflow storage [ 90.895336][ T5482] rock: sig=0x66, size=4, remaining=3 [ 90.978598][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.5.556'. [ 90.988404][ T5488] 9pnet_virtio: no channels available for device 127.0.0.1 [ 91.080050][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.088769][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.546508][ T5515] loop2: detected capacity change from 0 to 2048 [ 91.599700][ T5515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.613901][ T5517] loop1: detected capacity change from 0 to 164 [ 92.112459][ T5538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 92.147407][ T5538] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.569'. [ 92.185377][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 92.318279][ T5548] 9pnet_fd: Insufficient options for proto=fd [ 92.355592][ T5548] loop3: detected capacity change from 0 to 512 [ 92.377488][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.394314][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.403833][ T5548] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.449806][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.485560][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 92.579112][ T5558] lo speed is unknown, defaulting to 1000 [ 92.593767][ T5558] lo speed is unknown, defaulting to 1000 [ 92.751504][ T5576] 9pnet_virtio: no channels available for device 127.0.0.1 [ 92.807713][ T5580] loop5: detected capacity change from 0 to 512 [ 92.814514][ T5580] EXT4-fs: Ignoring removed bh option [ 92.821816][ T5580] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 92.832291][ T5580] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 92.840265][ T5580] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 92.848516][ T5580] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.855062][ T5580] EXT4-fs error (device loop5): ext4_quota_enable:7120: comm syz.5.581: Bad quota inum: 4294967291, type: 0 [ 92.866905][ T5580] EXT4-fs (loop5): Remounting filesystem read-only [ 92.873494][ T5580] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 92.889165][ T5580] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 92.896258][ T5580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.918397][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.470608][ T5587] loop3: detected capacity change from 0 to 512 [ 93.477285][ T5587] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.485316][ T5587] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.493295][ T5587] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e128, mo2=0002] [ 93.501543][ T5587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 93.507999][ T5587] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #4: comm syz.3.583: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 93.525901][ T5587] EXT4-fs (loop3): Remounting filesystem read-only [ 93.532440][ T5587] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.547079][ T5587] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 93.554011][ T5587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.567434][ T5587] EXT4-fs (loop3): shut down requested (1) [ 93.573861][ T5587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 93.583133][ T5587] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 93.593551][ T5587] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 93.601366][ T5587] netlink: 40 bytes leftover after parsing attributes in process `syz.3.583'. [ 93.614657][ T5587] team0: Port device geneve1 added [ 93.675380][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.693581][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 93.740912][ T5599] loop2: detected capacity change from 0 to 512 [ 93.741205][ T5601] FAULT_INJECTION: forcing a failure. [ 93.741205][ T5601] name failslab, interval 1, probability 0, space 0, times 0 [ 93.760182][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz.3.588 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 93.760209][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.760221][ T5601] Call Trace: [ 93.760260][ T5601] [ 93.760271][ T5601] __dump_stack+0x1d/0x30 [ 93.760295][ T5601] dump_stack_lvl+0xe8/0x140 [ 93.760317][ T5601] dump_stack+0x15/0x1b [ 93.760338][ T5601] should_fail_ex+0x265/0x280 [ 93.760442][ T5601] should_failslab+0x8c/0xb0 [ 93.760469][ T5601] __kvmalloc_node_noprof+0x123/0x4e0 [ 93.760547][ T5601] ? alloc_netdev_mqs+0xa1/0xab0 [ 93.760580][ T5601] ? vsnprintf+0x829/0x890 [ 93.760639][ T5601] alloc_netdev_mqs+0xa1/0xab0 [ 93.760678][ T5601] ? __pfx_vlan_setup+0x10/0x10 [ 93.760750][ T5601] rtnl_create_link+0x239/0x710 [ 93.760791][ T5601] rtnl_newlink_create+0x14c/0x620 [ 93.760820][ T5601] ? security_capable+0x83/0x90 [ 93.760860][ T5601] ? netlink_ns_capable+0x86/0xa0 [ 93.760894][ T5601] rtnl_newlink+0xf29/0x12d0 [ 93.760939][ T5601] ? bpf_trace_run3+0x12c/0x1d0 [ 93.760964][ T5601] ? __memcg_slab_free_hook+0x135/0x230 [ 93.761002][ T5601] ? __kfree_skb+0x109/0x150 [ 93.761037][ T5601] ? __rcu_read_unlock+0x4f/0x70 [ 93.761181][ T5601] ? avc_has_perm_noaudit+0x1b1/0x200 [ 93.761219][ T5601] ? selinux_capable+0x1f9/0x270 [ 93.761262][ T5601] ? security_capable+0x83/0x90 [ 93.761295][ T5601] ? ns_capable+0x7d/0xb0 [ 93.761341][ T5601] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.761369][ T5601] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 93.761396][ T5601] netlink_rcv_skb+0x120/0x220 [ 93.761538][ T5601] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.761602][ T5601] rtnetlink_rcv+0x1c/0x30 [ 93.761622][ T5601] netlink_unicast+0x59e/0x670 [ 93.761714][ T5601] netlink_sendmsg+0x58b/0x6b0 [ 93.761740][ T5601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.761807][ T5601] __sock_sendmsg+0x142/0x180 [ 93.761837][ T5601] ____sys_sendmsg+0x31e/0x4e0 [ 93.761848][ T5599] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 93.761883][ T5601] ___sys_sendmsg+0x17b/0x1d0 [ 93.762024][ T5601] __x64_sys_sendmsg+0xd4/0x160 [ 93.762129][ T5601] x64_sys_call+0x2999/0x2fb0 [ 93.762236][ T5601] do_syscall_64+0xd2/0x200 [ 93.762259][ T5601] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.762298][ T5601] ? clear_bhb_loop+0x40/0x90 [ 93.762357][ T5601] ? clear_bhb_loop+0x40/0x90 [ 93.762389][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.762480][ T5601] RIP: 0033:0x7f9ab773e929 [ 93.762501][ T5601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.762542][ T5601] RSP: 002b:00007f9ab5da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.762569][ T5601] RAX: ffffffffffffffda RBX: 00007f9ab7965fa0 RCX: 00007f9ab773e929 [ 93.762585][ T5601] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 93.762602][ T5601] RBP: 00007f9ab5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.762619][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.762641][ T5601] R13: 0000000000000000 R14: 00007f9ab7965fa0 R15: 00007ffc99d8d358 [ 93.762666][ T5601] [ 94.018601][ T5494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.123407][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 94.123424][ T29] audit: type=1326 audit(1750708650.138:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.182455][ T5617] 9pnet_virtio: no channels available for device 127.0.0.1 [ 94.192642][ T29] audit: type=1326 audit(1750708650.138:2423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.216211][ T29] audit: type=1326 audit(1750708650.138:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.239656][ T29] audit: type=1326 audit(1750708650.138:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.263328][ T29] audit: type=1326 audit(1750708650.138:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.286868][ T29] audit: type=1326 audit(1750708650.138:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.310266][ T29] audit: type=1326 audit(1750708650.138:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.333727][ T29] audit: type=1326 audit(1750708650.138:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.357037][ T29] audit: type=1326 audit(1750708650.138:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.380446][ T29] audit: type=1326 audit(1750708650.138:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5607 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 94.449381][ T5625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 94.815071][ T5643] loop5: detected capacity change from 0 to 164 [ 95.081529][ T5653] FAULT_INJECTION: forcing a failure. [ 95.081529][ T5653] name failslab, interval 1, probability 0, space 0, times 0 [ 95.094391][ T5653] CPU: 1 UID: 0 PID: 5653 Comm: syz.4.606 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 95.094422][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.094435][ T5653] Call Trace: [ 95.094442][ T5653] [ 95.094449][ T5653] __dump_stack+0x1d/0x30 [ 95.094491][ T5653] dump_stack_lvl+0xe8/0x140 [ 95.094596][ T5653] dump_stack+0x15/0x1b [ 95.094614][ T5653] should_fail_ex+0x265/0x280 [ 95.094714][ T5653] should_failslab+0x8c/0xb0 [ 95.094736][ T5653] kmem_cache_alloc_noprof+0x50/0x310 [ 95.094764][ T5653] ? getname_flags+0x80/0x3b0 [ 95.094793][ T5653] getname_flags+0x80/0x3b0 [ 95.094821][ T5653] user_path_create+0x27/0x130 [ 95.094920][ T5653] bpf_obj_pin_user+0xe0/0x230 [ 95.094949][ T5653] bpf_obj_pin+0xac/0xd0 [ 95.094987][ T5653] __sys_bpf+0x6a7/0x790 [ 95.095051][ T5653] __x64_sys_bpf+0x41/0x50 [ 95.095086][ T5653] x64_sys_call+0x2478/0x2fb0 [ 95.095170][ T5653] do_syscall_64+0xd2/0x200 [ 95.095255][ T5653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.095342][ T5653] ? clear_bhb_loop+0x40/0x90 [ 95.095363][ T5653] ? clear_bhb_loop+0x40/0x90 [ 95.095440][ T5653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.095460][ T5653] RIP: 0033:0x7ff2465de929 [ 95.095475][ T5653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.095492][ T5653] RSP: 002b:00007ff244c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.095513][ T5653] RAX: ffffffffffffffda RBX: 00007ff246805fa0 RCX: 00007ff2465de929 [ 95.095588][ T5653] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000006 [ 95.095602][ T5653] RBP: 00007ff244c47090 R08: 0000000000000000 R09: 0000000000000000 [ 95.095614][ T5653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.095625][ T5653] R13: 0000000000000000 R14: 00007ff246805fa0 R15: 00007fff42bdbfd8 [ 95.095705][ T5653] [ 95.348920][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.608'. [ 95.366182][ T5661] program syz.2.609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.376646][ T5661] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 95.440854][ T5666] FAULT_INJECTION: forcing a failure. [ 95.440854][ T5666] name failslab, interval 1, probability 0, space 0, times 0 [ 95.453603][ T5666] CPU: 1 UID: 0 PID: 5666 Comm: syz.2.610 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 95.453637][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.453653][ T5666] Call Trace: [ 95.453661][ T5666] [ 95.453671][ T5666] __dump_stack+0x1d/0x30 [ 95.453697][ T5666] dump_stack_lvl+0xe8/0x140 [ 95.453720][ T5666] dump_stack+0x15/0x1b [ 95.453740][ T5666] should_fail_ex+0x265/0x280 [ 95.453780][ T5666] should_failslab+0x8c/0xb0 [ 95.453952][ T5666] kmem_cache_alloc_node_noprof+0x57/0x320 [ 95.453988][ T5666] ? __alloc_skb+0x101/0x320 [ 95.454026][ T5666] __alloc_skb+0x101/0x320 [ 95.454060][ T5666] ? audit_log_start+0x365/0x6c0 [ 95.454177][ T5666] audit_log_start+0x380/0x6c0 [ 95.454266][ T5666] audit_seccomp+0x48/0x100 [ 95.454295][ T5666] ? __seccomp_filter+0x68c/0x10d0 [ 95.454350][ T5666] __seccomp_filter+0x69d/0x10d0 [ 95.454375][ T5666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 95.454482][ T5666] ? vfs_write+0x75e/0x8e0 [ 95.454511][ T5666] ? __rcu_read_unlock+0x4f/0x70 [ 95.454538][ T5666] ? __fget_files+0x184/0x1c0 [ 95.454563][ T5666] __secure_computing+0x82/0x150 [ 95.454586][ T5666] syscall_trace_enter+0xcf/0x1e0 [ 95.454680][ T5666] do_syscall_64+0xac/0x200 [ 95.454697][ T5666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 95.454729][ T5666] ? clear_bhb_loop+0x40/0x90 [ 95.454823][ T5666] ? clear_bhb_loop+0x40/0x90 [ 95.454856][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.454882][ T5666] RIP: 0033:0x7f956338e929 [ 95.454950][ T5666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.454972][ T5666] RSP: 002b:00007f95619f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 95.454995][ T5666] RAX: ffffffffffffffda RBX: 00007f95635b5fa0 RCX: 00007f956338e929 [ 95.455011][ T5666] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 95.455027][ T5666] RBP: 00007f95619f7090 R08: 0000000000000000 R09: 0000000000000000 [ 95.455116][ T5666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.455188][ T5666] R13: 0000000000000000 R14: 00007f95635b5fa0 R15: 00007ffdf30d55a8 [ 95.455210][ T5666] [ 95.683408][ T5660] wg2: entered promiscuous mode [ 95.688425][ T5660] wg2: entered allmulticast mode [ 95.694877][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.612'. [ 95.714530][ T5668] loop3: detected capacity change from 0 to 1024 [ 95.793143][ T5675] loop5: detected capacity change from 0 to 164 [ 95.874780][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.897653][ T5684] 9pnet_virtio: no channels available for device 127.0.0.1 [ 95.960034][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.021647][ T5686] lo speed is unknown, defaulting to 1000 [ 96.028860][ T5686] lo speed is unknown, defaulting to 1000 [ 96.190597][ T5699] netlink: 76 bytes leftover after parsing attributes in process `syz.3.620'. [ 96.199840][ T5699] FAULT_INJECTION: forcing a failure. [ 96.199840][ T5699] name failslab, interval 1, probability 0, space 0, times 0 [ 96.212592][ T5699] CPU: 0 UID: 0 PID: 5699 Comm: syz.3.620 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 96.212681][ T5699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.212696][ T5699] Call Trace: [ 96.212705][ T5699] [ 96.212714][ T5699] __dump_stack+0x1d/0x30 [ 96.212740][ T5699] dump_stack_lvl+0xe8/0x140 [ 96.212759][ T5699] dump_stack+0x15/0x1b [ 96.212828][ T5699] should_fail_ex+0x265/0x280 [ 96.212861][ T5699] should_failslab+0x8c/0xb0 [ 96.212918][ T5699] kmem_cache_alloc_noprof+0x50/0x310 [ 96.212946][ T5699] ? skb_clone+0x151/0x1f0 [ 96.212982][ T5699] skb_clone+0x151/0x1f0 [ 96.213139][ T5699] __netlink_deliver_tap+0x2c9/0x500 [ 96.213179][ T5699] netlink_sendskb+0x126/0x150 [ 96.213209][ T5699] netlink_unicast+0x28a/0x670 [ 96.213284][ T5699] netlink_ack+0x4c8/0x500 [ 96.213322][ T5699] netlink_rcv_skb+0x192/0x220 [ 96.213353][ T5699] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 96.213387][ T5699] xfrm_netlink_rcv+0x48/0x60 [ 96.213452][ T5699] netlink_unicast+0x59e/0x670 [ 96.213484][ T5699] netlink_sendmsg+0x58b/0x6b0 [ 96.213506][ T5699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.213596][ T5699] __sock_sendmsg+0x142/0x180 [ 96.213621][ T5699] ____sys_sendmsg+0x31e/0x4e0 [ 96.213761][ T5699] ___sys_sendmsg+0x17b/0x1d0 [ 96.213810][ T5699] __x64_sys_sendmsg+0xd4/0x160 [ 96.213929][ T5699] x64_sys_call+0x2999/0x2fb0 [ 96.213981][ T5699] do_syscall_64+0xd2/0x200 [ 96.214075][ T5699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.214102][ T5699] ? clear_bhb_loop+0x40/0x90 [ 96.214173][ T5699] ? clear_bhb_loop+0x40/0x90 [ 96.214195][ T5699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.214216][ T5699] RIP: 0033:0x7f9ab773e929 [ 96.214232][ T5699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.214258][ T5699] RSP: 002b:00007f9ab5da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.214277][ T5699] RAX: ffffffffffffffda RBX: 00007f9ab7965fa0 RCX: 00007f9ab773e929 [ 96.214290][ T5699] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 96.214310][ T5699] RBP: 00007f9ab5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.214322][ T5699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.214334][ T5699] R13: 0000000000000000 R14: 00007f9ab7965fa0 R15: 00007ffc99d8d358 [ 96.214353][ T5699] [ 96.224074][ T5696] loop1: detected capacity change from 0 to 512 [ 96.230318][ T5695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'. [ 96.284719][ T5703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 96.298868][ T5696] EXT4-fs (loop1): too many log groups per flexible block group [ 96.486768][ T5696] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 96.493941][ T5696] EXT4-fs (loop1): mount failed [ 96.529658][ T5708] loop4: detected capacity change from 0 to 512 [ 96.539484][ T5708] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 96.547852][ T5708] EXT4-fs (loop4): orphan cleanup on readonly fs [ 96.554699][ T5708] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.625: Failed to acquire dquot type 1 [ 96.568083][ T5714] loop3: detected capacity change from 0 to 164 [ 96.568884][ T5708] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.625: bg 0: block 40: padding at end of block bitmap is not set [ 96.592820][ T5708] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 96.602131][ T5708] EXT4-fs (loop4): 1 truncate cleaned up [ 96.609598][ T5708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.797428][ T5732] loop1: detected capacity change from 0 to 512 [ 96.816284][ T5731] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.035177][ T5732] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01d, mo2=0002] [ 97.043419][ T5732] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.112124][ T5732] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.631: iget: bad i_size value: 360287970189639690 [ 97.141229][ T5732] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.631: Bad quota inode: 15, type: 2 [ 97.152712][ T5732] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 97.172686][ T5752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.636'. [ 97.182652][ T5752] netlink: 20 bytes leftover after parsing attributes in process `syz.5.636'. [ 97.233304][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.357244][ T5756] FAULT_INJECTION: forcing a failure. [ 97.357244][ T5756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.370521][ T5756] CPU: 1 UID: 0 PID: 5756 Comm: syz.4.637 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 97.370548][ T5756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.370626][ T5756] Call Trace: [ 97.370633][ T5756] [ 97.370640][ T5756] __dump_stack+0x1d/0x30 [ 97.370661][ T5756] dump_stack_lvl+0xe8/0x140 [ 97.370741][ T5756] dump_stack+0x15/0x1b [ 97.370758][ T5756] should_fail_ex+0x265/0x280 [ 97.370798][ T5756] should_fail+0xb/0x20 [ 97.370831][ T5756] should_fail_usercopy+0x1a/0x20 [ 97.370932][ T5756] strncpy_from_user+0x25/0x230 [ 97.370964][ T5756] path_removexattrat+0x82/0x570 [ 97.371001][ T5756] __x64_sys_lremovexattr+0x3b/0x50 [ 97.371031][ T5756] x64_sys_call+0x52d/0x2fb0 [ 97.371132][ T5756] do_syscall_64+0xd2/0x200 [ 97.371228][ T5756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 97.371297][ T5756] ? clear_bhb_loop+0x40/0x90 [ 97.371317][ T5756] ? clear_bhb_loop+0x40/0x90 [ 97.371340][ T5756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.371367][ T5756] RIP: 0033:0x7ff2465de929 [ 97.371386][ T5756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.371445][ T5756] RSP: 002b:00007ff244c47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c6 [ 97.371466][ T5756] RAX: ffffffffffffffda RBX: 00007ff246805fa0 RCX: 00007ff2465de929 [ 97.371477][ T5756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 97.371488][ T5756] RBP: 00007ff244c47090 R08: 0000000000000000 R09: 0000000000000000 [ 97.371519][ T5756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.371534][ T5756] R13: 0000000000000000 R14: 00007ff246805fa0 R15: 00007fff42bdbfd8 [ 97.371558][ T5756] [ 97.557958][ T5755] loop5: detected capacity change from 0 to 164 [ 97.577396][ T5732] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 97.587835][ T5732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.706652][ T5763] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 97.793773][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.641'. [ 97.838907][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.848648][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.861501][ T5766] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 97.909564][ T5763] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 97.933875][ T5771] 9pnet_virtio: no channels available for device 127.0.0.1 [ 97.947307][ T5763] bond1 (unregistering): Released all slaves [ 97.970222][ T5773] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 98.072325][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 98.084561][ T5778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.646'. [ 98.097304][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 98.175200][ T5784] lo speed is unknown, defaulting to 1000 [ 98.181339][ T5784] lo speed is unknown, defaulting to 1000 [ 98.286182][ T5792] loop4: detected capacity change from 0 to 164 [ 98.717705][ T5810] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 98.807325][ T5814] loop4: detected capacity change from 0 to 2048 [ 99.021031][ T5817] loop1: detected capacity change from 0 to 1024 [ 99.055442][ T5817] EXT4-fs: Ignoring removed bh option [ 99.087897][ T5824] loop3: detected capacity change from 0 to 164 [ 99.123987][ T5814] EXT4-fs (loop4): failed to initialize system zone (-117) [ 99.131631][ T5814] EXT4-fs (loop4): mount failed [ 99.134370][ T5817] EXT4-fs (loop1): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.202546][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 99.202614][ T29] audit: type=1326 audit(1750708655.218:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.232541][ T29] audit: type=1326 audit(1750708655.218:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.256047][ T29] audit: type=1326 audit(1750708655.218:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.279633][ T29] audit: type=1326 audit(1750708655.218:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.303129][ T29] audit: type=1326 audit(1750708655.218:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.326774][ T29] audit: type=1326 audit(1750708655.218:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.350206][ T29] audit: type=1326 audit(1750708655.218:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.373654][ T29] audit: type=1326 audit(1750708655.218:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.397856][ T29] audit: type=1326 audit(1750708655.218:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.421347][ T29] audit: type=1326 audit(1750708655.218:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.3.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 99.959745][ T5848] FAULT_INJECTION: forcing a failure. [ 99.959745][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.972942][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz.2.668 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 99.973015][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.973031][ T5848] Call Trace: [ 99.973038][ T5848] [ 99.973048][ T5848] __dump_stack+0x1d/0x30 [ 99.973070][ T5848] dump_stack_lvl+0xe8/0x140 [ 99.973164][ T5848] dump_stack+0x15/0x1b [ 99.973183][ T5848] should_fail_ex+0x265/0x280 [ 99.973223][ T5848] should_fail+0xb/0x20 [ 99.973330][ T5848] should_fail_usercopy+0x1a/0x20 [ 99.973371][ T5848] _copy_from_user+0x1c/0xb0 [ 99.973462][ T5848] ___bpf_copy_key+0xa5/0x110 [ 99.973489][ T5848] map_update_elem+0x165/0x520 [ 99.973702][ T5848] __sys_bpf+0x5d7/0x790 [ 99.973820][ T5848] __x64_sys_bpf+0x41/0x50 [ 99.973855][ T5848] x64_sys_call+0x2478/0x2fb0 [ 99.973883][ T5848] do_syscall_64+0xd2/0x200 [ 99.973973][ T5848] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.974042][ T5848] ? clear_bhb_loop+0x40/0x90 [ 99.974069][ T5848] ? clear_bhb_loop+0x40/0x90 [ 99.974144][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.974172][ T5848] RIP: 0033:0x7f956338e929 [ 99.974225][ T5848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.974242][ T5848] RSP: 002b:00007f95619f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.974388][ T5848] RAX: ffffffffffffffda RBX: 00007f95635b5fa0 RCX: 00007f956338e929 [ 99.974400][ T5848] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 99.974412][ T5848] RBP: 00007f95619f7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.974423][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.974438][ T5848] R13: 0000000000000000 R14: 00007f95635b5fa0 R15: 00007ffdf30d55a8 [ 99.974462][ T5848] [ 100.301414][ T5851] 9pnet_virtio: no channels available for device 127.0.0.1 [ 100.373430][ T5854] netlink: '+}[@': attribute type 4 has an invalid length. [ 100.496184][ T5858] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 101.117093][ T3305] EXT4-fs (loop1): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 101.190441][ T5869] __nla_validate_parse: 10 callbacks suppressed [ 101.190509][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.674'. [ 101.215290][ T5869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.674'. [ 101.235035][ T5872] loop4: detected capacity change from 0 to 164 [ 101.320658][ T5883] loop5: detected capacity change from 0 to 1024 [ 101.346509][ T5883] EXT4-fs: Ignoring removed bh option [ 101.362982][ T5885] netlink: 10 bytes leftover after parsing attributes in process `syz.4.681'. [ 101.409055][ T5883] EXT4-fs (loop5): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.571685][ T5884] loop2: detected capacity change from 0 to 256 [ 101.581082][ T5898] FAULT_INJECTION: forcing a failure. [ 101.581082][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 101.593856][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.3.686 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 101.593881][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 101.593893][ T5898] Call Trace: [ 101.593899][ T5898] [ 101.593905][ T5898] __dump_stack+0x1d/0x30 [ 101.593924][ T5898] dump_stack_lvl+0xe8/0x140 [ 101.593946][ T5898] dump_stack+0x15/0x1b [ 101.593960][ T5898] should_fail_ex+0x265/0x280 [ 101.593989][ T5898] should_failslab+0x8c/0xb0 [ 101.594012][ T5898] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 101.594133][ T5898] ? v9fs_session_init+0x78/0xde0 [ 101.594157][ T5898] kstrdup+0x3e/0xd0 [ 101.594253][ T5898] v9fs_session_init+0x78/0xde0 [ 101.594275][ T5898] ? obj_cgroup_charge_account+0x122/0x1a0 [ 101.594303][ T5898] ? __rcu_read_unlock+0x4f/0x70 [ 101.594321][ T5898] ? should_fail_ex+0xdb/0x280 [ 101.594422][ T5898] ? v9fs_mount+0x51/0x590 [ 101.594446][ T5898] ? should_failslab+0x8c/0xb0 [ 101.594628][ T5898] ? __kmalloc_cache_noprof+0x189/0x320 [ 101.594673][ T5898] v9fs_mount+0x67/0x590 [ 101.594699][ T5898] ? __pfx_v9fs_mount+0x10/0x10 [ 101.594726][ T5898] legacy_get_tree+0x78/0xd0 [ 101.594907][ T5898] vfs_get_tree+0x54/0x1d0 [ 101.594983][ T5898] do_new_mount+0x207/0x680 [ 101.595016][ T5898] path_mount+0x4a4/0xb20 [ 101.595044][ T5898] ? user_path_at+0x109/0x130 [ 101.595125][ T5898] __se_sys_mount+0x28f/0x2e0 [ 101.595140][ T5898] ? fput+0x8f/0xc0 [ 101.595163][ T5898] __x64_sys_mount+0x67/0x80 [ 101.595179][ T5898] x64_sys_call+0xd36/0x2fb0 [ 101.595197][ T5898] do_syscall_64+0xd2/0x200 [ 101.595220][ T5898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 101.595279][ T5898] ? clear_bhb_loop+0x40/0x90 [ 101.595298][ T5898] ? clear_bhb_loop+0x40/0x90 [ 101.595318][ T5898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.595467][ T5898] RIP: 0033:0x7f9ab773e929 [ 101.595480][ T5898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.595496][ T5898] RSP: 002b:00007f9ab5da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.595575][ T5898] RAX: ffffffffffffffda RBX: 00007f9ab7965fa0 RCX: 00007f9ab773e929 [ 101.595586][ T5898] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 101.595657][ T5898] RBP: 00007f9ab5da7090 R08: 0000200000000240 R09: 0000000000000000 [ 101.595726][ T5898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.595749][ T5898] R13: 0000000000000000 R14: 00007f9ab7965fa0 R15: 00007ffc99d8d358 [ 101.595767][ T5898] [ 101.902675][ T5148] EXT4-fs (loop5): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 101.935121][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 101.946978][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 101.981370][ T5913] loop2: detected capacity change from 0 to 164 [ 102.010848][ T5915] FAULT_INJECTION: forcing a failure. [ 102.010848][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 102.023793][ T5915] CPU: 0 UID: 0 PID: 5915 Comm: syz.2.693 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 102.023820][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.023833][ T5915] Call Trace: [ 102.023838][ T5915] [ 102.023873][ T5915] __dump_stack+0x1d/0x30 [ 102.023904][ T5915] dump_stack_lvl+0xe8/0x140 [ 102.023922][ T5915] dump_stack+0x15/0x1b [ 102.023937][ T5915] should_fail_ex+0x265/0x280 [ 102.024007][ T5915] should_failslab+0x8c/0xb0 [ 102.024029][ T5915] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 102.024061][ T5915] ? __d_alloc+0x3d/0x350 [ 102.024092][ T5915] __d_alloc+0x3d/0x350 [ 102.024120][ T5915] ? from_vfsgid+0x70/0xa0 [ 102.024196][ T5915] d_alloc_pseudo+0x1e/0x80 [ 102.024220][ T5915] alloc_file_pseudo+0x71/0x160 [ 102.024326][ T5915] ? hugetlbfs_get_inode+0x267/0x370 [ 102.024361][ T5915] hugetlb_file_setup+0x298/0x3d0 [ 102.024399][ T5915] ksys_mmap_pgoff+0x157/0x310 [ 102.024431][ T5915] x64_sys_call+0x1602/0x2fb0 [ 102.024531][ T5915] do_syscall_64+0xd2/0x200 [ 102.024566][ T5915] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 102.024604][ T5915] ? clear_bhb_loop+0x40/0x90 [ 102.024638][ T5915] ? clear_bhb_loop+0x40/0x90 [ 102.024715][ T5915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.024736][ T5915] RIP: 0033:0x7f956338e929 [ 102.024750][ T5915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.024773][ T5915] RSP: 002b:00007f95619f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.024792][ T5915] RAX: ffffffffffffffda RBX: 00007f95635b5fa0 RCX: 00007f956338e929 [ 102.024803][ T5915] RDX: 0000000000000000 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 102.024819][ T5915] RBP: 00007f95619f7090 R08: ffffffffffffffff R09: 00000000d85fd000 [ 102.024835][ T5915] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 102.024851][ T5915] R13: 0000000000000000 R14: 00007f95635b5fa0 R15: 00007ffdf30d55a8 [ 102.024875][ T5915] [ 103.620350][ T5949] loop4: detected capacity change from 0 to 164 [ 103.647425][ T5954] loop1: detected capacity change from 0 to 128 [ 103.703546][ T5957] syz.3.706 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.919706][ T5972] wireguard0: entered promiscuous mode [ 103.925353][ T5972] wireguard0: entered allmulticast mode [ 104.593726][ T5982] FAULT_INJECTION: forcing a failure. [ 104.593726][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.606992][ T5982] CPU: 0 UID: 0 PID: 5982 Comm: syz.4.712 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 104.607019][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.607053][ T5982] Call Trace: [ 104.607059][ T5982] [ 104.607070][ T5982] __dump_stack+0x1d/0x30 [ 104.607096][ T5982] dump_stack_lvl+0xe8/0x140 [ 104.607122][ T5982] dump_stack+0x15/0x1b [ 104.607137][ T5982] should_fail_ex+0x265/0x280 [ 104.607168][ T5982] should_fail+0xb/0x20 [ 104.607276][ T5982] should_fail_usercopy+0x1a/0x20 [ 104.607317][ T5982] _copy_from_user+0x1c/0xb0 [ 104.607343][ T5982] sctp_getsockopt_active_key+0x87/0x3c0 [ 104.607418][ T5982] ? selinux_socket_getsockopt+0x175/0x1b0 [ 104.607469][ T5982] sctp_getsockopt+0x7fb/0xaa0 [ 104.607505][ T5982] sock_common_getsockopt+0x60/0x70 [ 104.607634][ T5982] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 104.607663][ T5982] do_sock_getsockopt+0x200/0x240 [ 104.607879][ T5982] __x64_sys_getsockopt+0x11e/0x1a0 [ 104.607930][ T5982] x64_sys_call+0x12aa/0x2fb0 [ 104.607957][ T5982] do_syscall_64+0xd2/0x200 [ 104.607980][ T5982] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.608078][ T5982] ? clear_bhb_loop+0x40/0x90 [ 104.608105][ T5982] ? clear_bhb_loop+0x40/0x90 [ 104.608200][ T5982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.608219][ T5982] RIP: 0033:0x7ff2465de929 [ 104.608296][ T5982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.608369][ T5982] RSP: 002b:00007ff244c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 104.608393][ T5982] RAX: ffffffffffffffda RBX: 00007ff246805fa0 RCX: 00007ff2465de929 [ 104.608409][ T5982] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 104.608421][ T5982] RBP: 00007ff244c47090 R08: 0000200000000300 R09: 0000000000000000 [ 104.608588][ T5982] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 104.608657][ T5982] R13: 0000000000000000 R14: 00007ff246805fa0 R15: 00007fff42bdbfd8 [ 104.608676][ T5982] [ 104.861870][ T5988] Cannot find set identified by id 0 to match [ 104.871377][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 104.883941][ T5988] bridge0: entered promiscuous mode [ 104.889444][ T5988] macvtap0: entered promiscuous mode [ 104.895103][ T5988] macvtap0: entered allmulticast mode [ 104.900557][ T5988] bridge0: entered allmulticast mode [ 104.900673][ T5987] loop1: detected capacity change from 0 to 512 [ 104.913181][ T5987] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.927172][ T5988] bridge0: left allmulticast mode [ 104.932424][ T5988] bridge0: left promiscuous mode [ 104.941295][ T5987] EXT4-fs (loop1): 1 truncate cleaned up [ 104.947932][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.962215][ T5984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.973839][ T5984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.993106][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.017439][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 105.017454][ T29] audit: type=1326 audit(1750708661.038:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.051491][ T29] audit: type=1326 audit(1750708661.068:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.110802][ T6000] can: request_module (can-proto-0) failed. [ 105.116052][ T29] audit: type=1326 audit(1750708661.098:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.119511][ T6000] netlink: 'syz.2.720': attribute type 29 has an invalid length. [ 105.140188][ T29] audit: type=1326 audit(1750708661.098:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.147920][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.720'. [ 105.171250][ T29] audit: type=1326 audit(1750708661.098:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.203543][ T29] audit: type=1326 audit(1750708661.098:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.226892][ T29] audit: type=1326 audit(1750708661.098:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.250662][ T29] audit: type=1326 audit(1750708661.098:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.254161][ T6002] loop2: detected capacity change from 0 to 8192 [ 105.273899][ T29] audit: type=1326 audit(1750708661.098:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.273939][ T29] audit: type=1326 audit(1750708661.098:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5994 comm="syz.4.719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 105.547249][ T6014] loop4: detected capacity change from 0 to 164 [ 105.574009][ T6015] loop1: detected capacity change from 0 to 1024 [ 105.620974][ T6015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.113238][ T6028] loop3: detected capacity change from 0 to 512 [ 106.141494][ T6028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.276222][ T6028] EXT4-fs (loop3): 1 truncate cleaned up [ 106.282638][ T6028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.393142][ T6031] Cannot find set identified by id 0 to match [ 106.410648][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.444245][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 106.566662][ T6031] bridge0: entered promiscuous mode [ 106.584593][ T6031] macvtap0: entered promiscuous mode [ 106.590101][ T6031] macvtap0: entered allmulticast mode [ 106.595551][ T6031] bridge0: entered allmulticast mode [ 106.631031][ T6032] bridge0: left allmulticast mode [ 106.636313][ T6032] bridge0: left promiscuous mode [ 106.883633][ T6039] bond0: (slave bridge0): Releasing backup interface [ 106.891784][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.899049][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.909638][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.949768][ T6042] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.731'. [ 106.964668][ T6039] bridge_slave_0: left allmulticast mode [ 106.970494][ T6039] bridge_slave_0: left promiscuous mode [ 106.976302][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.019381][ T6039] bridge_slave_1: left allmulticast mode [ 107.025148][ T6039] bridge_slave_1: left promiscuous mode [ 107.030944][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.048342][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.056952][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.070169][ T6039] bond0: (slave bond_slave_0): Releasing backup interface [ 107.089493][ T6039] bond0: (slave bond_slave_1): Releasing backup interface [ 107.137471][ T6039] team0: Port device team_slave_0 removed [ 107.167548][ T6039] team0: Port device team_slave_1 removed [ 107.174535][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.182123][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.192017][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.199624][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.218196][ T6057] loop5: detected capacity change from 0 to 164 [ 107.229052][ T6039] team0: Port device geneve1 removed [ 107.236160][ T6039] bond1: left allmulticast mode [ 107.241100][ T6039] bond1: left promiscuous mode [ 107.246218][ T6039] bridge0: port 3(bond1) entered disabled state [ 107.254556][ T23] lo speed is unknown, defaulting to 1000 [ 107.272833][ T6047] team0 (unregistering): Port device team_slave_0 removed [ 107.283924][ T6047] team0 (unregistering): Port device team_slave_1 removed [ 107.423980][ T6074] loop1: detected capacity change from 0 to 512 [ 107.431112][ T6074] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.443339][ T6074] EXT4-fs (loop1): 1 truncate cleaned up [ 107.450270][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.481327][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.501166][ T6079] Cannot find set identified by id 0 to match [ 107.511692][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 107.549292][ T6081] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 107.560749][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'. [ 107.576625][ T6081] bond1: entered promiscuous mode [ 107.581804][ T6081] bond1: entered allmulticast mode [ 107.587436][ T6081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.598820][ T6081] bond1 (unregistering): Released all slaves [ 107.676513][ T6084] loop4: detected capacity change from 0 to 1024 [ 107.759229][ T6084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.054685][ T6092] loop1: detected capacity change from 0 to 164 [ 108.102160][ T6096] loop1: detected capacity change from 0 to 1024 [ 108.109960][ T6096] EXT4-fs: Ignoring removed bh option [ 108.139741][ T6096] EXT4-fs (loop1): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.431495][ T6104] FAULT_INJECTION: forcing a failure. [ 108.431495][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 108.444200][ T6104] CPU: 1 UID: 0 PID: 6104 Comm: syz.1.752 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 108.444302][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.444319][ T6104] Call Trace: [ 108.444326][ T6104] [ 108.444336][ T6104] __dump_stack+0x1d/0x30 [ 108.444363][ T6104] dump_stack_lvl+0xe8/0x140 [ 108.444435][ T6104] dump_stack+0x15/0x1b [ 108.444456][ T6104] should_fail_ex+0x265/0x280 [ 108.444535][ T6104] should_failslab+0x8c/0xb0 [ 108.444561][ T6104] __kvmalloc_node_noprof+0x123/0x4e0 [ 108.444598][ T6104] ? vmemdup_user+0x26/0xd0 [ 108.444701][ T6104] ? should_fail_usercopy+0x1a/0x20 [ 108.444745][ T6104] vmemdup_user+0x26/0xd0 [ 108.444838][ T6104] path_setxattrat+0x1b6/0x310 [ 108.444878][ T6104] __x64_sys_setxattr+0x6e/0x90 [ 108.444902][ T6104] x64_sys_call+0x28a7/0x2fb0 [ 108.444971][ T6104] do_syscall_64+0xd2/0x200 [ 108.444994][ T6104] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.445087][ T6104] ? clear_bhb_loop+0x40/0x90 [ 108.445107][ T6104] ? clear_bhb_loop+0x40/0x90 [ 108.445160][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.445180][ T6104] RIP: 0033:0x7fc62f75e929 [ 108.445194][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.445292][ T6104] RSP: 002b:00007fc62dd85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 108.445317][ T6104] RAX: ffffffffffffffda RBX: 00007fc62f986160 RCX: 00007fc62f75e929 [ 108.445333][ T6104] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 108.445349][ T6104] RBP: 00007fc62dd85090 R08: 0000000000000000 R09: 0000000000000000 [ 108.445391][ T6104] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 108.445476][ T6104] R13: 0000000000000000 R14: 00007fc62f986160 R15: 00007ffc570ac738 [ 108.445505][ T6104] [ 108.928358][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.995396][ T3305] EXT4-fs (loop1): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 109.123636][ T6112] Cannot find set identified by id 0 to match [ 109.693675][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 109.706984][ T6117] bridge0: entered promiscuous mode [ 109.712329][ T6117] macvtap1: entered promiscuous mode [ 109.717897][ T6117] macvtap1: entered allmulticast mode [ 109.723298][ T6117] bridge0: entered allmulticast mode [ 109.733394][ T6117] bridge0: left allmulticast mode [ 109.738621][ T6117] bridge0: left promiscuous mode [ 109.769435][ T6118] Cannot find set identified by id 0 to match [ 110.047228][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 110.047249][ T29] audit: type=1326 audit(1750708665.978:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.076942][ T29] audit: type=1326 audit(1750708665.978:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.077155][ T6126] loop5: detected capacity change from 0 to 512 [ 110.100279][ T29] audit: type=1326 audit(1750708665.978:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.100317][ T29] audit: type=1326 audit(1750708665.978:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.131163][ T6126] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 110.161711][ T6126] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.172710][ T29] audit: type=1326 audit(1750708666.068:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.196168][ T29] audit: type=1326 audit(1750708666.068:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.219602][ T29] audit: type=1326 audit(1750708666.068:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.242893][ T29] audit: type=1326 audit(1750708666.068:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.266336][ T29] audit: type=1326 audit(1750708666.068:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.289728][ T29] audit: type=1326 audit(1750708666.068:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6121 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9ab773e929 code=0x7ffc0000 [ 110.379421][ T6126] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.761: Failed to acquire dquot type 1 [ 110.419738][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.763'. [ 110.447324][ T6126] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.761: bg 0: block 40: padding at end of block bitmap is not set [ 110.529428][ T6126] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 110.543610][ T6140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 110.576264][ T6126] EXT4-fs (loop5): 1 truncate cleaned up [ 110.700152][ T6145] siw: device registration error -23 [ 110.993395][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.018492][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.079872][ T6154] loop4: detected capacity change from 0 to 1024 [ 111.104088][ T6126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.139463][ T6154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.676343][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.687853][ T6166] Cannot find set identified by id 0 to match [ 111.779146][ T6173] xt_connbytes: Forcing CT accounting to be enabled [ 111.787134][ T6173] Cannot find set identified by id 0 to match [ 111.796361][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.774'. [ 111.810628][ T6173] bridge0: entered promiscuous mode [ 111.816097][ T6173] macvtap1: entered promiscuous mode [ 111.821590][ T6173] macvtap1: entered allmulticast mode [ 111.827115][ T6173] bridge0: entered allmulticast mode [ 112.057593][ T6175] bridge0: left allmulticast mode [ 112.062951][ T6175] bridge0: left promiscuous mode [ 112.130939][ T6180] loop3: detected capacity change from 0 to 164 [ 112.383964][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 112.416610][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 112.879945][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.224903][ T6204] loop1: detected capacity change from 0 to 512 [ 113.233090][ T6204] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 113.423975][ T6204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 113.481769][ T6207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.495697][ T6204] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.784: Failed to acquire dquot type 1 [ 113.529574][ T6207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.543128][ T6204] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.784: bg 0: block 40: padding at end of block bitmap is not set [ 113.622897][ T6211] Cannot find set identified by id 0 to match [ 113.630620][ T6204] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 113.656105][ T6204] EXT4-fs (loop1): 1 truncate cleaned up [ 113.665131][ T6216] Cannot find set identified by id 0 to match [ 113.671864][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.695485][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'. [ 113.709036][ T6216] bridge0: entered promiscuous mode [ 113.714338][ T6216] macvtap2: entered promiscuous mode [ 113.719873][ T6216] macvtap2: entered allmulticast mode [ 113.725347][ T6216] bridge0: entered allmulticast mode [ 113.754491][ T6218] bridge0: left allmulticast mode [ 113.759730][ T6218] bridge0: left promiscuous mode [ 113.911137][ T6224] loop4: detected capacity change from 0 to 164 [ 113.958919][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 114.069611][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 114.307144][ T6242] siw: device registration error -23 [ 114.364647][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.419387][ T6245] loop3: detected capacity change from 0 to 1024 [ 114.566624][ T6245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.885351][ T6259] Cannot find set identified by id 0 to match [ 114.942157][ T6263] Cannot find set identified by id 0 to match [ 114.976210][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.801'. [ 115.012619][ T6263] bridge0: entered promiscuous mode [ 115.024279][ T6263] macvtap0: entered promiscuous mode [ 115.029953][ T6263] macvtap0: entered allmulticast mode [ 115.035408][ T6263] bridge0: entered allmulticast mode [ 115.144940][ T6263] bridge0: left allmulticast mode [ 115.150154][ T6263] bridge0: left promiscuous mode [ 115.211514][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 115.365406][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 115.412149][ T6278] loop4: detected capacity change from 0 to 164 [ 115.646497][ T6283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.663208][ T6285] loop5: detected capacity change from 0 to 512 [ 115.691945][ T6283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.718508][ T6287] siw: device registration error -23 [ 115.737286][ T6285] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 115.765108][ T6285] EXT4-fs (loop5): orphan cleanup on readonly fs [ 115.776304][ T6285] __quota_error: 163 callbacks suppressed [ 115.776322][ T6285] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 115.793273][ T6285] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 115.803065][ T6285] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.807: Failed to acquire dquot type 1 [ 115.860794][ T6285] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.807: bg 0: block 40: padding at end of block bitmap is not set [ 115.895410][ T6285] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 115.915838][ T6285] EXT4-fs (loop5): 1 truncate cleaned up [ 115.983440][ T6285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.017587][ T29] audit: type=1326 audit(1750708672.038:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.041224][ T29] audit: type=1326 audit(1750708672.038:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.064605][ T29] audit: type=1326 audit(1750708672.038:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.088009][ T29] audit: type=1326 audit(1750708672.038:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.111399][ T29] audit: type=1326 audit(1750708672.038:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.134873][ T29] audit: type=1326 audit(1750708672.038:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.158279][ T29] audit: type=1326 audit(1750708672.038:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.181740][ T29] audit: type=1326 audit(1750708672.038:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6290 comm="syz.4.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 116.754183][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.993109][ T6304] Cannot find set identified by id 0 to match [ 117.051135][ T6308] Cannot find set identified by id 0 to match [ 117.073865][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 117.146399][ T6308] macvtap2: entered promiscuous mode [ 117.151743][ T6308] bridge0: entered promiscuous mode [ 117.157207][ T6308] macvtap2: entered allmulticast mode [ 117.162615][ T6308] bridge0: entered allmulticast mode [ 117.197016][ T6310] bridge0: left allmulticast mode [ 117.202164][ T6310] bridge0: left promiscuous mode [ 117.272175][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.284470][ T6315] loop3: detected capacity change from 0 to 512 [ 117.298677][ T6315] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 117.315590][ T6315] EXT4-fs (loop3): 1 truncate cleaned up [ 117.329508][ T6315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.358816][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.817'. [ 117.401574][ T6323] loop5: detected capacity change from 0 to 164 [ 117.410113][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.085735][ T6344] Cannot find set identified by id 0 to match [ 118.108520][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.133077][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.168799][ T6347] Cannot find set identified by id 0 to match [ 118.195447][ T6345] loop1: detected capacity change from 0 to 1024 [ 118.235411][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 118.251244][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.273188][ T6347] bridge0: entered promiscuous mode [ 118.278792][ T6347] macvtap1: entered promiscuous mode [ 118.284247][ T6347] macvtap1: entered allmulticast mode [ 118.289695][ T6347] bridge0: entered allmulticast mode [ 118.322302][ T6347] bridge0: left allmulticast mode [ 118.327670][ T6347] bridge0: left promiscuous mode [ 118.760711][ T6355] loop3: detected capacity change from 0 to 512 [ 118.805223][ T6355] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 118.820644][ T6355] EXT4-fs (loop3): orphan cleanup on readonly fs [ 118.836279][ T6355] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.828: Failed to acquire dquot type 1 [ 118.853490][ T6355] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.828: bg 0: block 40: padding at end of block bitmap is not set [ 118.885675][ T6355] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 118.904996][ T6355] EXT4-fs (loop3): 1 truncate cleaned up [ 118.918690][ T6355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.225646][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.247818][ T6360] loop2: detected capacity change from 0 to 512 [ 119.278761][ T6362] loop4: detected capacity change from 0 to 164 [ 119.326598][ T6360] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.344320][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.369142][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 119.369415][ T6360] EXT4-fs (loop2): 1 truncate cleaned up [ 119.398742][ T6360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.599556][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.759645][ T6387] loop2: detected capacity change from 0 to 1024 [ 119.818571][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.946946][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.005818][ T6394] Cannot find set identified by id 0 to match [ 120.070077][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 120.081678][ T6396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.093678][ T6396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.106992][ T6394] macvtap3: entered promiscuous mode [ 120.112366][ T6394] bridge0: entered promiscuous mode [ 120.117922][ T6394] macvtap3: entered allmulticast mode [ 120.123307][ T6394] bridge0: entered allmulticast mode [ 120.139669][ T6394] bridge0: left allmulticast mode [ 120.144874][ T6394] bridge0: left promiscuous mode [ 120.216955][ T6398] Cannot find set identified by id 0 to match [ 120.378530][ T6402] loop4: detected capacity change from 0 to 512 [ 120.387574][ T6402] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 120.397170][ T6402] EXT4-fs (loop4): orphan cleanup on readonly fs [ 120.403922][ T6402] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.843: Failed to acquire dquot type 1 [ 120.438705][ T6402] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.843: bg 0: block 40: padding at end of block bitmap is not set [ 120.483847][ T6402] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 120.499209][ T6409] loop3: detected capacity change from 0 to 164 [ 120.515543][ T6402] EXT4-fs (loop4): 1 truncate cleaned up [ 120.526172][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 120.591401][ T6402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.879771][ T6421] loop2: detected capacity change from 0 to 1024 [ 121.726117][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 121.726135][ T29] audit: type=1326 audit(1750708676.888:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.756076][ T29] audit: type=1326 audit(1750708676.888:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.779475][ T29] audit: type=1326 audit(1750708676.888:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.802834][ T29] audit: type=1326 audit(1750708676.888:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.826238][ T29] audit: type=1326 audit(1750708676.888:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.849692][ T29] audit: type=1326 audit(1750708676.888:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.873179][ T29] audit: type=1326 audit(1750708676.888:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.896557][ T29] audit: type=1326 audit(1750708676.888:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.905509][ T6423] siw: device registration error -23 [ 121.920110][ T29] audit: type=1326 audit(1750708676.888:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 121.949099][ T29] audit: type=1326 audit(1750708676.888:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6420 comm="syz.2.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 122.224363][ T6431] loop1: detected capacity change from 0 to 512 [ 122.233168][ T6431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.248743][ T6431] EXT4-fs (loop1): 1 truncate cleaned up [ 122.256202][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.271908][ T6421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.374542][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.398447][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.422450][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.779147][ T6445] Cannot find set identified by id 0 to match [ 122.779425][ T6440] loop3: detected capacity change from 0 to 164 [ 122.795158][ T6444] Cannot find set identified by id 0 to match [ 122.814043][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 122.825973][ T6444] bridge0: entered promiscuous mode [ 122.831332][ T6444] macvtap2: entered promiscuous mode [ 122.836815][ T6444] macvtap2: entered allmulticast mode [ 122.842242][ T6444] bridge0: entered allmulticast mode [ 122.851230][ T6444] bridge0: left allmulticast mode [ 122.856572][ T6444] bridge0: left promiscuous mode [ 122.879698][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.859'. [ 122.899655][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.908227][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.102798][ T6466] loop1: detected capacity change from 0 to 1024 [ 123.126558][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.273555][ T6473] loop5: detected capacity change from 0 to 512 [ 123.284116][ T6473] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 123.292712][ T6473] EXT4-fs (loop5): orphan cleanup on readonly fs [ 123.301714][ T6473] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.866: Failed to acquire dquot type 1 [ 123.317610][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.330117][ T6473] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.866: bg 0: block 40: padding at end of block bitmap is not set [ 123.366332][ T6473] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 123.398467][ T6473] EXT4-fs (loop5): 1 truncate cleaned up [ 123.418116][ T6473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.543843][ T6480] loop2: detected capacity change from 0 to 512 [ 123.619282][ T6480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.817099][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.836796][ T6480] EXT4-fs (loop2): 1 truncate cleaned up [ 124.149133][ T6480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.183002][ T6489] Cannot find set identified by id 0 to match [ 124.199833][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 124.676775][ T6489] bridge0: entered promiscuous mode [ 124.688631][ T6489] macvtap3: entered promiscuous mode [ 124.694160][ T6489] macvtap3: entered allmulticast mode [ 124.699599][ T6489] bridge0: entered allmulticast mode [ 124.711039][ T6492] loop5: detected capacity change from 0 to 164 [ 125.169934][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.208069][ T6490] bridge0: left allmulticast mode [ 125.213359][ T6490] bridge0: left promiscuous mode [ 125.734302][ T6495] Cannot find set identified by id 0 to match [ 126.190123][ T6500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.873'. [ 126.459176][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.467751][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.493426][ T6515] siw: device registration error -23 [ 126.565805][ T6518] loop3: detected capacity change from 0 to 1024 [ 126.586553][ T6518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.735954][ T6527] loop5: detected capacity change from 0 to 512 [ 126.743889][ T6527] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 126.752854][ T6527] EXT4-fs (loop5): orphan cleanup on readonly fs [ 126.760793][ T6527] __quota_error: 196 callbacks suppressed [ 126.760806][ T6527] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 126.775672][ T6527] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 126.785493][ T6527] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.882: Failed to acquire dquot type 1 [ 126.799976][ T6527] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.882: bg 0: block 40: padding at end of block bitmap is not set [ 126.814729][ T6527] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 126.824112][ T6527] EXT4-fs (loop5): 1 truncate cleaned up [ 126.830442][ T6527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.018257][ T6532] loop1: detected capacity change from 0 to 512 [ 127.025588][ T6532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.037302][ T6532] EXT4-fs (loop1): 1 truncate cleaned up [ 127.043377][ T6532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.069438][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.109810][ T6535] Cannot find set identified by id 0 to match [ 127.118310][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.130442][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 127.146262][ T6537] loop5: detected capacity change from 0 to 164 [ 127.227006][ T29] audit: type=1326 audit(1750708683.238:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.250525][ T29] audit: type=1326 audit(1750708683.238:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.273893][ T29] audit: type=1326 audit(1750708683.238:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.297395][ T29] audit: type=1326 audit(1750708683.238:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.320740][ T29] audit: type=1326 audit(1750708683.238:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.344183][ T29] audit: type=1326 audit(1750708683.238:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.367663][ T29] audit: type=1326 audit(1750708683.238:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.390998][ T29] audit: type=1326 audit(1750708683.238:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6545 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 127.435788][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.450241][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 127.490213][ T6553] Cannot find set identified by id 0 to match [ 128.464491][ T6562] siw: device registration error -23 [ 128.484262][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.516570][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.606993][ T6569] loop3: detected capacity change from 0 to 512 [ 129.777624][ T6569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.793176][ T6571] loop2: detected capacity change from 0 to 512 [ 129.806350][ T6569] EXT4-fs (loop3): 1 truncate cleaned up [ 129.812688][ T6569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.615341][ T6571] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 130.628040][ T6571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 130.634884][ T6571] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.896: Failed to acquire dquot type 1 [ 130.647897][ T6571] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.896: bg 0: block 40: padding at end of block bitmap is not set [ 130.767155][ T6571] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 130.778658][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.793572][ T6575] Cannot find set identified by id 0 to match [ 130.801423][ T6571] EXT4-fs (loop2): 1 truncate cleaned up [ 130.827601][ T6571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.845214][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 130.859205][ T6579] loop3: detected capacity change from 0 to 164 [ 131.125772][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.5.903'. [ 131.161599][ T6597] loop1: detected capacity change from 0 to 1024 [ 131.179235][ T6597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.348419][ T6604] Cannot find set identified by id 0 to match [ 131.390357][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.539763][ T6612] siw: device registration error -23 [ 131.746653][ T6616] loop4: detected capacity change from 0 to 512 [ 131.803361][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.821184][ T6616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.866858][ T6616] EXT4-fs (loop4): 1 truncate cleaned up [ 131.909105][ T6616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.936410][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.996777][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.032632][ T6625] Cannot find set identified by id 0 to match [ 132.044408][ T6624] loop3: detected capacity change from 0 to 164 [ 132.094314][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.913'. [ 132.113743][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.157427][ T6625] bridge0: entered promiscuous mode [ 132.193151][ T6625] macvtap2: entered promiscuous mode [ 132.198815][ T6625] macvtap2: entered allmulticast mode [ 132.204256][ T6625] bridge0: entered allmulticast mode [ 132.219251][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 132.219278][ T29] audit: type=1326 audit(1750708688.238:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.248916][ T29] audit: type=1326 audit(1750708688.238:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.272439][ T29] audit: type=1326 audit(1750708688.238:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.296012][ T29] audit: type=1326 audit(1750708688.238:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.319452][ T29] audit: type=1326 audit(1750708688.238:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.342855][ T29] audit: type=1326 audit(1750708688.238:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.366403][ T29] audit: type=1326 audit(1750708688.238:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.389782][ T29] audit: type=1326 audit(1750708688.238:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.413204][ T29] audit: type=1326 audit(1750708688.238:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 132.436558][ T29] audit: type=1326 audit(1750708688.238:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6628 comm="syz.4.914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2465de929 code=0x7ffc0000 [ 133.799056][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 134.471756][ T6642] Cannot find set identified by id 0 to match [ 134.555443][ T6631] bridge0: left allmulticast mode [ 134.560675][ T6631] bridge0: left promiscuous mode [ 134.987563][ T6647] loop3: detected capacity change from 0 to 512 [ 135.121114][ T6647] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 135.132116][ T6647] EXT4-fs (loop3): orphan cleanup on readonly fs [ 135.139985][ T6647] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.919: Failed to acquire dquot type 1 [ 135.152761][ T6647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.919: bg 0: block 40: padding at end of block bitmap is not set [ 135.276944][ T6657] loop2: detected capacity change from 0 to 1024 [ 135.533009][ T6647] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 135.544458][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.572500][ T6647] EXT4-fs (loop3): 1 truncate cleaned up [ 135.580868][ T6647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 135.869173][ T6671] loop4: detected capacity change from 0 to 512 [ 135.877721][ T6671] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.889766][ T6671] EXT4-fs (loop4): 1 truncate cleaned up [ 135.899009][ T6671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.913059][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.945141][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.961950][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.985715][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'. [ 135.998872][ T6682] Cannot find set identified by id 0 to match [ 136.008229][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 136.020713][ T6682] bridge0: entered promiscuous mode [ 136.027288][ T6682] macvtap3: entered promiscuous mode [ 136.032777][ T6682] macvtap3: entered allmulticast mode [ 136.038357][ T6682] bridge0: entered allmulticast mode [ 136.062031][ T6689] Cannot find set identified by id 0 to match [ 136.072527][ T6682] bridge0: left allmulticast mode [ 136.077913][ T6682] bridge0: left promiscuous mode [ 136.107056][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.120561][ T6692] loop5: detected capacity change from 0 to 164 [ 136.150175][ T6695] siw: device registration error -23 [ 136.152418][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.691034][ T6713] loop1: detected capacity change from 0 to 512 [ 137.708558][ T6713] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.336087][ T6718] loop5: detected capacity change from 0 to 1024 [ 138.424877][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 138.424895][ T29] audit: type=1326 audit(1750708694.348:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.454472][ T29] audit: type=1326 audit(1750708694.348:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.478044][ T29] audit: type=1326 audit(1750708694.348:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.501839][ T29] audit: type=1326 audit(1750708694.348:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.525275][ T29] audit: type=1326 audit(1750708694.348:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.548680][ T29] audit: type=1326 audit(1750708694.348:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.572027][ T29] audit: type=1326 audit(1750708694.348:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.595381][ T29] audit: type=1326 audit(1750708694.348:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.618816][ T29] audit: type=1326 audit(1750708694.348:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.642207][ T29] audit: type=1326 audit(1750708694.348:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6709 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59571de929 code=0x7ffc0000 [ 138.966068][ T6713] EXT4-fs (loop1): 1 truncate cleaned up [ 138.972317][ T6713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.993611][ T6721] loop3: detected capacity change from 0 to 512 [ 139.271528][ T6718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.303311][ T6721] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 139.321203][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.327941][ T6721] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.338613][ T6721] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.941: Failed to acquire dquot type 1 [ 139.354278][ T6721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.941: bg 0: block 40: padding at end of block bitmap is not set [ 139.356217][ T6729] Cannot find set identified by id 0 to match [ 139.377765][ T6721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 139.386917][ T6721] EXT4-fs (loop3): 1 truncate cleaned up [ 139.393972][ T6721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.409505][ T6730] loop2: detected capacity change from 0 to 164 [ 139.421048][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.944'. [ 139.433108][ T6729] bridge0: entered promiscuous mode [ 139.438447][ T6729] macvtap4: entered promiscuous mode [ 139.443945][ T6729] macvtap4: entered allmulticast mode [ 139.449439][ T6729] bridge0: entered allmulticast mode [ 139.461484][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.471727][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.943'. [ 139.481733][ T6729] bridge0: left allmulticast mode [ 139.487098][ T6729] bridge0: left promiscuous mode [ 139.509360][ T6737] Cannot find set identified by id 0 to match [ 139.543225][ T6739] siw: device registration error -23 [ 139.770678][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.784005][ T6758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.793916][ T6758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.823262][ T6761] loop3: detected capacity change from 0 to 512 [ 139.830424][ T6761] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.842215][ T6761] EXT4-fs (loop3): 1 truncate cleaned up [ 139.848278][ T6761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.936532][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.611445][ T6770] loop4: detected capacity change from 0 to 1024 [ 140.714663][ T6776] Cannot find set identified by id 0 to match [ 140.729469][ T6774] loop2: detected capacity change from 0 to 164 [ 141.535450][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 141.647009][ T6770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.907081][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 142.570227][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.594083][ T6791] Cannot find set identified by id 0 to match [ 142.975571][ T6796] siw: device registration error -23 [ 143.005849][ T6799] loop1: detected capacity change from 0 to 512 [ 143.079996][ T6799] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 143.089957][ T6799] EXT4-fs (loop1): orphan cleanup on readonly fs [ 143.096950][ T6799] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.965: Failed to acquire dquot type 1 [ 143.109795][ T6799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.965: bg 0: block 40: padding at end of block bitmap is not set [ 143.124470][ T6799] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 143.136530][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.150256][ T6799] EXT4-fs (loop1): 1 truncate cleaned up [ 143.156251][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.164636][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.471436][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.493864][ T6820] Cannot find set identified by id 0 to match [ 143.503158][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 143.553942][ T6826] loop1: detected capacity change from 0 to 164 [ 143.602136][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 143.636464][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 143.636479][ T29] audit: type=1326 audit(1750708699.658:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.666219][ T29] audit: type=1326 audit(1750708699.658:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.689905][ T29] audit: type=1326 audit(1750708699.658:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.713273][ T29] audit: type=1326 audit(1750708699.658:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.736648][ T29] audit: type=1326 audit(1750708699.658:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.760063][ T29] audit: type=1326 audit(1750708699.658:3826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.783571][ T29] audit: type=1326 audit(1750708699.658:3827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.807281][ T29] audit: type=1326 audit(1750708699.658:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.812776][ T6837] siw: device registration error -23 [ 143.830634][ T29] audit: type=1326 audit(1750708699.658:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.860055][ T29] audit: type=1326 audit(1750708699.658:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.1.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62f75e929 code=0x7ffc0000 [ 143.891496][ T6831] loop3: detected capacity change from 0 to 1024 [ 143.906573][ T6831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.101551][ T6845] Cannot find set identified by id 0 to match [ 144.930458][ T6854] loop2: detected capacity change from 0 to 512 [ 145.388521][ T6854] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.399868][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.410753][ T6854] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.421851][ T6854] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.982: Failed to acquire dquot type 1 [ 145.433982][ T6854] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.982: bg 0: block 40: padding at end of block bitmap is not set [ 145.940034][ T6857] Cannot find set identified by id 0 to match [ 145.949278][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 145.966201][ T6857] bridge0: entered promiscuous mode [ 146.099667][ T6857] macvtap4: entered promiscuous mode [ 146.105299][ T6857] macvtap4: entered allmulticast mode [ 146.110759][ T6857] bridge0: entered allmulticast mode [ 146.158129][ T6862] loop1: detected capacity change from 0 to 164 [ 146.174218][ T6854] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 146.237108][ T6860] bridge0: left allmulticast mode [ 146.242397][ T6860] bridge0: left promiscuous mode [ 146.250938][ T6854] EXT4-fs (loop2): 1 truncate cleaned up [ 146.309025][ T6867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.325057][ T6867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.345337][ T6864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 146.401214][ T6854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.458259][ T6875] vhci_hcd: default hub control req: 0014 v0002 i0000 l0 [ 146.492850][ T6875] loop3: detected capacity change from 0 to 2048 [ 146.534063][ T6875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.918260][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.936927][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.399656][ T6897] Cannot find set identified by id 0 to match [ 147.562477][ T6902] loop2: detected capacity change from 0 to 1024 [ 147.576718][ T6902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.774442][ T6910] loop1: detected capacity change from 0 to 164 [ 147.878451][ T6912] Cannot find set identified by id 0 to match [ 147.890632][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 147.917205][ T6912] macvtap4: entered promiscuous mode [ 147.922577][ T6912] bridge0: entered promiscuous mode [ 147.928035][ T6912] macvtap4: entered allmulticast mode [ 147.933458][ T6912] bridge0: entered allmulticast mode [ 147.939788][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1000'. [ 147.993760][ T6920] bridge0: left allmulticast mode [ 147.998931][ T6920] bridge0: left promiscuous mode [ 148.186540][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.200233][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.307333][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.328200][ T6930] loop1: detected capacity change from 0 to 512 [ 148.337518][ T6930] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.350461][ T6930] EXT4-fs (loop1): 1 truncate cleaned up [ 148.357148][ T6930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.411695][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.426319][ T6934] loop2: detected capacity change from 0 to 512 [ 148.449176][ T6934] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.465250][ T6934] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.473360][ T6939] Cannot find set identified by id 0 to match [ 148.586811][ T6934] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1005: Failed to acquire dquot type 1 [ 148.600483][ T6934] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1005: bg 0: block 40: padding at end of block bitmap is not set [ 148.616303][ T6934] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 148.625506][ T6934] EXT4-fs (loop2): 1 truncate cleaned up [ 149.159965][ T6934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.486893][ T6952] loop5: detected capacity change from 0 to 164 [ 149.603393][ T6959] Cannot find set identified by id 0 to match [ 149.627166][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1013'. [ 149.640029][ T6959] bridge0: entered promiscuous mode [ 149.646893][ T6959] macvtap5: entered promiscuous mode [ 149.652431][ T6959] macvtap5: entered allmulticast mode [ 149.657947][ T6959] bridge0: entered allmulticast mode [ 149.670490][ T6959] bridge0: left allmulticast mode [ 149.675794][ T6959] bridge0: left promiscuous mode [ 149.738174][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.767141][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1014'. [ 149.945626][ T6966] loop2: detected capacity change from 0 to 1024 [ 149.955231][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 149.955249][ T29] audit: type=1326 audit(1750708705.958:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 149.984937][ T29] audit: type=1326 audit(1750708705.958:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.008428][ T29] audit: type=1326 audit(1750708705.958:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.031833][ T29] audit: type=1326 audit(1750708705.958:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.055278][ T29] audit: type=1326 audit(1750708705.958:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.078815][ T29] audit: type=1326 audit(1750708705.958:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.102317][ T29] audit: type=1326 audit(1750708705.958:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.125736][ T29] audit: type=1326 audit(1750708705.958:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.149193][ T29] audit: type=1326 audit(1750708705.958:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.172658][ T29] audit: type=1326 audit(1750708705.958:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956338e929 code=0x7ffc0000 [ 150.539262][ T6984] Cannot find set identified by id 0 to match [ 150.554351][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.567272][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.580180][ T6966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.698699][ T6996] Cannot find set identified by id 0 to match [ 150.712392][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 150.797632][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.844454][ T6996] macvtap5: entered promiscuous mode [ 150.849995][ T6996] bridge0: entered promiscuous mode [ 150.855426][ T6996] macvtap5: entered allmulticast mode [ 150.860825][ T6996] bridge0: entered allmulticast mode [ 150.887775][ T6999] loop2: detected capacity change from 0 to 164 [ 150.957194][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1027'. [ 150.971688][ T7000] bridge0: left allmulticast mode [ 150.976971][ T7000] bridge0: left promiscuous mode [ 152.049096][ T7030] loop5: detected capacity change from 0 to 1024 [ 152.268689][ T7030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.309231][ T7032] loop4: detected capacity change from 0 to 164 [ 152.367804][ T7036] Cannot find set identified by id 0 to match [ 152.386573][ T7026] ================================================================== [ 152.389704][ T7039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.394727][ T7026] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 152.394767][ T7026] [ 152.394773][ T7026] write to 0xffff8881021b4308 of 4 bytes by task 7032 on cpu 0: [ 152.403653][ T7039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.410826][ T7026] __bpf_get_stackid+0x76b/0x800 [ 152.433498][ T7026] bpf_get_stackid+0xee/0x120 [ 152.438198][ T7026] bpf_get_stackid_raw_tp+0xf6/0x120 [ 152.443505][ T7026] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 152.448979][ T7026] bpf_trace_run2+0x104/0x1c0 [ 152.453697][ T7026] __traceiter_kfree+0x2e/0x50 [ 152.458476][ T7026] kfree+0x27b/0x320 [ 152.462418][ T7026] genl_family_rcv_msg_doit+0x17f/0x1b0 [ 152.467986][ T7026] genl_rcv_msg+0x422/0x460 [ 152.472510][ T7026] netlink_rcv_skb+0x120/0x220 [ 152.477300][ T7026] genl_rcv+0x28/0x40 [ 152.481300][ T7026] netlink_unicast+0x59e/0x670 [ 152.486089][ T7026] netlink_sendmsg+0x58b/0x6b0 [ 152.490874][ T7026] __sock_sendmsg+0x142/0x180 [ 152.495596][ T7026] __sys_sendto+0x268/0x330 [ 152.500218][ T7026] __x64_sys_sendto+0x76/0x90 [ 152.504919][ T7026] x64_sys_call+0x2eb6/0x2fb0 [ 152.509642][ T7026] do_syscall_64+0xd2/0x200 [ 152.514158][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.520067][ T7026] [ 152.522402][ T7026] read to 0xffff8881021b4308 of 4 bytes by task 7026 on cpu 1: [ 152.529959][ T7026] __bpf_get_stackid+0x287/0x800 [ 152.534934][ T7026] bpf_get_stackid+0xee/0x120 [ 152.539633][ T7026] bpf_get_stackid_raw_tp+0xf6/0x120 [ 152.544940][ T7026] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 152.550505][ T7026] bpf_trace_run2+0x104/0x1c0 [ 152.555210][ T7026] __traceiter_kfree+0x2e/0x50 [ 152.560093][ T7026] kfree+0x27b/0x320 [ 152.564014][ T7026] ___sys_recvmsg+0x135/0x370 [ 152.568708][ T7026] do_recvmmsg+0x1ef/0x540 [ 152.573136][ T7026] __x64_sys_recvmmsg+0xe5/0x170 [ 152.578086][ T7026] x64_sys_call+0x1c6a/0x2fb0 [ 152.582779][ T7026] do_syscall_64+0xd2/0x200 [ 152.587296][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.593212][ T7026] [ 152.595546][ T7026] value changed: 0x78477b0d -> 0x932b7988 [ 152.601274][ T7026] [ 152.603622][ T7026] Reported by Kernel Concurrency Sanitizer on: [ 152.609784][ T7026] CPU: 1 UID: 0 PID: 7026 Comm: syz.1.1034 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(voluntary) [ 152.620499][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.630606][ T7026] ================================================================== [ 152.722795][ T5148] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.