last executing test programs: 8m47.302162858s ago: executing program 2 (id=993): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff7fffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) 8m47.245900229s ago: executing program 2 (id=995): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m47.243897689s ago: executing program 2 (id=996): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 8m47.22444526s ago: executing program 2 (id=997): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0, 0x1000000}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000080), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xfb, 0xffffffff, 0x8, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x7, 0xb61}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000640)={'gre0\x00', 0x0, 0x8000, 0x40, 0x2, 0x5, {{0x21, 0x4, 0x1, 0x7, 0x84, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, {[@end, @rr={0x7, 0x27, 0xb9, [@remote, @multicast2, @rand_addr=0x64010100, @empty, @loopback, @local, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x10}]}, @noop, @ssrr={0x89, 0x1b, 0x5e, [@empty, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @empty]}, @generic={0x94, 0x2}, @cipso={0x86, 0xa, 0x0, [{0x1, 0x4, "7eba"}]}, @lsrr={0x83, 0x1b, 0xa7, [@local, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r4, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip_vti0\x00', &(0x7f0000000900)={'gretap0\x00', 0x0, 0x40, 0x8000, 0x7fffffff, 0x0, {{0x1a, 0x4, 0x0, 0x1a, 0x68, 0x64, 0x0, 0xda, 0x29, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0xf8, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@private=0xa010102, 0x3}]}, @end, @noop, @timestamp_addr={0x44, 0x24, 0xfa, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@local, 0x9}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @lsrr={0x83, 0x17, 0x43, [@broadcast, @broadcast, @local, @loopback, @loopback]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a40)={0x100, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001800de26a9bdcad8b1a81b000200000000000009000000000600150002000000100016800c0001000000000000000000"], 0x34}}, 0x0) r16 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_pidfd_open(r16, 0x0) fcntl$setownex(r13, 0xf, &(0x7f0000000000)={0x0, r16}) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000305000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000080014"], 0x44}}, 0x0) 8m46.822344196s ago: executing program 2 (id=1000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffdfffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 8m46.499886471s ago: executing program 2 (id=1007): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 8m46.457537822s ago: executing program 32 (id=1007): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 7m3.358335309s ago: executing program 3 (id=2436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) 7m3.28988827s ago: executing program 3 (id=2437): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ftruncate(0xffffffffffffffff, 0x1) 7m3.26244768s ago: executing program 3 (id=2439): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(&(0x7f0000000280)='$\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40, &(0x7f0000000340)={[{'\x00'}, {}, {'].)*-$,./.@'}, {'.]\xda'}, {'\x00'}, {}], [{@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x1, 0x30, 0x35, 0x35, 0x61, 0x34, 0x66], 0x2d, [0x33, 0x38, 0x36, 0x32], 0x2d, [0x63, 0x0, 0x65, 0x36], 0x2d, [0x30, 0x5, 0x33, 0x62], 0x2d, [0x39, 0x23, 0x62, 0x65, 0x64, 0x65, 0x65, 0x61]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@audit}]}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa0502) socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) syz_usb_disconnect(r2) sendmsg$nl_route_sched(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}}, 0x0) 7m2.524636412s ago: executing program 3 (id=2457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42d82, 0x81) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = syz_clone(0xfe97b7ccd87ee09d, &(0x7f0000000040), 0x0, &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="d344") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f00000002c0)='./file1\x00', 0x141242, 0x180) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0xfdef, 0xfecc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x4, @perf_bp={0x0, 0x8}, 0x118, 0xb2, 0x1, 0x6, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x8280, 0x0, 0x0, 0x0, 0x0, 0x0) 7m2.322422356s ago: executing program 3 (id=2459): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2275, &(0x7f00000018c0)) 7m2.050392699s ago: executing program 3 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x331, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) 7m2.050210299s ago: executing program 33 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x331, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) 3.454268075s ago: executing program 1 (id=8865): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) pidfd_send_signal(r0, 0x17, 0x0, 0x0) 3.377669686s ago: executing program 1 (id=8867): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.285533627s ago: executing program 1 (id=8869): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 3.165548679s ago: executing program 1 (id=8870): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x250b, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2}, 0x0, 0x48080}) syz_io_uring_setup(0x3c00, &(0x7f00000005c0)={0x0, 0x8ecf, 0x1000, 0x1, 0x2ef}, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x1000000000000000, 0x0, 0x0) 2.814004575s ago: executing program 1 (id=8873): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18a50a0000000000000000000700000095000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[r1], &(0x7f0000000740)=[{0x1, 0x1, 0x8, 0x2}, {0x5, 0x3, 0x0, 0xc}, {0x3, 0x4, 0xc, 0x3}, {0x4, 0x2, 0xd}, {0x4, 0x4, 0x7, 0xc}], 0x10, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r0, @ANYRES8=r1], &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0xfffffffc, 0x5e, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYRES64], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r5}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r10}, 0x10) pipe2$9p(&(0x7f0000000300), 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000540)=0x2, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r8, @ANYRESHEX=0x0, @ANYBLOB="1edf8759c2666c6023b9e0"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r13}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4d7, &(0x7f0000001480)="$eJzs3d9rW9cdAPDvle3YSZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX/AYOwX61Of+lLocymU/AmlEGjfSyktoU3Shz60VZF01aSO/AtbVmJ9PnB8z/2h+/0em3uso3PRDaBjnY2I8YjoiogLETGQbs+kJdbrpXrc40d3p6oliUrl5qdJJOm2xrmSdHk8fVlfRPzpDxF/TZ6PW1pdm58sFPLL6XquvLCUK62uXZxbmJzNz+YXx0dHroxdHbs8Nrxvbb32u4/+84/Xfn/t7V/e/mDik/N/q6bVn+57th07sb7D4+pN76n9Lhq6I2J5N8FeYF1pe3ranQgAADtSfY///Yj4aUQ8+X+7swEAAABaofKb/vgyiagAAAAAh1amdg9sksmm9wL0RyaTzdbv4f1hHMsUiqXyL2aKK4vT9XtlB6MnMzNXyA+n9woPRk9SXR+p1Z+uX9qwPhoRJyPiXwNHa+vZqWJhut0ffgAAAECHOL5h/P/5QH38DwAAABwyg+1OAAAAAGg5438AAAA4/DYd/yfdB5sIAAAA0Ap/vH69WiqN519P31pdmS/eujidL81nF1amslPF5aXsbLE4W/vOvoXtzlcoFpd+FYsrd3LlfKmcK62uTSwUVxbLE7Xnek/kPScaAAAADt7Jn9x/P4mI9V8frZWqI+m+HYzVx1ubHdBKmd0dnrQqD+DgdbU7AaBt3OALnct8PLDNwP7fG9Z3+bEBAADwIhj60Z7m/80HwkvMQB46l/l/6Fzm/6Fzmf+HDte7/SF9m+14Z59zAQAAWqa/VpJMNp0L7I9MJpuNOFF7LEBPMjNXyA9HxPci4r2Bnt7q+ki7kwYAAAAAAAAAAAAAAAAAAAAAAACAl0ylkkQFAAAAONQiMh8n6YP8hwbO9W/8fOBI8sVAbRkRt1+5+d87k+Xy8kh1+2ffbi//L91+qbEFAAAAaKfGOL0xjgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/fT40d2pRjnIuA9/GxGDzeJ3R19t2ffmQEQce5JE9zOvSyKiax/ir9+LiFPN4ifVtGIwzWJj/ExEHG1z/OP7EB862f1q/zNevf56Nlx/mThbWza//rrTslcPz27W/2Ua/V+tn2vW/53Y+tR9jcrpB2/kNo1/L+J0d/P+pxE/2WP/+5c/r61ttq/yasTQNv9/qrFy5YWlXGl17eLcwuRsfja/ODo6cmXs6tjlseHczFwhn/5sGuOfP37r663af6xp/Hr/u1X7zz1/ut5mMb56cOfRD7aIf/5nzf/+p7aIX/3d/zz9P1DdP9Sor9frzzrz+rtntmr/9Cbt3+7vf36zk25w4cbfP9zhoQDAASitrs1PFgr55ZejElF/V/6i5KOispdKV8tD3Egv9F2/vL39EgAAsP+evulvdyYAAAAAAAAAAAAAAAAAAADQuVr+PWe93/1mgb72NRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEvfBAAA///DTM7p") 2.558735909s ago: executing program 4 (id=8876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0xd2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x300, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x9, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x8, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x7}, {0x0, 0x1000000}, {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xc}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x2, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x7ffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {0x0, 0xa11b5f369cf453a6}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.449204731s ago: executing program 1 (id=8879): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c000102000000000000000002000009", @ANYRES32=r3, @ANYBLOB="000000000a0001"], 0x30}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x5d) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 1.687135533s ago: executing program 0 (id=8893): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4, 0x88d4) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_open_dev$mouse(&(0x7f0000000240), 0x100, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000015000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 1.593917614s ago: executing program 0 (id=8895): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0xf0, 0x3) 1.593290845s ago: executing program 4 (id=8896): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xfff}, {0x3, 0x1, 0x332e, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5845045c8dc2b4ba}, 0xc, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x78, 0x14, 0x100, 0x70bd2c, 0x25dfdbfd, {0xa, 0x1f, 0x0, 0xc8, r3}, [@IFA_TARGET_NETNSID={0x8}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @local}, @IFA_TARGET_NETNSID={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0xfb, 0x7, 0x9, 0xfc0}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c000}, 0x44000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0xa, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xcc5d}}, &(0x7f0000000300)='GPL\x00', 0xd, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(r5, 0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004"], 0x48}}, 0x40000) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x20000080) 1.519059586s ago: executing program 0 (id=8897): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r3], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_get$pid(0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.21549187s ago: executing program 5 (id=8902): socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 1.19894647s ago: executing program 0 (id=8903): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/148, 0x94}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f0000000540)=""/3, 0x3}], 0x3) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYBLOB="2e9fcbe5d3555d1a6fa3f7ba78abdf5dd8750318928dd67f6073d891f7228b9b8234397b116af1703a7a93e9c19d806bd5bebbcc9949a1e9ff2f5a20600e90c9cd6401d1a3dbf35034a497ce5c0dad1bf6fd7ab77b0ccecdfc426c88ce545817563a5fef21a6fcac84a961856d788a0d11859fc6b9c8b648ef52ef43c873b1961b1e3eccaf2797ba9afb29977bdf7db6ac", @ANYRESHEX=r0, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="580000000101010400000000000000000a00000a4400028006000340000300002c000180140003000000000000000000000000000000000014000400000000000000000000000000000000010c000280d6216b9184"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 1.096989482s ago: executing program 4 (id=8904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000806000000000000212b00000cbadd72f19f308514eb8057055e8ded9b47dea0e052a92fd40a83010a106a9bec4e3c03ec208681349a71aa0cc29234aa34037a6e6496a51046069fa24697eaba7897f678821a1a9226797db8f969e71a52", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x101, 0x0, 0x9, 0xffffffff}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x803e10, 0xffff6156, 0x7}}]}}}]}, 0x60}}, 0x0) 1.096345932s ago: executing program 5 (id=8905): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000002500)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}, 0x0}, {@nouid32}, {@noload}, {@nodiscard}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@bh}, {@dax_never}, {@resgid}], [{@audit}, {@subj_user={'subj_user', 0x3d, 'audit'}}], 0x2c}, 0xa, 0x525, &(0x7f0000000480)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x408) 1.030470533s ago: executing program 4 (id=8906): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4, 0x88d4) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_open_dev$mouse(&(0x7f0000000240), 0x100, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000015000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 998.903044ms ago: executing program 6 (id=8907): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1, 0xf0, 0x3) 914.589455ms ago: executing program 4 (id=8908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) mount$nfs(&(0x7f0000000280)='$\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x40, &(0x7f0000000340)={[{'\x00'}, {}, {'].)*-$,./.@'}, {'.]\xda'}, {'\x00'}, {}], [{@smackfshat={'smackfshat', 0x3d, '/dev/input/event#\x00'}}, {@dont_measure}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x1, 0x30, 0x35, 0x35, 0x61, 0x34, 0x66], 0x2d, [0x33, 0x38, 0x36, 0x32], 0x2d, [0x63, 0x0, 0x65, 0x36], 0x2d, [0x30, 0x5, 0x33, 0x62], 0x2d, [0x39, 0x23, 0x62, 0x65, 0x64, 0x65, 0x65, 0x61]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@audit}]}) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x90}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0xc, 0xd, 0xc4, 0x0}) sendto(r5, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001040)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xcc}}, 0x0) 907.515575ms ago: executing program 6 (id=8909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) truncate(&(0x7f00000001c0)='./file0\x00', 0x67) r1 = add_key$keyring(&(0x7f0000000580), 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x600804, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x52) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000e00)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r4, @ANYRES8=0x0, @ANYBLOB="fc9a4f554c33fb8322ee8b140a65b18f39263094bf0c89"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x0, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70400000800000002000000950000009500000000000000bc3f892195195876bd656070fe6cbe9358af9665ce924c46469371ce52bfc07b973ae8f947683d21cf4abf66c413b2f9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r9, 0x80047453, 0x0) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r10, 0xc0481273, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000e80)="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", &(0x7f00000003c0)=""/8, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd33) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000003140700000000000000df250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 814.458546ms ago: executing program 5 (id=8910): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0x44, 0x32, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_enter(r1, 0x6f40, 0xdf12, 0x60, &(0x7f00000000c0)={[0x558e]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8004, &(0x7f00000003c0)={[{@discard}, {@usrjquota}, {@dax_inode}], [{@smackfsroot={'smackfsroot', 0x3d, '\r\x00,]'}}, {@smackfsroot={'smackfsroot', 0x3d, 'dax=inode'}}]}, 0x0, 0x7cb, &(0x7f0000001500)="$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") 748.007138ms ago: executing program 6 (id=8911): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 732.793038ms ago: executing program 5 (id=8912): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60"], 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81000000000000"], 0x30}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf8a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffc, 0x9b, 0xd8, @buffer={0x0, 0x25, &(0x7f0000000000)=""/37}, &(0x7f0000000240)="1bfc9e4e3c73ec0adf4fe4186ef59920000f91f98df6056aada26e5767a0ef7b68ddbdd1a6d4747f196a063a2c4ebbd8908698c189f76211c02240125743532e8ddbb718175467e275daf75fa7c193653108c5624fbcaa27e4be6240c2aba37cac6ea0fc1243332a5779341cbcc676ab6e949178095bb79b71dc7e445fe2daf51b811e941484905cc4cd5757c1553357b096ef4c501dd595d61004", &(0x7f0000000180)=""/91, 0x8, 0x0, 0x3, &(0x7f0000000040)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) time(0x0) connect$unix(r2, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00') socket$inet6(0xa, 0x2, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) pidfd_send_signal(r6, 0x17, 0x0, 0x0) 701.630059ms ago: executing program 6 (id=8913): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) readahead(0xffffffffffffffff, 0xfff, 0xc7c4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) syz_read_part_table(0x5f7, &(0x7f0000001bc0)="$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") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 510.656532ms ago: executing program 6 (id=8914): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) readahead(0xffffffffffffffff, 0xfff, 0xc7c4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) syz_read_part_table(0x5f7, &(0x7f0000001bc0)="$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") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) 423.997263ms ago: executing program 5 (id=8915): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000240)={0x5, 0x7}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) fallocate(r0, 0x10, 0x1000001, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x840) write$sndseq(r4, &(0x7f0000000540)=[{0x39, 0xab, 0x2, 0x73, @time={0x5eb, 0xffff}, {0xa7, 0x6}, {0x7, 0x4}, @queue={0xd8, {0x6, 0x3}}}], 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r5, 0x10, 0x4000, 0x4000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000240)={[{@grpjquota}, {@lazytime}, {@barrier}, {@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@grpquota}], [{@seclabel}]}, 0x3, 0x446, &(0x7f0000000d40)="$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") r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0x1}) 251.776426ms ago: executing program 5 (id=8916): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r3], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_get$pid(0x2, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000000c0)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112920000000000bf200000000000009500000000000000"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 250.623256ms ago: executing program 6 (id=8917): syz_open_dev$usbfs(0x0, 0x204, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) 235.958696ms ago: executing program 0 (id=8918): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4, 0x88d4) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) syz_open_dev$mouse(&(0x7f0000000240), 0x100, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 176.813877ms ago: executing program 0 (id=8919): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000800)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}], [{@permit_directio}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@smackfsdef}, {@smackfsroot={'smackfsroot', 0x3d, '^@\x8e\xdb\x19('}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',[[$}*:'}}, {@appraise_type}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='.\x02\x00') ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)=0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESOCT=0x0, @ANYRES32=r3], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) ioprio_get$pid(0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 0s ago: executing program 4 (id=8920): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x5}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@rnullb, 0x0, &(0x7f0000000200)='./file1/file3\x00') kernel console output (not intermixed with test programs): ng): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.506961][T27804] loop6: detected capacity change from 0 to 512 [ 609.515911][T27802] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.536456][T27804] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.550974][T27804] ext4 filesystem being mounted at /532/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 609.574637][T27802] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.624760][T27802] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.884253][T27811] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.944884][T27815] loop5: detected capacity change from 0 to 512 [ 609.977099][T27815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.998144][T27811] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.023757][T27815] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.053012][T27821] program syz.4.8356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.069154][T27821] netlink: 'syz.4.8356': attribute type 10 has an invalid length. [ 610.082723][T27811] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.151898][T27802] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.165962][T27802] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.181319][T27811] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.206257][T27802] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.220585][T27802] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.281253][T19604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.290602][T27811] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.303896][T27811] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.318515][T27828] loop6: detected capacity change from 0 to 512 [ 610.328648][T27811] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.338365][T27829] __nla_validate_parse: 18 callbacks suppressed [ 610.338379][T27829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8357'. [ 610.339307][T27828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 610.369664][T27811] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.380209][T27828] EXT4-fs (loop6): 1 truncate cleaned up [ 610.386471][T27828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.411350][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.435667][T19604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.515149][T27836] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.8361'. [ 610.525045][T27836] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8361'. [ 610.837030][T27846] Invalid ELF header magic: != ELF [ 610.997552][T27849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8365'. [ 611.067790][T27856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8368'. [ 611.094014][T27856] loop4: detected capacity change from 0 to 1024 [ 611.101278][T27856] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 611.112269][T27856] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 611.124002][T27856] JBD2: no valid journal superblock found [ 611.129515][T27853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8367'. [ 611.129911][T27856] EXT4-fs (loop4): Could not load journal inode [ 611.205357][T27861] loop5: detected capacity change from 0 to 128 [ 611.285252][T27866] loop5: detected capacity change from 0 to 512 [ 611.294252][T27866] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 611.321165][T27866] EXT4-fs (loop5): 1 truncate cleaned up [ 611.330680][T27866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.347065][T27871] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8372'. [ 611.384945][T27873] loop6: detected capacity change from 0 to 512 [ 611.388132][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.394543][T27873] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 611.454410][T27880] netlink: 112 bytes leftover after parsing attributes in process `syz.6.8378'. [ 611.469084][T27878] program syz.5.8376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.493224][T27878] netlink: 'syz.5.8376': attribute type 10 has an invalid length. [ 611.516181][T27878] bond0: (slave dummy0): Releasing backup interface [ 611.526509][T27878] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 611.535428][T27878] team0: Failed to send options change via netlink (err -105) [ 611.543113][T27878] team0: Port device dummy0 added [ 611.592134][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8381'. [ 611.612170][T27893] loop5: detected capacity change from 0 to 1024 [ 611.619417][T27893] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 611.630405][T27893] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 611.643476][T27893] JBD2: no valid journal superblock found [ 611.649328][T27893] EXT4-fs (loop5): Could not load journal inode [ 611.687314][T27883] chnl_net:caif_netlink_parms(): no params data found [ 611.724818][T27883] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.732051][T27883] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.740093][T27883] bridge_slave_0: entered allmulticast mode [ 611.746724][T27883] bridge_slave_0: entered promiscuous mode [ 611.753943][T27883] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.761168][T27883] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.768544][T27883] bridge_slave_1: entered allmulticast mode [ 611.775804][T27883] bridge_slave_1: entered promiscuous mode [ 611.793132][T27909] loop5: detected capacity change from 0 to 2048 [ 611.801823][T27883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.812360][T27883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.839379][T27883] team0: Port device team_slave_0 added [ 611.846094][T27883] team0: Port device team_slave_1 added [ 611.870204][T27883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.877326][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.904157][T27883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.915952][T27883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.923092][T27883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.949763][T27883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.969899][T20508] bridge_slave_1: left allmulticast mode [ 611.975613][T20508] bridge_slave_1: left promiscuous mode [ 611.981970][T20508] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.989851][T20508] bridge_slave_0: left allmulticast mode [ 611.995643][T20508] bridge_slave_0: left promiscuous mode [ 612.001405][T20508] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.052615][T20508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.068806][T20508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.171651][T20508] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 612.180502][T20508] bond0 (unregistering): Released all slaves [ 612.214897][T27883] hsr_slave_0: entered promiscuous mode [ 612.221882][T27883] hsr_slave_1: entered promiscuous mode [ 612.227829][T27883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.236860][T27883] Cannot create hsr debugfs directory [ 612.586061][T27925] SELinux: policydb version 65536 does not match my version range 15-34 [ 612.595305][T27925] SELinux: failed to load policy [ 612.600357][T27915] SELinux: failed to load policy [ 612.613898][T27926] loop6: detected capacity change from 0 to 512 [ 612.625873][T27926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 612.641228][T27926] EXT4-fs (loop6): 1 truncate cleaned up [ 612.646975][T20508] hsr_slave_0: left promiscuous mode [ 612.647351][T27926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.665549][T20508] hsr_slave_1: left promiscuous mode [ 612.671606][T20508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.694838][T20508] team0 (unregistering): Port device team_slave_1 removed [ 612.704541][T20508] team0 (unregistering): Port device team_slave_0 removed [ 612.754604][T19604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.844242][ T29] kauditd_printk_skb: 1107 callbacks suppressed [ 612.844257][ T29] audit: type=1326 audit(1750636237.103:67094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33a8d58e7 code=0x7ffc0000 [ 612.874892][ T29] audit: type=1326 audit(1750636237.103:67095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33a87ab19 code=0x7ffc0000 [ 612.898442][ T29] audit: type=1326 audit(1750636237.103:67096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff33a8de929 code=0x7ffc0000 [ 612.922381][ T29] audit: type=1326 audit(1750636237.123:67097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33a8d58e7 code=0x7ffc0000 [ 612.945947][ T29] audit: type=1326 audit(1750636237.123:67098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33a87ab19 code=0x7ffc0000 [ 612.969626][ T29] audit: type=1326 audit(1750636237.123:67099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff33a8de929 code=0x7ffc0000 [ 612.993147][ T29] audit: type=1326 audit(1750636237.123:67100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33a8d58e7 code=0x7ffc0000 [ 613.016805][ T29] audit: type=1326 audit(1750636237.123:67101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff33a87ab19 code=0x7ffc0000 [ 613.040466][ T29] audit: type=1326 audit(1750636237.123:67102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff33a8de929 code=0x7ffc0000 [ 613.064012][ T29] audit: type=1326 audit(1750636237.143:67103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27927 comm="syz.5.8388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff33a8d58e7 code=0x7ffc0000 [ 613.131311][T27936] netlink: 112 bytes leftover after parsing attributes in process `syz.4.8390'. [ 613.212008][T27940] loop4: detected capacity change from 0 to 128 [ 613.292017][T20508] IPVS: stop unused estimator thread 0... [ 613.346686][T27883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 613.356561][T27883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 613.366213][T27883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 613.375051][T27883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.412143][T27883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.426430][T27883] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.435965][T20520] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.443063][T20520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.454016][T20508] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.461217][T20508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.478300][T27883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 613.488837][T27883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.647133][T27883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.693894][T27966] loop6: detected capacity change from 0 to 2048 [ 613.787178][T27883] veth0_vlan: entered promiscuous mode [ 613.797267][T27883] veth1_vlan: entered promiscuous mode [ 613.814739][T27883] veth0_macvtap: entered promiscuous mode [ 613.824033][T27883] veth1_macvtap: entered promiscuous mode [ 613.836337][T27883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.849915][T27883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.893910][T27883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.903491][T27883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.912317][T27883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.921059][T27883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.938533][T27980] loop6: detected capacity change from 0 to 128 [ 613.947427][T27981] SELinux: policydb version 65536 does not match my version range 15-34 [ 613.956115][T27981] SELinux: failed to load policy [ 614.061976][T27988] loop5: detected capacity change from 0 to 1024 [ 614.069875][T27988] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 614.080899][T27988] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 614.091649][T27988] JBD2: no valid journal superblock found [ 614.097449][T27988] EXT4-fs (loop5): Could not load journal inode [ 614.112545][T27993] program syz.1.8406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 614.124494][T27993] netlink: 'syz.1.8406': attribute type 10 has an invalid length. [ 614.142811][T27993] netlink: 'syz.1.8406': attribute type 10 has an invalid length. [ 614.152127][T27993] team0: Port device dummy0 removed [ 614.159964][T27993] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 614.500518][T28000] SELinux: failed to load policy [ 614.804750][T28010] loop6: detected capacity change from 0 to 128 [ 614.850936][T28012] FAULT_INJECTION: forcing a failure. [ 614.850936][T28012] name failslab, interval 1, probability 0, space 0, times 0 [ 614.864348][T28012] CPU: 0 UID: 0 PID: 28012 Comm: syz.6.8413 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 614.864384][T28012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 614.864404][T28012] Call Trace: [ 614.864412][T28012] [ 614.864422][T28012] __dump_stack+0x1d/0x30 [ 614.864446][T28012] dump_stack_lvl+0xe8/0x140 [ 614.864468][T28012] dump_stack+0x15/0x1b [ 614.864486][T28012] should_fail_ex+0x265/0x280 [ 614.864520][T28012] should_failslab+0x8c/0xb0 [ 614.864721][T28012] kmem_cache_alloc_node_noprof+0x57/0x320 [ 614.864763][T28012] ? __alloc_skb+0x101/0x320 [ 614.864800][T28012] __alloc_skb+0x101/0x320 [ 614.864832][T28012] netlink_alloc_large_skb+0xba/0xf0 [ 614.864946][T28012] netlink_sendmsg+0x3cf/0x6b0 [ 614.865031][T28012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.865053][T28012] __sock_sendmsg+0x142/0x180 [ 614.865091][T28012] ____sys_sendmsg+0x31e/0x4e0 [ 614.865130][T28012] ___sys_sendmsg+0x17b/0x1d0 [ 614.865180][T28012] __x64_sys_sendmsg+0xd4/0x160 [ 614.865229][T28012] x64_sys_call+0x2999/0x2fb0 [ 614.865252][T28012] do_syscall_64+0xd2/0x200 [ 614.865272][T28012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 614.865300][T28012] ? clear_bhb_loop+0x40/0x90 [ 614.865396][T28012] ? clear_bhb_loop+0x40/0x90 [ 614.865423][T28012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.865541][T28012] RIP: 0033:0x7f092113e929 [ 614.865558][T28012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.865579][T28012] RSP: 002b:00007f091f7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.865617][T28012] RAX: ffffffffffffffda RBX: 00007f0921365fa0 RCX: 00007f092113e929 [ 614.865632][T28012] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 614.865646][T28012] RBP: 00007f091f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.865659][T28012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.865672][T28012] R13: 0000000000000000 R14: 00007f0921365fa0 R15: 00007ffc62c2b6a8 [ 614.865692][T28012] [ 615.140741][T28018] loop6: detected capacity change from 0 to 2048 [ 615.213394][T28022] program syz.5.8418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.231390][T28022] netlink: 'syz.5.8418': attribute type 10 has an invalid length. [ 615.252236][T28022] netlink: 'syz.5.8418': attribute type 10 has an invalid length. [ 615.271939][T28022] team0: Port device dummy0 removed [ 615.291000][T28022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 615.367765][T28028] netlink: 'syz.5.8419': attribute type 1 has an invalid length. [ 615.731792][T28038] SELinux: failed to load policy [ 615.743376][T28042] __nla_validate_parse: 4 callbacks suppressed [ 615.743398][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8422'. [ 615.823896][T28044] program syz.1.8424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 616.029460][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8425'. [ 616.162669][T28058] openvswitch: netlink: Message has 6 unknown bytes. [ 616.409874][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.419764][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.518413][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.554202][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.563200][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.580294][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.610113][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.619204][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8431'. [ 616.735178][T28098] loop1: detected capacity change from 0 to 512 [ 616.742094][T28098] ext4: Unknown parameter 'permit_directio' [ 616.755376][T28098] loop1: detected capacity change from 0 to 512 [ 616.763182][T28098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 616.790260][T28098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 616.798460][T28098] System zones: 0-2, 18-18, 34-34 [ 616.804548][T28098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.817269][T28098] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.845443][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.906513][T28107] loop1: detected capacity change from 0 to 2048 [ 617.475134][T28116] SELinux: failed to load policy [ 617.625771][T28125] loop0: detected capacity change from 0 to 512 [ 617.632504][T28125] EXT4-fs: Ignoring removed mblk_io_submit option [ 617.639782][T28125] EXT4-fs: Ignoring removed bh option [ 617.649528][T28125] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 617.667009][T28125] EXT4-fs (loop0): 1 truncate cleaned up [ 617.674578][T28125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.863562][T28124] 9pnet: Could not find request transport: fd0x0000000000000008 [ 617.989835][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 617.989894][ T29] audit: type=1326 audit(1750636242.253:68058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.028735][ T29] audit: type=1326 audit(1750636242.283:68059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.052621][ T29] audit: type=1326 audit(1750636242.283:68060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.069025][T28132] loop5: detected capacity change from 0 to 512 [ 618.076521][ T29] audit: type=1326 audit(1750636242.283:68061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.106234][ T29] audit: type=1326 audit(1750636242.283:68062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.130023][ T29] audit: type=1326 audit(1750636242.283:68063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.153654][ T29] audit: type=1326 audit(1750636242.283:68064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.177343][ T29] audit: type=1326 audit(1750636242.283:68065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.201092][ T29] audit: type=1326 audit(1750636242.283:68066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.224737][ T29] audit: type=1326 audit(1750636242.283:68067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28129 comm="syz.1.8447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78330de929 code=0x7ffc0000 [ 618.261626][T28132] ext4: Unknown parameter 'permit_directio' [ 618.293394][T28139] program syz.4.8450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.316719][T28139] netlink: 'syz.4.8450': attribute type 10 has an invalid length. [ 618.328012][T28132] loop5: detected capacity change from 0 to 512 [ 618.335087][T28139] netlink: 'syz.4.8450': attribute type 10 has an invalid length. [ 618.343214][T28132] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.356245][T28141] loop6: detected capacity change from 0 to 2048 [ 618.359214][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.364608][T28139] team0: Port device dummy0 removed [ 618.374028][T28132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 618.380289][T28139] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.385575][T28132] System zones: 0-2, 18-18, 34-34 [ 618.404102][T28132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.423653][T28132] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.475093][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.497490][T28147] tipc: Started in network mode [ 618.502665][T28147] tipc: Node identity ac14140f, cluster identity 4711 [ 618.509636][T28147] tipc: New replicast peer: 255.255.255.255 [ 618.515926][T28147] tipc: Enabled bearer , priority 10 [ 618.612645][T28160] loop0: detected capacity change from 0 to 128 [ 618.684705][T28169] program syz.0.8463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.696447][T28169] netlink: 'syz.0.8463': attribute type 10 has an invalid length. [ 618.710214][T28169] team0: Port device dummy0 added [ 618.717735][T28169] netlink: 'syz.0.8463': attribute type 10 has an invalid length. [ 618.729003][T28169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 618.745882][T28170] 9pnet_fd: Insufficient options for proto=fd [ 618.759611][T28169] team0: Failed to send options change via netlink (err -105) [ 618.767890][T28169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 618.778116][T28169] team0: Port device dummy0 removed [ 618.785967][T28169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 618.789385][T28173] loop5: detected capacity change from 0 to 512 [ 618.802965][T28173] ext4: Unknown parameter 'permit_directio' [ 618.825309][T28173] loop5: detected capacity change from 0 to 512 [ 618.836148][T28173] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 618.878647][T28175] futex_wake_op: syz.0.8466 tries to shift op by -1; fix this program [ 618.952138][T28171] SELinux: failed to load policy [ 618.969908][T28173] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 618.978256][T28173] System zones: 0-2, 18-18, 34-34 [ 618.993955][T28173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.026306][T28173] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.113206][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.140484][T28184] loop0: detected capacity change from 0 to 1024 [ 619.147504][T28184] EXT4-fs: Ignoring removed orlov option [ 619.153802][T28184] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 619.166114][T28186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28186 comm=syz.5.8468 [ 619.184378][T28184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.201299][T28184] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.8469: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 619.223444][T28184] Invalid ELF header magic: != ELF [ 619.250791][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.281261][T28197] loop0: detected capacity change from 0 to 128 [ 619.320400][T28201] 9pnet_fd: Insufficient options for proto=fd [ 619.427570][T28207] loop6: detected capacity change from 0 to 512 [ 619.436555][T28207] ext4: Unknown parameter 'permit_directio' [ 619.450106][T28207] loop6: detected capacity change from 0 to 512 [ 619.457361][T28207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 619.480896][T28207] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 619.490011][T28207] System zones: 0-2, 18-18, 34-34 [ 619.510288][ T1035] tipc: Node number set to 2886997007 [ 619.521209][T28207] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.535249][T28207] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.583259][T28215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28215 comm=syz.4.8481 [ 619.607468][T19604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.622767][T28217] loop4: detected capacity change from 0 to 512 [ 619.640730][T28217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.654333][T28217] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 619.698089][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.724267][ T3533] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 619.736513][ T3533] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 619.746812][T28223] loop4: detected capacity change from 0 to 1024 [ 619.750758][T28225] loop6: detected capacity change from 0 to 512 [ 619.755720][T28223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.760024][T28225] EXT4-fs: Ignoring removed i_version option [ 619.766129][T28223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.776266][T28225] EXT4-fs (loop6): orphan cleanup on readonly fs [ 619.779581][T28223] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 619.785695][T28225] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8484: bg 0: block 131: padding at end of block bitmap is not set [ 619.809835][T28225] EXT4-fs (loop6): Remounting filesystem read-only [ 619.816464][T28225] EXT4-fs (loop6): 1 truncate cleaned up [ 619.912789][T28239] 9pnet_fd: Insufficient options for proto=fd [ 619.956185][T28248] FAULT_INJECTION: forcing a failure. [ 619.956185][T28248] name failslab, interval 1, probability 0, space 0, times 0 [ 619.969722][T28248] CPU: 0 UID: 0 PID: 28248 Comm: syz.4.8488 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 619.969824][T28248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.969838][T28248] Call Trace: [ 619.969846][T28248] [ 619.969856][T28248] __dump_stack+0x1d/0x30 [ 619.969883][T28248] dump_stack_lvl+0xe8/0x140 [ 619.969939][T28248] dump_stack+0x15/0x1b [ 619.969956][T28248] should_fail_ex+0x265/0x280 [ 619.970070][T28248] should_failslab+0x8c/0xb0 [ 619.970107][T28248] __kvmalloc_node_noprof+0x123/0x4e0 [ 619.970226][T28248] ? recent_mt_check+0x3e2/0x8f0 [ 619.970252][T28248] ? strnlen+0x28/0x50 [ 619.970271][T28248] ? strchr+0x27/0x50 [ 619.970301][T28248] recent_mt_check+0x3e2/0x8f0 [ 619.970333][T28248] ? pcpu_block_refresh_hint+0x10b/0x170 [ 619.970362][T28248] recent_mt_check_v0+0x67/0x90 [ 619.970411][T28248] xt_check_match+0x2aa/0x4f0 [ 619.970453][T28248] ? strnlen+0x28/0x50 [ 619.970479][T28248] ? strcmp+0x22/0x50 [ 619.970502][T28248] ? xt_find_match+0x1d1/0x210 [ 619.970542][T28248] translate_table+0xb4b/0x1070 [ 619.970651][T28248] ? _copy_from_user+0x89/0xb0 [ 619.970682][T28248] do_ip6t_set_ctl+0x678/0x840 [ 619.970762][T28248] ? kstrtoull+0x111/0x140 [ 619.970798][T28248] ? __rcu_read_unlock+0x4f/0x70 [ 619.970893][T28248] nf_setsockopt+0x196/0x1b0 [ 619.970923][T28248] ipv6_setsockopt+0x11a/0x130 [ 619.970955][T28248] rawv6_setsockopt+0x1d2/0x420 [ 619.971014][T28248] sock_common_setsockopt+0x66/0x80 [ 619.971081][T28248] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 619.971117][T28248] __sys_setsockopt+0x181/0x200 [ 619.971162][T28248] __x64_sys_setsockopt+0x64/0x80 [ 619.971251][T28248] x64_sys_call+0x2bd5/0x2fb0 [ 619.971330][T28248] do_syscall_64+0xd2/0x200 [ 619.971369][T28248] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 619.971400][T28248] ? clear_bhb_loop+0x40/0x90 [ 619.971427][T28248] ? clear_bhb_loop+0x40/0x90 [ 619.971454][T28248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.971507][T28248] RIP: 0033:0x7efc5f2de929 [ 619.971523][T28248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.971547][T28248] RSP: 002b:00007efc5d947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.971572][T28248] RAX: ffffffffffffffda RBX: 00007efc5f505fa0 RCX: 00007efc5f2de929 [ 619.971589][T28248] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 619.971682][T28248] RBP: 00007efc5d947090 R08: 0000000000000520 R09: 0000000000000000 [ 619.971759][T28248] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 619.971776][T28248] R13: 0000000000000000 R14: 00007efc5f505fa0 R15: 00007ffc556bef78 [ 619.971801][T28248] [ 620.275232][T28255] netlink: 'syz.4.8490': attribute type 1 has an invalid length. [ 620.283115][T28255] netlink: 'syz.4.8490': attribute type 2 has an invalid length. [ 620.302970][T28255] bridge1: entered promiscuous mode [ 620.305169][T28259] loop1: detected capacity change from 0 to 512 [ 620.308359][T28255] bridge1: entered allmulticast mode [ 620.331109][T28257] loop6: detected capacity change from 0 to 2048 [ 620.338279][T28259] ext4: Unknown parameter 'permit_directio' [ 620.370057][T28259] loop1: detected capacity change from 0 to 512 [ 620.378326][T28259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 620.401892][T28259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 620.413287][T28259] System zones: 0-2, 18-18, 34-34 [ 620.429283][T28259] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.528419][T28274] loop0: detected capacity change from 0 to 128 [ 620.539614][T28275] hsr0: entered promiscuous mode [ 620.639453][ T10] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 620.647728][ T10] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 620.664880][T28281] loop0: detected capacity change from 0 to 1024 [ 620.672978][T28281] ext3: Unknown parameter 'fowner' [ 620.682601][T28289] netlink: 'syz.4.8504': attribute type 1 has an invalid length. [ 620.721621][T28293] loop4: detected capacity change from 0 to 2048 [ 620.868492][T28298] loop4: detected capacity change from 0 to 512 [ 620.875198][T28298] ext4: Unknown parameter 'permit_directio' [ 620.887240][T28298] loop4: detected capacity change from 0 to 512 [ 620.894467][T28298] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 620.909264][T28298] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 620.917534][T28298] System zones: 0-2, 18-18, 34-34 [ 620.923868][T28298] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.559586][T28325] loop1: detected capacity change from 0 to 2048 [ 621.688604][T28329] netlink: 'syz.4.8518': attribute type 99 has an invalid length. [ 621.701755][T28329] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 621.708412][T28329] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 621.716002][T28329] vhci_hcd vhci_hcd.0: Device attached [ 621.727547][T28329] loop4: detected capacity change from 0 to 128 [ 621.736003][T28327] loop1: detected capacity change from 0 to 512 [ 621.752110][T28329] bio_check_eod: 218 callbacks suppressed [ 621.752128][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752128][T28329] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 621.752201][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752201][T28329] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 621.752435][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752435][T28329] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 621.752464][T28329] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 621.752561][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752561][T28329] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 621.752590][T28329] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 621.752613][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752613][T28329] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 621.752640][T28329] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 621.752662][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752662][T28329] loop4: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 621.752738][T28329] Buffer I/O error on dev loop4, logical block 145, lost async page write [ 621.752760][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752760][T28329] loop4: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 621.752842][T28329] Buffer I/O error on dev loop4, logical block 146, lost async page write [ 621.752861][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752861][T28329] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 621.752885][T28329] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 621.752973][T28329] syz.4.8518: attempt to access beyond end of device [ 621.752973][T28329] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 621.753045][T28329] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 621.753067][T28329] syz.4.8518: attempt to access beyond end of device [ 621.753067][T28329] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 621.753094][T28329] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 621.753245][T28329] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 621.753309][T28329] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 621.757580][T28330] vhci_hcd: connection closed [ 621.790904][T28327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 621.804690][T20553] vhci_hcd: stop threads [ 621.804703][T20553] vhci_hcd: release socket [ 621.804714][T20553] vhci_hcd: disconnect device [ 622.046693][T28327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c098, mo2=0002] [ 622.055825][T28327] System zones: 1-12 [ 622.062119][T28327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.8517: missing EA_INODE flag [ 622.074863][T28327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.8517: error while reading EA inode 11 err=-117 [ 622.089481][T28327] EXT4-fs (loop1): 1 orphan inode deleted [ 622.189365][T28338] sch_fq: defrate 4294967295 ignored. [ 622.275740][T28348] 9pnet_fd: Insufficient options for proto=fd [ 622.755489][T28371] __nla_validate_parse: 18 callbacks suppressed [ 622.755508][T28371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8528'. [ 622.770900][T28371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8528'. [ 622.801697][T28371] loop1: detected capacity change from 0 to 512 [ 622.809488][T28371] EXT4-fs: Ignoring removed mblk_io_submit option [ 622.816041][T28371] EXT4-fs: Ignoring removed bh option [ 622.856641][T28371] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 622.893876][T28371] EXT4-fs (loop1): 1 truncate cleaned up [ 623.012541][ T29] kauditd_printk_skb: 978 callbacks suppressed [ 623.012557][ T29] audit: type=1400 audit(1750636247.274:69046): avc: denied { map_read map_write } for pid=28356 comm="syz.4.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.075838][ T29] audit: type=1400 audit(1750636247.334:69047): avc: denied { prog_load } for pid=28356 comm="syz.4.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 623.095934][ T29] audit: type=1400 audit(1750636247.334:69048): avc: denied { bpf } for pid=28356 comm="syz.4.8529" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.116769][ T29] audit: type=1400 audit(1750636247.334:69049): avc: denied { perfmon } for pid=28356 comm="syz.4.8529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.174824][ T29] audit: type=1400 audit(1750636247.374:69050): avc: denied { module_request } for pid=28352 comm="syz.0.8527" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 623.197229][ T29] audit: type=1400 audit(1750636247.384:69051): avc: denied { open } for pid=28356 comm="syz.4.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 623.217394][ T29] audit: type=1400 audit(1750636247.384:69052): avc: denied { perfmon } for pid=28356 comm="syz.4.8529" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 623.239348][ T29] audit: type=1400 audit(1750636247.384:69053): avc: denied { kernel } for pid=28356 comm="syz.4.8529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 623.258977][ T29] audit: type=1400 audit(1750636247.404:69054): avc: denied { read write } for pid=24502 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.284164][ T29] audit: type=1400 audit(1750636247.404:69055): avc: denied { open } for pid=24502 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 623.350703][T28380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8532'. [ 623.431165][T28385] loop0: detected capacity change from 0 to 1024 [ 623.444795][T28385] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 623.455880][T28385] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 623.497868][T28382] Invalid ELF header magic: != ELF [ 623.504154][T28385] JBD2: no valid journal superblock found [ 623.509941][T28385] EXT4-fs (loop0): Could not load journal inode [ 623.676548][T28394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8533'. [ 623.729943][T28398] FAULT_INJECTION: forcing a failure. [ 623.729943][T28398] name failslab, interval 1, probability 0, space 0, times 0 [ 623.742755][T28398] CPU: 1 UID: 0 PID: 28398 Comm: syz.6.8538 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 623.742787][T28398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.742801][T28398] Call Trace: [ 623.742808][T28398] [ 623.742817][T28398] __dump_stack+0x1d/0x30 [ 623.742842][T28398] dump_stack_lvl+0xe8/0x140 [ 623.742879][T28398] dump_stack+0x15/0x1b [ 623.742897][T28398] should_fail_ex+0x265/0x280 [ 623.742931][T28398] should_failslab+0x8c/0xb0 [ 623.742960][T28398] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 623.743000][T28398] ? sidtab_sid2str_get+0xa0/0x130 [ 623.743027][T28398] kmemdup_noprof+0x2b/0x70 [ 623.743112][T28398] sidtab_sid2str_get+0xa0/0x130 [ 623.743138][T28398] security_sid_to_context_core+0x1eb/0x2e0 [ 623.743164][T28398] security_sid_to_context+0x27/0x40 [ 623.743188][T28398] selinux_lsmprop_to_secctx+0x67/0xf0 [ 623.743302][T28398] security_lsmprop_to_secctx+0x43/0x80 [ 623.743395][T28398] audit_log_task_context+0x77/0x190 [ 623.743468][T28398] audit_log_task+0xf4/0x250 [ 623.743525][T28398] audit_seccomp+0x61/0x100 [ 623.743553][T28398] ? __seccomp_filter+0x68c/0x10d0 [ 623.743578][T28398] __seccomp_filter+0x69d/0x10d0 [ 623.743618][T28398] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 623.743654][T28398] ? vfs_write+0x75e/0x8e0 [ 623.743693][T28398] __secure_computing+0x82/0x150 [ 623.743789][T28398] syscall_trace_enter+0xcf/0x1e0 [ 623.743860][T28398] do_syscall_64+0xac/0x200 [ 623.743879][T28398] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 623.743906][T28398] ? clear_bhb_loop+0x40/0x90 [ 623.743928][T28398] ? clear_bhb_loop+0x40/0x90 [ 623.744008][T28398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.744031][T28398] RIP: 0033:0x7f092113e929 [ 623.744048][T28398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.744098][T28398] RSP: 002b:00007f091f7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 623.744119][T28398] RAX: ffffffffffffffda RBX: 00007f0921365fa0 RCX: 00007f092113e929 [ 623.744200][T28398] RDX: 0000000000000012 RSI: 000000000000000a RDI: 0000000000000005 [ 623.744214][T28398] RBP: 00007f091f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 623.744227][T28398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.744239][T28398] R13: 0000000000000000 R14: 00007f0921365fa0 R15: 00007ffc62c2b6a8 [ 623.744259][T28398] [ 623.746050][T28397] loop0: detected capacity change from 0 to 2048 [ 624.103022][T28407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8542'. [ 624.139360][T28407] loop6: detected capacity change from 0 to 1024 [ 624.151201][T28407] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 624.162214][T28407] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 624.188815][T28407] JBD2: no valid journal superblock found [ 624.194641][T28407] EXT4-fs (loop6): Could not load journal inode [ 624.338806][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8543'. [ 625.019697][T28438] loop5: detected capacity change from 0 to 512 [ 625.029128][T28438] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 625.074811][T28438] EXT4-fs (loop5): 1 truncate cleaned up [ 625.490269][T28446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8554'. [ 625.499321][T28446] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8554'. [ 625.529945][T28446] loop6: detected capacity change from 0 to 512 [ 625.538827][T28446] EXT4-fs: Ignoring removed mblk_io_submit option [ 625.545372][T28446] EXT4-fs: Ignoring removed bh option [ 625.803871][T28446] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 625.816051][T28446] EXT4-fs (loop6): 1 truncate cleaned up [ 626.004121][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8555'. [ 626.024701][T28454] loop5: detected capacity change from 0 to 1024 [ 626.050682][T28454] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 626.061759][T28454] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 626.072590][T19604] EXT4-fs unmount: 13 callbacks suppressed [ 626.072604][T19604] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.090691][T28454] JBD2: no valid journal superblock found [ 626.096516][T28454] EXT4-fs (loop5): Could not load journal inode [ 626.104944][T28451] loop0: detected capacity change from 0 to 512 [ 626.164680][T28457] 9pnet_fd: Insufficient options for proto=fd [ 626.165859][T28451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 626.201524][T28451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.219029][T28451] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.278927][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.309560][T28469] loop1: detected capacity change from 0 to 512 [ 626.328769][T28469] ext4: Unknown parameter 'permit_directio' [ 626.355175][T28469] loop1: detected capacity change from 0 to 512 [ 626.381430][T28469] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 626.422886][T28469] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 626.434954][T28469] System zones: 0-2, 18-18, 34-34 [ 626.480718][T28481] loop4: detected capacity change from 0 to 2048 [ 626.489449][T28469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.504145][T28469] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.543255][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.576147][T28484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8564'. [ 626.637184][T28483] SELinux: policydb version 65536 does not match my version range 15-34 [ 626.645839][T28483] SELinux: failed to load policy [ 626.660993][T28488] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.709422][T28488] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.728243][T28489] loop4: detected capacity change from 0 to 512 [ 626.741647][T28489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.754593][T28489] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.819829][T28488] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.869434][T28488] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.886140][T28498] program syz.1.8571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 626.905458][T28498] netlink: 'syz.1.8571': attribute type 10 has an invalid length. [ 626.915449][T28498] bond0: (slave dummy0): Releasing backup interface [ 626.924928][T28498] team0: Port device dummy0 added [ 626.933809][T28498] netlink: 'syz.1.8571': attribute type 10 has an invalid length. [ 626.945950][T28498] team0: Port device dummy0 removed [ 626.955591][T28498] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 626.967262][T28500] 9pnet_fd: Insufficient options for proto=fd [ 626.969554][T28488] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.996473][T28488] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.013985][T28488] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.050091][T28488] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.061282][T28503] netlink: 'syz.1.8573': attribute type 1 has an invalid length. [ 627.097653][T28504] SELinux: failed to load policy [ 627.135713][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.244331][T28510] 9pnet_fd: Insufficient options for proto=fd [ 627.453655][T28529] loop4: detected capacity change from 0 to 512 [ 627.481349][T28529] ext4: Unknown parameter 'permit_directio' [ 627.507509][T28531] loop0: detected capacity change from 0 to 512 [ 627.526511][T28531] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 627.541114][T28531] EXT4-fs (loop0): 1 truncate cleaned up [ 627.547302][T28531] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.588485][T28529] loop4: detected capacity change from 0 to 512 [ 627.597016][T28529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 627.609702][T28529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 627.648866][T28529] System zones: 0-2, 18-18, 34-34 [ 627.694776][T28530] SELinux: failed to load policy [ 627.701410][T28529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.723221][T28529] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.752603][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.790053][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.028302][ T29] kauditd_printk_skb: 1759 callbacks suppressed [ 628.028321][ T29] audit: type=1400 audit(1750636252.284:70812): avc: denied { prog_run } for pid=28543 comm="syz.5.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.053901][ T29] audit: type=1400 audit(1750636252.294:70813): avc: denied { module_request } for pid=28535 comm="syz.6.8587" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 628.093227][ T29] audit: type=1400 audit(1750636252.324:70814): avc: denied { read write } for pid=20821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.106344][T28558] loop0: detected capacity change from 0 to 512 [ 628.117852][ T29] audit: type=1400 audit(1750636252.324:70815): avc: denied { open } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.148465][ T29] audit: type=1400 audit(1750636252.324:70816): avc: denied { ioctl } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 628.167442][T28558] ext4: Unknown parameter 'permit_directio' [ 628.174265][ T29] audit: type=1400 audit(1750636252.344:70817): avc: denied { read write } for pid=27883 comm="syz-executor" name="loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.203730][ T29] audit: type=1400 audit(1750636252.344:70818): avc: denied { open } for pid=27883 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.206309][T28558] loop0: detected capacity change from 0 to 512 [ 628.227155][ T29] audit: type=1400 audit(1750636252.344:70819): avc: denied { ioctl } for pid=27883 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=905 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 628.227221][ T29] audit: type=1400 audit(1750636252.354:70820): avc: denied { prog_load } for pid=28549 comm="syz.4.8590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 628.227250][ T29] audit: type=1400 audit(1750636252.354:70821): avc: denied { bpf } for pid=28549 comm="syz.4.8590" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 628.312765][T28563] __nla_validate_parse: 6 callbacks suppressed [ 628.312779][T28563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8591'. [ 628.345951][T28558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 628.360739][T28558] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 628.369038][T28558] System zones: 0-2, 18-18, 34-34 [ 628.375146][T28558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.388426][T28558] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.429219][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.577265][T28585] loop6: detected capacity change from 0 to 2048 [ 628.689400][T28589] SELinux: failed to load policy [ 628.900190][T28593] loop4: detected capacity change from 0 to 512 [ 628.908242][T28593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 628.925553][T28593] EXT4-fs (loop4): 1 truncate cleaned up [ 628.934999][T28593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.965188][T28597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8602'. [ 628.976942][T28597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.984532][T28597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.996875][T28593] vcan0: entered allmulticast mode [ 629.005013][T28593] vcan0: left allmulticast mode [ 629.025522][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.086996][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8603'. [ 629.104581][T28600] loop4: detected capacity change from 0 to 1024 [ 629.112705][T28600] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 629.123690][T28600] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 629.134222][T28600] JBD2: no valid journal superblock found [ 629.140701][T28600] EXT4-fs (loop4): Could not load journal inode [ 629.197816][T28606] loop5: detected capacity change from 0 to 512 [ 629.206014][T28606] ext4: Unknown parameter 'permit_directio' [ 629.222421][T28604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8604'. [ 629.228029][T28606] loop5: detected capacity change from 0 to 512 [ 629.253787][T28606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 629.282099][T28606] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 629.288236][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8608'. [ 629.290317][T28606] System zones: 0-2, 18-18, 34-34 [ 629.320917][T28606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.354329][T28618] program syz.4.8610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.362497][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8607'. [ 629.367155][T28606] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.413186][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8607'. [ 629.432733][T28621] program syz.4.8611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 629.467124][T28621] netlink: 'syz.4.8611': attribute type 10 has an invalid length. [ 629.486742][T28621] bond0: (slave dummy0): Releasing backup interface [ 629.497138][T28621] team0: Port device dummy0 added [ 629.508491][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.521304][T28621] netlink: 'syz.4.8611': attribute type 10 has an invalid length. [ 629.570358][T28621] team0: Port device dummy0 removed [ 629.586987][T28621] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 629.614666][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8613'. [ 629.637022][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8613'. [ 629.639418][T28627] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.681198][T28633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8617'. [ 629.696472][T28634] loop5: detected capacity change from 0 to 512 [ 629.711200][T28627] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.740709][T28634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.760722][T28637] loop4: detected capacity change from 0 to 512 [ 629.773069][T28634] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.799424][T28627] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.813174][T28637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.849603][T28637] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 629.891098][T28627] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.906182][T28637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8618: bg 0: block 217: padding at end of block bitmap is not set [ 629.960976][T28627] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.004627][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.016594][T28627] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.059944][T28627] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.091552][T28627] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.192534][T28655] loop1: detected capacity change from 0 to 512 [ 630.205732][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.229296][T28655] ext4: Unknown parameter 'permit_directio' [ 630.313369][T28655] loop1: detected capacity change from 0 to 512 [ 630.362264][T28655] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 630.392435][T28655] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 630.412399][T28658] loop5: detected capacity change from 0 to 512 [ 630.429312][T28655] System zones: 0-2, 18-18, 34-34 [ 630.448492][T28655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.491097][T28655] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.513186][T28658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 630.550758][T28658] EXT4-fs (loop5): 1 truncate cleaned up [ 630.556886][T28658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.622796][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.652123][T28657] vcan0: entered allmulticast mode [ 630.666579][T28657] vcan0: left allmulticast mode [ 630.700735][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.740535][T28674] loop1: detected capacity change from 0 to 512 [ 630.748494][T28674] ext4: Unknown parameter 'permit_directio' [ 630.769368][T28673] SELinux: failed to load policy [ 630.830981][T28676] loop5: detected capacity change from 0 to 2048 [ 630.833910][T28679] loop0: detected capacity change from 0 to 2048 [ 630.974269][T28683] loop0: detected capacity change from 0 to 128 [ 631.047285][T28668] loop4: detected capacity change from 0 to 256 [ 631.060608][T28668] FAT-fs (loop4): bogus number of FAT sectors [ 631.067048][T28668] FAT-fs (loop4): Can't find a valid FAT filesystem [ 631.080914][T28687] program syz.1.8637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.154709][T28687] netlink: 'syz.1.8637': attribute type 10 has an invalid length. [ 631.165658][T28687] bond0: (slave dummy0): Releasing backup interface [ 631.189162][T28687] team0: Port device dummy0 added [ 631.226406][T28687] netlink: 'syz.1.8637': attribute type 10 has an invalid length. [ 631.238724][T28687] team0: Port device dummy0 removed [ 631.252179][T28687] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 631.285135][T28694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.341010][T28697] loop0: detected capacity change from 0 to 512 [ 631.379230][T28697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.393321][T28702] loop1: detected capacity change from 0 to 512 [ 631.398982][T28694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.401303][T28697] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.448494][T28702] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 631.464518][T28702] EXT4-fs (loop1): mount failed [ 631.489760][T28694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.553674][T28708] SELinux: failed to load policy [ 631.576522][T28694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.682234][T28694] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.713794][T28718] loop5: detected capacity change from 0 to 2048 [ 631.742863][T28694] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.794496][T28694] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.845886][T28694] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.888812][T28734] futex_wake_op: syz.5.8648 tries to shift op by -1; fix this program [ 632.141668][T28743] program syz.5.8651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 632.160954][T28743] netlink: 'syz.5.8651': attribute type 10 has an invalid length. [ 632.177980][T28743] bond0: (slave dummy0): Releasing backup interface [ 632.187554][T28743] team0: Port device dummy0 added [ 632.201656][T28743] netlink: 'syz.5.8651': attribute type 10 has an invalid length. [ 632.223070][T28743] team0: Port device dummy0 removed [ 632.230957][T28743] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 632.245228][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.464118][T28750] loop5: detected capacity change from 0 to 512 [ 632.487091][T28749] loop4: detected capacity change from 0 to 512 [ 632.495533][T28749] EXT4-fs: Ignoring removed mblk_io_submit option [ 632.502072][T28749] EXT4-fs: Ignoring removed bh option [ 632.518492][T28749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 632.579258][T28749] EXT4-fs (loop4): 1 truncate cleaned up [ 632.585732][T28749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.720374][T28750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.739802][T28750] ext4 filesystem being mounted at /265/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.808229][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.005794][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.051419][T28766] Invalid ELF header magic: != ELF [ 633.056740][ T29] kauditd_printk_skb: 2074 callbacks suppressed [ 633.056758][ T29] audit: type=1400 audit(1750636257.304:72895): avc: denied { read write } for pid=20821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.087635][ T29] audit: type=1400 audit(1750636257.304:72896): avc: denied { open } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.112260][ T29] audit: type=1400 audit(1750636257.304:72897): avc: denied { ioctl } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.138101][ T29] audit: type=1400 audit(1750636257.314:72898): avc: denied { sys_module } for pid=28764 comm="syz.5.8657" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 633.159377][ T29] audit: type=1400 audit(1750636257.314:72899): avc: denied { module_load } for pid=28764 comm="syz.5.8657" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 633.183591][ T29] audit: type=1400 audit(1750636257.314:72900): avc: denied { create } for pid=28764 comm="syz.5.8657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.204442][ T29] audit: type=1400 audit(1750636257.314:72901): avc: denied { read } for pid=28764 comm="syz.5.8657" path="socket:[111554]" dev="sockfs" ino=111554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.229815][ T29] audit: type=1400 audit(1750636257.474:72902): avc: denied { read write } for pid=21527 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.254366][ T29] audit: type=1400 audit(1750636257.474:72903): avc: denied { open } for pid=21527 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.278742][ T29] audit: type=1400 audit(1750636257.474:72904): avc: denied { ioctl } for pid=21527 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 633.330038][T28765] __nla_validate_parse: 13 callbacks suppressed [ 633.330122][T28765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8657'. [ 633.406701][T28778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8659'. [ 633.441896][T28776] loop4: detected capacity change from 0 to 512 [ 633.511159][T28776] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 633.538510][T28776] EXT4-fs (loop4): 1 truncate cleaned up [ 633.544607][T28776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.561807][T28785] loop5: detected capacity change from 0 to 2048 [ 633.575203][T28788] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 633.586301][T28785] EXT4-fs: dax option not supported [ 633.610906][T28785] loop5: detected capacity change from 0 to 512 [ 633.620493][T28788] SELinux: failed to load policy [ 633.627938][T28785] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 633.708443][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.759274][T28795] FAULT_INJECTION: forcing a failure. [ 633.759274][T28795] name failslab, interval 1, probability 0, space 0, times 0 [ 633.771972][T28795] CPU: 0 UID: 0 PID: 28795 Comm: syz.4.8667 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 633.772004][T28795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 633.772017][T28795] Call Trace: [ 633.772022][T28795] [ 633.772085][T28795] __dump_stack+0x1d/0x30 [ 633.772113][T28795] dump_stack_lvl+0xe8/0x140 [ 633.772138][T28795] dump_stack+0x15/0x1b [ 633.772200][T28795] should_fail_ex+0x265/0x280 [ 633.772240][T28795] ? __se_sys_mount+0xef/0x2e0 [ 633.772343][T28795] should_failslab+0x8c/0xb0 [ 633.772470][T28795] __kmalloc_cache_noprof+0x4c/0x320 [ 633.772505][T28795] ? memdup_user+0x99/0xd0 [ 633.772569][T28795] __se_sys_mount+0xef/0x2e0 [ 633.772592][T28795] ? fput+0x8f/0xc0 [ 633.772622][T28795] ? ksys_write+0x192/0x1a0 [ 633.772682][T28795] __x64_sys_mount+0x67/0x80 [ 633.772875][T28795] x64_sys_call+0xd36/0x2fb0 [ 633.772903][T28795] do_syscall_64+0xd2/0x200 [ 633.772950][T28795] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 633.773052][T28795] ? clear_bhb_loop+0x40/0x90 [ 633.773140][T28795] ? clear_bhb_loop+0x40/0x90 [ 633.773169][T28795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.773196][T28795] RIP: 0033:0x7efc5f2de929 [ 633.773212][T28795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.773271][T28795] RSP: 002b:00007efc5d947038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 633.773294][T28795] RAX: ffffffffffffffda RBX: 00007efc5f505fa0 RCX: 00007efc5f2de929 [ 633.773306][T28795] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 633.773318][T28795] RBP: 00007efc5d947090 R08: 0000200000000180 R09: 0000000000000000 [ 633.773330][T28795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.773344][T28795] R13: 0000000000000000 R14: 00007efc5f505fa0 R15: 00007ffc556bef78 [ 633.773368][T28795] [ 633.994993][T28798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8668'. [ 634.186946][T28806] loop5: detected capacity change from 0 to 512 [ 634.206243][T28806] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 634.238386][T28806] EXT4-fs (loop5): 1 truncate cleaned up [ 634.244723][T28806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.415367][T28803] vcan0: entered allmulticast mode [ 634.441321][T28806] vcan0: left allmulticast mode [ 634.470031][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.536550][T28815] loop4: detected capacity change from 0 to 512 [ 634.555689][T28815] ext4: Unknown parameter 'permit_directio' [ 634.594511][T28815] loop4: detected capacity change from 0 to 512 [ 634.610354][T28815] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 634.674829][T28815] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 634.683674][T28822] loop0: detected capacity change from 0 to 2048 [ 634.694792][T28815] System zones: 0-2, 18-18, 34-34 [ 634.717917][T28815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.730639][T28815] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.748941][T28821] loop1: detected capacity change from 0 to 512 [ 634.758303][T28826] program syz.5.8680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 634.776615][T28821] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 634.794850][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.848708][T28826] netlink: 'syz.5.8680': attribute type 10 has an invalid length. [ 634.869750][T28821] EXT4-fs (loop1): 1 truncate cleaned up [ 634.875867][T28821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.889325][T28826] bond0: (slave dummy0): Releasing backup interface [ 634.907945][T28826] team0: Port device dummy0 added [ 634.908029][T28837] netlink: 'syz.5.8680': attribute type 10 has an invalid length. [ 634.936681][T28837] team0: Port device dummy0 removed [ 634.961727][T28837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 635.004363][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.084133][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8685'. [ 635.235908][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8688'. [ 635.295250][T28849] loop5: detected capacity change from 0 to 1024 [ 635.313756][T28849] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 635.324748][T28849] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 635.374951][T28849] JBD2: no valid journal superblock found [ 635.380885][T28849] EXT4-fs (loop5): Could not load journal inode [ 635.486540][T28858] futex_wake_op: syz.5.8689 tries to shift op by -1; fix this program [ 635.918560][T28867] Invalid ELF header magic: != ELF [ 636.027208][T28870] loop5: detected capacity change from 0 to 512 [ 636.039191][T28870] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 636.058613][T28870] EXT4-fs (loop5): orphan cleanup on readonly fs [ 636.065407][T28870] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 636.093807][T28870] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 636.102344][T28874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8691'. [ 636.122420][T28870] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8693: bg 0: block 40: padding at end of block bitmap is not set [ 636.151290][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8694'. [ 636.168545][T28870] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 636.177826][T28870] EXT4-fs (loop5): 1 truncate cleaned up [ 636.183853][T28870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 636.184916][T28876] loop6: detected capacity change from 0 to 1024 [ 636.213534][T28876] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 636.225340][T28876] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 636.250227][T28876] JBD2: no valid journal superblock found [ 636.256043][T28876] EXT4-fs (loop6): Could not load journal inode [ 636.285611][T28880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8696'. [ 636.308712][T28883] loop0: detected capacity change from 0 to 512 [ 636.321995][T28883] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 636.346345][T28880] loop1: detected capacity change from 0 to 1024 [ 636.355893][T28880] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 636.367624][T28880] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 636.383253][T28880] JBD2: no valid journal superblock found [ 636.383252][T28883] EXT4-fs (loop0): 1 truncate cleaned up [ 636.383804][T28883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.389046][T28880] EXT4-fs (loop1): Could not load journal inode [ 636.470112][T28892] program syz.1.8698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.481605][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.519811][T28894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8700'. [ 636.542212][T28894] loop1: detected capacity change from 0 to 764 [ 636.553401][T28894] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 636.603078][T28898] loop0: detected capacity change from 0 to 2048 [ 636.764668][T28908] program syz.0.8706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 636.783700][T28904] Invalid ELF header magic: != ELF [ 636.786313][T28908] netlink: 'syz.0.8706': attribute type 10 has an invalid length. [ 636.849768][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.948332][T28917] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8705'. [ 637.262687][T20510] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.309344][T20510] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.360738][T20510] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.399682][T20510] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.464457][T28923] chnl_net:caif_netlink_parms(): no params data found [ 637.499433][T20510] bridge_slave_1: left allmulticast mode [ 637.505211][T20510] bridge_slave_1: left promiscuous mode [ 637.510975][T20510] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.518998][T28936] loop1: detected capacity change from 0 to 512 [ 637.528809][T28936] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 637.542827][T20510] bridge_slave_0: left allmulticast mode [ 637.548566][T20510] bridge_slave_0: left promiscuous mode [ 637.554468][T20510] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.563738][T28936] EXT4-fs (loop1): 1 truncate cleaned up [ 637.570085][T28936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.644579][T20510] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 637.689544][T20510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.700843][T20510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.710729][T20510] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 637.719952][T20510] bond0 (unregistering): Released all slaves [ 637.771993][T28943] SELinux: syz.0.8712 (28943) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 637.793926][T20510] hsr_slave_0: left promiscuous mode [ 637.801998][T20510] hsr_slave_1: left promiscuous mode [ 637.809834][T20510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.817427][T20510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.849538][T20510] veth1_macvtap: left promiscuous mode [ 637.871298][T20510] veth0_macvtap: left promiscuous mode [ 637.883178][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.039154][T20510] team0 (unregistering): Port device team_slave_1 removed [ 638.059414][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 638.059434][ T29] audit: type=1400 audit(1750636262.324:74294): avc: denied { module_request } for pid=28951 comm="syz.4.8714" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.059818][T20510] team0 (unregistering): Port device team_slave_0 removed [ 638.084415][ T29] audit: type=1400 audit(1750636262.324:74295): avc: denied { module_request } for pid=28951 comm="syz.4.8714" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.135061][ T29] audit: type=1400 audit(1750636262.394:74296): avc: denied { module_request } for pid=28951 comm="syz.4.8714" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.172856][ T29] audit: type=1400 audit(1750636262.424:74297): avc: denied { read write } for pid=20821 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.197412][ T29] audit: type=1400 audit(1750636262.424:74298): avc: denied { open } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.221869][ T29] audit: type=1400 audit(1750636262.424:74299): avc: denied { ioctl } for pid=20821 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 638.247697][ T29] audit: type=1400 audit(1750636262.424:74300): avc: denied { module_request } for pid=28951 comm="syz.4.8714" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.269953][ T29] audit: type=1400 audit(1750636262.494:74301): avc: denied { module_request } for pid=28951 comm="syz.4.8714" kmod="block-major-0-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 638.292363][ T29] audit: type=1400 audit(1750636262.514:74302): avc: denied { prog_load } for pid=28963 comm="syz.1.8716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 638.311628][ T29] audit: type=1400 audit(1750636262.514:74303): avc: denied { bpf } for pid=28963 comm="syz.1.8716" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 638.387282][T28923] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.394451][T28923] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.440501][T28923] bridge_slave_0: entered allmulticast mode [ 638.468355][T28923] bridge_slave_0: entered promiscuous mode [ 638.480618][T28923] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.487850][T28923] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.495080][T28923] bridge_slave_1: entered allmulticast mode [ 638.503231][T28923] bridge_slave_1: entered promiscuous mode [ 638.509672][T28972] __nla_validate_parse: 1 callbacks suppressed [ 638.509689][T28972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8717'. [ 638.560906][T28923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.629385][T28923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.661844][T20510] IPVS: stop unused estimator thread 0... [ 638.676184][T28923] team0: Port device team_slave_0 added [ 638.686688][T28984] loop1: detected capacity change from 0 to 512 [ 638.705733][T28984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 638.724297][T28923] team0: Port device team_slave_1 added [ 638.736453][T28989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8722'. [ 638.758010][T28989] loop4: detected capacity change from 0 to 1024 [ 638.763948][T28923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.771553][T28923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.772875][T28989] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 638.797632][T28923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.808385][T28989] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 638.811824][T28989] JBD2: no valid journal superblock found [ 638.823370][T28923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.828976][T28989] EXT4-fs (loop4): Could not load journal inode [ 638.834656][T28923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.843235][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.847953][T28923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.959170][T28923] hsr_slave_0: entered promiscuous mode [ 638.965292][T28923] hsr_slave_1: entered promiscuous mode [ 639.017983][T28996] loop1: detected capacity change from 0 to 512 [ 639.038582][T28996] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.061862][T28996] EXT4-fs (loop1): 1 truncate cleaned up [ 639.100712][T28996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.401801][T29007] loop5: detected capacity change from 0 to 256 [ 639.428085][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8725'. [ 639.437158][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8725'. [ 639.472064][T29009] loop4: detected capacity change from 0 to 512 [ 639.480685][T29009] EXT4-fs: Ignoring removed mblk_io_submit option [ 639.487266][T29009] EXT4-fs: Ignoring removed bh option [ 639.493865][T29009] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 639.515409][T29009] EXT4-fs (loop4): 1 truncate cleaned up [ 639.521916][T29009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.722422][T29007] FAT-fs (loop5): bogus number of FAT sectors [ 639.728623][T29007] FAT-fs (loop5): Can't find a valid FAT filesystem [ 639.745016][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.774221][T29014] loop0: detected capacity change from 0 to 512 [ 639.800028][T29014] ext4: Unknown parameter 'permit_directio' [ 639.844298][T29014] loop0: detected capacity change from 0 to 512 [ 639.864045][T29014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.866504][T29020] loop1: detected capacity change from 0 to 512 [ 639.882887][T29020] ext4: Unknown parameter 'permit_directio' [ 639.899743][T29020] loop1: detected capacity change from 0 to 512 [ 639.908425][T29020] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.964695][T29014] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 639.984751][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.987129][T29014] System zones: 0-2, 18-18, 34-34 [ 640.005596][T29020] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 640.018535][T29014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.033048][T29020] System zones: 0-2, 18-18, 34-34 [ 640.053580][T29014] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.064692][T29020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.087559][T29027] loop5: detected capacity change from 0 to 512 [ 640.090658][T29020] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.106024][T28923] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 640.107969][T29027] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 640.128115][T28923] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 640.143119][T28923] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 640.153564][T29027] EXT4-fs (loop5): 1 truncate cleaned up [ 640.160178][T29027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.162018][T27883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.188025][T28923] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 640.208727][T29034] loop4: detected capacity change from 0 to 1024 [ 640.220623][T29034] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 640.231597][T29034] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 640.231608][T29027] vcan0: entered allmulticast mode [ 640.256293][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.266068][T29034] JBD2: no valid journal superblock found [ 640.271886][T29034] EXT4-fs (loop4): Could not load journal inode [ 640.275337][T29027] vcan0: left allmulticast mode [ 640.295532][T29044] program syz.0.8736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 640.348569][T24502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.371038][T29044] netlink: 'syz.0.8736': attribute type 10 has an invalid length. [ 640.433266][T29047] SELinux: syz.1.8737 (29047) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 640.532164][T29054] loop0: detected capacity change from 0 to 128 [ 640.602428][T28923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.613433][T28923] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.649693][T20510] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.656826][T20510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.710587][T20510] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.717759][T20510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.736395][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8743'. [ 640.777372][T29061] futex_wake_op: syz.4.8744 tries to shift op by -1; fix this program [ 640.838120][T29057] loop1: detected capacity change from 0 to 256 [ 640.861092][T29062] loop5: detected capacity change from 0 to 1024 [ 640.870887][T29062] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 640.881903][T29062] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 640.891852][T29057] FAT-fs (loop1): bogus number of FAT sectors [ 640.898038][T29057] FAT-fs (loop1): Can't find a valid FAT filesystem [ 640.909766][T29062] JBD2: no valid journal superblock found [ 640.915638][T29062] EXT4-fs (loop5): Could not load journal inode [ 641.022152][T29072] loop0: detected capacity change from 0 to 164 [ 641.039976][T29072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 641.061064][T29072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 641.081785][T29072] Symlink component flag not implemented [ 641.087513][T29072] Symlink component flag not implemented [ 641.097997][T29072] Symlink component flag not implemented (7) [ 641.104056][T29072] Symlink component flag not implemented (116) [ 641.170114][T28923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.237262][T29076] SELinux: policydb version 65536 does not match my version range 15-34 [ 641.245881][T29076] SELinux: failed to load policy [ 641.574900][T28923] veth0_vlan: entered promiscuous mode [ 641.593380][T28923] veth1_vlan: entered promiscuous mode [ 641.631894][T28923] veth0_macvtap: entered promiscuous mode [ 641.648942][T28923] veth1_macvtap: entered promiscuous mode [ 641.669624][T28923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.689144][T28923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.711226][T28923] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.720294][T28923] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.729284][T28923] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.738116][T28923] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.841501][T29099] loop1: detected capacity change from 0 to 512 [ 641.857900][T29099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.891050][T29103] loop6: detected capacity change from 0 to 512 [ 641.951184][T29099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.968121][T29099] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.978146][T29103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.986749][T29113] program syz.4.8753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.001482][T29103] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 642.035153][T20821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.066565][T29113] netlink: 'syz.4.8753': attribute type 10 has an invalid length. [ 642.077421][T29116] loop5: detected capacity change from 0 to 128 [ 642.110494][T28923] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.144098][T29120] loop4: detected capacity change from 0 to 512 [ 642.193567][T29120] ext4: Unknown parameter 'permit_directio' [ 642.243219][T29120] loop4: detected capacity change from 0 to 512 [ 642.259530][T29124] 9pnet: Could not find request transport: fd0x0000000000000005 [ 642.278566][T29120] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 642.332396][T29120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 642.357492][T29120] System zones: 0-2, 18-18, 34-34 [ 642.380529][T29136] loop1: detected capacity change from 0 to 164 [ 642.382527][T29120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.400056][T29130] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 642.439142][T29136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 642.460938][T29120] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.480500][T29136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 642.497775][T29136] Symlink component flag not implemented [ 642.503571][T29136] Symlink component flag not implemented [ 642.550776][T29136] Symlink component flag not implemented (7) [ 642.556903][T29136] Symlink component flag not implemented (116) [ 642.571259][T21527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.586650][T29145] loop6: detected capacity change from 0 to 512 [ 642.635030][T29145] EXT4-fs: inline encryption not supported [ 642.657183][T29145] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 642.737287][T29152] loop5: detected capacity change from 0 to 512 [ 642.745995][T29152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.760722][T29145] EXT4-fs (loop6): 1 truncate cleaned up [ 642.768083][T29145] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.799063][T29152] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.853611][T29157] SELinux: policydb version 65536 does not match my version range 15-34 [ 642.862359][T29157] SELinux: failed to load policy [ 643.039740][T29170] loop5: detected capacity change from 0 to 512 [ 643.060020][T29170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 643.075552][ T29] kauditd_printk_skb: 1947 callbacks suppressed [ 643.075568][ T29] audit: type=1400 audit(1750636267.335:76251): avc: denied { map_create } for pid=29177 comm="syz.1.8769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 643.101389][ T29] audit: type=1400 audit(1750636267.335:76252): avc: denied { perfmon } for pid=29177 comm="syz.1.8769" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 643.126517][T29179] Invalid ELF header magic: != ELF [ 643.132586][ T29] audit: type=1400 audit(1750636267.385:76253): avc: denied { map_read map_write } for pid=29177 comm="syz.1.8769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 643.152818][ T29] audit: type=1400 audit(1750636267.385:76254): avc: denied { create } for pid=29177 comm="syz.1.8769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.165052][T29170] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.172500][ T29] audit: type=1400 audit(1750636267.385:76255): avc: denied { sys_module } for pid=29175 comm="syz.0.8768" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 643.204208][ T29] audit: type=1400 audit(1750636267.385:76256): avc: denied { module_load } for pid=29175 comm="syz.0.8768" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 643.228077][ T29] audit: type=1400 audit(1750636267.385:76257): avc: denied { setopt } for pid=29177 comm="syz.1.8769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.247964][ T29] audit: type=1400 audit(1750636267.385:76258): avc: denied { ioctl } for pid=29177 comm="syz.1.8769" path="socket:[114380]" dev="sockfs" ino=114380 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 643.273078][ T29] audit: type=1400 audit(1750636267.385:76259): avc: denied { module_request } for pid=29177 comm="syz.1.8769" kmod="netdev-veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 643.295730][ T29] audit: type=1400 audit(1750636267.405:76260): avc: denied { create } for pid=29175 comm="syz.0.8768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 643.318153][T29178] loop1: detected capacity change from 0 to 1024 [ 643.320393][T29186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8768'. [ 643.345256][T29178] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 643.356233][T29178] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 643.372330][T29178] JBD2: no valid journal superblock found [ 643.378150][T29178] EXT4-fs (loop1): Could not load journal inode [ 643.424268][T29190] SELinux: syz.5.8770 (29190) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 643.512284][T29192] loop1: detected capacity change from 0 to 512 [ 643.524534][T29194] loop6: detected capacity change from 0 to 2048 [ 643.534031][T29197] SELinux: failed to load policy [ 643.579391][T29192] ext4: Unknown parameter 'permit_directio' [ 643.625333][T29192] loop1: detected capacity change from 0 to 512 [ 643.650876][T29192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 643.693471][T29192] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 643.712622][T29192] System zones: 0-2, 18-18, 34-34 [ 643.720042][T29192] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 643.731811][T29213] netlink: 'syz.0.8781': attribute type 10 has an invalid length. [ 643.739698][T29213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8781'. [ 643.757858][T29213] dummy0: entered promiscuous mode [ 643.768944][T29215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8777'. [ 643.779830][T29213] bond0: (slave dummy0): Releasing backup interface [ 643.784852][T29207] Invalid ELF header magic: != ELF [ 643.801436][T29213] bridge0: port 3(dummy0) entered blocking state [ 643.807920][T29213] bridge0: port 3(dummy0) entered disabled state [ 643.815300][T29213] dummy0: entered allmulticast mode [ 643.930272][T29225] loop0: detected capacity change from 0 to 1024 [ 643.939816][T29225] SELinux: security_context_str_to_sid () failed with errno=-22 [ 643.961634][T29229] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8780'. [ 644.293109][T29247] loop6: detected capacity change from 0 to 256 [ 644.301839][T29247] FAT-fs (loop6): bogus number of FAT sectors [ 644.308218][T29247] FAT-fs (loop6): Can't find a valid FAT filesystem [ 644.337064][T29254] program syz.1.8789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.363010][T29254] netlink: 'syz.1.8789': attribute type 10 has an invalid length. [ 644.529593][T29265] loop4: detected capacity change from 0 to 512 [ 644.538269][T29265] EXT4-fs: Ignoring removed bh option [ 644.543749][T29265] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.566435][T29265] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 644.596330][T29265] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 644.625393][T29265] EXT4-fs (loop4): orphan cleanup on readonly fs [ 644.650788][T29265] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8793: Failed to acquire dquot type 1 [ 644.657196][T29283] program syz.5.8801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.673248][T29265] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.8793: Invalid block bitmap block 0 in block_group 0 [ 644.691068][T29265] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.8793: Invalid block bitmap block 0 in block_group 0 [ 644.707254][T29283] netlink: 'syz.5.8801': attribute type 10 has an invalid length. [ 644.717062][T29265] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.8793: Invalid block bitmap block 0 in block_group 0 [ 644.748631][T29265] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8793: Failed to acquire dquot type 1 [ 644.765300][T29265] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8793: Failed to acquire dquot type 1 [ 644.787426][T29265] EXT4-fs (loop4): 1 orphan inode deleted [ 644.804857][T29287] loop5: detected capacity change from 0 to 128 [ 644.838771][T29287] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.925716][T29292] loop4: detected capacity change from 0 to 512 [ 644.936130][T29292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 644.949975][T29285] loop1: detected capacity change from 0 to 256 [ 644.961665][T29285] FAT-fs (loop1): bogus number of FAT sectors [ 644.965994][T29292] EXT4-fs (loop4): 1 truncate cleaned up [ 644.967835][T29285] FAT-fs (loop1): Can't find a valid FAT filesystem [ 644.990057][T29292] vcan0: entered allmulticast mode [ 644.997729][T29292] vcan0: left allmulticast mode [ 645.216811][T29306] program syz.4.8808 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 645.256172][T29306] netlink: 'syz.4.8808': attribute type 10 has an invalid length. [ 645.389640][T29319] loop4: detected capacity change from 0 to 512 [ 645.399264][T29319] ext4: Unknown parameter 'permit_directio' [ 645.420596][T29319] loop4: detected capacity change from 0 to 512 [ 645.429347][T29319] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 645.451746][T29319] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 645.461605][T29319] System zones: 0-2, 18-18, 34-34 [ 645.467923][T29319] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.595369][T29329] lo speed is unknown, defaulting to 1000 [ 645.602366][T29329] lo speed is unknown, defaulting to 1000 [ 645.608760][T29329] lo speed is unknown, defaulting to 1000 [ 645.673646][T29329] infiniband syz0: set active [ 645.678418][T29329] infiniband syz0: added lo [ 645.684965][ T2960] lo speed is unknown, defaulting to 1000 [ 645.719630][T29329] RDS/IB: syz0: added [ 645.723722][T29329] smc: adding ib device syz0 with port count 1 [ 645.729938][T29329] smc: ib device syz0 port 1 has pnetid [ 645.736287][T29329] lo speed is unknown, defaulting to 1000 [ 645.799568][T29329] lo speed is unknown, defaulting to 1000 [ 645.863702][T29329] lo speed is unknown, defaulting to 1000 [ 645.924791][T29329] lo speed is unknown, defaulting to 1000 [ 645.986634][T29329] lo speed is unknown, defaulting to 1000 [ 646.039042][ T2960] lo speed is unknown, defaulting to 1000 [ 646.053742][T29328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8815'. [ 646.075852][T29333] lo speed is unknown, defaulting to 1000 [ 646.097579][T29336] loop4: detected capacity change from 0 to 512 [ 646.116999][T29336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 646.182735][T29336] EXT4-fs (loop4): 1 truncate cleaned up [ 646.196205][T29338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.214376][T29333] vcan0: entered allmulticast mode [ 646.221467][T29333] vcan0: left allmulticast mode [ 646.268573][T29338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.296518][T29347] loop4: detected capacity change from 0 to 128 [ 646.309910][T29338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.322879][T29345] xt_hashlimit: max too large, truncated to 1048576 [ 646.379200][T29338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.445786][T29338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.458624][T29338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.471883][T29338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.484167][T29338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.503403][T29357] SELinux: syz.5.8826 (29357) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 646.791336][T29363] loop0: detected capacity change from 0 to 256 [ 646.804647][T29363] FAT-fs (loop0): bogus number of FAT sectors [ 646.810844][T29363] FAT-fs (loop0): Can't find a valid FAT filesystem [ 647.141534][T29369] SELinux: policydb version 65536 does not match my version range 15-34 [ 647.150206][T29369] SELinux: failed to load policy [ 647.372044][T29371] loop4: detected capacity change from 0 to 512 [ 647.412263][T29371] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 647.495636][T29376] loop5: detected capacity change from 0 to 512 [ 647.510637][T29376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 647.554266][T29376] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.692813][T29394] SELinux: syz.5.8838 (29394) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 647.932129][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8841'. [ 648.079388][ T29] kauditd_printk_skb: 2194 callbacks suppressed [ 648.079408][ T29] audit: type=1400 audit(1750636272.345:78449): avc: denied { allowed } for pid=29420 comm="syz.5.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 648.121723][T29413] loop0: detected capacity change from 0 to 256 [ 648.134375][T29428] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 648.135077][ T29] audit: type=1400 audit(1750636272.345:78450): avc: denied { map_create } for pid=29412 comm="syz.0.8840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 648.162517][ T29] audit: type=1400 audit(1750636272.345:78451): avc: denied { map_read map_write } for pid=29412 comm="syz.0.8840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 648.182630][ T29] audit: type=1400 audit(1750636272.345:78452): avc: denied { module_request } for pid=29389 comm="syz.4.8837" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 648.204951][ T29] audit: type=1400 audit(1750636272.375:78453): avc: denied { prog_load } for pid=29412 comm="syz.0.8840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 648.224303][ T29] audit: type=1400 audit(1750636272.375:78454): avc: denied { bpf } for pid=29412 comm="syz.0.8840" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 648.245220][ T29] audit: type=1400 audit(1750636272.375:78455): avc: denied { sqpoll } for pid=29420 comm="syz.5.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 648.264827][ T29] audit: type=1400 audit(1750636272.375:78456): avc: denied { prog_load } for pid=29412 comm="syz.0.8840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 648.284202][ T29] audit: type=1400 audit(1750636272.375:78457): avc: denied { bpf } for pid=29412 comm="syz.0.8840" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 648.305031][ T29] audit: type=1400 audit(1750636272.375:78459): avc: denied { perfmon } for pid=29412 comm="syz.0.8840" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 648.306411][T29413] FAT-fs (loop0): bogus number of FAT sectors [ 648.332448][T29413] FAT-fs (loop0): Can't find a valid FAT filesystem [ 649.052737][T29454] SELinux: policydb version 65536 does not match my version range 15-34 [ 649.061459][T29454] SELinux: failed to load policy [ 649.118218][T29459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8852'. [ 649.222144][T29466] SELinux: syz.6.8856 (29466) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 649.257875][T29469] program syz.4.8857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 649.332542][T29469] netlink: 'syz.4.8857': attribute type 10 has an invalid length. [ 649.365556][T29479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8860'. [ 649.401525][T29480] lo speed is unknown, defaulting to 1000 [ 649.470442][T29484] loop6: detected capacity change from 0 to 1024 [ 649.479152][T29487] loop0: detected capacity change from 0 to 512 [ 649.496021][T29487] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 649.514525][T29484] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 649.525553][T29484] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 649.550674][T29484] JBD2: no valid journal superblock found [ 649.556507][T29484] EXT4-fs (loop6): Could not load journal inode [ 649.562999][T29487] EXT4-fs (loop0): 1 truncate cleaned up [ 649.794347][T29500] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8863'. [ 649.821176][T29500] hsr0: entered promiscuous mode [ 650.025628][T29513] loop6: detected capacity change from 0 to 2048 [ 650.537716][T29526] program syz.4.8874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.593145][T29524] loop1: detected capacity change from 0 to 512 [ 650.609569][T29524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.615874][T29526] netlink: 'syz.4.8874': attribute type 10 has an invalid length. [ 650.655772][T29524] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 650.903154][T29547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8879'. [ 650.921404][T29542] SELinux: policydb version 65536 does not match my version range 15-34 [ 650.930222][T29542] SELinux: failed to load policy [ 650.933766][T29548] loop5: detected capacity change from 0 to 2048 [ 651.017930][T29554] lo speed is unknown, defaulting to 1000 [ 651.020696][T29556] loop6: detected capacity change from 0 to 512 [ 651.031859][T29556] ext4: Unknown parameter 'permit_directio' [ 651.070028][T29558] loop0: detected capacity change from 0 to 512 [ 651.079939][T29556] loop6: detected capacity change from 0 to 512 [ 651.088364][T29558] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 651.107051][T29556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 651.119324][T29560] netlink: 'syz.1.8879': attribute type 3 has an invalid length. [ 651.120455][T29556] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 651.144526][T29556] System zones: 0-2, 18-18, 34-34 [ 651.152139][T29556] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.171337][T29558] EXT4-fs (loop0): 1 truncate cleaned up [ 651.268072][T29569] FAULT_INJECTION: forcing a failure. [ 651.268072][T29569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.281414][T29569] CPU: 1 UID: 0 PID: 29569 Comm: syz.5.8888 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 651.281449][T29569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 651.281465][T29569] Call Trace: [ 651.281547][T29569] [ 651.281557][T29569] __dump_stack+0x1d/0x30 [ 651.281582][T29569] dump_stack_lvl+0xe8/0x140 [ 651.281607][T29569] dump_stack+0x15/0x1b [ 651.281635][T29569] should_fail_ex+0x265/0x280 [ 651.281716][T29569] should_fail+0xb/0x20 [ 651.281749][T29569] should_fail_usercopy+0x1a/0x20 [ 651.281788][T29569] _copy_from_user+0x1c/0xb0 [ 651.281810][T29569] __sys_bind+0x106/0x2a0 [ 651.281850][T29569] __x64_sys_bind+0x3f/0x50 [ 651.281881][T29569] x64_sys_call+0x2086/0x2fb0 [ 651.281904][T29569] do_syscall_64+0xd2/0x200 [ 651.282056][T29569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 651.282081][T29569] ? clear_bhb_loop+0x40/0x90 [ 651.282105][T29569] ? clear_bhb_loop+0x40/0x90 [ 651.282131][T29569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.282152][T29569] RIP: 0033:0x7ff33a8de929 [ 651.282249][T29569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.282272][T29569] RSP: 002b:00007ff338f47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 651.282295][T29569] RAX: ffffffffffffffda RBX: 00007ff33ab05fa0 RCX: 00007ff33a8de929 [ 651.282311][T29569] RDX: 000000000000001c RSI: 00002000000001c0 RDI: 0000000000000003 [ 651.282324][T29569] RBP: 00007ff338f47090 R08: 0000000000000000 R09: 0000000000000000 [ 651.282367][T29569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.282378][T29569] R13: 0000000000000000 R14: 00007ff33ab05fa0 R15: 00007ffff5d81c98 [ 651.282397][T29569] [ 651.333435][T29573] program syz.0.8891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 651.483792][T29576] netlink: 'syz.0.8891': attribute type 10 has an invalid length. [ 651.492142][T29576] dummy0: left allmulticast mode [ 651.497173][T29576] dummy0: left promiscuous mode [ 651.502333][T29576] bridge0: port 3(dummy0) entered disabled state [ 651.513771][T29576] team0: Port device dummy0 added [ 651.530994][T29575] loop6: detected capacity change from 0 to 512 [ 651.539912][T29575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 651.562816][T29575] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.615800][T29580] SELinux: ebitmap: truncated map [ 651.686762][T29580] SELinux: failed to load policy [ 651.738191][T29592] loop0: detected capacity change from 0 to 512 [ 651.745939][T29592] ext4: Unknown parameter 'permit_directio' [ 651.818150][T29593] loop6: detected capacity change from 0 to 2048 [ 651.827913][T29592] loop0: detected capacity change from 0 to 512 [ 651.852304][T29593] EXT4-fs: dax option not supported [ 651.859929][T29592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 651.911812][T29592] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 651.937217][T29586] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8896'. [ 651.948460][T29592] System zones: 0-2, 18-18, 34-34 [ 651.958057][T29592] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.978865][T29586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8896'. [ 651.991852][T29606] loop6: detected capacity change from 0 to 512 [ 652.005723][T29606] ext4: Unknown parameter 'permit_directio' [ 652.068903][T29606] loop6: detected capacity change from 0 to 512 [ 652.087856][T29606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 652.112040][T29606] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 652.140141][T29606] System zones: 0-2, 18-18, 34-34 [ 652.154300][T29618] loop5: detected capacity change from 0 to 512 [ 652.161889][T29606] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.174340][T29618] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 652.190073][T29618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 652.233729][T29618] EXT4-fs (loop5): orphan cleanup on readonly fs [ 652.240199][T29618] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.8905: bad orphan inode 267 [ 652.251667][T29618] EXT4-fs (loop5): Remounting filesystem read-only [ 652.276955][T29618] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.8905: dx entry: limit 0 != root limit 125 [ 652.288808][T29618] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.8905: Corrupt directory, running e2fsck is recommended [ 652.301934][T29600] lo speed is unknown, defaulting to 1000 [ 652.335717][T29631] xt_TPROXY: Can be used only with -p tcp or -p udp [ 652.363207][T29631] wireguard0: entered promiscuous mode [ 652.423185][T29637] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 652.445889][T29636] loop5: detected capacity change from 0 to 2048 [ 652.454678][T29636] EXT4-fs: dax option not supported [ 652.472721][T29600] chnl_net:caif_netlink_parms(): no params data found [ 652.556258][T29600] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.563501][T29600] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.573056][T29600] bridge_slave_0: entered allmulticast mode [ 652.579867][T29648] loop6: detected capacity change from 0 to 2048 [ 652.580216][T29600] bridge_slave_0: entered promiscuous mode [ 652.595967][T29600] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.603121][T29600] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.610798][T29600] bridge_slave_1: entered allmulticast mode [ 652.618600][T29600] bridge_slave_1: entered promiscuous mode [ 652.656579][T29600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.668969][T29600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.727790][T29600] team0: Port device team_slave_0 added [ 652.737103][T29600] team0: Port device team_slave_1 added [ 652.760372][T29600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.767630][T29600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.793674][T29600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.817082][T29600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.824175][T29600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.850285][T29600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.853248][T29651] loop6: detected capacity change from 0 to 2048 [ 652.868647][T29653] loop5: detected capacity change from 0 to 128 [ 652.876894][T29653] EXT4-fs: Ignoring removed nobh option [ 652.885345][T29653] ext4 filesystem being mounted at /327/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 652.901707][T29600] hsr_slave_0: entered promiscuous mode [ 652.909208][T29600] hsr_slave_1: entered promiscuous mode [ 652.915450][T29600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 652.923235][T29600] Cannot create hsr debugfs directory [ 652.986535][T29657] loop5: detected capacity change from 0 to 512 [ 653.001615][T29657] ext4: Unknown parameter 'permit_directio' [ 653.046791][T29657] loop5: detected capacity change from 0 to 512 [ 653.067747][T29657] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 653.084917][T29600] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.097353][ T29] kauditd_printk_skb: 2680 callbacks suppressed [ 653.097384][ T29] audit: type=1400 audit(1750636277.365:81040): avc: denied { read write } for pid=29662 comm="syz.0.8919" name="loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.101008][T29663] loop0: detected capacity change from 0 to 512 [ 653.103689][ T29] audit: type=1400 audit(1750636277.365:81041): avc: denied { open } for pid=29662 comm="syz.0.8919" path="/dev/loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.142587][T29663] ext4: Unknown parameter 'permit_directio' [ 653.156457][ T29] audit: type=1400 audit(1750636277.365:81042): avc: denied { ioctl } for pid=29662 comm="syz.0.8919" path="/dev/loop0" dev="devtmpfs" ino=905 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.187083][T29660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8917'. [ 653.188052][T29657] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 653.196054][ T29] audit: type=1400 audit(1750636277.405:81043): avc: denied { mounton } for pid=29662 comm="syz.0.8919" path="/103/file0" dev="tmpfs" ino=567 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 653.233786][ T29] audit: type=1400 audit(1750636277.435:81044): avc: denied { read write } for pid=21527 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.258532][T29657] System zones: [ 653.258627][ T29] ================================================================== [ 653.258670][ T29] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 653.262202][T29657] 0-2 [ 653.270268][ T29] [ 653.270279][ T29] write to 0xffffffff868d7a38 of 88 bytes by task 29657 on cpu 0: [ 653.270300][ T29] prb_reserve+0x696/0xaf0 [ 653.270337][ T29] vprintk_store+0x56d/0x860 [ 653.270356][ T29] vprintk_emit+0x178/0x650 [ 653.270376][ T29] vprintk_default+0x26/0x30 [ 653.270396][ T29] vprintk+0x1d/0x30 [ 653.270424][ T29] _printk+0x79/0xa0 [ 653.270453][ T29] debug_print_tree+0x17/0x110 [ 653.270477][ T29] ext4_setup_system_zone+0x45b/0x610 [ 653.277553][T29657] , 18-18 [ 653.280111][ T29] ext4_fill_super+0x2e0b/0x34e0 [ 653.282435][T29657] , 34-34 [ 653.290224][ T29] get_tree_bdev_flags+0x291/0x300 [ 653.294679][T29657] [ 653.299257][ T29] get_tree_bdev+0x1f/0x30 [ 653.349249][ T29] ext4_get_tree+0x1c/0x30 [ 653.353689][ T29] vfs_get_tree+0x54/0x1d0 [ 653.358130][ T29] do_new_mount+0x207/0x680 [ 653.362677][ T29] path_mount+0x4a4/0xb20 [ 653.367036][ T29] __se_sys_mount+0x28f/0x2e0 [ 653.371729][ T29] __x64_sys_mount+0x67/0x80 [ 653.376331][ T29] x64_sys_call+0xd36/0x2fb0 [ 653.380938][ T29] do_syscall_64+0xd2/0x200 [ 653.385452][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.391359][ T29] [ 653.393689][ T29] read to 0xffffffff868d7a38 of 8 bytes by task 29 on cpu 1: [ 653.401073][ T29] _prb_read_valid+0x1c4/0x920 [ 653.405865][ T29] prb_read_valid+0x3c/0x60 [ 653.410391][ T29] console_unlock+0x164/0x330 [ 653.415079][ T29] vprintk_emit+0x388/0x650 [ 653.419591][ T29] vprintk_default+0x26/0x30 [ 653.424201][ T29] vprintk+0x1d/0x30 [ 653.428135][ T29] _printk+0x79/0xa0 [ 653.432053][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 653.436923][ T29] kauditd_send_queue+0x270/0x2c0 [ 653.441962][ T29] kauditd_thread+0x421/0x630 [ 653.446659][ T29] kthread+0x486/0x510 [ 653.450745][ T29] ret_from_fork+0xda/0x150 [ 653.455261][ T29] ret_from_fork_asm+0x1a/0x30 [ 653.460041][ T29] [ 653.462370][ T29] value changed: 0x0000000000002b59 -> 0x0000000000004b59 [ 653.469487][ T29] [ 653.471819][ T29] Reported by Kernel Concurrency Sanitizer on: [ 653.477981][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(voluntary) [ 653.489973][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.500041][ T29] ================================================================== [ 653.508182][ T29] audit: type=1400 audit(1750636277.435:81045): avc: denied { open } for pid=21527 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.518380][T29663] loop0: detected capacity change from 0 to 512 [ 653.532669][ T29] audit: type=1400 audit(1750636277.435:81046): avc: denied { ioctl } for pid=21527 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 653.564633][ T29] audit: type=1400 audit(1750636277.495:81047): avc: denied { read write } for pid=29662 comm="syz.0.8919" name="loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.565805][T29657] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.587994][ T29] audit: type=1400 audit(1750636277.495:81048): avc: denied { open } for pid=29662 comm="syz.0.8919" path="/dev/loop0" dev="devtmpfs" ino=905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.588031][ T29] audit: type=1400 audit(1750636277.495:81049): avc: denied { ioctl } for pid=29662 comm="syz.0.8919" path="/dev/loop0" dev="devtmpfs" ino=905 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 653.604694][T29663] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 653.689395][T29600] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.713715][T29663] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 653.722833][T29663] System zones: 0-2, 18-18, 34-34 [ 653.730627][T29663] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.756485][T29600] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.884004][T29600] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.054343][T20533] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.108695][T20533] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.177753][T20533] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.227594][T20533] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.290181][T20533] bridge_slave_1: left allmulticast mode [ 654.295856][T20533] bridge_slave_1: left promiscuous mode [ 654.301647][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.309365][T20533] bridge_slave_0: left allmulticast mode [ 654.315058][T20533] bridge_slave_0: left promiscuous mode [ 654.320818][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.409764][T20533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.419739][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.429243][T20533] bond0 (unregistering): Released all slaves [ 654.492554][T20533] hsr_slave_0: left promiscuous mode [ 654.498219][T20533] hsr_slave_1: left promiscuous mode [ 654.503731][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.511162][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.519591][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.527156][T20533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.537589][T20533] veth1_macvtap: left promiscuous mode [ 654.543142][T20533] veth0_macvtap: left promiscuous mode [ 654.588709][T20533] team0 (unregistering): Port device team_slave_1 removed [ 654.602505][T20533] team0 (unregistering): Port device team_slave_0 removed [ 654.628514][T20533] team0 (unregistering): Port device dummy0 removed [ 654.979110][T20533] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.017514][T20533] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.087768][T20533] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.158551][T20533] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.231780][T20533] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.268878][T20533] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.308628][T20533] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.349442][T20533] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.410429][T20533] bridge_slave_1: left allmulticast mode [ 655.416210][T20533] bridge_slave_1: left promiscuous mode [ 655.421903][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.429818][T20533] bridge_slave_0: left allmulticast mode [ 655.435482][T20533] bridge_slave_0: left promiscuous mode [ 655.441183][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.449429][T20533] bridge_slave_1: left allmulticast mode [ 655.455096][T20533] bridge_slave_1: left promiscuous mode [ 655.460844][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.468598][T20533] bridge_slave_0: left allmulticast mode [ 655.474266][T20533] bridge_slave_0: left promiscuous mode [ 655.479982][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.488703][T20533] bridge_slave_1: left allmulticast mode [ 655.494352][T20533] bridge_slave_1: left promiscuous mode [ 655.500128][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.508137][T20533] bridge_slave_0: left allmulticast mode [ 655.513901][T20533] bridge_slave_0: left promiscuous mode [ 655.519586][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.607827][T20533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.617544][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.626866][T20533] bond0 (unregistering): Released all slaves [ 655.758078][T20533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.767918][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.777652][T20533] bond0 (unregistering): (slave team0): Releasing backup interface [ 655.786864][T20533] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 655.795288][T20533] bond0 (unregistering): Released all slaves [ 655.868975][T20533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.878847][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.888171][T20533] bond0 (unregistering): Released all slaves [ 655.928748][T20533] tipc: Disabling bearer [ 655.934086][T20533] tipc: Left network mode [ 655.987076][T20533] hsr_slave_0: left promiscuous mode [ 655.992832][T20533] hsr_slave_1: left promiscuous mode [ 655.999557][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.007231][T20533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.015405][T20533] hsr_slave_0: left promiscuous mode [ 656.021151][T20533] hsr_slave_1: left promiscuous mode [ 656.026798][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.034206][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.043350][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.050932][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.058494][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.065885][T20533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.077094][T20533] veth1_macvtap: left promiscuous mode [ 656.082607][T20533] veth0_macvtap: left promiscuous mode [ 656.088794][T20533] veth1_macvtap: left promiscuous mode [ 656.094347][T20533] veth0_macvtap: left promiscuous mode [ 656.169411][T20533] team0 (unregistering): Port device team_slave_1 removed [ 656.179400][T20533] team0 (unregistering): Port device team_slave_0 removed [ 656.221796][T20533] team0 (unregistering): Port device team_slave_1 removed [ 656.231622][T20533] team0 (unregistering): Port device team_slave_0 removed [ 656.280587][T20533] team0 (unregistering): Port device team_slave_1 removed [ 656.290109][T20533] team0 (unregistering): Port device team_slave_0 removed [ 656.320930][ T2960] infiniband syz1: ib_query_port failed (-19) [ 657.098204][T20533] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.187448][T20533] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.237464][T20533] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.277441][T20533] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.352014][T20533] bridge_slave_1: left allmulticast mode [ 657.357727][T20533] bridge_slave_1: left promiscuous mode [ 657.363356][T20533] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.371060][T20533] bridge_slave_0: left allmulticast mode [ 657.376880][T20533] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.457902][T20533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.467578][T20533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.477112][T20533] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 657.485533][T20533] bond0 (unregistering): Released all slaves [ 657.543332][T20533] hsr_slave_0: left promiscuous mode [ 657.549001][T20533] hsr_slave_1: left promiscuous mode [ 657.554524][T20533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.561943][T20533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.571198][T20533] veth1_macvtap: left promiscuous mode [ 657.576824][T20533] veth0_macvtap: left promiscuous mode [ 657.617285][T20533] team0 (unregistering): Port device team_slave_1 removed [ 657.627100][T20533] team0 (unregistering): Port device team_slave_0 removed