last executing test programs: 13.962888301s ago: executing program 2 (id=2972): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='dlm_lock_start\x00', r0, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 13.715787591s ago: executing program 2 (id=2976): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x100, 0xb) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 13.641909997s ago: executing program 2 (id=2978): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',version=9p2000,\x00']) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) keyctl$search(0xa, 0x0, &(0x7f0000000200)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003"], 0x2dc}}, 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000003c0)="ae", 0x1, r3) keyctl$search(0xa, 0x0, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x0}, r3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r6 = gettid() capset(&(0x7f0000000000)={0x19980330, r6}, &(0x7f0000000180)={0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13.432752244s ago: executing program 2 (id=2979): set_mempolicy(0x8000, &(0x7f0000000080), 0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt(r5, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x46) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0/file0\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0) r7 = socket(0x1e, 0x4, 0x0) r8 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r8, r7, 0x0) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, 0x0, 0xfffffffffffffc88}, 0xffffffff}], 0x1, 0x40000001, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.935525394s ago: executing program 2 (id=2985): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea038800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 10.144114623s ago: executing program 2 (id=3013): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) rmdir(0x0) 10.143759753s ago: executing program 32 (id=3013): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) rmdir(0x0) 2.556686272s ago: executing program 0 (id=3113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async, rerun: 64) socket(0xa, 0x3, 0x3a) (async, rerun: 64) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xe) dup2(r2, r2) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c5}, 0x8011) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6018232500082c"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffc7, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x80}, 0x48) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x8}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffd}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) socketpair$tipc(0x20, 0x1, 0x0, &(0x7f0000000600)) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d01040a0000000040000000000000030017"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.917195724s ago: executing program 0 (id=3123): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000800)) r1 = socket(0x28, 0x800, 0x5) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) unshare(0x22020600) rseq(&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) faccessat(0xffffffffffffffff, 0x0, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_vlan\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x7ff800, 0x6, 0x40, 0x100, 0x4, "662581aafa3889b5c36344708ea4cd677919a8", 0xfffffe00, 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) connect$tipc(r1, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r1) 1.702117912s ago: executing program 0 (id=3128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8be"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfdef) 1.636809857s ago: executing program 0 (id=3130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16], 0x48) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bind$tipc(r0, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x4, 0x4}}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x392b8a4ff77e3f7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x7f, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x71, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x24, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}, "a8"}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.612422839s ago: executing program 3 (id=3131): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=@newtaction={0x18f4, 0x30, 0xffff, 0x3, 0x0, {}, [{0x18e0, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x400, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x33cabbbe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6b40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a6d, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3179, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x801, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0xfffffffc, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x576, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_csum={0x1068, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x480000, 0x5, 0xdaf0, 0xe2c0}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x0, 0x6}, 0x22}}]}, {0x1004, 0x6, "3823274155994732a5ef187a7418586f22c5c02010f5ad233ebcd606223c45359d89c6223e4ae608d2423facea0af02a250e996186c1faa4fb46dfe9cd466c333509237f037618f15cb048c68d0b17c25f6b0ddc71a601342a5d856188c2d7638921c944b84b50cbe39cf8eb24d37efe6ca96429cae329d978a49ca2fc14092d38a2dfc586c81933a01bd74a0590412dd1b1d3c3c268ebde058f02499c2de6b023320889215e91235bff94b41d9738ae48576a734188a2bcb3345f44f1f2a706a6ff170031cfacdbe75312b590e70a8904ca604e20876d2d11607bf275b322c356e7eee03f23a04f901104b7795656c23b06ac5c1b6d28906a12bb634ae5fffce55bb9628147f7ee7b0ab29f78a54b0f2b473549341df989e2bbf522e19264e7435bb1a6b1e1e93faea841ce7d70eebe86b875155b4e16107c5f79286b4821fda28c97fceb1167eba268984242803ff7512afe2fc7f931d8f1885b24bd6767ad5939d289a692fd60689eaa5af28e7aa0a75fbfb43b81133bab0693ac525276c1c9c773cc9aba93a8e20bb8e3d3bc2779190e5f82ac2e75bda20b1aeaf05cf2cc46b13e484df7efa04739e6bf6b098b1bc91651a253f772291d2a53d6f18cdfdabce98bb6da41cea5d56ef8aca5ba7f09746c6e9b74943e7522f6120767cd907a5992442e104bcbc0243d243f1731870118acccd2fbeaaa204e6b18ad27ed789b48eb830bd79151f41e7a7340502e1ba293fd9ba2001159f241c09e166f21a74f8073d612aee6dc481c9120270c7e93e6e5244aa7cc5e6bc2fb595dedd69788f457dfbc97f931bc5271498dbd6f6dbfa3edc13ae240275c9393fcdcc618701b781a796c54c90e2cd7c70903cf3d15d78a731959e37f54b53b1c3ea5cc9737c417296e82fdff218ae67eebb37db7427d9bd06228fa8d955e8fefc2f485293fef5c833d8d62f9c51fd26debd1a7f6081e5137538eb0ee4f2b1afdcd9a6f82426d143c935a09eea4c356c6151678aa708a4b8321125699031b46497110f5c0afe7b7ac5331f5648dc7df91fa411797a9fa622b2d560697fb29d04f2786c06dfee2aa342035ed318d0d051fe31f36445f9cc1f2b35ec593794d05287dbf6432f834c2a1aafecd72aded414553762efd79aaab1ae1c2f79a1b13eda9988396da2f41eacdd30589cb6cadfbd30011d6442c5ac3fb043cd70522c126642cadd8a26e69a5fea623bc2a3715d79d469b556c648047c050c2a072c3970e92bd2ce462a1fd1ae524c00ac5689364e35e0d223c85f64ad09f83de4b16310746f8141fc5d8401f28685e140bf58000f78704360669364186826d545c2a9d105ac90f8f0e5eb5778a0adc3442ecaf94b9a7288cfdfce31474fc47958b02e06e5c59c269cb20325313f7edad102dacfd520155e4b1e72801c50bd6de23d94b6aeaabe432738a7540146a75a3fd879c710936e6f2caf819abc185c289e5a3b72a3073ba11c2233a59aa7e693906621e2374212a651fb201a82e10467261b0220f37575bddfb8ef3043e5e0fd34265db372acdd79bc76130599699a60074758dfc67ecad38c4bcc7a3ae7f1013685616e0a1d86cfd06be11fca39a4823cd832956983b5c0b7613b401ba976370864e0cb49fb3e43862f688e23f30cb8c69302a8fbd414be4bac47a4d2a8c377c0f0869a350d4b5838c857c2de0624a9e3b678813fdd34e1da722e151baf2d637628902641a5e984da5e5e82891e4ed5b88f727ccd35e73bfc4c2140d82f7f947b716e85e5a0fd679ac48bc02b63cf17b426ebc9bbf46877f23a144ac3f536ecfa343abb855bc53db3a92dbad93a21a64f229a1993fa4a66834370d553f1b8fb12da8f97d4047ec64814c6fbd7abdd5023d21a968958516ea140669adfc5f05aa00298fb30a796ff387f5f11f319465a6ce6c362b5eb18e4499aa0c647acc86d88e817baddf8722f298617eba560d44a48db65b3f5e613c9ff63a80b2a7a167bbd0bbc56faa0e6a5a8421bfcee27d8efd8c9a3bb54c2349bf68a4e055b644ba97f8162cfe90cf188f101488755266633c9fd12fcdd0fdac58f2f62b7bd4031f74d6513f26599929ba822869a2a27d9349fafa9794224642fbefa200ce4d51eeb3c41c5b0b2ae081b044ba0ce4ac06d5455ee91d2f566e2e9c52ec68e46a1450fc71c36fb422c47d8de85ae3ca2eaca7caf940540681654b6139ef0966b770d75c50a2bd5a416730a464174c825287b11bb30e1756d602b0b885b3a082b5686ae52fe91ffb69eb69c8d23c082fb9d23e29844b937a5feeabe27dfd360589a737622d6add406245a3583db356cdea3d566c7b45acac219998e415d2ba2839c0474a06acd9cf6088c65b51f7e3aec3ed13c96bf3cbfcc706ec65e87825fd2cf150d16368d2668224bf112098fe77ee5c452e0c861393ea3d07dc4cd8b837f4627acc93b6b2d0a63dfbb21603f2ce151d27edf8ffa8d762b6a49fce3629243905ee1a9706af3748067fa5f1778540fe19de58e3eeac194c75c43b75bf083671e483e54ec78c6e030cf2bb22ce1a4947b5b38c64f9d76c8871e125afcaac9dbd05e40a54fba56e641ab2f04721189b4ba5cc6054786e91b9b526f5667924cf794bce69319b6c7266ad7c5c0041b556bea6e4ad54ec84de42f06a8c6916e9478227a1e16c3003e836b2cae57459aacaa8a40c2a8ccf041ce409add8904a0995e979ee841575c2ecf30dfd1931859035e50ec3846caf146f557673da62bba5e00ec89814f2fba7d57636f9735bda97579191971f3d9a943118106959bc2dfd78437535d3b08833f21a0c309f3eca930f4538060882eff51032e2dcf1ed96b699707cd8f8a8bd6f53e6cc1029c18e040ba1c8037ab4d3bcfc5b92c6e849d2cc3c85b8b0d76f10ed3ce86405d550fe345a9dd52022b77d955d6cb064e4b14d4aee4c662a89dda4203105b12c644d186c4e1b514ede05ec90c7b5a715a29348ef66ed3a59907caf8398723a656bb0735ed1d54f912c534ecbc3e09449cf496925206b0fa35571c3a0a7a2bf7d52e74de118f32af29b22c036854e821403d57ec0623a7f005ccc4a29458415ad12f0dccd5b1c9b94a1922dcc99efa3c583cdd207459d50f4f26d8bab7d5abe3f46176aea5eb24df11c5f857507c42119767092df21ffc9f4c58a1bdaf676bc69a70c12fae7b599e2b1185c34548bb2f14572f8f3cdcf8c830cb45cbf5599f93e2ee9d1457987844544eb73ba3659d232f9a1e68b31fcf29966e3873a3e211aa3e6804749bb99cae6bd5d82a4d77af04151ae083628bc18a1b4d8694d3b9a67627ae8a41b5f0c74532289867c82e7a950fa9a763ca654096be5e5b423d8ce354c07191889ed7fcb923d7f28c9cf0e3775db2ab9aacfb65835dff3e0bccecfd2506c9e64b26cd51e9b084f482f281884e42c1d93eb9f1dd7354697c72f9b9f00725c25ee1a0b0807e054d43bdbe2faaa0b148c14ac46a7ea05c53dff9f32466b00c6c48328c5eb82fe48dff26aed6ec54ba85d01b16d85542e5e4c626eacba8e068ed01b5c88c50bf481948e38bf002494f9f115a7e460a31ef726db49286289cc22cb022ed8db9210efbcc8cb14cc0dd4a1e98fb154421f98373f9248306d52458ed3393e1dc39411d60077b8524f8a745f147ec08d31ce9e97459074bee4aa907f1c42187b61c22024a3cd7a801e775950119e3e8bdce46cfbe0f9d9624ff8d312889f82de6e578420b9a1b17f6a941d96dae6550ea62fa2014d6c64b234140cc6d95e1348a4d67aec5c883d287e34b702b9e852ffd2ffa879ac6f7a35d944e832458ae206f06cb63a32278ee542b5a306a51454074561975c0458d44e1c6016bb87eae681963817581408c27fc7903a4930e9a394d58fd76f0c7f990cadeb1732f63f19a59877f0511f83e8bc2ece91dc0d907d9608c667c0ccbed4bcd4ae3784d6bf71c380f545b024f37438cc280d99f4d248cc29d0857e7b674626d20b53eb0bd4ed64a1343cf7bdb59a0c5186c9b620b35b3de7b85a9cf1db6d2e0eb93180710e657527137fb6f47ae50071d6f002780f0fe707e4cfd580622313795ca543215718c60f2128576e9a2f323481f274f914d17ed007be67a7f3e0d2990e7b9edd23a2eed98decff83f143dea27566bbce0f87d060468b5355aac4d790e1af9fa6d5475f73252231ff28f262df2a3f83a9813037105c529cef55005d1b8fbdbc1f2e02d3d2d79e1685cd27e285923b407432ba9cdacb170b38d0d6925217fcd8ade25679b3709727b83ca8b291921835c6e1de367dcdbe87184f1f87bda12bb7ca279b869de81b3cfca7a0ce66dfc2c399830618ae85ba82afc325baa4ccefd11c1d98344e28186570e555b4eb1db4b0ecbd4273b8d092895a2b61549a581599d17c3b2148db3aee2a299a6e53a3b2239619f3c519450ba6923da2478a3ef9bb05a6e8eb7a18d48c9d4c76f0204dfe8ed2d2ac5be5a85968eab6cb9d857a0fc5ae37329513e2ddbfde6045305d0e6e8f1c9db1d4bc77243190f8b0288932f582fde78ae993816a2e21d02be24fea31c03ee5612343df21022bd88a415ab23cc8232b609e8f957d0b3ea0d56bf1392597a3743da80375d9ec82ea805cf79158149f887a5f7355b8749476f955c60a19b5c000e228795bea4397327182f679c45ebfa8e7cfa33307f0afa734623d60a7d1cb1e2ee1e735441f94d0f5bd2e7d9b4aae80049c50c6dece8a7243ec4ade161fbac0b26dc3269724e50af202a00350aaef0562daeba821b20d42e88f222c34222a4f1344e7b09c06acffe56f1c8a2789e208dd73bb5ef6309906766e7097d7ee8d4d7311bb009650f3e37349fb74390962bf364d8f229f171d84c31c244e3130790975194d6d7fcf9b4c8e54e98e8ee09e8113d8e83b2d18ac75f822fe79356d910cce92cd6356eb9144e3a43ff42d521857ab71456c378f9d5b0bbfc24c2735dcf4aa31a54dfc25fe1e736f796cd703bb46621635ef755cddc6c822d15d4d27242759daa5fea80e1f584e893675aac08a085f554e9b8dea6c899450ac35fd6de0efe0f72cf5d0f746b00450f1fa1dc7ffcef201b9864bcaedbcb27b506abd107c681cdf6868d1169f6104960446b7c402103965de5a4e50608dbc8495b938168bce3cdfa7a9303a012ccaa5314ee3ff49c6d6b02c02ec98ad4dcd4c4fde4ec10ce8208bf975e0a5f3bec01a3b5f68f40b2681c23ad366063649985e66b02426c7a433ef1e22abf9437ed85d7539e803acb52abef4875caaf836bbe1f79cb225f991472c1ef3e1c0554ebd8360f7343a1479f749aaa2eff437073504f23d82ff25c4b291199fd4224668f8903ad212d56d0e89bd14830ddb85444fd07de7fbf4a06c1a1e8d5a2106558eef5255c6df4a0eae10ed5c102dcade4a3b9d736836e8a5eb2ba3356f9eb8c3f7caef02e9fe2099408d6f8da9010e981b1bf5891792c03b3c77f5769272ceb46d18aa0ca87e5d99f6c7903421dd668d98b6cba01efc78c5e439b2c1c89ee583d20fb2fe5a17f7bf739de013af99dfe1368f0705d81faf1e78a7bee670228168a30bfcc9eb29fc4111857152d7446b1737ab0bf9517f23b5be9445e8d1f84b10294c3862b65a142c297e1e983fd4b93c2b0efb8aa95b1252bff9126e918d09a9dea5d76c1f25952dd605028a14237bc6ccbd2d1b38e5c288878bb34a41f3e3d7aa5130792b47e4bf5c1242b3b8b7f1a709851cde6b028bdfe328d72b9352a8281499385f0cc89976b345025abb72cd7b4eb0eecb8a347057dd41de"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x18f4}}, 0x0) 1.571800812s ago: executing program 3 (id=3134): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) inotify_init1(0x0) (fail_nth: 1) 1.311182064s ago: executing program 3 (id=3138): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESHEX=r4], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.294953775s ago: executing program 5 (id=3139): set_mempolicy(0x8000, &(0x7f0000000080), 0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$eJzs20tvG0UcAPD/rpOUvkgo5dEHECiIiEfSpAV64AICiQsSEhzKMSRpFeI2qAkSrSIICHFFlbgjjkh8Ak5wQcAJiSsfAFWqUC4tnIzW3k1sx3k4deKCfz9pk5ndcWb+3hl7dicbQM8azn4kEYci4o+IGKxlGwsM137dXlma+ntlaSqJSuXtv5JquVsrS1NF0eJ1B/PMSBqRfp7EiRb1Lly9NjdZLs9cyfNji5c+GFu4eu352UuTF2cuzlyeOHfu7Jnxl16ceKEjcWZtunX84/mTx9549/qbU+evv/fLd0kRf1McHTK82cGnKpUOV9ddh+vSSV8XG0JbShGRna7+6vgfjFKsnbzBeP2zrjYO2FWVSqVycOPDyxXgfyyJbrcA6I7iiz67/i22PZp63BVuvlK7AMrivp1vtSN9keZl+puubztpOCLOL//zdbbF7tyHAABo8EM2/3mu1fwvjQfryt2brw0NRcR9EXEkIu6PiKMR8UBEtexDEfFwm/U3L5Ksn/+kN3YU2DZl87+X87WtxvlfMfuLoVKeO1yNvz+5MFueOZ2/JyPRvy/Lj29Sx4+v/f7lRsfq53/ZltVfzAXzdtzo29f4munJxck7ibnezU8jjve1ij9ZXQlIIuJYRBzfYR2zz3x7cqNjW8e/iQ6sM1W+iXi6dv6Xoyn+QrL5+uTYPVGeOT1W9Ir1fv3ti7c2qv+O4u+A7PwfaNn/V+MfSurXaxfa+/v7tji+0/4/kLxTTQ/k+z6aXFy8Mh4xMNfYKar7J9bni/JZ/COnWo//I7H2TpyIiKwTPxIRj0bEY3nbH4+IJyLi1CYx/vzqk+/vPP7dlcU/3db5X0sMRPOe1onS3E/fN1Q61E782fk/W02N5Hu28/m3nXa135sBAADgvymNiEORpKOr6TQdHa39v/zROJCW5xcWn70w/+Hl6dozAkPRnxZ3ugbr7oeO55f1RX6iKX8mv2/8VWl/NT86NV+e7nbw0OMObjD+M3+Wut06YNd5Xgt6l/EPvcv4h95l/EPvajH+93ejHcDea/X9/0kX2gHsvabxb9kPeojrf+hdxj/0LuMfetLC/tj6IXkJiXWJSO+KZkjsUqLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//9Oa5Js=") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x46) 1.208301372s ago: executing program 5 (id=3140): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000dc0c75b20000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001000000480001800500020020000000060001000200000008000600030000"], 0x84}}, 0x20000000) 1.184426064s ago: executing program 0 (id=3141): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x188, 0x32, 0x1, 0x2, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ba2}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ffffffb}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESHEX=r4], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.125210489s ago: executing program 5 (id=3142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) (async, rerun: 32) r1 = fsopen(&(0x7f0000000400)='zonefs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000500)='syscall\x00', &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x6, @private0, 0x10}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e22, 0x200, @loopback, 0xffff}}}, &(0x7f0000000280)=0x84) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104000000000000000000000010", @ANYRES32=r7, @ANYBLOB="000000000000000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x8}, 0x0) 1.10636157s ago: executing program 3 (id=3143): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1e8, &(0x7f00000002c0)="$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") (fail_nth: 14) 1.028494207s ago: executing program 1 (id=3144): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, 0x0, 0x0, 0xa) (fail_nth: 9) 973.024121ms ago: executing program 1 (id=3145): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001bc0)=@newtaction={0x18f4, 0x30, 0xffff, 0x3, 0x0, {}, [{0x18e0, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x400, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10001, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x33cabbbe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6b40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1000000, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1a6d, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0x0, 0x0, 0xfffffffe, {0x4, 0x0, 0x0, 0x0, 0xb, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3179, 0x0, 0x1000000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x25d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x801, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x80000, 0x0, 0x0, 0x0, 0xf9, 0xfffffffc, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x576, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4, 0x2, 0x8]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}, @m_csum={0x1068, 0x18, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x480000, 0x5, 0xdaf0, 0xe2c0}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x7, 0x1, 0x0, 0x6}, 0x22}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x18f4}}, 0x0) 945.717113ms ago: executing program 1 (id=3146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='dlm_lock_start\x00', r1, 0x0, 0x100}, 0x18) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 718.873872ms ago: executing program 3 (id=3147): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100b11b700000feffff1a000000180001801400020064756d6d7930"], 0x2c}}, 0x0) 718.355652ms ago: executing program 4 (id=3148): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8be"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfdef) 693.521894ms ago: executing program 0 (id=3149): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x9, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r1, 0x5421, &(0x7f0000000780)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) execveat$binfmt(0xffffffffffffffff, r3, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8000, 0x22) rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80adf7c39da42d017dca493817aa84407e88dca79ad1ceecb28019cf673c66020af498b1b4aa96afec84191b9b0358f", 0x41) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) r7 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x3, 0x700, &(0x7f0000000a40)="$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") futimesat(r7, &(0x7f0000000000)='./file1\x00', 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0xfffffffc) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x0) 616.73027ms ago: executing program 3 (id=3150): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 615.63422ms ago: executing program 4 (id=3151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000ec0)="b9f2", 0x2}], 0x1, 0x0, 0x0, 0x804c0c0}, 0x800) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x9, 0x55, 0x3, 0xb4, 0xe2, 0x3, 0x3, 0x80, 0x5, 0x1d, 0x80, 0xb}, 0xe) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/43, 0xfffffffffffffed5}, 0x40}], 0x1, 0x40000002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0xa400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x40040, 0x11c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 547.373236ms ago: executing program 1 (id=3152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c79205e02f1561b0010095448e9f7024b45fb2006c9117fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8be"], 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xfdef) 494.764021ms ago: executing program 1 (id=3153): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000dc0c75b20000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200000}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000300000008"], 0x84}}, 0x20000000) 412.686377ms ago: executing program 4 (id=3154): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) r11 = memfd_secret(0x80000) fcntl$setlease(r11, 0x400, 0x0) close(r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) io_setup(0x6, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) 352.740012ms ago: executing program 1 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r8) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x2703d26, 0x25dfdbff, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x4044057) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x1, 0x44f, &(0x7f00000002c0)="$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") r9 = open(&(0x7f0000000240)='./file2\x00', 0x165142, 0x148) ftruncate(r9, 0x2007ffc) sendfile(r9, r9, 0x0, 0x800000009) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x4, 0x1, 0x8, @local, @mcast1, 0x20, 0x80, 0x2, 0xd}}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x20, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x700, 0x40, 0x9, 0x200, {{0x21, 0x4, 0x1, 0x2b, 0x84, 0x65, 0x0, 0x81, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0x1, [{@multicast1, 0x558}]}, @timestamp_addr={0x44, 0x4c, 0x6, 0x1, 0x3, [{@broadcast, 0x1}, {@rand_addr=0x64010101}, {@empty, 0xfffff550}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x2}, {@local}, {@broadcast, 0x1}, {@empty, 0x3a}, {@broadcast, 0x3}, {@multicast2, 0x6}]}, @lsrr={0x83, 0x7, 0x2d, [@multicast1]}, @lsrr={0x83, 0xb, 0xd4, [@multicast2, @private=0xa010102]}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xb4, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x48084) 326.156814ms ago: executing program 4 (id=3156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sendto$inet(r0, 0x0, 0x3e8, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 254.90744ms ago: executing program 4 (id=3157): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000180)={[{@nolazytime}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@norecovery}, {@jqfmt_vfsv0}, {@quota}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x3, 0x579, &(0x7f0000000280)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000000)) ftruncate(r0, 0x2007ffc) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close(0x4) sendfile(r0, r0, 0x0, 0x800000009) 221.614113ms ago: executing program 5 (id=3158): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, 0x0, 0xfdef) 188.389475ms ago: executing program 5 (id=3159): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESHEX=r4], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 120.525101ms ago: executing program 4 (id=3160): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) statx(0xffffffffffffffff, &(0x7f0000002340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) writev(r0, &(0x7f00000025c0)=[{0x0}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x188, 0x32, 0x1, 0x2, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6ba2}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ffffffb}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) open_tree(r0, &(0x7f0000000640)='./file0\x00', 0x80001) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x25, 0xff, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x9) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYRESHEX=r4], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 0s ago: executing program 5 (id=3161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167, @ANYRES16=r0, @ANYRES8, @ANYRESOCT=r0, @ANYBLOB="559eed9d9d873088f6179791210c46bec5da2d98cd47d6d1e7d3f0b9978b7faac3e0f0bb232ec5c18978da2fba782bf89e00b6e1c7f27ce2f489c383ca8c7445871716673ac65fe58dfda98cac186b799b3f0226eedefeffbc2832c3f2a5da11d32c9d90270dcf713f83e3aa66402a555cf0e27b74e94a011090a05afb59104eae3aa9c324c5538018935d8b5de0d9e91bca37eb1b"], 0x1, 0x150, &(0x7f0000000440)="$eJzs2zHrEmEcB/DfqZnV4hwNBy1NUr2CIgyig6JwqKnAWjSEXK4mX0pvMAgntyf0SuvQoeG8+Pv5LH7hi/B7lLuH5+De3fk0my6WHxcv1zHIsug9ijw2WQyjE92orAIAuEo2KcWPlFK6voob3yKl1PZEAEDTTu7/nZYHAwAa4/wPAJfH/g8Al+f1m7fPHxfF+FWeDyK+r8pJOak+q/7ps2J8P98ZHr61LstJd98/qPr87/5a3PzVPzza9+Pe3arfdk9eFLX+VkybXz4AAABchFEW2S6cON+PRvlvtb5KfzwfqJ3fe3G7d6ZFAAD/ZPnl6+z9fP7hs3CWsP3N/4MxhKOh79/Zh7bvTEDTDhd925MAAAAAAAAAAAAAAACnnON1orbXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHU/AwAA//88l02D") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x4a) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 148.703672][T11070] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.722624][T11070] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 148.732747][T11070] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 148.742793][T11070] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2755: Failed to acquire dquot type 1 [ 148.762391][T11079] loop1: detected capacity change from 0 to 1024 [ 148.897063][T11082] loop1: detected capacity change from 0 to 1024 [ 148.942007][T11082] EXT4-fs: Ignoring removed bh option [ 148.947437][T11082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.959141][T11082] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.080211][ T29] audit: type=1400 audit(1754159529.165:10684): avc: denied { ioctl } for pid=11088 comm="syz.1.2762" path="socket:[38076]" dev="sockfs" ino=38076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.169933][T11097] bond5: entered promiscuous mode [ 149.175205][T11097] bond5: entered allmulticast mode [ 149.200947][T11097] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.220525][T11097] bond5 (unregistering): Released all slaves [ 149.245456][T11095] loop1: detected capacity change from 0 to 1024 [ 149.256009][T11095] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.267350][T11095] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.285675][T11095] JBD2: no valid journal superblock found [ 149.292063][T11095] EXT4-fs (loop1): Could not load journal inode [ 149.354720][T11102] loop3: detected capacity change from 0 to 1024 [ 149.410207][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.418725][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.428112][T11110] loop0: detected capacity change from 0 to 1024 [ 149.451395][T11109] bond7: entered promiscuous mode [ 149.456585][T11109] bond7: entered allmulticast mode [ 149.463580][T11109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.478123][T11092] Q6\bY4 speed is unknown, defaulting to 1000 [ 149.519495][T11114] loop0: detected capacity change from 0 to 512 [ 149.681998][T11102] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.692943][T11102] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.727744][T11114] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 149.737927][T11114] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 149.747874][T11114] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2771: Failed to acquire dquot type 1 [ 149.748273][T11124] loop1: detected capacity change from 0 to 1024 [ 149.764763][T11114] EXT4-fs (loop0): 1 truncate cleaned up [ 149.767109][T11102] JBD2: no valid journal superblock found [ 149.771708][T11114] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.776942][T11102] EXT4-fs (loop3): Could not load journal inode [ 149.794185][T11124] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 149.805086][T11124] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 149.809619][T11114] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2771: Failed to acquire dquot type 1 [ 149.832795][T11124] JBD2: no valid journal superblock found [ 149.838255][T11120] Q6\bY4 speed is unknown, defaulting to 1000 [ 149.838565][T11124] EXT4-fs (loop1): Could not load journal inode [ 150.004616][T11130] loop3: detected capacity change from 0 to 512 [ 150.038755][T11130] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2777: Failed to acquire dquot type 1 [ 150.072097][T11130] EXT4-fs (loop3): 1 truncate cleaned up [ 150.078216][T11130] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.106860][T11130] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2777: Failed to acquire dquot type 1 [ 150.126525][T11135] loop0: detected capacity change from 0 to 1024 [ 150.133862][T11135] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.144834][T11135] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.167062][T11135] JBD2: no valid journal superblock found [ 150.172956][T11135] EXT4-fs (loop0): Could not load journal inode [ 150.245700][T11147] bond5: entered promiscuous mode [ 150.250778][T11147] bond5: entered allmulticast mode [ 150.256326][T11147] 8021q: adding VLAN 0 to HW filter on device bond5 [ 150.305624][T11138] loop1: detected capacity change from 0 to 1024 [ 150.317218][T11138] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.329306][T11138] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.343162][T11138] JBD2: no valid journal superblock found [ 150.349169][T11138] EXT4-fs (loop1): Could not load journal inode [ 150.387106][T11152] loop3: detected capacity change from 0 to 512 [ 150.395807][T11152] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.411869][T11152] EXT4-fs (loop3): 1 truncate cleaned up [ 150.458341][T11166] loop0: detected capacity change from 0 to 512 [ 150.468819][T11169] loop1: detected capacity change from 0 to 512 [ 150.476480][T11169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.491275][T11169] EXT4-fs (loop1): 1 truncate cleaned up [ 150.498030][T11166] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2790: Failed to acquire dquot type 1 [ 150.512927][T11166] EXT4-fs (loop0): 1 truncate cleaned up [ 150.518919][T11166] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.539150][T11166] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2790: Failed to acquire dquot type 1 [ 150.655200][T11180] loop1: detected capacity change from 0 to 1024 [ 150.668855][T11180] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 150.679840][T11180] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 150.690260][T11180] JBD2: no valid journal superblock found [ 150.696163][T11180] EXT4-fs (loop1): Could not load journal inode [ 150.729144][T11182] bond8: entered promiscuous mode [ 150.734399][T11182] bond8: entered allmulticast mode [ 150.741159][T11182] 8021q: adding VLAN 0 to HW filter on device bond8 [ 150.783838][T11184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.848975][T11184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.009421][T11195] loop0: detected capacity change from 0 to 1024 [ 151.052364][T11192] loop1: detected capacity change from 0 to 1024 [ 151.070833][T11195] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.075236][T11192] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 151.081837][T11195] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 151.103765][T11192] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 151.159253][T11194] Q6\bY4 speed is unknown, defaulting to 1000 [ 151.176575][T11195] JBD2: no valid journal superblock found [ 151.182475][T11195] EXT4-fs (loop0): Could not load journal inode [ 151.205132][T11192] JBD2: no valid journal superblock found [ 151.211230][T11192] EXT4-fs (loop1): Could not load journal inode [ 151.587540][T11214] loop4: detected capacity change from 0 to 512 [ 151.604933][T11214] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2809: Failed to acquire dquot type 1 [ 151.660367][T11214] EXT4-fs (loop4): 1 truncate cleaned up [ 151.676735][T11214] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.729540][T11214] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2809: Failed to acquire dquot type 1 [ 151.784738][T11222] loop0: detected capacity change from 0 to 512 [ 151.798710][T11222] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.883842][T11222] EXT4-fs (loop0): 1 truncate cleaned up [ 151.902638][T11227] loop1: detected capacity change from 0 to 1024 [ 151.909332][T11227] EXT4-fs: Ignoring removed bh option [ 151.914925][T11227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.937778][T11227] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.026806][T11244] can0: slcan on ttyS3. [ 152.050290][T11248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.060787][T11246] loop1: detected capacity change from 0 to 512 [ 152.071897][T11244] can0 (unregistered): slcan off ttyS3. [ 152.087120][T11246] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2821: Failed to acquire dquot type 1 [ 152.099123][T11246] EXT4-fs (loop1): 1 truncate cleaned up [ 152.105281][T11246] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.120693][T11246] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2821: Failed to acquire dquot type 1 [ 152.132479][T11252] loop0: detected capacity change from 0 to 1024 [ 152.139243][T11252] EXT4-fs: Ignoring removed bh option [ 152.144743][T11252] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.152268][T11248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.162796][T11252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.214580][T11248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.240141][T11255] can0: slcan on ttyS3. [ 152.250863][T11255] __nla_validate_parse: 18 callbacks suppressed [ 152.250879][T11255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2824'. [ 152.286149][T11248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.358235][T11257] loop0: detected capacity change from 0 to 1024 [ 152.363683][ T291] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.369540][T11257] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 152.373269][ T291] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.381980][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.385377][T11257] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 152.397058][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.420168][T11257] JBD2: no valid journal superblock found [ 152.426749][T11257] EXT4-fs (loop0): Could not load journal inode [ 152.435731][T11255] can0 (unregistered): slcan off ttyS3. [ 152.499473][T11261] loop2: detected capacity change from 0 to 512 [ 152.518021][T11264] loop0: detected capacity change from 0 to 1024 [ 152.520344][T11261] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2826: Failed to acquire dquot type 1 [ 152.525897][T11264] EXT4-fs: Ignoring removed bh option [ 152.541083][T11264] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.544273][T11261] EXT4-fs (loop2): 1 truncate cleaned up [ 152.548373][T11264] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.563269][T11268] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.566927][T11261] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.598422][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2829'. [ 152.618416][T11261] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2826: Failed to acquire dquot type 1 [ 152.631657][T11268] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.703308][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 152.810993][T11268] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.865116][T11282] Q6\bY4 speed is unknown, defaulting to 1000 [ 152.908493][T11282] siw: device registration error -23 [ 153.050161][T11286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.083993][T11268] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.129963][T11286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.345005][T11290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2837'. [ 153.456641][T11293] loop2: detected capacity change from 0 to 512 [ 153.475599][T11293] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2838: Failed to acquire dquot type 1 [ 153.487620][T11293] EXT4-fs (loop2): 1 truncate cleaned up [ 153.494039][T11293] ext4 filesystem being mounted at /513/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.507754][T11293] __quota_error: 217 callbacks suppressed [ 153.507770][T11293] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 153.523660][T11293] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 153.533603][T11293] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2838: Failed to acquire dquot type 1 [ 153.662498][T11301] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.737827][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2842'. [ 153.746959][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2842'. [ 153.755962][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2842'. [ 153.773910][T11301] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.792647][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2842'. [ 153.829585][T11305] Q6\bY4 speed is unknown, defaulting to 1000 [ 153.908158][T11305] siw: device registration error -23 [ 153.923429][T11301] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.983953][T11301] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.030727][ T29] audit: type=1400 audit(1754159534.115:10878): avc: denied { create } for pid=11308 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.050560][ T29] audit: type=1400 audit(1754159534.115:10879): avc: denied { setopt } for pid=11308 comm="syz.3.2844" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.071186][ T29] audit: type=1400 audit(1754159534.115:10880): avc: denied { write } for pid=11308 comm="syz.3.2844" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.091847][ T29] audit: type=1400 audit(1754159534.115:10881): avc: denied { read } for pid=11308 comm="syz.3.2844" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.166159][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.183222][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.215393][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.235365][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.343874][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2847'. [ 154.357004][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2846'. [ 154.410542][ T29] audit: type=1400 audit(1754159534.495:10882): avc: denied { create } for pid=11318 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 154.446245][ T29] audit: type=1400 audit(1754159534.535:10883): avc: denied { open } for pid=11318 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.465734][ T29] audit: type=1400 audit(1754159534.535:10884): avc: denied { perfmon } for pid=11318 comm="syz.2.2848" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 154.486838][ T29] audit: type=1400 audit(1754159534.535:10885): avc: denied { kernel } for pid=11318 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.512480][T11323] loop2: detected capacity change from 0 to 512 [ 154.530896][T11323] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.573965][T11323] EXT4-fs (loop2): 1 truncate cleaned up [ 154.600258][T11331] loop3: detected capacity change from 0 to 512 [ 154.609991][T11331] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 154.637050][T11331] EXT4-fs (loop3): 1 truncate cleaned up [ 154.670315][T11335] can0: slcan on ttyS3. [ 154.733306][T11335] can0 (unregistered): slcan off ttyS3. [ 154.775675][T11339] Q6\bY4 speed is unknown, defaulting to 1000 [ 154.820221][T11339] siw: device registration error -23 [ 154.927092][T11337] loop3: detected capacity change from 0 to 1024 [ 154.948488][T11337] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 154.960082][T11337] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.026193][T11337] JBD2: no valid journal superblock found [ 155.032539][T11337] EXT4-fs (loop3): Could not load journal inode [ 155.169002][T11350] can0: slcan on ttyS3. [ 155.252291][T11351] Q6\bY4 speed is unknown, defaulting to 1000 [ 155.328197][T11351] siw: device registration error -23 [ 155.546542][T11353] loop1: detected capacity change from 0 to 512 [ 155.546894][T11349] can0 (unregistered): slcan off ttyS3. [ 155.556169][T11353] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.581785][T11353] EXT4-fs (loop1): 1 truncate cleaned up [ 155.606180][T11358] bond6: entered promiscuous mode [ 155.611362][T11358] bond6: entered allmulticast mode [ 155.620243][T11358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.630636][T11358] bond6 (unregistering): Released all slaves [ 155.700211][T11363] loop1: detected capacity change from 0 to 512 [ 155.721454][T11363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.737840][T11363] EXT4-fs (loop1): 1 truncate cleaned up [ 155.793138][T11376] bridge0: port 4(vlan2) entered blocking state [ 155.799491][T11376] bridge0: port 4(vlan2) entered disabled state [ 155.806149][T11376] vlan2: entered allmulticast mode [ 155.811349][T11376] bridge0: entered allmulticast mode [ 155.817324][T11376] vlan2: left allmulticast mode [ 155.822225][T11376] bridge0: left allmulticast mode [ 155.869714][T11374] loop1: detected capacity change from 0 to 1024 [ 155.885572][T11374] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.897478][T11374] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 155.910665][T11374] JBD2: no valid journal superblock found [ 155.917012][T11374] EXT4-fs (loop1): Could not load journal inode [ 156.058816][T11386] loop3: detected capacity change from 0 to 512 [ 156.068144][T11386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.085251][T11386] EXT4-fs (loop3): 1 truncate cleaned up [ 156.130628][T11395] loop0: detected capacity change from 0 to 164 [ 156.150692][T11394] loop1: detected capacity change from 0 to 1024 [ 156.168258][T11394] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.179968][T11394] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.224064][T11397] loop2: detected capacity change from 0 to 1024 [ 156.231207][T11395] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.238749][T11380] Q6\bY4 speed is unknown, defaulting to 1000 [ 156.256609][T11397] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 156.267657][T11397] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 156.322075][T11397] JBD2: no valid journal superblock found [ 156.327825][T11397] EXT4-fs (loop2): Could not load journal inode [ 156.343278][T11394] JBD2: no valid journal superblock found [ 156.349356][T11394] EXT4-fs (loop1): Could not load journal inode [ 156.480716][ T3299] bridge0: port 3(syz_tun) entered disabled state [ 156.488690][T11404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.505638][ T3299] syz_tun (unregistering): left allmulticast mode [ 156.512157][ T3299] syz_tun (unregistering): left promiscuous mode [ 156.518502][ T3299] bridge0: port 3(syz_tun) entered disabled state [ 156.568060][T11404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.688342][T11405] Q6\bY4 speed is unknown, defaulting to 1000 [ 156.762878][ T388] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.834064][ T388] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.882844][ T388] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.901941][T11405] chnl_net:caif_netlink_parms(): no params data found [ 156.968655][T11419] loop2: detected capacity change from 0 to 512 [ 156.976301][T11419] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.993834][ T388] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.019010][T11419] EXT4-fs (loop2): 1 truncate cleaned up [ 157.050648][T11405] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.057814][T11405] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.091548][T11405] bridge_slave_0: entered allmulticast mode [ 157.098601][T11405] bridge_slave_0: entered promiscuous mode [ 157.105511][T11405] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.112755][T11405] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.120027][T11405] bridge_slave_1: entered allmulticast mode [ 157.127812][T11405] bridge_slave_1: entered promiscuous mode [ 157.148108][T11405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.158680][T11405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.306353][T11405] team0: Port device team_slave_0 added [ 157.329503][ T388] bridge_slave_1: left allmulticast mode [ 157.335296][ T388] bridge_slave_1: left promiscuous mode [ 157.341103][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.349398][ T388] bridge_slave_0: left allmulticast mode [ 157.355085][ T388] bridge_slave_0: left promiscuous mode [ 157.360718][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.378985][ T388] batman_adv: batadv5: Interface deactivated: bond6 [ 157.483219][ T388] bond1 (unregistering): (slave gretap1): Releasing active interface [ 157.545108][ T388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.560978][ T388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.576440][ T388] bond0 (unregistering): Released all slaves [ 157.586858][ T388] bond1 (unregistering): Released all slaves [ 157.603077][ T388] bond2 (unregistering): (slave batadv3): Releasing backup interface [ 157.612198][ T388] bond2 (unregistering): Released all slaves [ 157.627863][ T388] bond3 (unregistering): (slave batadv4): Releasing backup interface [ 157.638271][ T388] bond3 (unregistering): Released all slaves [ 157.654528][ T388] bond4 (unregistering): (slave batadv5): Releasing backup interface [ 157.668891][ T388] bond4 (unregistering): Released all slaves [ 157.679837][ T388] bond5 (unregistering): (slave batadv6): Releasing backup interface [ 157.697080][ T388] bond5 (unregistering): Released all slaves [ 157.710814][ T388] batman_adv: batadv5: Removing interface: bond6 [ 157.724987][ T388] bond6 (unregistering): Released all slaves [ 157.735738][ T388] bond7 (unregistering): Released all slaves [ 157.747409][ T388] bond8 (unregistering): Released all slaves [ 157.756686][T11405] team0: Port device team_slave_1 added [ 157.774154][T11441] Q6\bY4 speed is unknown, defaulting to 1000 [ 157.819886][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.838544][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.850079][T11405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.857071][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.883197][T11405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.894125][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.903152][T11405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.910231][T11405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.936842][T11405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.949039][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.966625][ T388] hsr_slave_0: left promiscuous mode [ 157.982311][ T388] hsr_slave_1: left promiscuous mode [ 157.993149][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.000597][ T388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.021046][ T388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.028658][ T388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.086861][ T388] veth1_macvtap: left promiscuous mode [ 158.092617][ T388] veth0_macvtap: left promiscuous mode [ 158.098219][ T388] veth1_vlan: left promiscuous mode [ 158.109173][ T388] veth0_vlan: left promiscuous mode [ 158.205995][ T388] team0 (unregistering): Port device team_slave_1 removed [ 158.214671][T11464] loop2: detected capacity change from 0 to 512 [ 158.225411][T11464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.235558][ T388] team0 (unregistering): Port device team_slave_0 removed [ 158.248650][T11467] loop0: detected capacity change from 0 to 512 [ 158.255896][T11467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.270439][T11464] EXT4-fs (loop2): 1 truncate cleaned up [ 158.277744][T11464] EXT4-fs mount: 115 callbacks suppressed [ 158.277760][T11464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.300320][T11467] EXT4-fs (loop0): 1 truncate cleaned up [ 158.319566][T11405] hsr_slave_0: entered promiscuous mode [ 158.324537][T11467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.339382][T11405] hsr_slave_1: entered promiscuous mode [ 158.340294][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.385113][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.409211][T11475] loop4: detected capacity change from 0 to 164 [ 158.451700][T11475] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.461978][T11479] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.512571][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 158.512586][ T29] audit: type=1400 audit(1754159538.605:11233): avc: denied { create } for pid=11483 comm="syz.0.2899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.539505][T11484] __nla_validate_parse: 6 callbacks suppressed [ 158.539519][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2899'. [ 158.554707][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2899'. [ 158.563574][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'. [ 158.572631][ T29] audit: type=1400 audit(1754159538.625:11234): avc: denied { ioctl } for pid=11483 comm="syz.0.2899" path="socket:[40076]" dev="sockfs" ino=40076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.573529][T11479] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.628927][ T29] audit: type=1400 audit(1754159538.715:11235): avc: denied { create } for pid=11486 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.654653][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2900'. [ 158.666364][ T29] audit: type=1400 audit(1754159538.735:11236): avc: denied { setopt } for pid=11486 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.686352][ T29] audit: type=1400 audit(1754159538.735:11237): avc: denied { write } for pid=11486 comm="syz.0.2900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 158.718481][T11479] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.754765][T11489] netlink: 'syz.0.2901': attribute type 1 has an invalid length. [ 158.776422][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2901'. [ 158.792570][T11489] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 158.800491][T11489] bond5: (slave batadv8): Enslaving as a backup interface with an up link [ 158.813571][T11479] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.866490][ T29] audit: type=1400 audit(1754159538.955:11238): avc: denied { create } for pid=11492 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.868678][ T291] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.886497][ T29] audit: type=1400 audit(1754159538.955:11239): avc: denied { write } for pid=11492 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.926918][ T29] audit: type=1400 audit(1754159539.005:11240): avc: denied { write } for pid=11492 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.947572][ T29] audit: type=1400 audit(1754159539.005:11241): avc: denied { read } for pid=11492 comm="syz.0.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.968153][ T29] audit: type=1400 audit(1754159539.015:11242): avc: denied { ioctl } for pid=11492 comm="syz.0.2902" path="socket:[40986]" dev="sockfs" ino=40986 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.968606][ T291] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.005334][ T291] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.013760][ T291] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.030798][T11493] loop0: detected capacity change from 0 to 512 [ 159.052559][T11493] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.065607][T11405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.077168][T11493] EXT4-fs (loop0): 1 truncate cleaned up [ 159.086674][T11493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.111637][T11405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.161062][T11405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.190869][T11405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.241682][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.241989][T11498] loop2: detected capacity change from 0 to 1024 [ 159.269361][T11498] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.280848][T11498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.295168][T11507] loop0: detected capacity change from 0 to 1024 [ 159.318170][T11498] JBD2: no valid journal superblock found [ 159.328006][T11507] EXT4-fs: Ignoring removed bh option [ 159.329519][T11498] EXT4-fs (loop2): Could not load journal inode [ 159.333541][T11507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.349872][T11507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 159.379729][T11513] loop4: detected capacity change from 0 to 512 [ 159.381971][T11405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.398480][T11513] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.417782][T11405] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.431740][T11507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.439392][T11513] EXT4-fs (loop4): 1 truncate cleaned up [ 159.452121][T11513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.496183][T10792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.507890][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.515009][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.515625][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.546773][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.553945][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.595926][T11528] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.654036][T11528] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.718851][T11530] loop0: detected capacity change from 0 to 1024 [ 159.786212][T11539] Q6\bY4 speed is unknown, defaulting to 1000 [ 159.829106][T11539] siw: device registration error -23 [ 159.840948][T11530] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 159.852591][T11530] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 159.864767][T11528] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.933522][T11528] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.982941][T11405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.995299][T11530] JBD2: no valid journal superblock found [ 160.001211][T11530] EXT4-fs (loop0): Could not load journal inode [ 160.056365][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 160.120815][T11551] loop0: detected capacity change from 0 to 512 [ 160.129706][T11551] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.142001][T11551] EXT4-fs (loop0): 1 truncate cleaned up [ 160.148151][T11551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.167495][T11405] veth0_vlan: entered promiscuous mode [ 160.177842][T11405] veth1_vlan: entered promiscuous mode [ 160.204694][T11405] veth0_macvtap: entered promiscuous mode [ 160.213165][T11405] veth1_macvtap: entered promiscuous mode [ 160.219982][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.223745][T11405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.242365][T11405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.256585][ T3434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.277930][ T3434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.287029][ T3434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.303642][ T3434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.341744][T11565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.359374][T11566] loop0: detected capacity change from 0 to 512 [ 160.371619][T11565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.426443][T11566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.489056][T11566] EXT4-fs (loop0): 1 truncate cleaned up [ 160.489506][T11566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.538745][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.543537][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2875'. [ 160.613687][T11573] loop3: detected capacity change from 0 to 1024 [ 160.620412][T11573] EXT4-fs: Ignoring removed bh option [ 160.625891][T11573] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.643957][T11573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.666609][T11582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'. [ 160.755589][T11573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.800231][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.824162][T11592] loop0: detected capacity change from 0 to 164 [ 160.843268][T11592] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 160.879415][T11595] loop3: detected capacity change from 0 to 1024 [ 160.902289][T11595] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.913495][T11595] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.966394][T11594] Q6\bY4 speed is unknown, defaulting to 1000 [ 161.037953][T11595] JBD2: no valid journal superblock found [ 161.043879][T11595] EXT4-fs (loop3): Could not load journal inode [ 161.169168][T11588] loop1: detected capacity change from 0 to 1024 [ 161.198210][T11588] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.210639][T11588] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.268665][T11588] JBD2: no valid journal superblock found [ 161.275034][T11588] EXT4-fs (loop1): Could not load journal inode [ 161.414243][T11601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2931'. [ 161.548086][T11599] loop3: detected capacity change from 0 to 1024 [ 161.578797][T11599] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.590206][T11599] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.633696][T11609] loop1: detected capacity change from 0 to 512 [ 161.635201][T11599] JBD2: no valid journal superblock found [ 161.643365][T11603] loop2: detected capacity change from 0 to 1024 [ 161.647862][T11599] EXT4-fs (loop3): Could not load journal inode [ 161.659818][T11609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.675770][T11603] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 161.688790][T11603] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 161.703644][T11609] EXT4-fs (loop1): 1 truncate cleaned up [ 161.712321][T11609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.722752][T11603] JBD2: no valid journal superblock found [ 161.730841][T11603] EXT4-fs (loop2): Could not load journal inode [ 161.879873][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.911523][T11621] loop0: detected capacity change from 0 to 512 [ 161.913136][T11625] loop2: detected capacity change from 0 to 164 [ 161.922091][T11621] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 161.947662][T11625] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.983526][T11627] Q6\bY4 speed is unknown, defaulting to 1000 [ 162.146804][T11626] loop1: detected capacity change from 0 to 512 [ 162.154513][T11626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.287333][T11621] EXT4-fs (loop0): 1 truncate cleaned up [ 162.297202][T11621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.310170][T11626] EXT4-fs (loop1): 1 truncate cleaned up [ 162.316194][T11626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.338240][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.359710][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.403021][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.430524][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.452812][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.453237][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.507918][T11637] loop4: detected capacity change from 0 to 1024 [ 162.509508][T11642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2943'. [ 162.530653][T11639] loop1: detected capacity change from 0 to 512 [ 162.537874][T11639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.564414][T11637] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 162.575351][T11637] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 162.589889][T11639] EXT4-fs (loop1): 1 truncate cleaned up [ 162.601888][T11639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.692703][T11646] loop3: detected capacity change from 0 to 512 [ 162.757680][T11646] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 162.768828][T11637] JBD2: no valid journal superblock found [ 162.774606][T11637] EXT4-fs (loop4): Could not load journal inode [ 162.781403][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.795288][T11646] EXT4-fs (loop3): 1 truncate cleaned up [ 162.801090][T11636] Q6\bY4 speed is unknown, defaulting to 1000 [ 162.811804][T11646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.963495][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.077777][T11656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.141543][T11656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.235474][T11664] Q6\bY4 speed is unknown, defaulting to 1000 [ 163.316259][T11664] siw: device registration error -23 [ 163.551521][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 163.551539][ T29] audit: type=1400 audit(1754159543.405:11617): avc: denied { read write } for pid=11654 comm="syz.3.2946" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 163.581378][ T29] audit: type=1400 audit(1754159543.405:11618): avc: denied { open } for pid=11654 comm="syz.3.2946" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 163.605035][ T29] audit: type=1400 audit(1754159543.405:11619): avc: denied { create } for pid=11654 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.625462][ T29] audit: type=1400 audit(1754159543.405:11620): avc: denied { write } for pid=11654 comm="syz.3.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 163.670297][ T29] audit: type=1400 audit(1754159543.755:11621): avc: denied { prog_run } for pid=11665 comm="syz.2.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.692700][T11667] __nla_validate_parse: 2 callbacks suppressed [ 163.692761][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2950'. [ 163.707902][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2950'. [ 163.716809][T11667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'. [ 163.759810][ T29] audit: type=1400 audit(1754159543.785:11622): avc: denied { create } for pid=11665 comm="syz.2.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.779656][ T29] audit: type=1400 audit(1754159543.785:11623): avc: denied { ioctl } for pid=11665 comm="syz.2.2950" path="socket:[41499]" dev="sockfs" ino=41499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.806757][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.827677][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.944743][ T29] audit: type=1400 audit(1754159544.035:11624): avc: denied { bind } for pid=11676 comm="syz.2.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 163.995448][ T29] audit: type=1400 audit(1754159544.055:11625): avc: denied { setopt } for pid=11676 comm="syz.2.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.016271][ T29] audit: type=1400 audit(1754159544.075:11626): avc: denied { watch watch_reads } for pid=11678 comm="syz.3.2955" path="/599" dev="tmpfs" ino=3232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.085030][T11675] loop4: detected capacity change from 0 to 1024 [ 164.096100][T11677] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.118480][T11675] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.130370][T11675] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.149007][T11675] JBD2: no valid journal superblock found [ 164.155028][T11675] EXT4-fs (loop4): Could not load journal inode [ 164.252403][ T3310] bridge0: port 3(syz_tun) entered disabled state [ 164.286579][ T3310] syz_tun (unregistering): left allmulticast mode [ 164.293103][ T3310] syz_tun (unregistering): left promiscuous mode [ 164.299498][ T3310] bridge0: port 3(syz_tun) entered disabled state [ 164.325162][T11677] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.389515][T11682] loop4: detected capacity change from 0 to 1024 [ 164.400240][T11682] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 164.412389][T11682] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 164.424729][T11677] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.425373][T11682] JBD2: no valid journal superblock found [ 164.441023][T11682] EXT4-fs (loop4): Could not load journal inode [ 164.479148][T11683] Q6\bY4 speed is unknown, defaulting to 1000 [ 164.488519][T11677] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.517175][ T291] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.532454][T11693] loop4: detected capacity change from 0 to 512 [ 164.539438][T11693] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.557719][T11693] EXT4-fs (loop4): 1 truncate cleaned up [ 164.564032][T11693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.566307][T11683] chnl_net:caif_netlink_parms(): no params data found [ 164.599296][ T291] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.610849][T10792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.634953][T11683] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.642183][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.649417][T11683] bridge_slave_0: entered allmulticast mode [ 164.653885][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 164.656089][T11683] bridge_slave_0: entered promiscuous mode [ 164.673678][ T291] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.685605][T11683] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.692736][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.703350][T11683] bridge_slave_1: entered allmulticast mode [ 164.709888][T11683] bridge_slave_1: entered promiscuous mode [ 164.724991][ T291] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.744518][T11683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.758438][T11710] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.770343][T11683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.784523][ T3434] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.796480][ T388] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.806372][T11710] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.824829][T11683] team0: Port device team_slave_0 added [ 164.830721][ T388] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.843050][T11710] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.854965][T11683] team0: Port device team_slave_1 added [ 164.873505][ T388] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.898394][T11710] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.914054][T11683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.921019][T11683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.946996][T11683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.960732][T11683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.967793][T11683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.993776][T11683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.004634][ T291] bridge_slave_1: left allmulticast mode [ 165.010323][ T291] bridge_slave_1: left promiscuous mode [ 165.016052][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.023758][ T291] bridge_slave_0: left allmulticast mode [ 165.029499][ T291] bridge_slave_0: left promiscuous mode [ 165.035386][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.103735][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.113724][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.123325][ T291] bond0 (unregistering): Released all slaves [ 165.131754][ T291] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 165.140568][ T291] bond1 (unregistering): Released all slaves [ 165.149015][ T291] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 165.158380][ T291] bond2 (unregistering): Released all slaves [ 165.166956][ T291] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 165.175873][ T291] bond3 (unregistering): Released all slaves [ 165.184938][ T291] bond4 (unregistering): (slave batadv4): Releasing backup interface [ 165.194126][ T291] bond4 (unregistering): Released all slaves [ 165.202559][ T291] bond5 (unregistering): Released all slaves [ 165.239847][T11718] can0: slcan on ttyS3. [ 165.239865][ T291] tipc: Left network mode [ 165.242037][T11683] hsr_slave_0: entered promiscuous mode [ 165.255345][T11683] hsr_slave_1: entered promiscuous mode [ 165.256275][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2966'. [ 165.261285][T11683] debugfs: 'hsr0' already exists in 'hsr' [ 165.275688][T11683] Cannot create hsr debugfs directory [ 165.294412][ T291] hsr_slave_0: left promiscuous mode [ 165.300315][ T291] hsr_slave_1: left promiscuous mode [ 165.308606][ T291] veth1_macvtap: left promiscuous mode [ 165.314288][ T291] veth0_macvtap: left promiscuous mode [ 165.319904][ T291] veth1_vlan: left promiscuous mode [ 165.325474][ T291] veth0_vlan: left promiscuous mode [ 165.387220][ T291] team0 (unregistering): Port device team_slave_1 removed [ 165.396605][ T291] team0 (unregistering): Port device team_slave_0 removed [ 165.511470][T11718] can0 (unregistered): slcan off ttyS3. [ 165.573248][T11726] can0: slcan on ttyS3. [ 165.597072][T11722] loop2: detected capacity change from 0 to 512 [ 165.604031][T11722] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 165.617740][T11722] EXT4-fs (loop2): 1 truncate cleaned up [ 165.623878][T11722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.641769][T11725] can0 (unregistered): slcan off ttyS3. [ 165.660006][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.714372][T11732] loop0: detected capacity change from 0 to 512 [ 165.730807][T11732] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.754958][T11683] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 165.764765][T11683] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 165.773740][T11732] EXT4-fs (loop0): 1 truncate cleaned up [ 165.779823][T11732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.780719][T11737] loop2: detected capacity change from 0 to 1024 [ 165.806741][T11737] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 165.811119][T11683] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 165.818251][T11737] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 165.836243][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.851288][T11737] JBD2: no valid journal superblock found [ 165.851351][T11683] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 165.864329][T11737] EXT4-fs (loop2): Could not load journal inode [ 165.907559][T11746] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.945132][T11746] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.964468][T11683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.969517][T11755] loop1: detected capacity change from 0 to 128 [ 165.985274][T11683] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.985508][T11755] FAT-fs (loop1): Directory bread(block 32) failed [ 165.996303][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.005595][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.014429][T11755] FAT-fs (loop1): Directory bread(block 33) failed [ 166.021014][T11755] FAT-fs (loop1): Directory bread(block 34) failed [ 166.029277][ T3434] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.031674][T11755] FAT-fs (loop1): Directory bread(block 35) failed [ 166.036417][ T3434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.046795][T11757] can0: slcan on ttyS3. [ 166.051679][T11755] FAT-fs (loop1): Directory bread(block 36) failed [ 166.061956][T11746] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.072824][T11755] FAT-fs (loop1): Directory bread(block 37) failed [ 166.078641][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'. [ 166.088593][T11755] FAT-fs (loop1): Directory bread(block 38) failed [ 166.095224][T11755] FAT-fs (loop1): Directory bread(block 39) failed [ 166.096591][T11683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.101970][T11755] FAT-fs (loop1): Directory bread(block 40) failed [ 166.118838][T11755] FAT-fs (loop1): Directory bread(block 41) failed [ 166.143030][T11746] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.161811][T11755] syz.1.2977: attempt to access beyond end of device [ 166.161811][T11755] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 166.175763][T11755] FAT-fs (loop1): Filesystem has been set read-only [ 166.178613][T11683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.185555][T11755] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 166.199780][T11757] can0 (unregistered): slcan off ttyS3. [ 166.229468][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.254894][ T388] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.267112][T11768] loop2: detected capacity change from 0 to 512 [ 166.274167][T11768] EXT4-fs: inline encryption not supported [ 166.283936][T11768] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.286945][ T388] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.311868][ T388] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.319612][T11770] loop1: detected capacity change from 0 to 8192 [ 166.327544][T11768] EXT4-fs (loop2): 1 truncate cleaned up [ 166.347198][T11683] veth0_vlan: entered promiscuous mode [ 166.355715][T11683] veth1_vlan: entered promiscuous mode [ 166.368743][T11683] veth0_macvtap: entered promiscuous mode [ 166.376575][T11683] veth1_macvtap: entered promiscuous mode [ 166.384365][T11768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.444946][T11776] loop0: detected capacity change from 0 to 1024 [ 166.455786][T11683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.463638][T11776] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 166.475070][T11776] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 166.486513][T11683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.496052][ T291] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.506129][T11776] JBD2: no valid journal superblock found [ 166.512729][T11776] EXT4-fs (loop0): Could not load journal inode [ 166.536730][T11768] Q6\bY4 speed is unknown, defaulting to 1000 [ 166.559066][ T291] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.568240][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.587705][ T388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.654805][T11784] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.685532][T11787] can0: slcan on ttyS3. [ 166.695205][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2984'. [ 166.721152][ T3300] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 166.736171][T11784] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.736853][ T3300] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 166.773705][T11784] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.787951][T11785] bridge0: port 3(syz_tun) entered disabled state [ 166.795176][T11787] can0 (unregistered): slcan off ttyS3. [ 166.813356][T11785] syz_tun (unregistering): left allmulticast mode [ 166.819848][T11785] syz_tun (unregistering): left promiscuous mode [ 166.826276][T11785] bridge0: port 3(syz_tun) entered disabled state [ 166.856805][T11784] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.875774][ T3434] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.887441][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.899101][ T3434] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.917893][ T3434] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.955823][T11796] Q6\bY4: renamed from lo (while UP) [ 167.005174][T11800] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.052734][T11800] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.113103][T11800] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.185990][T11806] loop1: detected capacity change from 0 to 1024 [ 167.196279][T11806] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 167.196713][T11800] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.207429][T11806] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 167.232605][T11806] JBD2: no valid journal superblock found [ 167.238872][T11806] EXT4-fs (loop1): Could not load journal inode [ 167.285511][T11810] loop1: detected capacity change from 0 to 512 [ 167.314091][T11810] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2996: Failed to acquire dquot type 1 [ 167.326001][T11810] EXT4-fs (loop1): 1 truncate cleaned up [ 167.332496][T11810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.345225][T11810] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.518972][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.616064][T11814] loop1: detected capacity change from 0 to 512 [ 167.625107][T11814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.637970][T11814] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.690126][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.778649][T11823] loop3: detected capacity change from 0 to 1024 [ 167.788027][T11823] EXT4-fs: Ignoring removed bh option [ 167.793580][T11823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.800732][T11823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.804590][T11820] loop1: detected capacity change from 0 to 512 [ 167.813934][T11823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.833368][T11820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.848387][T11820] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.859701][T11683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.895488][T11830] hub 9-0:1.0: USB hub found [ 167.900340][T11830] hub 9-0:1.0: 8 ports detected [ 167.919909][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.936776][T11834] FAULT_INJECTION: forcing a failure. [ 167.936776][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 167.949656][T11834] CPU: 1 UID: 0 PID: 11834 Comm: syz.1.3004 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 167.949689][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 167.949782][T11834] Call Trace: [ 167.949789][T11834] [ 167.949798][T11834] __dump_stack+0x1d/0x30 [ 167.949821][T11834] dump_stack_lvl+0xe8/0x140 [ 167.949843][T11834] dump_stack+0x15/0x1b [ 167.949861][T11834] should_fail_ex+0x265/0x280 [ 167.949911][T11834] should_failslab+0x8c/0xb0 [ 167.949977][T11834] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 167.950012][T11834] ? kstrdup_const+0x3e/0x50 [ 167.950041][T11834] kstrdup+0x3e/0xd0 [ 167.950081][T11834] kstrdup_const+0x3e/0x50 [ 167.950108][T11834] __kernfs_new_node+0x3f/0x350 [ 167.950205][T11834] ? selinux_file_open+0x2df/0x330 [ 167.950227][T11834] ? __rcu_read_unlock+0x4f/0x70 [ 167.950251][T11834] kernfs_new_node+0xd0/0x140 [ 167.950336][T11834] kernfs_create_link+0x70/0x130 [ 167.950372][T11834] sysfs_do_create_link_sd+0x6a/0x100 [ 167.950444][T11834] sysfs_create_link+0x51/0x70 [ 167.950467][T11834] driver_sysfs_add+0x54/0x160 [ 167.950491][T11834] really_probe+0xf6/0x5c0 [ 167.950515][T11834] ? __driver_probe_device+0x116/0x190 [ 167.950594][T11834] __driver_probe_device+0x121/0x190 [ 167.950619][T11834] driver_probe_device+0x37/0x2f0 [ 167.950650][T11834] __device_attach_driver+0x205/0x310 [ 167.950703][T11834] ? __pfx___device_attach_driver+0x10/0x10 [ 167.950795][T11834] bus_for_each_drv+0x1bd/0x230 [ 167.950830][T11834] __device_attach+0x1c7/0x290 [ 167.950854][T11834] device_attach+0x17/0x20 [ 167.950875][T11834] proc_ioctl+0x2f7/0x400 [ 167.950913][T11834] proc_ioctl_default+0x71/0xa0 [ 167.950941][T11834] usbdev_ioctl+0xe97/0x1710 [ 167.951039][T11834] ? __pfx_usbdev_ioctl+0x10/0x10 [ 167.951063][T11834] __se_sys_ioctl+0xcb/0x140 [ 167.951099][T11834] __x64_sys_ioctl+0x43/0x50 [ 167.951165][T11834] x64_sys_call+0x1816/0x2ff0 [ 167.951190][T11834] do_syscall_64+0xd2/0x200 [ 167.951215][T11834] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.951242][T11834] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.951319][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.951402][T11834] RIP: 0033:0x7fbaaa61eb69 [ 167.951423][T11834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.951439][T11834] RSP: 002b:00007fbaa8c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.951457][T11834] RAX: ffffffffffffffda RBX: 00007fbaaa845fa0 RCX: 00007fbaaa61eb69 [ 167.951486][T11834] RDX: 0000200000000000 RSI: 00000000c0105512 RDI: 0000000000000003 [ 167.951497][T11834] RBP: 00007fbaa8c87090 R08: 0000000000000000 R09: 0000000000000000 [ 167.951508][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.951519][T11834] R13: 0000000000000000 R14: 00007fbaaa845fa0 R15: 00007fff59bf64f8 [ 167.951535][T11834] [ 167.952382][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3003'. [ 167.963824][T11834] hub 9-0:1.0: really_probe: driver_sysfs_add failed [ 168.313985][T11838] loop3: detected capacity change from 0 to 1024 [ 168.325364][T11838] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.336785][T11838] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.349977][T11838] JBD2: no valid journal superblock found [ 168.356386][T11838] EXT4-fs (loop3): Could not load journal inode [ 168.575743][T11845] Q6\bY4 speed is unknown, defaulting to 1000 [ 168.660260][T11845] siw: device registration error -23 [ 168.667053][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 168.667067][ T29] audit: type=1400 audit(1754159548.745:11821): avc: denied { read write } for pid=11840 comm="syz.1.3007" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.697003][ T29] audit: type=1400 audit(1754159548.745:11822): avc: denied { open } for pid=11840 comm="syz.1.3007" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 168.720977][ T29] audit: type=1400 audit(1754159548.745:11823): avc: denied { create } for pid=11840 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 168.741447][ T29] audit: type=1400 audit(1754159548.745:11824): avc: denied { write } for pid=11840 comm="syz.1.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.265836][T11851] loop1: detected capacity change from 0 to 1024 [ 169.273144][T11851] EXT4-fs: Ignoring removed bh option [ 169.278994][T11851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 169.283628][ T29] audit: type=1326 audit(1754159549.375:11825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.286133][T11851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 169.309430][ T29] audit: type=1326 audit(1754159549.375:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.309458][ T29] audit: type=1326 audit(1754159549.375:11827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.365875][ T29] audit: type=1326 audit(1754159549.375:11828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.390343][ T29] audit: type=1326 audit(1754159549.375:11829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.395133][T11785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.414125][ T29] audit: type=1326 audit(1754159549.375:11830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11852 comm="syz.3.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90a8feb69 code=0x7ffc0000 [ 169.459932][T11851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.499044][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.579111][T11853] process 'syz.3.3012' launched '/dev/fd/10' with NULL argv: empty string added [ 169.597021][ T291] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.640313][T11864] loop1: detected capacity change from 0 to 164 [ 169.648149][ T291] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.659532][T11864] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 169.696078][ T291] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.710026][T11860] Q6\bY4 speed is unknown, defaulting to 1000 [ 169.737597][ T291] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.839057][ T291] bridge_slave_1: left allmulticast mode [ 169.844816][ T291] bridge_slave_1: left promiscuous mode [ 169.850733][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.869017][ T291] bridge_slave_0: left allmulticast mode [ 169.874873][ T291] bridge_slave_0: left promiscuous mode [ 169.880578][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.974031][ T291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.986569][ T291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.996594][ T291] bond0 (unregistering): Released all slaves [ 170.008292][ T291] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 170.017633][ T291] bond1 (unregistering): Released all slaves [ 170.029360][ T291] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 170.038922][ T291] bond2 (unregistering): Released all slaves [ 170.050366][ T291] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 170.059526][ T291] bond3 (unregistering): Released all slaves [ 170.071953][ T291] bond4 (unregistering): (slave batadv3): Releasing backup interface [ 170.081384][ T291] bond4 (unregistering): Released all slaves [ 170.094243][ T291] bond5 (unregistering): (slave batadv4): Releasing backup interface [ 170.106560][ T291] bond5 (unregistering): Released all slaves [ 170.142670][T11860] chnl_net:caif_netlink_parms(): no params data found [ 170.170833][ T291] tipc: Left network mode [ 170.197456][ T291] hsr_slave_0: left promiscuous mode [ 170.205443][ T291] hsr_slave_1: left promiscuous mode [ 170.214902][ T291] veth1_macvtap: left promiscuous mode [ 170.220568][ T291] veth0_macvtap: left promiscuous mode [ 170.226953][ T291] veth1_vlan: left promiscuous mode [ 170.235767][ T291] veth0_vlan: left promiscuous mode [ 170.319790][ T291] team0 (unregistering): Port device team_slave_1 removed [ 170.330023][ T291] team0 (unregistering): Port device team_slave_0 removed [ 170.383683][T11860] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.390777][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.408509][T11860] bridge_slave_0: entered allmulticast mode [ 170.422125][T11860] bridge_slave_0: entered promiscuous mode [ 170.440266][T11860] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.447451][T11860] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.455947][T11860] bridge_slave_1: entered allmulticast mode [ 170.462676][T11860] bridge_slave_1: entered promiscuous mode [ 170.479350][T11889] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3020'. [ 170.490419][T11860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.502063][T11860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.535270][T11860] team0: Port device team_slave_0 added [ 170.541899][T11860] team0: Port device team_slave_1 added [ 170.553272][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.567354][T11860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.574344][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.600968][T11891] loop3: detected capacity change from 0 to 1024 [ 170.604053][T11891] EXT4-fs: Ignoring removed nobh option [ 170.607506][T11860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.613030][T11891] EXT4-fs: Ignoring removed bh option [ 170.629850][T11860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.636827][T11860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.662818][T11860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.663717][T11895] program syz.1.3021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.683333][T11895] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 170.686039][T11891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.714502][T11784] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.739581][T11860] hsr_slave_0: entered promiscuous mode [ 170.746007][T11860] hsr_slave_1: entered promiscuous mode [ 170.756323][T11897] FAULT_INJECTION: forcing a failure. [ 170.756323][T11897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.761776][T11860] debugfs: 'hsr0' already exists in 'hsr' [ 170.769410][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.1.3022 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 170.769440][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.769453][T11897] Call Trace: [ 170.769459][T11897] [ 170.769467][T11897] __dump_stack+0x1d/0x30 [ 170.769571][T11897] dump_stack_lvl+0xe8/0x140 [ 170.769590][T11897] dump_stack+0x15/0x1b [ 170.769607][T11897] should_fail_ex+0x265/0x280 [ 170.769654][T11897] should_fail+0xb/0x20 [ 170.769760][T11897] should_fail_usercopy+0x1a/0x20 [ 170.769780][T11897] _copy_from_user+0x1c/0xb0 [ 170.769805][T11897] load_msg+0x173/0x2f0 [ 170.769892][T11897] do_msgsnd+0xdc/0xaf0 [ 170.769923][T11897] ? __rcu_read_unlock+0x4f/0x70 [ 170.770014][T11897] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 170.770119][T11897] ? __x64_sys_msgsnd+0x8f/0xc0 [ 170.770187][T11897] __x64_sys_msgsnd+0xa8/0xc0 [ 170.770220][T11897] x64_sys_call+0x17c1/0x2ff0 [ 170.770241][T11897] do_syscall_64+0xd2/0x200 [ 170.770265][T11897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.770335][T11897] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.770369][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.770391][T11897] RIP: 0033:0x7fbaaa61eb69 [ 170.770407][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.770425][T11897] RSP: 002b:00007fbaa8c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 170.770444][T11897] RAX: ffffffffffffffda RBX: 00007fbaaa845fa0 RCX: 00007fbaaa61eb69 [ 170.770457][T11897] RDX: 0000000000000401 RSI: 0000200000000d00 RDI: 0000000000000000 [ 170.770528][T11897] RBP: 00007fbaa8c87090 R08: 0000000000000000 R09: 0000000000000000 [ 170.770546][T11897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.770558][T11897] R13: 0000000000000000 R14: 00007fbaaa845fa0 R15: 00007fff59bf64f8 [ 170.770576][T11897] [ 170.968929][T11860] Cannot create hsr debugfs directory [ 171.041925][T11903] loop1: detected capacity change from 0 to 512 [ 171.061510][T11903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 171.075133][T11903] EXT4-fs (loop1): 1 truncate cleaned up [ 171.081488][T11903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.107306][T11860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 171.115707][T11405] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.123470][T11860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 171.134397][T11860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 171.143821][T11860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.153981][T11909] netlink: 'syz.1.3026': attribute type 21 has an invalid length. [ 171.162657][T11909] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3026'. [ 171.173512][T11909] netlink: 'syz.1.3026': attribute type 4 has an invalid length. [ 171.181295][T11909] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3026'. [ 171.206199][T11909] netlink: 'syz.1.3026': attribute type 4 has an invalid length. [ 171.239432][T11860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.252560][T11860] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.264240][ T2725] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.271342][ T2725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.284529][ T2725] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.291629][ T2725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.336259][T11860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.398530][T11860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.419256][T11683] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.448147][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.459689][T11928] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.475325][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.494943][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.512497][T11928] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.524331][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3030'. [ 171.536741][ T388] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.564763][T11928] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.592121][T11940] FAULT_INJECTION: forcing a failure. [ 171.592121][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 171.604882][T11940] CPU: 1 UID: 0 PID: 11940 Comm: syz.1.3031 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 171.604909][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.604921][T11940] Call Trace: [ 171.604928][T11940] [ 171.604937][T11940] __dump_stack+0x1d/0x30 [ 171.604961][T11940] dump_stack_lvl+0xe8/0x140 [ 171.604987][T11940] dump_stack+0x15/0x1b [ 171.605004][T11940] should_fail_ex+0x265/0x280 [ 171.605053][T11940] ? audit_log_d_path+0x8d/0x150 [ 171.605082][T11940] should_failslab+0x8c/0xb0 [ 171.605104][T11940] __kmalloc_cache_noprof+0x4c/0x320 [ 171.605168][T11940] audit_log_d_path+0x8d/0x150 [ 171.605201][T11940] audit_log_d_path_exe+0x42/0x70 [ 171.605280][T11940] audit_log_task+0x1e9/0x250 [ 171.605371][T11940] audit_seccomp+0x61/0x100 [ 171.605424][T11940] ? __seccomp_filter+0x68c/0x10d0 [ 171.605458][T11940] __seccomp_filter+0x69d/0x10d0 [ 171.605483][T11940] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.605585][T11940] ? vfs_write+0x75e/0x8e0 [ 171.605610][T11940] __secure_computing+0x82/0x150 [ 171.605633][T11940] syscall_trace_enter+0xcf/0x1e0 [ 171.605659][T11940] do_syscall_64+0xac/0x200 [ 171.605691][T11940] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.605712][T11940] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.605731][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.605870][T11940] RIP: 0033:0x7fbaaa61eb69 [ 171.605918][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.605938][T11940] RSP: 002b:00007fbaa8c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000001f [ 171.605985][T11940] RAX: ffffffffffffffda RBX: 00007fbaaa845fa0 RCX: 00007fbaaa61eb69 [ 171.605997][T11940] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 171.606008][T11940] RBP: 00007fbaa8c87090 R08: 0000000000000000 R09: 0000000000000000 [ 171.606020][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.606032][T11940] R13: 0000000000000000 R14: 00007fbaaa845fa0 R15: 00007fff59bf64f8 [ 171.606051][T11940] [ 171.609193][T11928] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.864551][T11860] veth0_vlan: entered promiscuous mode [ 171.876334][T11860] veth1_vlan: entered promiscuous mode [ 171.893738][T11860] veth0_macvtap: entered promiscuous mode [ 171.910538][T11860] veth1_macvtap: entered promiscuous mode [ 171.928441][T11860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.949411][T11860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.956808][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.981806][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.990310][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.020434][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.051470][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.066196][T11949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=11949 comm=syz.3.3033 [ 172.087360][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.137119][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.164295][T11957] SELinux: failed to load policy [ 172.166100][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.198413][T11959] loop5: detected capacity change from 0 to 512 [ 172.218584][T11963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'. [ 172.258508][T11959] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3036: Failed to acquire dquot type 1 [ 172.276777][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'. [ 172.287473][T11963] loop3: detected capacity change from 0 to 8192 [ 172.290907][T11959] EXT4-fs (loop5): 1 truncate cleaned up [ 172.295003][T11963] FAT-fs (loop3): bogus sectors per cluster 0 [ 172.301890][T11959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.305662][T11963] FAT-fs (loop3): Can't find a valid FAT filesystem [ 172.318775][T11959] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.335710][T11968] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 172.343184][T11968] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 172.371649][T11959] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3036: Failed to acquire dquot type 1 [ 172.418061][T11971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.473913][T11971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.524617][T11971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.584712][T11971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.614188][T11860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.785315][T11979] rdma_op ffff8881047bb980 conn xmit_rdma 0000000000000000 [ 172.819334][T11989] FAULT_INJECTION: forcing a failure. [ 172.819334][T11989] name failslab, interval 1, probability 0, space 0, times 0 [ 172.832297][T11989] CPU: 0 UID: 0 PID: 11989 Comm: syz.1.3045 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 172.832410][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.832424][T11989] Call Trace: [ 172.832484][T11989] [ 172.832491][T11989] __dump_stack+0x1d/0x30 [ 172.832539][T11989] dump_stack_lvl+0xe8/0x140 [ 172.832578][T11989] dump_stack+0x15/0x1b [ 172.832596][T11989] should_fail_ex+0x265/0x280 [ 172.832630][T11989] should_failslab+0x8c/0xb0 [ 172.832655][T11989] kmem_cache_alloc_noprof+0x50/0x310 [ 172.832693][T11989] ? audit_log_start+0x365/0x6c0 [ 172.832726][T11989] audit_log_start+0x365/0x6c0 [ 172.832835][T11989] audit_seccomp+0x48/0x100 [ 172.832860][T11989] ? __seccomp_filter+0x68c/0x10d0 [ 172.832884][T11989] __seccomp_filter+0x69d/0x10d0 [ 172.832908][T11989] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 172.832956][T11989] ? vfs_write+0x75e/0x8e0 [ 172.833051][T11989] ? __rcu_read_unlock+0x4f/0x70 [ 172.833075][T11989] ? __fget_files+0x184/0x1c0 [ 172.833103][T11989] __secure_computing+0x82/0x150 [ 172.833127][T11989] syscall_trace_enter+0xcf/0x1e0 [ 172.833190][T11989] do_syscall_64+0xac/0x200 [ 172.833215][T11989] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.833244][T11989] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.833265][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.833299][T11989] RIP: 0033:0x7fbaaa61eb69 [ 172.833314][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.833330][T11989] RSP: 002b:00007fbaa8c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 172.833347][T11989] RAX: ffffffffffffffda RBX: 00007fbaaa845fa0 RCX: 00007fbaaa61eb69 [ 172.833408][T11989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 172.833492][T11989] RBP: 00007fbaa8c87090 R08: 0000000000000000 R09: 0000000000000000 [ 172.833566][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.833579][T11989] R13: 0000000000000000 R14: 00007fbaaa845fa0 R15: 00007fff59bf64f8 [ 172.833598][T11989] [ 173.061391][T11991] hub 9-0:1.0: USB hub found [ 173.066350][T11991] hub 9-0:1.0: 8 ports detected [ 173.107824][T11997] Q6\bY4: renamed from lo (while UP) [ 173.131540][T11999] netlink: 'syz.1.3049': attribute type 1 has an invalid length. [ 173.159477][T12001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.194317][T12001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.245803][T12001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.284515][T12001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.296883][T12012] loop5: detected capacity change from 0 to 4096 [ 173.305677][T12012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.318977][T12012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.340530][T12012] loop5: detected capacity change from 0 to 512 [ 173.347202][T12012] EXT4-fs: Ignoring removed nobh option [ 173.380153][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.385223][T12015] loop4: detected capacity change from 0 to 1024 [ 173.400982][T12015] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 173.412393][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.412426][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.412458][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.439221][T12015] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 173.452737][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3055: corrupted inode contents [ 173.467160][T12012] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.3055: mark_inode_dirty error [ 173.469423][T12015] JBD2: no valid journal superblock found [ 173.481080][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.3055: corrupted inode contents [ 173.484734][T12015] EXT4-fs (loop4): Could not load journal inode [ 173.510463][T12012] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.3055: mark_inode_dirty error [ 173.512931][T12019] netlink: 'syz.1.3057': attribute type 9 has an invalid length. [ 173.529090][T12012] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3055: Failed to acquire dquot type 0 [ 173.529370][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 173.553785][T12019] netlink: 'syz.1.3057': attribute type 9 has an invalid length. [ 173.555079][ T51] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.561587][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3057'. [ 173.561738][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3055: corrupted inode contents [ 173.591153][ T51] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.601736][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.602006][T12012] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.3055: mark_inode_dirty error [ 173.610214][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.624012][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3055: corrupted inode contents [ 173.642658][T12012] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.3055: mark_inode_dirty error [ 173.663497][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3055: corrupted inode contents [ 173.678400][T12012] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 173.691480][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 173.691498][ T29] audit: type=1400 audit(1754159553.775:12190): avc: denied { create } for pid=12024 comm="syz.4.3059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.722910][T12012] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.3055: corrupted inode contents [ 173.737365][T12012] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.3055: mark_inode_dirty error [ 173.749042][T12012] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 173.760756][T12012] EXT4-fs (loop5): 1 truncate cleaned up [ 173.770062][T12012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.785107][T12012] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.798705][T12012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.817870][T12039] can0: slcan on ttyS3. [ 173.828677][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3064'. [ 173.882229][T12039] can0 (unregistered): slcan off ttyS3. [ 173.917098][T12012] syz.5.3055 (12012) used greatest stack depth: 9792 bytes left [ 173.917678][ T29] audit: type=1326 audit(1754159554.005:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 173.948721][ T29] audit: type=1326 audit(1754159554.005:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 173.972420][ T29] audit: type=1326 audit(1754159554.005:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 173.996003][ T29] audit: type=1326 audit(1754159554.005:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.019563][ T29] audit: type=1326 audit(1754159554.005:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.043198][ T29] audit: type=1326 audit(1754159554.005:12196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.066776][ T29] audit: type=1326 audit(1754159554.005:12197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.090367][ T29] audit: type=1326 audit(1754159554.005:12198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.114044][ T29] audit: type=1326 audit(1754159554.005:12199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12042 comm="syz.1.3065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaaa61eb69 code=0x7ffc0000 [ 174.155718][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 174.176510][T12054] loop1: detected capacity change from 0 to 164 [ 174.184262][T12057] loop5: detected capacity change from 0 to 1024 [ 174.196385][T12059] loop4: detected capacity change from 0 to 512 [ 174.223154][T12059] EXT4-fs (loop4): #blocks per group too big: 466944 [ 174.227145][T12049] Q6\bY4 speed is unknown, defaulting to 1000 [ 174.239253][T12057] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 174.250270][T12057] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 174.411795][T12057] JBD2: no valid journal superblock found [ 174.417550][T12057] EXT4-fs (loop5): Could not load journal inode [ 174.424843][T12054] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 174.436970][T12055] bridge1: entered promiscuous mode [ 174.509635][T12062] Q6\bY4 speed is unknown, defaulting to 1000 [ 174.592730][T12062] loop4: detected capacity change from 0 to 512 [ 174.628484][T12062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 174.654328][T12062] EXT4-fs (loop4): 1 truncate cleaned up [ 174.660500][T12062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.800192][T12068] Q6\bY4 speed is unknown, defaulting to 1000 [ 174.885714][T12081] loop1: detected capacity change from 0 to 1024 [ 174.895805][T12081] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 175.078037][T10792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.109588][T12081] Q6\bY4 speed is unknown, defaulting to 1000 [ 175.305019][T12101] Q6\bY4 speed is unknown, defaulting to 1000 [ 175.464743][T12114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=12114 comm=+}[@ [ 175.494460][T12116] FAULT_INJECTION: forcing a failure. [ 175.494460][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.507566][T12116] CPU: 0 UID: 0 PID: 12116 Comm: syz.4.3090 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 175.507596][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.507608][T12116] Call Trace: [ 175.507614][T12116] [ 175.507621][T12116] __dump_stack+0x1d/0x30 [ 175.507694][T12116] dump_stack_lvl+0xe8/0x140 [ 175.507713][T12116] dump_stack+0x15/0x1b [ 175.507730][T12116] should_fail_ex+0x265/0x280 [ 175.507763][T12116] should_fail+0xb/0x20 [ 175.507819][T12116] should_fail_usercopy+0x1a/0x20 [ 175.507841][T12116] _copy_from_user+0x1c/0xb0 [ 175.507865][T12116] ___sys_sendmsg+0xc1/0x1d0 [ 175.507920][T12116] __x64_sys_sendmsg+0xd4/0x160 [ 175.508017][T12116] x64_sys_call+0x191e/0x2ff0 [ 175.508042][T12116] do_syscall_64+0xd2/0x200 [ 175.508102][T12116] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.508124][T12116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.508143][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.508165][T12116] RIP: 0033:0x7f82de1aeb69 [ 175.508180][T12116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.508222][T12116] RSP: 002b:00007f82dc80f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.508240][T12116] RAX: ffffffffffffffda RBX: 00007f82de3d5fa0 RCX: 00007f82de1aeb69 [ 175.508253][T12116] RDX: 0000000020040084 RSI: 0000200000003140 RDI: 0000000000000008 [ 175.508267][T12116] RBP: 00007f82dc80f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.508282][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.508296][T12116] R13: 0000000000000000 R14: 00007f82de3d5fa0 R15: 00007ffd4ce77d18 [ 175.508331][T12116] [ 175.704542][T12120] loop0: detected capacity change from 0 to 512 [ 175.711759][T12120] EXT4-fs: inline encryption not supported [ 175.719580][T12120] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.736420][T12120] EXT4-fs (loop0): 1 truncate cleaned up [ 175.742709][T12120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.791184][T12129] loop5: detected capacity change from 0 to 128 [ 175.803812][T12129] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.819065][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.832965][T12129] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.847559][T12129] tipc: Started in network mode [ 175.852630][T12129] tipc: Node identity ac14140f, cluster identity 4711 [ 175.867593][T12129] tipc: New replicast peer: 255.255.255.83 [ 175.873874][T12129] tipc: Enabled bearer , priority 10 [ 175.881242][T12133] can0: slcan on ttyS3. [ 175.893449][T12125] loop4: detected capacity change from 0 to 1024 [ 175.903364][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3097'. [ 175.903505][T12125] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 175.924245][T12125] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 175.938817][T12125] JBD2: no valid journal superblock found [ 175.945016][T12125] EXT4-fs (loop4): Could not load journal inode [ 175.971583][T12133] can0 (unregistered): slcan off ttyS3. [ 176.025616][T12138] loop4: detected capacity change from 0 to 512 [ 176.033695][T12138] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.048019][T12138] EXT4-fs (loop4): 1 truncate cleaned up [ 176.054415][T12138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.092466][T10792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.110162][T12152] FAULT_INJECTION: forcing a failure. [ 176.110162][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 176.122852][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.4.3103 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 176.122883][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.122954][T12152] Call Trace: [ 176.122962][T12152] [ 176.122971][T12152] __dump_stack+0x1d/0x30 [ 176.122991][T12152] dump_stack_lvl+0xe8/0x140 [ 176.123088][T12152] dump_stack+0x15/0x1b [ 176.123104][T12152] should_fail_ex+0x265/0x280 [ 176.123207][T12152] should_failslab+0x8c/0xb0 [ 176.123233][T12152] __kmalloc_node_noprof+0xa9/0x410 [ 176.123316][T12152] ? load_msg+0x41/0x2f0 [ 176.123404][T12152] load_msg+0x41/0x2f0 [ 176.123420][T12152] ? proc_fail_nth_write+0x13b/0x160 [ 176.123435][T12152] do_msgsnd+0xdc/0xaf0 [ 176.123453][T12152] ? __rcu_read_unlock+0x4f/0x70 [ 176.123527][T12152] ? __fget_files+0x184/0x1c0 [ 176.123542][T12152] ? fput+0x8f/0xc0 [ 176.123558][T12152] __x64_sys_msgsnd+0xa8/0xc0 [ 176.123576][T12152] x64_sys_call+0x17c1/0x2ff0 [ 176.123641][T12152] do_syscall_64+0xd2/0x200 [ 176.123654][T12152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.123693][T12152] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.123705][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.123718][T12152] RIP: 0033:0x7f82de1aeb69 [ 176.123807][T12152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.123818][T12152] RSP: 002b:00007f82dc80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 176.123830][T12152] RAX: ffffffffffffffda RBX: 00007f82de3d5fa0 RCX: 00007f82de1aeb69 [ 176.123837][T12152] RDX: 0000000000000401 RSI: 0000200000000d00 RDI: 0000000000000000 [ 176.123844][T12152] RBP: 00007f82dc80f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.123852][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.123862][T12152] R13: 0000000000000001 R14: 00007f82de3d5fa0 R15: 00007ffd4ce77d18 [ 176.123915][T12152] [ 176.241346][T12154] Q6\bY4 speed is unknown, defaulting to 1000 [ 176.339007][T12156] Q6\bY4 speed is unknown, defaulting to 1000 [ 176.352028][T12157] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.392833][T12157] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.426982][ T3434] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.438279][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.451005][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.463226][ T3434] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.472588][T12157] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.520514][T12163] FAULT_INJECTION: forcing a failure. [ 176.520514][T12163] name failslab, interval 1, probability 0, space 0, times 0 [ 176.533204][T12163] CPU: 1 UID: 0 PID: 12163 Comm: syz.3.3107 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 176.533288][T12163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.533301][T12163] Call Trace: [ 176.533309][T12163] [ 176.533318][T12163] __dump_stack+0x1d/0x30 [ 176.533338][T12163] dump_stack_lvl+0xe8/0x140 [ 176.533357][T12163] dump_stack+0x15/0x1b [ 176.533375][T12163] should_fail_ex+0x265/0x280 [ 176.533472][T12163] ? __pfx_ip6_dst_gc+0x10/0x10 [ 176.533485][T12163] should_failslab+0x8c/0xb0 [ 176.533565][T12163] kmem_cache_alloc_noprof+0x50/0x310 [ 176.533582][T12163] ? dst_alloc+0xbd/0x100 [ 176.533598][T12163] ? __pfx_ip6_dst_gc+0x10/0x10 [ 176.533633][T12163] dst_alloc+0xbd/0x100 [ 176.533696][T12163] ip6_pol_route+0x6bf/0xb40 [ 176.533777][T12163] ? ip6_pol_route+0x389/0xb40 [ 176.533792][T12163] ip6_pol_route_input+0x42/0x60 [ 176.533813][T12163] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 176.533827][T12163] fib6_rule_lookup+0x32c/0x470 [ 176.533918][T12163] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 176.534006][T12163] ip6_route_input+0x412/0x4e0 [ 176.534025][T12163] ip6_rcv_finish+0x1c1/0x340 [ 176.534036][T12163] ipv6_rcv+0x72/0x150 [ 176.534046][T12163] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 176.534064][T12163] __netif_receive_skb+0x9e/0x270 [ 176.534076][T12163] ? tun_rx_batched+0xc7/0x430 [ 176.534169][T12163] netif_receive_skb+0x4b/0x2e0 [ 176.534189][T12163] ? tun_rx_batched+0xc7/0x430 [ 176.534213][T12163] tun_rx_batched+0xfc/0x430 [ 176.534230][T12163] tun_get_user+0x1eb6/0x2680 [ 176.534305][T12163] ? ref_tracker_alloc+0x1f2/0x2f0 [ 176.534326][T12163] tun_chr_write_iter+0x15e/0x210 [ 176.534342][T12163] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 176.534395][T12163] vfs_write+0x4a0/0x8e0 [ 176.534410][T12163] ksys_write+0xda/0x1a0 [ 176.534500][T12163] __x64_sys_write+0x40/0x50 [ 176.534513][T12163] x64_sys_call+0x27fe/0x2ff0 [ 176.534525][T12163] do_syscall_64+0xd2/0x200 [ 176.534539][T12163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.534553][T12163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.534616][T12163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.534701][T12163] RIP: 0033:0x7fe90a8fd61f [ 176.534711][T12163] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 176.534722][T12163] RSP: 002b:00007fe908f5f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 176.534734][T12163] RAX: ffffffffffffffda RBX: 00007fe90ab25fa0 RCX: 00007fe90a8fd61f [ 176.534742][T12163] RDX: 0000000000000046 RSI: 0000200000000140 RDI: 00000000000000c8 [ 176.534831][T12163] RBP: 00007fe908f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.534845][T12163] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 176.534852][T12163] R13: 0000000000000001 R14: 00007fe90ab25fa0 R15: 00007ffd368f2b88 [ 176.534863][T12163] [ 176.826312][T12157] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.857611][T12166] loop1: detected capacity change from 0 to 1024 [ 176.864201][T12167] loop3: detected capacity change from 0 to 2048 [ 176.864446][T12166] EXT4-fs: Ignoring removed bh option [ 176.876148][T12166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.883477][T12166] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.903270][T12167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.929707][T11860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.939141][T12167] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.951654][T12166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.953265][T12173] loop0: detected capacity change from 0 to 128 [ 176.970553][ T3395] tipc: Node number set to 2886997007 [ 176.978381][T12173] FAULT_INJECTION: forcing a failure. [ 176.978381][T12173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.991663][T12173] CPU: 0 UID: 0 PID: 12173 Comm: syz.0.3111 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 176.991717][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.991729][T12173] Call Trace: [ 176.991742][T12173] [ 176.991749][T12173] __dump_stack+0x1d/0x30 [ 176.991769][T12173] dump_stack_lvl+0xe8/0x140 [ 176.991786][T12173] dump_stack+0x15/0x1b [ 176.991801][T12173] should_fail_ex+0x265/0x280 [ 176.991856][T12173] should_fail+0xb/0x20 [ 176.991883][T12173] should_fail_usercopy+0x1a/0x20 [ 176.991900][T12173] strncpy_from_user+0x25/0x230 [ 176.991923][T12173] ? kmem_cache_alloc_noprof+0x186/0x310 [ 176.991968][T12173] ? getname_flags+0x80/0x3b0 [ 176.992043][T12173] getname_flags+0xae/0x3b0 [ 176.992067][T12173] __x64_sys_mkdirat+0x40/0x60 [ 176.992084][T12173] x64_sys_call+0x2b7/0x2ff0 [ 176.992104][T12173] do_syscall_64+0xd2/0x200 [ 176.992204][T12173] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 176.992256][T12173] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 176.992274][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.992293][T12173] RIP: 0033:0x7ff28197eb69 [ 176.992307][T12173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.992393][T12173] RSP: 002b:00007ff27ffe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 176.992410][T12173] RAX: ffffffffffffffda RBX: 00007ff281ba5fa0 RCX: 00007ff28197eb69 [ 176.992421][T12173] RDX: 00000000000000a3 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 176.992432][T12173] RBP: 00007ff27ffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.992442][T12173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.992453][T12173] R13: 0000000000000000 R14: 00007ff281ba5fa0 R15: 00007fffaaf09a68 [ 176.992467][T12173] [ 177.006440][T12178] can0: slcan on ttyS3. [ 177.103111][T12179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3110'. [ 177.211315][T12185] loop1: detected capacity change from 0 to 128 [ 177.232395][T12185] vfat: Unknown parameter './file0' [ 177.241882][T12178] can0 (unregistered): slcan off ttyS3. [ 177.276987][T12191] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 177.287142][T12191] SELinux: failed to load policy [ 177.304073][T12187] loop3: detected capacity change from 0 to 512 [ 177.310900][ T3434] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.351478][T12187] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.366773][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3116'. [ 177.375888][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 177.393745][T12181] bridge0: port 3(syz_tun) entered disabled state [ 177.434196][T12187] EXT4-fs (loop3): 1 truncate cleaned up [ 177.435496][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.447073][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.518169][T12204] SELinux: failed to load policy [ 177.557000][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.586662][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.641310][T12181] erspan1: left allmulticast mode [ 177.652770][ T3395] Q6\bY4 speed is unknown, defaulting to 1000 [ 177.659745][ T3395] syz0: Port: 1 Link DOWN [ 177.665645][ T3434] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.725875][ T3434] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.749008][ T3434] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.789949][T12239] loop3: detected capacity change from 0 to 512 [ 177.818962][T12239] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.858311][T12241] loop4: detected capacity change from 0 to 512 [ 177.880991][T12239] EXT4-fs (loop3): 1 truncate cleaned up [ 177.882577][T12232] unsupported nla_type 52263 [ 177.909830][T12241] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 177.978601][T12238] loop5: detected capacity change from 0 to 1024 [ 177.989068][T12238] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.000298][T12238] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.008313][T12241] EXT4-fs (loop4): mount failed [ 178.041070][T12238] JBD2: no valid journal superblock found [ 178.049959][T12238] EXT4-fs (loop5): Could not load journal inode [ 178.084517][T12263] loop0: detected capacity change from 0 to 256 [ 178.101607][T12263] FAT-fs (loop0): bogus number of FAT sectors [ 178.107870][T12263] FAT-fs (loop0): Can't find a valid FAT filesystem [ 178.117785][T12270] FAULT_INJECTION: forcing a failure. [ 178.117785][T12270] name failslab, interval 1, probability 0, space 0, times 0 [ 178.131142][T12270] CPU: 1 UID: 0 PID: 12270 Comm: syz.3.3134 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 178.131169][T12270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.131201][T12270] Call Trace: [ 178.131207][T12270] [ 178.131266][T12270] __dump_stack+0x1d/0x30 [ 178.131302][T12270] dump_stack_lvl+0xe8/0x140 [ 178.131367][T12270] dump_stack+0x15/0x1b [ 178.131385][T12270] should_fail_ex+0x265/0x280 [ 178.131476][T12270] ? fsnotify_alloc_group+0x5a/0x170 [ 178.131495][T12270] should_failslab+0x8c/0xb0 [ 178.131544][T12270] __kmalloc_cache_noprof+0x4c/0x320 [ 178.131617][T12270] fsnotify_alloc_group+0x5a/0x170 [ 178.131708][T12270] do_inotify_init+0x59/0x270 [ 178.131753][T12270] __x64_sys_inotify_init1+0x1e/0x30 [ 178.131779][T12270] x64_sys_call+0x27e8/0x2ff0 [ 178.131803][T12270] do_syscall_64+0xd2/0x200 [ 178.131877][T12270] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.131955][T12270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.131977][T12270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.132001][T12270] RIP: 0033:0x7fe90a8feb69 [ 178.132017][T12270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.132081][T12270] RSP: 002b:00007fe908f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 178.132098][T12270] RAX: ffffffffffffffda RBX: 00007fe90ab25fa0 RCX: 00007fe90a8feb69 [ 178.132112][T12270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.132124][T12270] RBP: 00007fe908f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.132137][T12270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.132150][T12270] R13: 0000000000000000 R14: 00007fe90ab25fa0 R15: 00007ffd368f2b88 [ 178.132166][T12270] [ 178.319361][T12273] loop1: detected capacity change from 0 to 2048 [ 178.381326][T12281] loop5: detected capacity change from 0 to 512 [ 178.388156][T12281] EXT4-fs: inline encryption not supported [ 178.396578][T12281] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.397914][T12269] hsr0: entered promiscuous mode [ 178.414549][T12281] EXT4-fs (loop5): 1 truncate cleaned up [ 178.415216][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 178.424551][T12276] loop3: detected capacity change from 0 to 512 [ 178.437572][T12269] hsr_slave_0: left promiscuous mode [ 178.445526][T12276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.462192][T12269] hsr_slave_1: left promiscuous mode [ 178.468650][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3140'. [ 178.477655][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3140'. [ 178.486738][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3140'. [ 178.499393][T12276] EXT4-fs (loop3): 1 truncate cleaned up [ 178.503320][T12269] hsr0 (unregistering): left promiscuous mode [ 178.579688][T12286] loop0: detected capacity change from 0 to 512 [ 178.588569][T12299] FAULT_INJECTION: forcing a failure. [ 178.588569][T12299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 178.601845][T12299] CPU: 0 UID: 0 PID: 12299 Comm: syz.3.3143 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 178.601874][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.601887][T12299] Call Trace: [ 178.601895][T12299] [ 178.601913][T12299] __dump_stack+0x1d/0x30 [ 178.601936][T12299] dump_stack_lvl+0xe8/0x140 [ 178.601964][T12299] dump_stack+0x15/0x1b [ 178.602052][T12299] should_fail_ex+0x265/0x280 [ 178.602107][T12299] should_fail_alloc_page+0xf2/0x100 [ 178.602186][T12299] __alloc_frozen_pages_noprof+0xff/0x360 [ 178.602253][T12299] alloc_pages_mpol+0xb3/0x250 [ 178.602332][T12299] vma_alloc_folio_noprof+0x1aa/0x300 [ 178.602368][T12299] handle_mm_fault+0xec2/0x2c20 [ 178.602441][T12299] do_user_addr_fault+0x636/0x1090 [ 178.602480][T12299] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 178.602569][T12299] exc_page_fault+0x62/0xa0 [ 178.602587][T12299] asm_exc_page_fault+0x26/0x30 [ 178.602607][T12299] RIP: 0033:0x7fe90a7c0ce3 [ 178.602623][T12299] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 178.602644][T12299] RSP: 002b:00007fe908f5e4a0 EFLAGS: 00010206 [ 178.602660][T12299] RAX: 0000000000001000 RBX: 00007fe908f5e540 RCX: 00007fe900b3f000 [ 178.602747][T12299] RDX: 00007fe908f5e6e0 RSI: 0000000000000001 RDI: 00007fe908f5e5e0 [ 178.602761][T12299] RBP: 00000000000000f1 R08: 0000000000000006 R09: 0000000000000020 [ 178.602775][T12299] R10: 0000000000000024 R11: 00007fe908f5e540 R12: 0000000000000001 [ 178.602789][T12299] R13: 00007fe90a99d940 R14: 000000000000002e R15: 00007fe908f5e5e0 [ 178.602809][T12299] [ 178.602830][T12299] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 178.606602][T12302] : renamed from bridge_slave_0 (while UP) [ 178.617657][T12286] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 178.665130][T12299] loop3: detected capacity change from 0 to 128 [ 178.681660][T12286] EXT4-fs (loop0): 1 truncate cleaned up [ 178.721525][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 178.721538][ T29] audit: type=1400 audit(1754159558.785:12543): avc: denied { map_create } for pid=12308 comm="syz.1.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.833588][ T29] audit: type=1400 audit(1754159558.785:12544): avc: denied { map_read map_write } for pid=12308 comm="syz.1.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 178.855003][ T29] audit: type=1400 audit(1754159558.835:12545): avc: denied { mount } for pid=12298 comm="syz.3.3143" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.891470][ T29] audit: type=1400 audit(1754159558.975:12546): avc: denied { unmount } for pid=11683 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.925616][T12312] loop1: detected capacity change from 0 to 1024 [ 178.934510][T12312] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 178.946443][T12312] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 178.978923][ T29] audit: type=1400 audit(1754159559.065:12547): avc: denied { create } for pid=12324 comm="syz.0.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 179.003342][T12312] JBD2: no valid journal superblock found [ 179.009413][T12312] EXT4-fs (loop1): Could not load journal inode [ 179.034856][ T29] audit: type=1400 audit(1754159559.085:12548): avc: denied { write } for pid=12318 comm="syz.3.3147" name="unix" dev="proc" ino=4026532421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 179.077612][T12334] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.106658][T12332] loop0: detected capacity change from 0 to 164 [ 179.123780][T12334] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.145169][T12332] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 179.155717][ T29] audit: type=1326 audit(1754159559.155:12549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12324 comm="syz.0.3149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff28197eb69 code=0x7ffc0000 [ 179.179336][T12347] audit: audit_backlog=65 > audit_backlog_limit=64 [ 179.179352][T12347] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 179.179366][T12347] audit: backlog limit exceeded [ 179.184049][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3153'. [ 179.207454][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3153'. [ 179.223106][T12334] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.332027][T12334] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.368849][T12363] loop4: detected capacity change from 0 to 1024 [ 179.376117][T12363] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 179.424481][T12361] loop1: detected capacity change from 0 to 512 [ 179.436000][T12361] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.524597][T12370] loop5: detected capacity change from 0 to 512 [ 179.533219][T12361] EXT4-fs (loop1): 1 truncate cleaned up [ 179.560516][T12370] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.597890][T12370] EXT4-fs (loop5): 1 truncate cleaned up [ 179.609929][T12376] loop4: detected capacity change from 0 to 512 [ 179.632018][T12376] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.659369][ T2] ================================================================== [ 179.667506][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 179.674006][ T2] [ 179.676325][ T2] read-write to 0xffffffff8685fc48 of 4 bytes by task 11405 on cpu 0: [ 179.684469][ T2] free_pid+0x77/0x180 [ 179.688634][ T2] free_pids+0x54/0xb0 [ 179.692692][ T2] release_task+0x9a9/0xb60 [ 179.697213][ T2] wait_consider_task+0x114a/0x1660 [ 179.702415][ T2] __do_wait+0xfa/0x510 [ 179.706576][ T2] do_wait+0xb7/0x260 [ 179.710560][ T2] kernel_wait4+0x16b/0x1e0 [ 179.715079][ T2] __x64_sys_wait4+0x91/0x120 [ 179.719754][ T2] x64_sys_call+0x2a66/0x2ff0 [ 179.724444][ T2] do_syscall_64+0xd2/0x200 [ 179.728944][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.734938][ T2] [ 179.737250][ T2] read to 0xffffffff8685fc48 of 4 bytes by task 2 on cpu 1: [ 179.744537][ T2] copy_process+0x14a6/0x2000 [ 179.749209][ T2] kernel_clone+0x16c/0x5c0 [ 179.753794][ T2] kernel_thread+0xac/0xe0 [ 179.758202][ T2] kthreadd+0x28d/0x360 [ 179.762344][ T2] ret_from_fork+0xdd/0x150 [ 179.766881][ T2] ret_from_fork_asm+0x1a/0x30 [ 179.771686][ T2] [ 179.773999][ T2] value changed: 0x800000da -> 0x800000d9 [ 179.779699][ T2] [ 179.782007][ T2] Reported by Kernel Concurrency Sanitizer on: [ 179.788575][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 179.800192][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.810234][ T2] ================================================================== [ 179.851144][T12384] loop5: detected capacity change from 0 to 128 [ 179.861010][T12376] EXT4-fs (loop4): 1 truncate cleaned up [ 180.916683][ T2725] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.927464][ T388] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.937482][ T388] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.948731][ T388] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0