last executing test programs: 1m40.537954876s ago: executing program 3 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000009b091bb629c3e94254cdbca7f4378bf0624db317720dc8c07136a800d5e10009441aa69d20c66b0363f2997a613241d5c67619e41b075ff86baedd88cf595c876261a14c6b2c0d3f4b36a7dfcf6a20a7a7baa44df369b91daeea47c39168fa367c8f9c48ff3e4f68e0488b9290b801c4565ff030aeb9bda523b44cbdbf56134fbcf5d4a8b6377f5ca1e5ee5af32c39e51ccbb3c2c19f3b5605abc2288d0c99bb25755069b77ae103650987e059641d704d54795743652ec40951d8170c8234815a3767181cc954ad3ee7fbd5e702ad"], 0x50) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYRES16=r2], 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00002000800000008548cbf42a24", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in6=@mcast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x800000000000}, {0x0, 0x7, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r7, {0x19ea}}, './file1\x00'}) setsockopt$inet6_udp_int(r8, 0x11, 0x0, &(0x7f00000055c0)=0x5, 0x4) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000005900)={r8, 0x101, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xbab6, 0x0, 0x2, 0x1e, 0x18, "660d1a021478859ff2a4c4ce92cee18f8f97377e4b79b5e7c7cf161c6b6d8f9fa06d5b6baf8a22b3c986951824601fa68b60c29b62ceab1dc96ec71fbcd0f39c", "e21322c9c01ce87e8f7ae5e365f831a79de0aaa19e8fc022c490b4ab49b4535ea93ae9062e11788f7dc666d50da027aee4eb099aa450cb2dcef64ac0a74fb48a", "9ddf2025fdfa71a49f1c363c4e26b2ebb9f7b1dd5c1f9c028092d82a88979764", [0x0, 0xf5]}}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(0xfffffffffffffffe) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005880)={0x0, 0x0}) recvmmsg(r11, &(0x7f00000056c0)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000480)=""/184, 0xb8}], 0x3}, 0x8}, {{&(0x7f0000000580)=@pppol2tpv3in6, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000001600)=""/131, 0x83}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/210, 0xd2}], 0xa, &(0x7f0000000d40)=""/194, 0xc2}, 0x5}, {{&(0x7f0000000e40)=@tipc=@id, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/103, 0x67}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/84, 0x54}, {&(0x7f0000002b40)=""/196, 0xc4}, {&(0x7f0000002c40)=""/76, 0x4c}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001880)=""/181, 0xb5}], 0x8, &(0x7f0000002d40)=""/105, 0x69}, 0xb6}, {{&(0x7f0000002dc0)=@generic, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/149, 0x95}], 0x1, &(0x7f0000002f40)=""/6, 0x6}, 0x7}, {{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003000)=""/232, 0xe8}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/178, 0xb2}, {&(0x7f00000041c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000004300)=""/131, 0x83}], 0x6, &(0x7f0000004440)=""/116, 0x74}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000044c0)}], 0x1, &(0x7f0000004540)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000005540)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000055c0), 0x0, &(0x7f0000005600)=""/162, 0xa2}, 0x9}], 0x7, 0x10102, &(0x7f00000058c0)={r12, r13+60000000}) socket$l2tp(0x2, 0x2, 0x73) 1m40.411661338s ago: executing program 3 (id=521): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000baed000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe3, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x7f8000000}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1m40.373311138s ago: executing program 3 (id=523): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="000000002000000000000000010000e201000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x0) 1m40.329224219s ago: executing program 3 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1m39.751879637s ago: executing program 3 (id=533): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m39.689536948s ago: executing program 3 (id=538): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m39.679349098s ago: executing program 32 (id=538): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 1m28.067459487s ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1m28.032014547s ago: executing program 4 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f", 0x1d}, {0x0}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f", 0x8b}, {0x0}], 0x5, &(0x7f0000001480)}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) pread64(r8, &(0x7f0000001840)=""/4096, 0x1000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xf6c447fee59251f4}) close(r2) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x3, &(0x7f0000ffc000/0x2000)=nil, 0x7) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000078020000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) 1m27.178704529s ago: executing program 4 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x8e, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da2", 0x5dc}, 0x50) 1m27.160255679s ago: executing program 4 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r7, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) syz_clone(0x4000c0fe, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r8}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 1m26.768235764s ago: executing program 4 (id=853): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f6873720000000008000240004400000800"], 0xf8}}, 0x0) 1m26.667693625s ago: executing program 4 (id=857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="8401000010001307000000003d000000fe880000000000000000000000000101fe8000000000000000000000000000bb4000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000160000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000"], 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 1m26.667611796s ago: executing program 33 (id=857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="8401000010001307000000003d000000fe880000000000000000000000000101fe8000000000000000000000000000bb4000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000160000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c290000"], 0x184}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 1.550177469s ago: executing program 1 (id=2366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) (fail_nth: 9) 1.399589831s ago: executing program 1 (id=2373): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x2c8, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3b}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xec, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x65}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xdc6}]}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8d8b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9008}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8ea6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x46, 0x3, "b5f59a440bd8ee3384378e6b7bae5f86b6b7cb9b44573511fadd2a8bd4f97a737395e141938684b772ed1828815ac6ae44f4dc90a27068b82b5a1281ebe031c3f418"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1df19f47d0b967c9d1c5ac63383e1004a6ce5209ffbcc7647ac324b4d623c5"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3c80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x28, r5, 0x12d, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x4040040) 1.268988663s ago: executing program 1 (id=2375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x49cd, &(0x7f0000000480)={0x0, 0xfffffffb, 0x400, 0x2, 0x176}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = getpid() r6 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, &(0x7f0000000040)={r6, 0xffffffffffffffff, 0x10001}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read$eventfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r0, 0x47bc, 0x2, 0x0, 0x0, 0x0) 1.221851873s ago: executing program 5 (id=2377): mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='bcache_invalidate\x00', r2, 0x0, 0x2}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) (fail_nth: 3) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 1.209732654s ago: executing program 1 (id=2378): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) getdents64(0xffffffffffffffff, 0x0, 0x5c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a0000000300000006000000000000000000000105000000200000000000000000000003000000000200000002000000000000000061002e2e61612e61005f00c37704f6a11ce65d7d9bf9f8ba15d203f51e4736a63ce7beab27ecccd1065a68d61205b7d842fba0946dbb624740fecc1fb46209eaca368589a5dabf7c521b2077fb777269d92e6ffd4017839829df1b5f7604afc237a4dd96cc6614c3bcc4ca6fc538a5f441141cdef30fac7d9193b162c929339f2976c64c765fef9163389c06209c7cbc"], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8000}, {{0x4, 0x0, 0x1}, {0x0, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000006100)=@newtfilter={0x2250, 0x2c, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xfff1, 0x3}, {0x10, 0x1}}, [@f_rsvp={{0x9}, {0x1d3c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_RSVP_ACT={0x644, 0x6, [@m_skbedit={0x120, 0x1b, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0x2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0xdc, 0x6, "112d9a0bd7866b3fd9e9d059a484442adc0d9d3479980467aa75daa096f121fe84b3ea6e9113dd270b21699c5af00f72690cb445673fbd4fe629588b839e367442fc42abc6fd0ebed000e5234febb76b6b3fab3bd3c44f8cc1ce13de2e76d54a6a1a801c45199b449abdf35e8879c0337c2a21cf7a10f1c02aadb32edfc7bb71b02877b10a1224b92ed31e990c9fb5eab5e88b38adf7c6aa8e3a73bd27529543e0705c23dcbab0ab66c92af87d146efe284b5b09260d8e40ea553f2815dc9f4b5693016f99e1d12fc8c9e284151b2667bfe5ca071c502e35"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_bpf={0x94, 0x15, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x1, 0x0, 0xf9, 0x7}, {0xe, 0xf0, 0x9, 0x4}, {0x8, 0x6, 0x1, 0x5f56}, {0x3ff, 0x52, 0x8, 0x8}, {0x31f9, 0x3, 0xe}]}]}, {0x37, 0x6, "b89391fb3b7f60193bc82ab1900ccf7086f48be65d90df220b77858ef6398e0654d37fcb375ac7d1f83ce1cd14d31236959750"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xf4, 0xe, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5e0, 0x7, 0x3, 0xec37, 0x9}}]}, {0xaf, 0x6, "230f6b98108698f8b63ec6f718c93250e66c54e219a456cd9119fa99a8ca6a9682bc59a367def22c722f08949867917840de6a641c00e57b3a623f78ffdd18daa9f25e127bcf86343aaca85315702120b3b25ebd2d4fa7e7bf597d497ab9962f21bb5ecd5fc56222c0ebd6b20bd96fa7a4ea6fb790e07c01528dc0cfb158c283160f879eda5013f8c41b5251d463dbc1d1c3a61b61f066089fac1bc20de888e897e4d1db2ff2c66049d897"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_mirred={0x164, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x1, 0x8, 0x7, 0xffff}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x400, 0x10000000, 0xd, 0x5}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8b, 0x4, 0x1, 0x3}, 0x4, r8}}]}, {0xd5, 0x6, "9bf0f14295f61652ef63b9d102810c4301fd6e1347b4d60eaa462ac7d957a4973ef45dd6a0d97aa3fd37bc904f59955ccec2322036ca16451218d7e56bee02cefc1087f1ef5946f15bc70ea3496540de502f854c5563e8e19a6001c08148619c0c9b992dc4a20418551815193603abefc25ff3c2895123fc3391296eb971d98af3d0ad6b077cf3818305696828c1cad00f3a2282ae1ac2322bb10a3b7d6d4edbc094c3c052a97b1f48b36254be50078556bfc0cde8e646370764f735debc9446112110e2f5391239a870799151d09cf6d0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_tunnel_key={0x11c, 0x1a, 0x0, 0x0, {{0xf}, {0x4c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0xa4, 0x6, "37cc187c71ea8c6c9b0b4d4d57d5c6f829cb27095927ee1c980e78565f048ed5ceb4f461d55d3591f2bfbb4a1aaeba5fa5253d10bfcdb8b79ac15a517f9bf2edb59cc8f2bbfd08fb6c43d29ecdde8049fd1577fb6102d194940835eb3563a70a46315a21a1ede1c4ed8deff591c90b08bed931656db4d6275d8bf9de20cacea3623016162b78408b00c7790e9b254ba1d3ca6fe515ec99391b446482ad80ebc3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x118, 0x9, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x3, 0x4, 0xffff, 0xaee9}, 0x8}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x80000000, 0x7, 0xfe}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x4, 0x1, 0x4, 0x5}, 0x7}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x791, 0x4ba935840f11439a, 0x1, 0xa4d7}, 0x34}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffff9, 0x4, 0x3, 0x5, 0x2}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x70f9, 0x2, 0x6, 0x2e, 0x401}, 0x7}}]}, {0x43, 0x6, "65185ba6ff859bbd3e775a6a6485ea26b93fe59dcf923a1676e7528f04ab9387933cf74a92a747d846f0cbb5dec67731977c985f9007648138d7c0e47bc805"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @broadcast}, @TCA_RSVP_ACT={0x1058, 0x6, [@m_ct={0x1054, 0x10, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010100}, @TCA_CT_ZONE={0x6, 0x4, 0x9a1}, @TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_ZONE={0x6, 0x4, 0x2}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfffb, 0xd}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xb}}, @TCA_RSVP_POLICE={0x58, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x8, 0x8, 0x6, 0xfe06, {0x0, 0x1, 0x7, 0xff, 0xffff, 0x2}, {0xf8, 0x3, 0xb658, 0x361, 0x6}, 0x101, 0x1, 0xc}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x35}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]}, @TCA_RSVP_ACT={0x614, 0x6, [@m_mpls={0xe0, 0x4, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xda, 0xf, 0x8, 0x8}, 0x1}}]}, {0x88, 0x6, "57c05949f80dc340320fb95ded12a895c51ad82e340b0e2cc74c7577b76381587c2a0fff6f52915051158e33805279a8e681918077d7cbab08d03c097abcd3fe3271d1e15b3d9c4292347c56018a56982c5764ec9074e0c29524a63eed339b510a6b47942ff194175f7e1bd71088c5c92469d544ac6556054e7c95b73559c7a2370cb561"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xc8, 0xc, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x23, 0xf698, 0x425dfedc8579c4ca, 0x0, 0x8001}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}]}, {0x4b, 0x6, "9a25bd87983e266b9b70403e91aabe5327e1725b767a1d8bf60956fe60c5b465e345654b9ff4b9f068619a76094e21ece1994868ba333dd51e33a0253a670e527d68603f8ef9aa"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x210, 0x3, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x8, 0x5, 0x2}, @multicast1, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xb7fd, 0x2, 0x2, 0x2}, @loopback, @multicast2, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x4, 0x3, 0x8}, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe9f, 0x0, 0x2, 0x5, 0xffffffff}, @broadcast, @private=0xa010100, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1ff, 0x60000}, @remote, @loopback, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x22b45e2a, 0x0, 0x20000000, 0x7fffffff, 0x2}, @loopback, @multicast1, 0xff}}]}, {0xf7, 0x6, "a8f4390882f6e55fbc9eda507a0ec46e7d3970a3004f848e6cbf39fd0c5d6bb6de2fe76a7bf5cbe798d200cdd23e816a93360586cb31a45ac35027856cde8c3d3e01058fe6f34a8e9b662eb8438218c90c95e9c7b7c8ba9a9666f055cd3c99ed818f71ce0a3b09884bb3d421b6f15d1801d0be7322264873cea5a7a5837f6c52b7028295929bb2c8d18cc8f2014099cb8104c120dca53358a02b127509b59b8a3d9c5130e2fd3c879e334415e772055fbe23663227e63f841c216df5af2d3f2b6e676cca1ef25203201666cdbf555faf1673806b4f4298f08a2cad8d7405a1ab05bd62f6c8455099ed317b60c23d2691ea3dd5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x18c, 0x13, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x35, 0x1, 0x0, 0x3, 0x401}}}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_TYPE={0x6, 0x5, 0x3}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x10000}]}]}, {0xf3, 0x6, "8b0c46e1521f4488629f27eaadea19e53c0e26586bb5e629000a3c544c861ba6bd56ec1aeedb29bdd2282851e44801eba308eadb9ce0e5916c0dc7ea941cff2fc37fad233f7a65268c0639e615ac1b8d31bbe4be4ee765de312a490a75a8721b52af2e5dc709a2638ccfe4419867e432810a8716b5afd15edc230e16b8fe1fe4121742e13986396e1c1bdf52d8b7ff1c908100dd92bdd5e4d90c4d6ba753b6f8441fc8012b6ed99f2f513a089f24c2f7179338afc3355e8d3da16d84690741c617949b08fb1f2849ea3b1b35ac81fc993aad8b47fc974958eb1a61e6c4aaf31e961d5f0e842c813e0b0258de3e88db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_gact={0xcc, 0x16, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x700, 0x5}}]}, {0x93, 0x6, "330f5e62c2a7d447fe1a75f77ce8bb1ea1ecafe639e48033fb7d89cfec27fe0ed07c6216d384915c65c9e804a5f3946fcd20c8379b2948697c8d7573d2389004094d9bd51f8cd9c245810ca7eda5393b0e3255f8cd66ea4fd6608ca830554f294ee65c317f6485b9256aad302b3b95f8978ba18d553d58dad15f40ae72349af5a9e6a698a9bd738bb2e2b61178c851"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_RSVP_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0x5}}]}}, @f_rsvp={{0x9}, {0x46c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x8000, 0x5, 0x7}, {0x3, 0x81, 0x7}, 0x8, 0x3, 0x4}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_ACT={0x440, 0x6, [@m_tunnel_key={0xc8, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x95, 0x6, "db7d7654a511c2781bbcc0b269ca223f313244196d5b053f4558ee9d6a9a04e30b87e585fb72cd7aab732123df7186ff21ce0d2547f28761809933c48ece4cd214b317ed734f94b80b7a3930f286bfd747dff0860f120c4e57a90b62e4c57dbcd4b56ceb68f08094e431a9576bd76fe10900fa2175b7bf46be4f8bcf4307c235365d0f5a5ff9152b9897bf288e1b6e1bfe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x188, 0x1a, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0x1, 0x400}, 0x37}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0xffffffffffffffff, 0xffffffff, 0x80000001}, 0x79}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fffffff, 0x9, 0x6, 0xf, 0x7}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1c1, 0x5, 0xffffffffffffffff, 0x2, 0x3}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x2, 0xffffffffffffffff, 0x7, 0xfff}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x5, 0xffffffffffffffff, 0xfffffff9, 0x7ff}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1ff, 0x20000000, 0x80000001, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x86, 0x7, 0x10000000, 0x7fffffff}, 0x47}}]}, {0x79, 0x6, "5adc7205f36d1108fa0494405dbe6fbaae14e2881da75d1c9296dd6593295577fbef5d467a16865513b7b2d69c1c3f271aac538bc36e9cbecc1b340cf246975c7ad2eb64532eb2ad81962e55864c071e3d2709ea01c32a9fa3537af6f5545cdb14fc57e36ca19c369bd78d48adbe847f07ee204ac2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_connmark={0xf4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5bc8, 0x5, 0x2, 0x39}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x6, 0x6, 0x299e}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6d, 0x5, 0x400, 0x1}, 0xd381}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffa, 0x0, 0x3, 0xc3, 0x4}, 0x1}}]}, {0x52, 0x6, "5eb36b356b2dabb6c321682cb552b305cbcc4ccd779b9826a7c458565aeefa4d8e781e4e1a1ac095e39c3e3617957ffec223345dad4282cc946b63fe48d8c44ef5256e0a9d4f0f9c5f239133be03"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0xf8, 0x1b, 0x0, 0x0, {{0x9}, {0xc4, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x638, 0x3, 0x10, 0xaae2}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80000000, 0x7, 0x6, 0x4, 0x2}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x232}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x9, 0x5, 0xd128, 0x3}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x7f, 0x0, 0x200, 0x554}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x9, 0x5, 0xc, 0x4}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x800, 0x8, 0x0, 0x6, 0x3}, 0x2}}]}, {0xc, 0x6, "790b68c55cd31801"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @f_rsvp={{0x9}, {0x60, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x5, 0xffff}}, @TCA_RSVP_POLICE={0x4c, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x40, 0xe357, 0x0, {0x4, 0x1, 0xb84, 0x2, 0x5cd2, 0x9}, {0x6, 0x1, 0x6, 0x2db5, 0x3, 0x2}, 0x101, 0x7}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}]}}]}, 0x2250}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r9 = fcntl$dupfd(r6, 0x0, r6) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r10}, 0x10) syslog(0x3, &(0x7f0000000240)=""/139, 0x8b) write$P9_RMKNOD(r9, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x80, 0x0, 0x3}}, 0x14) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x6) 1.022718246s ago: executing program 1 (id=2383): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000c7c00000000000039a400"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r0, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000880), 0x402, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x3, 0x576, &(0x7f0000000140)="$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") open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa4, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xb6de}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffff643}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @multicast}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}, @IPSET_ATTR_LINENO={0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x84}, 0x1) 915.653337ms ago: executing program 2 (id=2385): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) setresgid(0x0, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) fchown(r5, 0x0, r6) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r8) r9 = getgid() setregid(r8, r9) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x7}, {0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2}, {0x8, 0x2, r2}, {0x8, 0x1, r3}, {0x8, 0x5, r6}, {0x8, 0x0, r8}], {0x10, 0x1}, {0x20, 0x4}}, 0x64, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x101}, 0x54) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x2) sendmsg$NFT_BATCH(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 616.692242ms ago: executing program 1 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) syz_emit_ethernet(0x46, &(0x7f0000000c80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @dccp_packet={0xb, 0x6, "ad208a", 0x10, 0x21, 0x0, @remote, @mcast2, {[], {{0x4e21, 0x4e20, 0x4, 0x1, 0x8, 0x0, 0x0, 0x5, 0x5, "7b73c2", 0xfb, "48c326"}}}}}}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(0x0, 0x143142, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r6, 0x0, r5, 0x0, 0x3, 0x0) fcntl$setpipe(r4, 0x4, 0xfffffffffffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x9) semop(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002100)={'gre0\x00', 0x0, 0x20, 0x40, 0xc, 0x2, {{0x36, 0x4, 0x2, 0x1, 0xd8, 0x67, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, {[@generic={0x88, 0x2}, @timestamp_prespec={0x44, 0x34, 0x4f, 0x3, 0x3, [{@multicast2, 0x2}, {@empty, 0x5345}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xad}, {@empty}]}, @ssrr={0x89, 0x23, 0xcb, [@multicast1, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @broadcast, @private=0xa010102]}, @end, @generic={0x94, 0x11, "3fde2e35950461eb81bce76590550a"}, @lsrr={0x83, 0x1b, 0x6e, [@dev={0xac, 0x14, 0x14, 0x34}, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @broadcast, @local]}, @ssrr={0x89, 0x1f, 0xe9, [@loopback, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @broadcast, @loopback, @local]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x1, 0xa, "2b5bf2b2ed26ca04"}, {0x1, 0x2}, {0x2, 0xc, "c4a2397d7fa75983dbc9"}]}]}}}}}) sendmmsg$inet(r8, &(0x7f0000002280)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="c36fa18d", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="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", 0x1000}], 0x1, &(0x7f00000004c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_retopts={{0x88, 0x0, 0x7, {[@cipso={0x86, 0x4f, 0x2, [{0x0, 0xf, "27d7ee30bed31bdff3e57b866a"}, {0x6, 0x4, "ba55"}, {0x1, 0x7, "54943db68c"}, {0x7, 0xd, "561162cd9187d8e597b463"}, {0x7, 0xf, "ce89cb9538adb70441c012afbd"}, {0x6, 0x10, "166ac3645f3e2c6b82cb83e6f72f"}, {0x2, 0x3, 'Z'}]}, @rr={0x7, 0x1f, 0x7d, [@empty, @multicast1, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, @empty, @remote]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0xe, [0x8]}]}}}], 0xe8}}, {{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000680)="54963575201c44816c69f935f836be4a0336d58f691c7d55e2d96772f7080fa643f9ee463d8e6c65c8d3ff01460443cd80e13d13c43b1650eb4a77c19b40a483294f85c5cdb2e954f12279930f79fee11c5e51ccfe4abefab8e7f90867c7712f763a8093d0cf783e7d3b7b5feeec82250ec65040c66e44fbb88ef5c9ca89514b2a12a33d8825861a568bb6d6f81c7102cf00f27beb4b0059748b395b8703018de61405c66461e92cfe0e1c51edcf9c4d3574d1417b3780b9d1814f53dd3b58cb9618f203f6686bd0ab7b972cd13176bde855fbf0", 0xd4}], 0x1, &(0x7f00000005c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x60}}, {{&(0x7f0000000400)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000780)="bf4e3e886b639cc5babfe635d0124d04271482925919ed00bc5908ce26b53eb91d4ac1a56d420b6ad963b78be6640493952680e8fdc086457816944f03da4f7360aaf9c19e25f1f806316232692a4e169de2d4a97e0eb636ff94c219066c17c63f2e01462ea667c19fedba4873097122770c91d0fa8ae37dc9ff614bab5440e0273868dc4457d73367608ed93e28854679c2152b258963", 0x97}, {&(0x7f0000000840)="f1d81d34121f8f120e765ad76c72eb39f2a4e25c2cf62cbbc669575b8ebcb96d0f94cd940c667af7743c6532a45d5a2a663457ecf1e6faf0974493d347d9d1339b34e2e7ecc00fe80336ef2c23ceff309bb671e5a5a5c7c1caea9a431b64628d63c90e08be56e3f8aaa24365e75e41d2321027d8cdaead2a11a3e8aa8f07488543cd2d00b9a0f091ed1900b452baf2f039020d9f5a23f89da9515b854cb52060bb94506b16b5bd32", 0xa8}], 0x2}}, {{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001cc0)=[{&(0x7f0000001b00)="58b131eeac7795f86f7f4f33afc226f871366bdef42fd37a80012b123b644e848932381bbe0f833ef4cf94b0e5017a311e4f8abf41c771e92ec8354bac9b4423f5b9491a581b1249b74cd950ffc4c5eafcec64b1ea56154c559a1452b1438b1e702e6cc827d5b731e5f2d99deac3f4675b3101e9ea2b5d34f7eb4a102c82f8e89f053b8ca6f813a155e3f42920b77b38461ba9e8d05c6c60ec8a26eab9e0083111b704296b176ece58a527f0cc6ca9a654a7dfef60a77c4d8e8b72e55ff68ef3302d1e7385e11fdffaa3b4607bb6", 0xce}, {&(0x7f00000009c0)="c02a96eba0f8731830be6459d2ea17ad794315f104100097ff51162b8d35562ed439d67d4c0cfa60a03a87101661a85b34555d86ada58d54bdd8d5a8c571f00ce01c958b723155dfa54f6281b3e93a7a048f84ccf5eb2d824f28e150f58299452ea07b2629e9e7f580b5f8b47896a0b2064d4b46873f887e7d", 0x79}, {&(0x7f0000001c00)="20fbef1db7586f0b502144abe9b6049e1661a7bfa66a72672056a90f6ea080697782ba20b75d1230e875a4ec2e65e30f0c3b00f92c2c8ccc67f55c9642969f510daa31507c4a9263da60742f2e221dae67303d4d7240324b345c1552c4a75afcd96f1b408811db95de02a8c0fd87831dc398646dbeff3b7d1d61ea5d235906f1c57186676c935018e23b49452efba15261b0f99dbe54feddc572", 0x9a}], 0x3}}, {{&(0x7f0000001d00)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001d40)="9b4e7036bcd155f621186e7cf1e1ae9a5e29ae434667f95952fd78bb45e5ef77c065e5b0a356739b02b0c9c72493bab798acd24f1b21a37b28940443d787e7dc66", 0x41}, {&(0x7f0000001dc0)="3b74ee1f42968925c7dc494aa28ad0210e6a35c8503add7784e02e04711abff8c23cee54a14ea504e7a14991c3fb1d65c6c50ed3dd2b845ea13a9ad7ab3b81dce5b8fc0bed59d21b22b326697480de4ae4893e5a5083eb6d533e512325cc8d433a9531a0ea9a96a2ae762318c1097e22e173522d2ab1232a896080b2b06616599d88f7df4aac5038b14c10e89a9a9b7247112af4956fa7ea67db5258d5a7348689eaae118ba3f93a482c83912d3a581c58cd99f61446a6245a4a255eb63536cd865a4bf28b1f0d", 0xc7}, {&(0x7f0000001ec0)="8e5ce6c33f3da36578aa9e0008cf246e2f3d25d00f0e3ad55a2a867071fd9c65c4e91b74c66066ac5cec5c2c46b4671d06d3e857112c21053851f46baaf548e7877fdbb79b885570cb1cf37c6d0771d4d7aaeadd11e1386f1291fda5986424296d83c14af067be332cfb34bee3317619f72836135d9e19af0089d76db051548d671d27d31cd1d1685142398dd4f9450b9b1ce92a7892c37b2af0609dcf32f593c7d0a1f0dc2863", 0xa7}, {&(0x7f0000001f80)="57420aa2f3cfbbcf02770d1d38421a11d394248a4be00a902050e780d11f421896a7be802126f1fc16007daa7f82112321c2fb74525c38e89b6b478593341bff8dd6355d14a9a1b3c04f570683880b", 0x4f}, {&(0x7f0000002000)="79f158b66077235e8f33a6f5758b7a9cfaa3b28a4f4f5a6e465c003ccae5689e3b85ed85588d617ed701d3ab5bc2971ac18ae0d8ae0a18171619c217a6faabb02a2479da4a151ffbfe624502d953355edbe3b54c", 0x54}], 0x5, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa0}}], 0x38}}], 0x6, 0x4000) 559.815352ms ago: executing program 5 (id=2389): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x188) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x10, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) symlink(0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 523.876863ms ago: executing program 0 (id=2392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 482.456164ms ago: executing program 0 (id=2393): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r2, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 410.409774ms ago: executing program 6 (id=2394): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 401.862314ms ago: executing program 2 (id=2395): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_access(r3, &(0x7f00000000c0)={'system_u:object_r:udev_tbl_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) socket$nl_route(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, r1) setregid(r1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 400.843854ms ago: executing program 0 (id=2396): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_access(r3, &(0x7f00000000c0)={'system_u:object_r:udev_tbl_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) socket$nl_route(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, r1) setregid(r1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 378.901835ms ago: executing program 6 (id=2397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000009b091bb629c3e94254cdbca7f4378bf0624db317720dc8c07136a800d5e10009441aa69d20c66b0363f2997a613241d5c67619e41b075ff86baedd88cf595c876261a14c6b2c0d3f4b36a7dfcf6a20a7a7baa44df369b91daeea47c39168fa367c8f9c48ff3e4f68e0488b9290b801c4565ff030aeb9bda523b44cbdbf56134fbcf5d4a8b6377f5ca1e5ee5af32c39e51ccbb3c2c19f3b5605abc2288d0c99bb25755069b77ae103650987e059641d704d54795743652ec40951d8170c8234815a3767181cc954ad3ee7fbd5e702ad"], 0x50) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r2], 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00002000800000008548cbf42a24", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in6=@mcast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x800000000000}, {0x0, 0x7, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r7, {0x19ea}}, './file1\x00'}) setsockopt$inet6_udp_int(r8, 0x11, 0x0, &(0x7f00000055c0)=0x5, 0x4) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000005900)={r8, 0x101, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xbab6, 0x0, 0x2, 0x1e, 0x18, "660d1a021478859ff2a4c4ce92cee18f8f97377e4b79b5e7c7cf161c6b6d8f9fa06d5b6baf8a22b3c986951824601fa68b60c29b62ceab1dc96ec71fbcd0f39c", "e21322c9c01ce87e8f7ae5e365f831a79de0aaa19e8fc022c490b4ab49b4535ea93ae9062e11788f7dc666d50da027aee4eb099aa450cb2dcef64ac0a74fb48a", "9ddf2025fdfa71a49f1c363c4e26b2ebb9f7b1dd5c1f9c028092d82a88979764", [0x0, 0xf5]}}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(0xfffffffffffffffe) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005880)={0x0, 0x0}) recvmmsg(r10, &(0x7f00000056c0)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000480)=""/184, 0xb8}], 0x3}, 0x8}, {{&(0x7f0000000580)=@pppol2tpv3in6, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000001600)=""/131, 0x83}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/210, 0xd2}], 0xa, &(0x7f0000000d40)=""/194, 0xc2}, 0x5}, {{&(0x7f0000000e40)=@tipc=@id, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/103, 0x67}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/84, 0x54}, {&(0x7f0000002b40)=""/196, 0xc4}, {&(0x7f0000002c40)=""/76, 0x4c}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001880)=""/181, 0xb5}], 0x8, &(0x7f0000002d40)=""/105, 0x69}, 0xb6}, {{&(0x7f0000002dc0)=@generic, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/149, 0x95}], 0x1, &(0x7f0000002f40)=""/6, 0x6}, 0x7}, {{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003000)=""/232, 0xe8}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/178, 0xb2}, {&(0x7f00000041c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000004300)=""/131, 0x83}], 0x6, &(0x7f0000004440)=""/116, 0x74}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000044c0)}], 0x1, &(0x7f0000004540)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000005540)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000055c0), 0x0, &(0x7f0000005600)=""/162, 0xa2}, 0x9}], 0x7, 0x10102, &(0x7f00000058c0)={r11, r12+60000000}) socket$l2tp(0x2, 0x2, 0x73) 271.783196ms ago: executing program 5 (id=2398): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000000340)='cachefiles_ondemand_cread\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x40842, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000400)='a', 0x1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) sendfile(r7, r7, 0x0, 0xfffe80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 249.176857ms ago: executing program 6 (id=2399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x5c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x48, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x18}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x11}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x11}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x84}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x3a}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz0\x00'}]}}, @NFT_MSG_NEWCHAIN={0xd0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x70, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffa25}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ed6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r3 = dup(r0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') pread64(r4, &(0x7f0000002240)=""/4096, 0x1000, 0xff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5d, 0x5d, 0x3, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], 's'}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0x0, 0x1}, {0xa, 0x5}, {0x1, 0x4}, {0xa, 0x4}, {0x6}, {0x7, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/40, 0x7b, 0x28, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002f80)={r5, 0x20, &(0x7f0000002f40)={&(0x7f0000002e00)=""/110, 0x6e, 0x0, &(0x7f0000002e80)=""/162, 0xa2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r6, 0xfec0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000600)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1f}], &(0x7f0000000680)='GPL\x00', 0x56b3, 0x1000, &(0x7f0000002100)=""/4096, 0x41000, 0x60, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x8, 0x6, 0x1}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x200, @void, @value}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x8, 0x8}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0x5, 0x1c}, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ef095eafcd6c40984e577ca8b7c831203d0407fad82e90f416cfc6a3e306eabf857e3d7e56a8619713ea1e1f84757c5a36db2dd786329b4a1609e2b42f789f3af676767b7a8e6dc2644685f17b2d29fadbbacf903e218390bdeb1d1770a89d348096e019c7feb7fbcb979af98e0ea211360b61b9e811cd3177347f675dad9f5a1a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r15}, 0x10) r16 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4723d39c10780000000000000000", 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x24004014) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0x23, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0xa6, &(0x7f00000004c0)=""/166, 0x41100, 0x5, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0x7, 0xfc8}, 0x10, r6, r7, 0x1, &(0x7f00000008c0)=[r8, r9, r14], &(0x7f0000000900)=[{0x4, 0x4, 0xd, 0xc}], 0x10, 0x7fff, @void, @value}, 0x94) 220.120117ms ago: executing program 2 (id=2400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 177.013118ms ago: executing program 0 (id=2401): r0 = socket(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "00000000000000000000000000001010"}}}]}, 0x48}}, 0x0) 167.039268ms ago: executing program 2 (id=2402): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') 129.348418ms ago: executing program 6 (id=2403): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 127.451509ms ago: executing program 6 (id=2404): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x2002, 0x10) 108.900298ms ago: executing program 6 (id=2405): mount_setattr(0xffffffffffffffff, 0x0, 0x900, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a00000007000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000004000000000000000000000a6368b7d0d2a37b96b3947517fc6fd04ff0b989a91c2ebbf52220362e6182046a11383e2be1886437adbd855d4054dd1f995d835ab7573c52f4b361feb017e5eee11c5c9a46c2b60b925a93ea53013e05f3390000000080000000a0bf68e5542a862629d886d5889d32a791b2637e29c1446672fbda370a3d4520cc79c14f4f04", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0xf}, 0x18) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r7, 0x48e9, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1200000008000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='rcu_stall_warning\x00', r2, 0x0, 0x967}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") 105.592729ms ago: executing program 5 (id=2406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r2, 0x0, 0x0, 0xc0, 0x0, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async) close(r3) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000400)={0x0, @aes128, 0x0, @desc1}) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) (async) syz_emit_ethernet(0x52, &(0x7f0000000540)={@local, @local, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x3c, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@remote}, {@multicast1}]}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xfffd}}}}}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="6000ecff10000305000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000300012800c0001006d6163766c616e0020000280080001001000000008000300000000000a0004003878887ef1b900000800050082e7977fda11726ad740357dba911629273a7e1ae44bf79b8776ab9597bc16e8609a6463cb511855610c5d6b03093a7b93f5acf88c407e22888a769a177bf26296d4b1a66b0e29b757b0db3f12950493b077dec0713e831e5e1d21bcaa31be7e55991c58153a040842cf1fce23db84a535c0478060a6d442f28f56a55226b7ac4d4573834db880ec74ba23cde12815e475e8fbea48688242cfd3de16f990c9c9996eb9eda25ad7467347d4daf9089b483ab9388b05e313", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x60}}, 0x0) 94.994269ms ago: executing program 2 (id=2407): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}, {&(0x7f0000000340)="e4", 0x1}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 79.168569ms ago: executing program 0 (id=2408): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x44004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) 56.395049ms ago: executing program 0 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000009b091bb629c3e94254cdbca7f4378bf0624db317720dc8c07136a800d5e10009441aa69d20c66b0363f2997a613241d5c67619e41b075ff86baedd88cf595c876261a14c6b2c0d3f4b36a7dfcf6a20a7a7baa44df369b91daeea47c39168fa367c8f9c48ff3e4f68e0488b9290b801c4565ff030aeb9bda523b44cbdbf56134fbcf5d4a8b6377f5ca1e5ee5af32c39e51ccbb3c2c19f3b5605abc2288d0c99bb25755069b77ae103650987e059641d704d54795743652ec40951d8170c8234815a3767181cc954ad3ee7fbd5e702ad"], 0x50) syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x1004400, &(0x7f0000000b80)=ANY=[], 0x1, 0x5c1, &(0x7f0000000440)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES16=r2], 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff00002000800000008548cbf42a24", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, @in6=@mcast1, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x800000000000}, {0x0, 0x7, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000044c0)={{0x1, 0x1, 0x18, r7, {0x19ea}}, './file1\x00'}) setsockopt$inet6_udp_int(r8, 0x11, 0x0, &(0x7f00000055c0)=0x5, 0x4) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000005900)={r8, 0x101, {0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xbab6, 0x0, 0x2, 0x1e, 0x18, "660d1a021478859ff2a4c4ce92cee18f8f97377e4b79b5e7c7cf161c6b6d8f9fa06d5b6baf8a22b3c986951824601fa68b60c29b62ceab1dc96ec71fbcd0f39c", "e21322c9c01ce87e8f7ae5e365f831a79de0aaa19e8fc022c490b4ab49b4535ea93ae9062e11788f7dc666d50da027aee4eb099aa450cb2dcef64ac0a74fb48a", "9ddf2025fdfa71a49f1c363c4e26b2ebb9f7b1dd5c1f9c028092d82a88979764", [0x0, 0xf5]}}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) acct(0xfffffffffffffffe) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000005880)={0x0, 0x0}) recvmmsg(r10, &(0x7f00000056c0)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/183, 0xb7}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000480)=""/184, 0xb8}], 0x3}, 0x8}, {{&(0x7f0000000580)=@pppol2tpv3in6, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000600)=""/35, 0x23}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/205, 0xcd}, {&(0x7f0000005a40)=""/4096, 0x1000}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000001600)=""/131, 0x83}, {&(0x7f0000000a80)=""/230, 0xe6}, {&(0x7f0000000b80)=""/210, 0xd2}], 0xa, &(0x7f0000000d40)=""/194, 0xc2}, 0x5}, {{&(0x7f0000000e40)=@tipc=@id, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000ec0)=""/140, 0x8c}, {&(0x7f0000000f80)=""/103, 0x67}, {&(0x7f0000002a40)=""/69, 0x45}, {&(0x7f0000002ac0)=""/84, 0x54}, {&(0x7f0000002b40)=""/196, 0xc4}, {&(0x7f0000002c40)=""/76, 0x4c}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001880)=""/181, 0xb5}], 0x8, &(0x7f0000002d40)=""/105, 0x69}, 0xb6}, {{&(0x7f0000002dc0)=@generic, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002e40)=""/149, 0x95}], 0x1, &(0x7f0000002f40)=""/6, 0x6}, 0x7}, {{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003000)=""/232, 0xe8}, {&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/178, 0xb2}, {&(0x7f00000041c0)=""/220, 0xdc}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000004300)=""/131, 0x83}], 0x6, &(0x7f0000004440)=""/116, 0x74}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f00000044c0)}], 0x1, &(0x7f0000004540)=""/4096, 0x1000}, 0x100}, {{&(0x7f0000005540)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000055c0), 0x0, &(0x7f0000005600)=""/162, 0xa2}, 0x9}], 0x7, 0x10102, &(0x7f00000058c0)={r11, r12+60000000}) socket$l2tp(0x2, 0x2, 0x73) 53.248029ms ago: executing program 2 (id=2410): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$selinux_access(r3, &(0x7f00000000c0)={'system_u:object_r:udev_tbl_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x44) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) setxattr$security_selinux(&(0x7f0000000100)='.\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:man_t:s0\x00', 0x1b, 0x2) socket$nl_route(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, r1) setregid(r1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 9.6791ms ago: executing program 5 (id=2411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a3100"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) r1 = openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x351200, 0x102) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000240)=0xb5) 0s ago: executing program 5 (id=2412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001200)=""/46, 0x2e) getdents64(r2, 0xfffffffffffffffe, 0x29) kernel console output (not intermixed with test programs): xt4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.833207][T10053] loop0: detected capacity change from 0 to 764 [ 126.854188][T10047] EXT4-fs (loop5): mount failed [ 126.860289][T10053] Symlink component flag not implemented [ 126.866101][T10053] Symlink component flag not implemented (7) [ 126.924251][T10069] smc: net device bond0 applied user defined pnetid SYZ2 [ 126.932733][T10069] smc: net device bond0 erased user defined pnetid SYZ2 [ 126.990655][T10077] smc: net device bond0 applied user defined pnetid SYZ2 [ 127.011336][T10077] smc: net device bond0 erased user defined pnetid SYZ2 [ 127.056093][T10086] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 127.207841][T10047] can0: slcan on ttyS3. [ 127.368577][T10046] can0 (unregistered): slcan off ttyS3. [ 127.731984][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 127.732002][ T29] audit: type=1400 audit(1745819745.766:7148): avc: denied { create } for pid=10109 comm="syz.5.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.763229][ T29] audit: type=1400 audit(1745819745.766:7149): avc: denied { create } for pid=10109 comm="syz.5.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.782891][ T29] audit: type=1400 audit(1745819745.766:7150): avc: denied { create } for pid=10109 comm="syz.5.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.865810][ T29] audit: type=1326 audit(1745819745.896:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10109 comm="syz.5.1774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca4891e969 code=0x0 [ 127.995441][T10140] loop0: detected capacity change from 0 to 736 [ 128.008230][ T29] audit: type=1400 audit(1745819746.036:7152): avc: denied { mounton } for pid=10139 comm="syz.0.1776" path="/381/file0" dev="tmpfs" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 128.053072][ T29] audit: type=1400 audit(1745819746.076:7153): avc: denied { mount } for pid=10139 comm="syz.0.1776" name="/" dev="loop0" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.075691][ T29] audit: type=1400 audit(1745819746.076:7154): avc: denied { create } for pid=10139 comm="syz.0.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.095332][ T29] audit: type=1400 audit(1745819746.076:7155): avc: denied { ioctl } for pid=10139 comm="syz.0.1776" path="socket:[22239]" dev="sockfs" ino=22239 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.133121][ T29] audit: type=1400 audit(1745819746.166:7156): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 128.180230][ T29] audit: type=1400 audit(1745819746.216:7157): avc: denied { read append } for pid=10148 comm="syz.0.1778" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.215728][T10149] loop0: detected capacity change from 0 to 1024 [ 128.241463][T10149] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.594258][T10160] smc: net device bond0 applied user defined pnetid SYZ2 [ 128.608782][T10160] smc: net device bond0 erased user defined pnetid SYZ2 [ 128.674208][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1784'. [ 128.750554][T10173] loop5: detected capacity change from 0 to 736 [ 128.819604][T10180] loop1: detected capacity change from 0 to 736 [ 128.885912][T10183] loop5: detected capacity change from 0 to 1024 [ 128.898009][T10186] smc: net device bond0 applied user defined pnetid SYZ2 [ 128.906145][T10186] smc: net device bond0 erased user defined pnetid SYZ2 [ 128.930477][T10183] EXT4-fs mount: 93 callbacks suppressed [ 128.930496][T10183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.948736][T10183] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.979731][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.998153][T10191] smc: net device bond0 applied user defined pnetid SYZ2 [ 129.005652][T10191] smc: net device bond0 erased user defined pnetid SYZ2 [ 129.038605][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 129.054950][T10193] loop1: detected capacity change from 0 to 736 [ 129.159583][T10201] xt_hashlimit: size too large, truncated to 1048576 [ 129.200970][T10203] loop1: detected capacity change from 0 to 1024 [ 129.294997][T10212] loop2: detected capacity change from 0 to 736 [ 129.321488][T10203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.407072][T10203] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 129.455365][T10220] loop2: detected capacity change from 0 to 736 [ 129.516846][T10224] smc: net device bond0 applied user defined pnetid SYZ2 [ 129.528461][T10224] smc: net device bond0 erased user defined pnetid SYZ2 [ 129.559241][T10226] loop2: detected capacity change from 0 to 512 [ 129.570023][T10226] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.1805: corrupted in-inode xattr: invalid ea_ino [ 129.609315][T10226] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1805: couldn't read orphan inode 15 (err -117) [ 129.644146][T10226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.677913][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.694676][T10228] loop0: detected capacity change from 0 to 512 [ 129.702438][T10239] loop2: detected capacity change from 0 to 128 [ 129.712364][T10239] syz.2.1809: attempt to access beyond end of device [ 129.712364][T10239] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 129.712456][T10239] syz.2.1809: attempt to access beyond end of device [ 129.712456][T10239] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 129.712537][T10239] syz.2.1809: attempt to access beyond end of device [ 129.712537][T10239] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 129.712582][T10239] syz.2.1809: attempt to access beyond end of device [ 129.712582][T10239] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 129.712707][T10239] syz.2.1809: attempt to access beyond end of device [ 129.712707][T10239] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 129.774628][T10228] EXT4-fs (loop0): 1 orphan inode deleted [ 129.793107][ T336] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 129.795694][T10228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.805427][T10239] syz.2.1809: attempt to access beyond end of device [ 129.805427][T10239] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 129.805497][T10239] syz.2.1809: attempt to access beyond end of device [ 129.805497][T10239] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 129.805585][T10239] syz.2.1809: attempt to access beyond end of device [ 129.805585][T10239] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 129.805629][T10239] syz.2.1809: attempt to access beyond end of device [ 129.805629][T10239] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 129.805686][T10239] syz.2.1809: attempt to access beyond end of device [ 129.805686][T10239] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 129.893316][T10228] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.085337][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.155344][T10248] loop1: detected capacity change from 0 to 764 [ 130.168254][T10228] bond1: entered promiscuous mode [ 130.174570][T10228] bond1: entered allmulticast mode [ 130.186670][T10248] Symlink component flag not implemented [ 130.187550][T10228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.192789][T10248] Symlink component flag not implemented (7) [ 130.278876][T10228] bond1 (unregistering): Released all slaves [ 130.433733][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.575331][T10260] loop1: detected capacity change from 0 to 736 [ 130.687861][T10264] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.695675][T10264] smc: net device bond0 erased user defined pnetid SYZ2 [ 130.743567][T10271] smc: net device bond0 applied user defined pnetid SYZ2 [ 130.849442][T10273] smc: net device bond0 erased user defined pnetid SYZ2 [ 130.956559][T10275] loop0: detected capacity change from 0 to 512 [ 131.048978][T10284] loop2: detected capacity change from 0 to 2048 [ 131.065168][T10280] program syz.1.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.071428][T10275] EXT4-fs (loop0): 1 orphan inode deleted [ 131.082241][ T9838] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 131.084492][T10284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.099083][T10275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.127843][T10275] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.139450][T10280] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 131.146127][T10280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 131.148016][T10284] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 131.153828][T10280] vhci_hcd vhci_hcd.0: Device attached [ 131.167721][T10284] block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 131.170334][T10288] vhci_hcd: connection closed [ 131.177148][ T3399] vhci_hcd: stop threads [ 131.186324][ T3399] vhci_hcd: release socket [ 131.190828][ T3399] vhci_hcd: disconnect device [ 131.205372][T10284] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 131.230462][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.351382][T10275] bond1: entered promiscuous mode [ 131.356961][T10275] bond1: entered allmulticast mode [ 131.365131][T10275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.400775][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 131.407605][T10275] bond1 (unregistering): Released all slaves [ 131.409720][T10300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1828'. [ 131.506280][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.534314][T10305] smc: net device bond0 applied user defined pnetid SYZ2 [ 131.543805][T10305] smc: net device bond0 erased user defined pnetid SYZ2 [ 131.699040][T10312] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 131.733980][T10316] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 132.536948][T10327] bridge_slave_0: left allmulticast mode [ 132.542692][T10327] bridge_slave_0: left promiscuous mode [ 132.548532][T10327] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.574583][T10327] bridge_slave_1: left allmulticast mode [ 132.580343][T10327] bridge_slave_1: left promiscuous mode [ 132.586017][T10327] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.596569][T10327] bond0: (slave bond_slave_0): Releasing backup interface [ 132.608891][T10327] bond0: (slave bond_slave_1): Releasing backup interface [ 132.622445][T10327] team0: Port device team_slave_0 removed [ 132.632138][T10327] team0: Port device team_slave_1 removed [ 132.639188][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.646609][T10327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.657275][T10327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.664831][T10327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.687105][T10343] smc: net device bond0 applied user defined pnetid SYZ2 [ 132.704849][T10346] smc: net device bond0 erased user defined pnetid SYZ2 [ 132.743188][T10349] 9pnet_fd: Insufficient options for proto=fd [ 132.754763][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 132.754777][ T29] audit: type=1400 audit(1745819750.786:7540): avc: denied { create } for pid=10348 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.794640][T10351] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1847'. [ 132.803871][T10351] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1847'. [ 132.811656][ T29] audit: type=1400 audit(1745819750.816:7541): avc: denied { ioctl } for pid=10350 comm="syz.0.1847" path="socket:[23026]" dev="sockfs" ino=23026 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.837662][ T29] audit: type=1400 audit(1745819750.826:7542): avc: denied { bind } for pid=10348 comm="syz.5.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.857340][ T29] audit: type=1400 audit(1745819750.826:7543): avc: denied { name_bind } for pid=10348 comm="syz.5.1846" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 132.879309][ T29] audit: type=1400 audit(1745819750.826:7544): avc: denied { node_bind } for pid=10348 comm="syz.5.1846" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 132.902038][ T29] audit: type=1400 audit(1745819750.826:7545): avc: denied { setopt } for pid=10348 comm="syz.5.1846" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.924496][ T29] audit: type=1400 audit(1745819750.826:7546): avc: denied { write } for pid=10348 comm="syz.5.1846" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.946808][ T29] audit: type=1400 audit(1745819750.826:7547): avc: denied { connect } for pid=10348 comm="syz.5.1846" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.969391][ T29] audit: type=1400 audit(1745819750.826:7548): avc: denied { name_connect } for pid=10348 comm="syz.5.1846" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 133.024756][ T29] audit: type=1326 audit(1745819750.866:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10352 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 133.176011][T10377] loop5: detected capacity change from 0 to 764 [ 133.194233][T10377] Symlink component flag not implemented [ 133.200167][T10377] Symlink component flag not implemented (7) [ 133.249069][T10383] smc: net device bond0 applied user defined pnetid SYZ2 [ 133.260484][T10387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1859'. [ 133.266813][T10380] loop6: detected capacity change from 0 to 512 [ 133.278158][T10383] smc: net device bond0 erased user defined pnetid SYZ2 [ 133.339558][T10392] loop5: detected capacity change from 0 to 736 [ 133.436516][T10394] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 133.493445][T10380] EXT4-fs (loop6): 1 orphan inode deleted [ 133.511837][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 133.577397][T10380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.622962][T10380] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.656674][T10414] FAULT_INJECTION: forcing a failure. [ 133.656674][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.669814][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.2.1871 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 133.669997][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.670013][T10414] Call Trace: [ 133.670021][T10414] [ 133.670030][T10414] __dump_stack+0x1d/0x30 [ 133.670060][T10414] dump_stack_lvl+0xe8/0x140 [ 133.670078][T10414] dump_stack+0x15/0x1b [ 133.670094][T10414] should_fail_ex+0x265/0x280 [ 133.670134][T10414] should_fail+0xb/0x20 [ 133.670168][T10414] should_fail_usercopy+0x1a/0x20 [ 133.670272][T10414] _copy_from_user+0x1c/0xb0 [ 133.670372][T10414] ___sys_sendmsg+0xc1/0x1d0 [ 133.670437][T10414] __x64_sys_sendmsg+0xd4/0x160 [ 133.670464][T10414] x64_sys_call+0x2999/0x2fb0 [ 133.670489][T10414] do_syscall_64+0xd0/0x1a0 [ 133.670510][T10414] ? clear_bhb_loop+0x25/0x80 [ 133.670530][T10414] ? clear_bhb_loop+0x25/0x80 [ 133.670578][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.670597][T10414] RIP: 0033:0x7f92033ae969 [ 133.670612][T10414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.670631][T10414] RSP: 002b:00007f9201a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.670676][T10414] RAX: ffffffffffffffda RBX: 00007f92035d5fa0 RCX: 00007f92033ae969 [ 133.670691][T10414] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 133.670704][T10414] RBP: 00007f9201a17090 R08: 0000000000000000 R09: 0000000000000000 [ 133.670715][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.670726][T10414] R13: 0000000000000000 R14: 00007f92035d5fa0 R15: 00007fffa9412818 [ 133.670744][T10414] [ 133.862644][T10380] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.987310][T10425] program syz.0.1874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.045853][T10430] loop6: detected capacity change from 0 to 164 [ 134.178174][T10380] bond1: entered promiscuous mode [ 134.184818][T10380] bond1: entered allmulticast mode [ 134.197618][T10380] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.211737][T10380] bond1 (unregistering): Released all slaves [ 134.262419][T10440] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.507064][T10468] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 134.523332][T10464] program syz.5.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.587855][T10475] loop1: detected capacity change from 0 to 2048 [ 134.602180][T10475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.620701][T10475] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.660100][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.674351][T10472] loop2: detected capacity change from 0 to 512 [ 134.709909][T10482] smc: net device bond0 applied user defined pnetid SYZ2 [ 134.717281][T10482] smc: net device bond0 erased user defined pnetid SYZ2 [ 134.772857][T10484] smc: net device bond0 applied user defined pnetid SYZ2 [ 134.787623][T10484] smc: net device bond0 erased user defined pnetid SYZ2 [ 134.834411][T10472] EXT4-fs (loop2): 1 orphan inode deleted [ 134.849731][ T9844] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 134.913889][T10472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.944655][T10472] ext4 filesystem being mounted at /381/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.971592][T10472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.078069][T10498] loop2: detected capacity change from 0 to 164 [ 135.204914][T10472] bond0: entered promiscuous mode [ 135.212742][T10472] bond0: entered allmulticast mode [ 135.225031][T10472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.359148][T10472] bond0 (unregistering): Released all slaves [ 135.377996][T10510] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.385237][T10508] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.399126][T10508] smc: net device bond0 erased user defined pnetid SYZ2 [ 135.448217][T10512] loop0: detected capacity change from 0 to 764 [ 135.452646][T10516] loop1: detected capacity change from 0 to 764 [ 135.464515][T10516] Symlink component flag not implemented [ 135.470700][T10516] Symlink component flag not implemented (7) [ 135.477000][T10514] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.485521][T10512] Symlink component flag not implemented [ 135.491382][T10512] Symlink component flag not implemented (7) [ 135.504583][T10514] smc: net device bond0 erased user defined pnetid SYZ2 [ 135.569950][T10524] loop6: detected capacity change from 0 to 512 [ 135.577140][T10524] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.633500][T10524] EXT4-fs (loop6): 1 truncate cleaned up [ 135.640800][T10524] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.653953][T10524] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.682687][T10532] loop0: detected capacity change from 0 to 512 [ 135.778041][T10532] EXT4-fs (loop0): 1 orphan inode deleted [ 135.789537][T10552] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.796901][T10552] smc: net device bond0 erased user defined pnetid SYZ2 [ 135.805399][ T9838] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 135.822615][T10553] loop6: detected capacity change from 0 to 1024 [ 135.829669][T10532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.867369][T10555] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1917'. [ 135.876660][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1917'. [ 135.894763][T10553] loop6: detected capacity change from 0 to 512 [ 135.908519][T10532] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.930396][T10553] EXT4-fs: Ignoring removed orlov option [ 135.938783][T10561] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 135.947497][T10553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.967992][T10532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.980107][T10553] EXT4-fs (loop6): orphan cleanup on readonly fs [ 135.998136][T10553] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1912: bg 0: block 248: padding at end of block bitmap is not set [ 136.026611][T10553] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1912: Failed to acquire dquot type 1 [ 136.045460][T10572] loop1: detected capacity change from 0 to 764 [ 136.077789][T10553] EXT4-fs (loop6): 1 truncate cleaned up [ 136.110835][T10553] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.126507][T10572] Symlink component flag not implemented [ 136.134186][T10572] Symlink component flag not implemented (7) [ 136.139603][T10553] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.150988][T10532] loop0: detected capacity change from 0 to 164 [ 136.172700][T10569] loop2: detected capacity change from 0 to 512 [ 136.252168][T10520] bond1: entered promiscuous mode [ 136.255370][T10569] EXT4-fs (loop2): 1 orphan inode deleted [ 136.257390][T10520] bond1: entered allmulticast mode [ 136.259322][T10520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.263878][ T3399] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 136.286659][T10569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.288306][T10569] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.327255][T10569] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.403264][T10520] bond1 (unregistering): Released all slaves [ 136.478139][T10605] loop2: detected capacity change from 0 to 164 [ 136.654992][T10569] bond0: entered promiscuous mode [ 136.660951][T10569] bond0: entered allmulticast mode [ 136.673612][T10569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.735092][T10643] loop1: detected capacity change from 0 to 764 [ 136.748981][T10643] Symlink component flag not implemented [ 136.754731][T10643] Symlink component flag not implemented (7) [ 136.839304][T10569] bond0 (unregistering): Released all slaves [ 136.965262][T10664] loop0: detected capacity change from 0 to 1024 [ 137.015371][T10664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.039301][T10672] loop1: detected capacity change from 0 to 764 [ 137.050987][T10664] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.066229][T10672] Symlink component flag not implemented [ 137.073552][T10672] Symlink component flag not implemented (7) [ 137.134306][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.166281][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 137.175273][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1935'. [ 137.471258][T10685] loop1: detected capacity change from 0 to 512 [ 137.709534][T10703] loop0: detected capacity change from 0 to 512 [ 137.710849][T10685] EXT4-fs (loop1): 1 orphan inode deleted [ 137.746370][T10685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.762073][ T3399] __quota_error: 399 callbacks suppressed [ 137.762139][ T3399] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 137.777633][ T3399] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 137.795693][T10685] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.824525][T10703] EXT4-fs (loop0): 1 orphan inode deleted [ 137.830806][T10685] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.840836][ T9838] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 137.847965][T10703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.850897][ T9838] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 137.880512][T10703] ext4 filesystem being mounted at /418/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.904872][T10703] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.011327][T10736] loop1: detected capacity change from 0 to 164 [ 138.020897][T10738] loop0: detected capacity change from 0 to 164 [ 138.035666][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 138.096340][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1942'. [ 138.133647][T10685] bond1: entered promiscuous mode [ 138.139486][T10685] bond1: entered allmulticast mode [ 138.152243][T10685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.194669][T10685] bond1 (unregistering): Released all slaves [ 138.244518][ T29] audit: type=1326 audit(1745819756.276:7943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.279087][T10752] loop2: detected capacity change from 0 to 1024 [ 138.286389][ T29] audit: type=1326 audit(1745819756.276:7944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.309925][ T29] audit: type=1326 audit(1745819756.276:7945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.333511][ T29] audit: type=1326 audit(1745819756.276:7946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.357184][ T29] audit: type=1326 audit(1745819756.306:7947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.362852][T10752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.380787][ T29] audit: type=1326 audit(1745819756.306:7948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.380840][ T29] audit: type=1326 audit(1745819756.306:7949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.394798][T10752] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.416412][ T29] audit: type=1326 audit(1745819756.306:7950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 138.462783][T10703] bond1: entered promiscuous mode [ 138.482187][T10703] bond1: entered allmulticast mode [ 138.513073][T10760] loop1: detected capacity change from 0 to 764 [ 138.532660][T10760] Symlink component flag not implemented [ 138.538995][T10760] Symlink component flag not implemented (7) [ 138.548482][T10703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.558102][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.558805][T10703] bond1 (unregistering): Released all slaves [ 138.625556][T10769] program syz.6.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.671811][T10775] program syz.2.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.718001][T10779] loop0: detected capacity change from 0 to 512 [ 138.750328][T10777] SELinux: syz.1.1953 (10777) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 138.765181][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1953'. [ 138.857305][T10792] loop1: detected capacity change from 0 to 512 [ 138.866552][T10794] loop2: detected capacity change from 0 to 764 [ 138.868581][T10779] EXT4-fs (loop0): 1 orphan inode deleted [ 138.879133][T10779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.879666][ T3399] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 138.903878][T10788] loop6: detected capacity change from 0 to 1024 [ 138.904363][T10779] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.930274][T10792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.956807][T10788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.977733][T10794] Symlink component flag not implemented [ 138.983866][T10788] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.995521][T10794] Symlink component flag not implemented (7) [ 139.040696][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.059942][T10792] EXT4-fs (loop1): 1 truncate cleaned up [ 139.070392][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.085871][T10792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.097681][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.227252][T10817] program syz.5.1965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.250729][T10801] loop0: detected capacity change from 0 to 512 [ 139.261821][T10803] program syz.2.1964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.306753][T10820] loop1: detected capacity change from 0 to 1024 [ 139.363002][T10835] loop2: detected capacity change from 0 to 512 [ 139.392290][T10820] loop1: detected capacity change from 0 to 512 [ 139.415423][T10835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.437591][T10820] EXT4-fs: Ignoring removed orlov option [ 139.449977][T10835] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.451646][T10801] EXT4-fs (loop0): 1 orphan inode deleted [ 139.472340][ T336] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 139.494009][T10820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.495415][T10801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.522328][T10826] SELinux: syz.6.1968 (10826) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 139.528734][T10801] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.550961][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1968'. [ 139.560444][T10820] EXT4-fs (loop1): orphan cleanup on readonly fs [ 139.567516][T10820] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1960: bg 0: block 248: padding at end of block bitmap is not set [ 139.593411][T10801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.610438][T10820] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.1960: Failed to acquire dquot type 1 [ 139.649877][T10857] loop5: detected capacity change from 0 to 1024 [ 139.656818][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.674864][T10820] EXT4-fs (loop1): 1 truncate cleaned up [ 139.683204][T10820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.698848][T10857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.708906][T10820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.752374][T10857] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.798059][T10876] loop0: detected capacity change from 0 to 164 [ 139.827965][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.893606][T10871] loop2: detected capacity change from 0 to 512 [ 139.915510][T10801] bond1: entered promiscuous mode [ 139.920853][T10801] bond1: entered allmulticast mode [ 139.927161][T10801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.943310][T10801] bond1 (unregistering): Released all slaves [ 139.999614][T10871] EXT4-fs (loop2): 1 orphan inode deleted [ 140.008561][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 140.031703][T10871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.062813][T10871] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.107441][T10871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.140587][T10911] program syz.5.1979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.242941][T10929] loop6: detected capacity change from 0 to 2048 [ 140.276492][T10929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.294085][T10929] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.295634][T10938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 140.333458][T10942] loop2: detected capacity change from 0 to 164 [ 140.358068][T10938] bond0: (slave bond_slave_0): Releasing backup interface [ 140.381001][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.461648][T10960] loop6: detected capacity change from 0 to 512 [ 140.489922][T10960] EXT4-fs (loop6): 1 orphan inode deleted [ 140.514006][T10960] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.526787][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 140.543822][T10960] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.573463][T10871] bond0: entered promiscuous mode [ 140.581617][T10871] bond0: entered allmulticast mode [ 140.592276][T10871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.632249][T10871] bond0 (unregistering): Released all slaves [ 140.662599][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.127894][T11016] smc: net device bond0 applied user defined pnetid SYZ2 [ 141.135463][T11016] smc: net device bond0 erased user defined pnetid SYZ2 [ 141.164994][T11018] loop6: detected capacity change from 0 to 2048 [ 141.180468][T11018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.192856][T11018] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.224067][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.243354][T11023] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1998'. [ 141.292715][T11027] serio: Serial port ptm0 [ 141.321886][T11029] loop5: detected capacity change from 0 to 1024 [ 141.328861][T11029] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.335858][T11029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.346024][T11029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 141.348628][T11030] SELinux: Context system_u:object_r:kmsg_device_t:s0 is not valid (left unmapped). [ 141.354321][T11029] System zones: 0-1, 3-36 [ 141.369351][T11029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.481556][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.504171][T11044] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2007'. [ 141.520349][T11044] bridge0: entered promiscuous mode [ 141.526295][T11044] bridge0: port 1(macsec1) entered blocking state [ 141.532792][T11044] bridge0: port 1(macsec1) entered disabled state [ 141.539489][T11044] macsec1: entered allmulticast mode [ 141.544846][T11044] bridge0: entered allmulticast mode [ 141.551788][T11044] macsec1: left allmulticast mode [ 141.552943][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 141.556864][T11044] bridge0: left allmulticast mode [ 141.574865][T11044] bridge0: left promiscuous mode [ 141.585593][T11048] loop2: detected capacity change from 0 to 2048 [ 141.616410][T11052] loop0: detected capacity change from 0 to 764 [ 141.623930][T11048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.636141][T11048] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.642572][T11052] Symlink component flag not implemented [ 141.654099][T11052] Symlink component flag not implemented (7) [ 141.670406][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.707378][T11056] loop0: detected capacity change from 0 to 1024 [ 141.743418][T11056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.758700][T11056] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.783209][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.973046][T11077] loop0: detected capacity change from 0 to 2048 [ 141.991713][T11077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.004080][T11077] ext4 filesystem being mounted at /440/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.033327][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.155090][T11081] loop0: detected capacity change from 0 to 512 [ 142.252210][T11083] __nla_validate_parse: 1 callbacks suppressed [ 142.252228][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2022'. [ 142.253096][T11081] EXT4-fs (loop0): 1 orphan inode deleted [ 142.269790][ T9838] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 142.290113][T11081] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.396427][T11094] smc: net device bond0 applied user defined pnetid SYZ2 [ 142.406147][T11094] smc: net device bond0 erased user defined pnetid SYZ2 [ 142.487638][T11104] loop0: detected capacity change from 0 to 164 [ 142.667774][T11081] bond1: entered promiscuous mode [ 142.674274][T11081] bond1: entered allmulticast mode [ 142.687291][T11081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.769759][T11081] bond1 (unregistering): Released all slaves [ 142.872425][T11112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2029'. [ 142.922831][T11114] loop5: detected capacity change from 0 to 2048 [ 142.926297][T11116] loop6: detected capacity change from 0 to 736 [ 142.947634][T11118] FAULT_INJECTION: forcing a failure. [ 142.947634][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 142.960463][T11118] CPU: 0 UID: 0 PID: 11118 Comm: syz.0.2033 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 142.960495][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.960510][T11118] Call Trace: [ 142.960516][T11118] [ 142.960524][T11118] __dump_stack+0x1d/0x30 [ 142.960546][T11118] dump_stack_lvl+0xe8/0x140 [ 142.960623][T11118] dump_stack+0x15/0x1b [ 142.960642][T11118] should_fail_ex+0x265/0x280 [ 142.960770][T11118] should_failslab+0x8c/0xb0 [ 142.960875][T11118] kmem_cache_alloc_node_noprof+0x57/0x320 [ 142.960917][T11118] ? __alloc_skb+0x101/0x320 [ 142.960954][T11118] __alloc_skb+0x101/0x320 [ 142.961055][T11118] netlink_alloc_large_skb+0xba/0xf0 [ 142.961089][T11118] netlink_sendmsg+0x3cf/0x6b0 [ 142.961174][T11118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.961204][T11118] __sock_sendmsg+0x142/0x180 [ 142.961228][T11118] ____sys_sendmsg+0x31e/0x4e0 [ 142.961327][T11118] ___sys_sendmsg+0x17b/0x1d0 [ 142.961361][T11118] __x64_sys_sendmsg+0xd4/0x160 [ 142.961389][T11118] x64_sys_call+0x2999/0x2fb0 [ 142.961471][T11118] do_syscall_64+0xd0/0x1a0 [ 142.961494][T11118] ? clear_bhb_loop+0x25/0x80 [ 142.961558][T11118] ? clear_bhb_loop+0x25/0x80 [ 142.961584][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.961661][T11118] RIP: 0033:0x7f74f4fce969 [ 142.961678][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.961701][T11118] RSP: 002b:00007f74f3637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.961724][T11118] RAX: ffffffffffffffda RBX: 00007f74f51f5fa0 RCX: 00007f74f4fce969 [ 142.961747][T11118] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 142.961762][T11118] RBP: 00007f74f3637090 R08: 0000000000000000 R09: 0000000000000000 [ 142.961845][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.961860][T11118] R13: 0000000000000000 R14: 00007f74f51f5fa0 R15: 00007fff9e693148 [ 142.961884][T11118] [ 142.961902][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 142.961947][ T29] audit: type=1400 audit(1745819760.976:8290): avc: denied { create } for pid=11115 comm="syz.6.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.086279][T11121] loop1: detected capacity change from 0 to 1024 [ 143.090350][ T29] audit: type=1400 audit(1745819760.986:8291): avc: denied { ioctl } for pid=11115 comm="syz.6.2032" path="socket:[24867]" dev="sockfs" ino=24867 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 143.148846][T11121] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.239520][T11114] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.252007][T11121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.282219][T11121] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 143.312365][T11121] System zones: 0-1, 3-36 [ 143.323194][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'. [ 143.332186][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2034'. [ 143.353121][T11132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2038'. [ 143.371535][T11129] smc: net device bond0 applied user defined pnetid SYZ2 [ 143.389178][T11129] smc: net device bond0 erased user defined pnetid SYZ2 [ 143.400303][T11132] loop0: detected capacity change from 0 to 512 [ 143.410912][T11132] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.2038: corrupted in-inode xattr: invalid ea_ino [ 143.430032][T11132] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2038: couldn't read orphan inode 15 (err -117) [ 143.461826][ T29] audit: type=1400 audit(1745819761.486:8292): avc: denied { create } for pid=11136 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.481654][ T29] audit: type=1400 audit(1745819761.486:8293): avc: denied { setopt } for pid=11136 comm="syz.1.2040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.570041][ T29] audit: type=1400 audit(1745819761.556:8294): avc: denied { mac_admin } for pid=11131 comm="syz.0.2038" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 143.591299][ T29] audit: type=1400 audit(1745819761.556:8295): avc: denied { relabelto } for pid=11131 comm="syz.0.2038" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 143.617673][ T29] audit: type=1400 audit(1745819761.576:8296): avc: denied { relabelto } for pid=11131 comm="syz.0.2038" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:man_t:s0" [ 143.643557][ T29] audit: type=1400 audit(1745819761.576:8297): avc: denied { create } for pid=11131 comm="syz.0.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 143.749013][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 143.761907][ T29] audit: type=1400 audit(1745819761.736:8298): avc: denied { read write } for pid=11149 comm="syz.1.2045" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.785718][ T29] audit: type=1400 audit(1745819761.746:8299): avc: denied { open } for pid=11149 comm="syz.1.2045" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.800185][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 143.811300][T11146] loop5: detected capacity change from 0 to 512 [ 143.860922][T11155] loop0: detected capacity change from 0 to 2048 [ 143.867601][T11146] EXT4-fs (loop5): 1 orphan inode deleted [ 143.885739][T11146] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.900283][ T9838] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 143.912796][T11155] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.100414][T11166] loop5: detected capacity change from 0 to 164 [ 144.137727][T11146] bond1: entered promiscuous mode [ 144.140808][T11165] loop0: detected capacity change from 0 to 512 [ 144.143619][T11146] bond1: entered allmulticast mode [ 144.159938][T11146] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.201850][T11165] EXT4-fs (loop0): 1 orphan inode deleted [ 144.218540][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 144.219692][T11165] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.283944][T11146] bond1 (unregistering): Released all slaves [ 144.347937][T11173] loop0: detected capacity change from 0 to 164 [ 144.369020][T11168] smc: net device bond0 applied user defined pnetid SYZ2 [ 144.376320][T11170] smc: net device bond0 erased user defined pnetid SYZ2 [ 144.534383][T11165] bond1: entered promiscuous mode [ 144.541055][T11165] bond1: entered allmulticast mode [ 144.551133][T11165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.662577][T11165] bond1 (unregistering): Released all slaves [ 144.749761][T11185] loop1: detected capacity change from 0 to 164 [ 144.777378][T11185] ISOFS: unable to read i-node block [ 144.782815][T11185] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 144.825493][T11187] loop6: detected capacity change from 0 to 1024 [ 144.845529][T11190] loop0: detected capacity change from 0 to 736 [ 144.853671][T11187] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.981092][T11200] loop6: detected capacity change from 0 to 764 [ 145.015695][T11198] loop5: detected capacity change from 0 to 4096 [ 145.028878][T11202] loop0: detected capacity change from 0 to 512 [ 145.036437][T11200] Symlink component flag not implemented [ 145.052841][T11200] Symlink component flag not implemented (7) [ 145.117509][T11202] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.153299][T11211] hub 1-0:1.0: USB hub found [ 145.201326][T11211] hub 1-0:1.0: 8 ports detected [ 145.257888][T11221] loop2: detected capacity change from 0 to 736 [ 145.363911][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'. [ 145.373466][T11234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2074'. [ 145.636587][T11245] loop2: detected capacity change from 0 to 512 [ 145.652457][T11245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.680724][T11245] EXT4-fs (loop2): 1 truncate cleaned up [ 145.803977][T11253] loop5: detected capacity change from 0 to 736 [ 145.880217][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2083'. [ 145.932111][T11274] smc: net device bond0 applied user defined pnetid SYZ2 [ 145.962406][T11274] smc: net device bond0 erased user defined pnetid SYZ2 [ 145.974180][T11278] loop6: detected capacity change from 0 to 736 [ 146.065977][T11283] netlink: 'syz.1.2090': attribute type 10 has an invalid length. [ 146.087826][T11281] loop2: detected capacity change from 0 to 764 [ 146.104486][T11283] team0: Port device geneve1 added [ 146.111545][T11281] Symlink component flag not implemented [ 146.117669][T11281] Symlink component flag not implemented (7) [ 146.141514][T11288] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.174180][T11292] loop5: detected capacity change from 0 to 736 [ 146.200307][T11295] netlink: 'syz.6.2092': attribute type 10 has an invalid length. [ 146.209259][T11288] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.233712][T11295] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 146.247145][T11295] team0: Failed to send options change via netlink (err -105) [ 146.254712][T11295] team0: Port device geneve1 added [ 146.282566][T11288] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.352114][T11288] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.422141][T11288] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.469031][T11288] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.481187][T11288] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.493290][T11288] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.513483][T11310] smc: net device bond0 applied user defined pnetid SYZ2 [ 146.520768][T11308] smc: net device bond0 erased user defined pnetid SYZ2 [ 146.589571][T11316] loop5: detected capacity change from 0 to 764 [ 146.612704][T11316] Symlink component flag not implemented [ 146.632445][T11316] Symlink component flag not implemented (7) [ 146.635162][T11319] loop6: detected capacity change from 0 to 1764 [ 146.694592][T11324] loop2: detected capacity change from 0 to 736 [ 146.707362][T11322] loop5: detected capacity change from 0 to 2048 [ 146.783963][T11322] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.810226][T11331] loop6: detected capacity change from 0 to 512 [ 146.822354][T11331] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 146.872930][T11336] smc: net device bond0 applied user defined pnetid SYZ2 [ 146.880472][T11336] smc: net device bond0 erased user defined pnetid SYZ2 [ 146.895398][T11331] EXT4-fs (loop6): 1 truncate cleaned up [ 146.920445][T11338] smc: net device bond0 applied user defined pnetid SYZ2 [ 146.938921][T11338] smc: net device bond0 erased user defined pnetid SYZ2 [ 146.957217][T11346] loop5: detected capacity change from 0 to 512 [ 146.987840][T11346] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 147.022490][T11355] loop6: detected capacity change from 0 to 1024 [ 147.035554][T11353] loop1: detected capacity change from 0 to 764 [ 147.043383][T11355] loop6: detected capacity change from 0 to 512 [ 147.050864][T11346] EXT4-fs (loop5): 1 truncate cleaned up [ 147.070784][T11353] Symlink component flag not implemented [ 147.076496][T11353] Symlink component flag not implemented (7) [ 147.082842][T11355] EXT4-fs: Ignoring removed orlov option [ 147.109143][T11355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.138945][T11355] EXT4-fs (loop6): orphan cleanup on readonly fs [ 147.158081][T11355] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2109: bg 0: block 248: padding at end of block bitmap is not set [ 147.176635][T11372] loop2: detected capacity change from 0 to 736 [ 147.192460][T11373] loop5: detected capacity change from 0 to 1024 [ 147.222789][T11355] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.2109: Failed to acquire dquot type 1 [ 147.259805][T11373] loop5: detected capacity change from 0 to 512 [ 147.266386][T11373] EXT4-fs: Ignoring removed orlov option [ 147.283058][T11355] EXT4-fs (loop6): 1 truncate cleaned up [ 147.311386][T11382] loop1: detected capacity change from 0 to 512 [ 147.317891][T11382] EXT4-fs: Ignoring removed nobh option [ 147.323515][T11382] EXT4-fs: Ignoring removed bh option [ 147.334391][T11373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.347336][T11373] EXT4-fs (loop5): orphan cleanup on readonly fs [ 147.357362][T11382] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2122: invalid indirect mapped block 256 (level 2) [ 147.359009][T11373] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2115: bg 0: block 248: padding at end of block bitmap is not set [ 147.387718][T11382] EXT4-fs (loop1): 2 truncates cleaned up [ 147.404829][T11373] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2115: Failed to acquire dquot type 1 [ 147.426964][T11373] EXT4-fs (loop5): 1 truncate cleaned up [ 147.492243][T11404] smc: net device bond0 applied user defined pnetid SYZ2 [ 147.499756][T11404] smc: net device bond0 erased user defined pnetid SYZ2 [ 147.538104][T11411] smc: net device bond0 applied user defined pnetid SYZ2 [ 147.545610][T11411] smc: net device bond0 erased user defined pnetid SYZ2 [ 147.653713][T11427] loop1: detected capacity change from 0 to 512 [ 147.680815][T11427] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2129: casefold flag without casefold feature [ 147.695617][T11427] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2129: couldn't read orphan inode 15 (err -117) [ 147.719775][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x1 [ 147.727221][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.734758][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.742219][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.749654][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.757044][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.764484][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x4 [ 147.771929][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.779334][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.786818][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.794318][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x2 [ 147.801821][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.809311][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.825239][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.832777][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.840234][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.847635][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.855072][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.862647][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.870083][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.877495][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.884936][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.892390][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.899845][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.907338][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.914795][ T3703] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 147.990386][ T3703] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 148.521642][T11488] loop2: detected capacity change from 0 to 2048 [ 148.529042][T11488] EXT4-fs (loop2): unsupported inode size: 1536 [ 148.535331][T11488] EXT4-fs (loop2): blocksize: 2048 [ 148.670004][T11488] __nla_validate_parse: 2 callbacks suppressed [ 148.670024][T11488] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 148.756998][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 148.757014][ T29] audit: type=1326 audit(1745819766.786:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.807502][ T29] audit: type=1326 audit(1745819766.786:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.824379][T11511] loop2: detected capacity change from 0 to 1024 [ 148.831050][ T29] audit: type=1326 audit(1745819766.786:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.831078][ T29] audit: type=1326 audit(1745819766.786:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.884463][ T29] audit: type=1326 audit(1745819766.826:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.907983][ T29] audit: type=1326 audit(1745819766.826:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.931903][ T29] audit: type=1326 audit(1745819766.836:8429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.955659][ T29] audit: type=1326 audit(1745819766.836:8430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.979168][ T29] audit: type=1326 audit(1745819766.836:8431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 148.991946][T11511] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.003484][ T29] audit: type=1326 audit(1745819766.836:8432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11509 comm="syz.2.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 149.082551][T11515] smc: net device bond0 applied user defined pnetid SYZ2 [ 149.090383][T11515] smc: net device bond0 erased user defined pnetid SYZ2 [ 149.116102][T11517] smc: net device bond0 applied user defined pnetid SYZ2 [ 149.127260][T11517] smc: net device bond0 erased user defined pnetid SYZ2 [ 149.173173][T11519] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 149.222342][T11521] loop2: detected capacity change from 0 to 512 [ 149.229707][T11521] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.252551][T11521] EXT4-fs (loop2): 1 truncate cleaned up [ 149.258963][T11440] syz.1.2129 (11440) used greatest stack depth: 6016 bytes left [ 149.309367][T11524] loop1: detected capacity change from 0 to 1024 [ 149.331796][T11524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.368833][T11524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.396110][T11524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 149.396154][T11524] System zones: 0-1, 3-36 [ 149.405755][T11534] loop6: detected capacity change from 0 to 764 [ 149.407538][T11534] Symlink component flag not implemented [ 149.407573][T11534] Symlink component flag not implemented (7) [ 149.454848][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 149.465993][T11538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2143'. [ 149.504334][T11542] loop6: detected capacity change from 0 to 2048 [ 149.532664][T11528] bridge_slave_0: left allmulticast mode [ 149.538445][T11528] bridge_slave_0: left promiscuous mode [ 149.544253][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.560777][T11528] bridge_slave_1: left allmulticast mode [ 149.566522][T11528] bridge_slave_1: left promiscuous mode [ 149.572272][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.619276][T11528] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 149.634777][T11528] bond_slave_0: left promiscuous mode [ 149.660554][T11528] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 149.677740][T11551] loop6: detected capacity change from 0 to 256 [ 149.685810][T11528] bond_slave_1: left promiscuous mode [ 149.704195][T11528] team0: Port device team_slave_0 removed [ 149.732553][T11528] team0: Port device team_slave_1 removed [ 149.754029][T11528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.761682][T11528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.776578][T11528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.784066][T11528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.796560][T11563] loop5: detected capacity change from 0 to 736 [ 149.831385][T11546] smc: net device bond0 applied user defined pnetid SYZ2 [ 149.846188][T11549] smc: net device bond0 erased user defined pnetid SYZ2 [ 149.891376][T11565] FAULT_INJECTION: forcing a failure. [ 149.891376][T11565] name failslab, interval 1, probability 0, space 0, times 0 [ 149.904100][T11565] CPU: 1 UID: 0 PID: 11565 Comm: syz.5.2150 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 149.904151][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.904185][T11565] Call Trace: [ 149.904192][T11565] [ 149.904201][T11565] __dump_stack+0x1d/0x30 [ 149.904267][T11565] dump_stack_lvl+0xe8/0x140 [ 149.904289][T11565] dump_stack+0x15/0x1b [ 149.904308][T11565] should_fail_ex+0x265/0x280 [ 149.904392][T11565] should_failslab+0x8c/0xb0 [ 149.904426][T11565] kmem_cache_alloc_noprof+0x50/0x310 [ 149.904463][T11565] ? alloc_empty_file+0x76/0x200 [ 149.904522][T11565] alloc_empty_file+0x76/0x200 [ 149.904603][T11565] path_openat+0x68/0x2170 [ 149.904662][T11565] ? mntput+0x4b/0x80 [ 149.904681][T11565] ? terminate_walk+0x27f/0x2a0 [ 149.904714][T11565] ? path_openat+0x1bf8/0x2170 [ 149.904738][T11565] ? _parse_integer_limit+0x170/0x190 [ 149.904772][T11565] do_filp_open+0x109/0x230 [ 149.904877][T11565] do_open_execat+0xd8/0x260 [ 149.904932][T11565] alloc_bprm+0x28/0x660 [ 149.904957][T11565] ? should_fail+0xb/0x20 [ 149.904991][T11565] do_execveat_common+0x12e/0x750 [ 149.905020][T11565] ? getname_flags+0x154/0x3b0 [ 149.905058][T11565] __x64_sys_execveat+0x73/0x90 [ 149.905147][T11565] x64_sys_call+0x2dae/0x2fb0 [ 149.905171][T11565] do_syscall_64+0xd0/0x1a0 [ 149.905195][T11565] ? clear_bhb_loop+0x25/0x80 [ 149.905220][T11565] ? clear_bhb_loop+0x25/0x80 [ 149.905275][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.905299][T11565] RIP: 0033:0x7fca4891e969 [ 149.905316][T11565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.905481][T11565] RSP: 002b:00007fca46f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 149.905501][T11565] RAX: ffffffffffffffda RBX: 00007fca48b45fa0 RCX: 00007fca4891e969 [ 149.905581][T11565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 149.905595][T11565] RBP: 00007fca46f87090 R08: 0000000000001000 R09: 0000000000000000 [ 149.905608][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.905622][T11565] R13: 0000000000000000 R14: 00007fca48b45fa0 R15: 00007ffdd7634ad8 [ 149.905650][T11565] [ 150.131375][T11567] x_tables: ip_tables: osf match: only valid for protocol 6 [ 150.165058][T11574] loop1: detected capacity change from 0 to 512 [ 150.209455][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2155'. [ 150.222474][T11580] loop2: detected capacity change from 0 to 512 [ 150.230053][T11574] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2154: bg 0: block 35: padding at end of block bitmap is not set [ 150.245050][T11574] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 150.256611][T11577] loop5: detected capacity change from 0 to 512 [ 150.270502][T11574] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2154: invalid indirect mapped block 4294967295 (level 1) [ 150.288784][T11580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2156: bg 0: block 35: padding at end of block bitmap is not set [ 150.308969][T11577] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2155: corrupted in-inode xattr: invalid ea_ino [ 150.325451][T11574] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2154: invalid indirect mapped block 4294967295 (level 2) [ 150.339495][T11580] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 150.352341][T11580] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2156: invalid indirect mapped block 4294967295 (level 1) [ 150.378798][T11574] EXT4-fs (loop1): 1 truncate cleaned up [ 150.415996][T11577] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2155: couldn't read orphan inode 15 (err -117) [ 150.419121][T11588] loop1: detected capacity change from 0 to 2048 [ 150.437178][T11580] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2156: invalid indirect mapped block 4294967295 (level 2) [ 150.469738][T11580] EXT4-fs (loop2): 1 truncate cleaned up [ 150.476404][T11589] loop6: detected capacity change from 0 to 256 [ 150.494819][T11588] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.551440][T11595] loop1: detected capacity change from 0 to 2048 [ 150.565468][T11597] loop5: detected capacity change from 0 to 512 [ 150.574666][T11595] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.598954][T11597] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2162: casefold flag without casefold feature [ 150.615047][T11597] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2162: couldn't read orphan inode 15 (err -117) [ 150.681250][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 150.711421][T11608] loop1: detected capacity change from 0 to 512 [ 150.724144][T11606] loop2: detected capacity change from 0 to 512 [ 150.746136][T11606] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2164: corrupted in-inode xattr: invalid ea_ino [ 150.781883][T11606] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2164: couldn't read orphan inode 15 (err -117) [ 150.845174][T11608] EXT4-fs (loop1): 1 orphan inode deleted [ 150.863272][ T9844] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 150.896521][T11608] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.989076][T11615] loop2: detected capacity change from 0 to 512 [ 151.013865][T11615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2166: bg 0: block 35: padding at end of block bitmap is not set [ 151.050309][T11615] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 151.068578][T11615] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2166: invalid indirect mapped block 4294967295 (level 1) [ 151.088681][T11615] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2166: invalid indirect mapped block 4294967295 (level 2) [ 151.125052][T11615] EXT4-fs (loop2): 1 truncate cleaned up [ 151.192321][T11618] loop1: detected capacity change from 0 to 164 [ 151.366150][T11608] bond1: entered promiscuous mode [ 151.371545][T11608] bond1: entered allmulticast mode [ 151.384045][T11608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.487993][T11608] bond1 (unregistering): Released all slaves [ 151.558242][T11622] smc: net device bond0 applied user defined pnetid SYZ2 [ 151.568596][T11623] smc: net device bond0 erased user defined pnetid SYZ2 [ 151.630724][T11628] loop1: detected capacity change from 0 to 1024 [ 151.637668][T11628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.652673][T11629] loop2: detected capacity change from 0 to 2048 [ 151.653465][T11628] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.681102][T11628] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 151.689404][T11628] System zones: 0-1, 3-36 [ 151.701931][T11629] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.819732][T11639] loop1: detected capacity change from 0 to 1024 [ 151.893880][T11639] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.992100][T11645] loop6: detected capacity change from 0 to 1024 [ 152.004368][T11649] loop1: detected capacity change from 0 to 1024 [ 152.023477][T11649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.039192][T11645] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.053865][T11649] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.071501][T11650] loop5: detected capacity change from 0 to 512 [ 152.077826][T11645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.090467][T11649] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 152.107740][T11649] System zones: 0-1, 3-36 [ 152.138613][T11650] EXT4-fs (loop5): 1 orphan inode deleted [ 152.158867][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 152.171289][T11645] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 152.179650][T11645] System zones: 0-1, 3-36 [ 152.198515][T11650] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.291528][T11657] loop1: detected capacity change from 0 to 1024 [ 152.298149][T11657] EXT4-fs: Ignoring removed i_version option [ 152.324619][T11657] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.338522][T11657] EXT4-fs: Ignoring removed nobh option [ 152.344190][T11657] EXT4-fs: Ignoring removed bh option [ 152.393055][T11650] loop5: detected capacity change from 0 to 164 [ 152.414044][T11657] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.2179: Allocating blocks 385-513 which overlap fs metadata [ 152.446333][T11657] EXT4-fs (loop1): pa ffff888106569930: logic 16, phys. 129, len 24 [ 152.454432][T11657] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 152.519816][T11657] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 152.532156][T11657] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.532156][T11657] [ 152.541920][T11657] EXT4-fs (loop1): Total free blocks count 0 [ 152.548015][T11657] EXT4-fs (loop1): Free/Dirty block details [ 152.553969][T11657] EXT4-fs (loop1): free_blocks=128 [ 152.559132][T11657] EXT4-fs (loop1): dirty_blocks=0 [ 152.564334][T11657] EXT4-fs (loop1): Block reservation details [ 152.570355][T11657] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 152.729015][T11647] bond1: entered promiscuous mode [ 152.734867][T11647] bond1: entered allmulticast mode [ 152.770013][T11647] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.793410][T11676] loop1: detected capacity change from 0 to 2048 [ 152.803385][T11647] bond1 (unregistering): Released all slaves [ 152.824640][T11676] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.824816][T11666] smc: net device bond0 applied user defined pnetid SYZ2 [ 152.862454][T11667] smc: net device bond0 erased user defined pnetid SYZ2 [ 152.932573][T11687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.949376][T11690] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 152.959053][T11687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.970474][T11689] loop2: detected capacity change from 0 to 764 [ 152.984213][T11687] loop1: detected capacity change from 0 to 512 [ 153.059867][T11687] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 153.111024][T11687] EXT4-fs (loop1): invalid journal inode [ 153.116721][T11687] EXT4-fs (loop1): can't get journal size [ 153.123749][T11689] Symlink component flag not implemented [ 153.131431][T11689] Symlink component flag not implemented (7) [ 153.208765][T11687] EXT4-fs (loop1): 1 truncate cleaned up [ 153.217587][T11687] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 11 (only 1 groups) [ 153.234368][T11734] loop2: detected capacity change from 0 to 512 [ 153.270113][T11734] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 153.367185][T11758] loop6: detected capacity change from 0 to 736 [ 153.514158][T11763] smc: net device bond0 applied user defined pnetid SYZ2 [ 153.538560][T11763] smc: net device bond0 erased user defined pnetid SYZ2 [ 153.671384][T11767] loop6: detected capacity change from 0 to 2048 [ 153.690323][T11767] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.880158][T11777] loop6: detected capacity change from 0 to 1024 [ 153.900465][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 153.912022][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2199'. [ 153.927771][T11777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.936108][T11777] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.963578][T11777] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 153.977743][T11777] System zones: 0-1, 3-36 [ 154.061465][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 154.061483][ T29] audit: type=1326 audit(1745819772.096:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc661f0e969 code=0x7ffc0000 [ 154.110568][T11795] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 154.118550][ T29] audit: type=1326 audit(1745819772.096:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fc661f0e969 code=0x7ffc0000 [ 154.142139][ T29] audit: type=1326 audit(1745819772.096:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc661f0e969 code=0x7ffc0000 [ 154.166216][ T29] audit: type=1326 audit(1745819772.096:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.6.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc661f0e969 code=0x7ffc0000 [ 154.189762][ T29] audit: type=1400 audit(1745819772.126:8646): avc: denied { ioctl } for pid=11788 comm="syz.5.2201" path="socket:[26300]" dev="sockfs" ino=26300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.241087][T11804] loop5: detected capacity change from 0 to 736 [ 154.309875][T11809] loop5: detected capacity change from 0 to 736 [ 154.314023][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2204'. [ 154.348602][ T29] audit: type=1400 audit(1745819772.346:8647): avc: denied { create } for pid=11805 comm="syz.6.2204" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.370021][ T29] audit: type=1400 audit(1745819772.346:8648): avc: denied { map } for pid=11805 comm="syz.6.2204" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.394411][ T29] audit: type=1400 audit(1745819772.346:8649): avc: denied { read write } for pid=11805 comm="syz.6.2204" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.396227][T11811] loop2: detected capacity change from 0 to 2048 [ 154.419292][ T29] audit: type=1400 audit(1745819772.366:8650): avc: denied { setopt } for pid=11805 comm="syz.6.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 154.419325][ T29] audit: type=1400 audit(1745819772.366:8651): avc: denied { create } for pid=11805 comm="syz.6.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 154.599280][T11811] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.652894][T11815] loop5: detected capacity change from 0 to 2048 [ 154.809163][T11815] loop5: p1 < > p4 [ 154.824353][T11815] loop5: p4 size 8388608 extends beyond EOD, truncated [ 155.033532][T11828] loop2: detected capacity change from 0 to 1024 [ 155.067298][T11833] loop0: detected capacity change from 0 to 736 [ 155.074428][T11828] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.129574][T11840] loop0: detected capacity change from 0 to 764 [ 155.137500][T11830] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 155.175588][T11842] FAULT_INJECTION: forcing a failure. [ 155.175588][T11842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.188818][T11842] CPU: 1 UID: 0 PID: 11842 Comm: syz.5.2220 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 155.188879][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.188895][T11842] Call Trace: [ 155.188904][T11842] [ 155.188913][T11842] __dump_stack+0x1d/0x30 [ 155.188938][T11842] dump_stack_lvl+0xe8/0x140 [ 155.189037][T11842] dump_stack+0x15/0x1b [ 155.189055][T11842] should_fail_ex+0x265/0x280 [ 155.189086][T11842] should_fail+0xb/0x20 [ 155.189115][T11842] should_fail_usercopy+0x1a/0x20 [ 155.189210][T11842] _copy_to_user+0x20/0xa0 [ 155.189233][T11842] simple_read_from_buffer+0xb5/0x130 [ 155.189256][T11842] proc_fail_nth_read+0x100/0x140 [ 155.189280][T11842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.189330][T11842] vfs_read+0x19d/0x6f0 [ 155.189394][T11842] ? __rcu_read_unlock+0x4f/0x70 [ 155.189452][T11842] ? __rcu_read_unlock+0x4f/0x70 [ 155.189490][T11842] ? __fget_files+0x184/0x1c0 [ 155.189587][T11842] ksys_read+0xda/0x1a0 [ 155.189612][T11842] __x64_sys_read+0x40/0x50 [ 155.189641][T11842] x64_sys_call+0x2d77/0x2fb0 [ 155.189742][T11842] do_syscall_64+0xd0/0x1a0 [ 155.189763][T11842] ? clear_bhb_loop+0x25/0x80 [ 155.189784][T11842] ? clear_bhb_loop+0x25/0x80 [ 155.189810][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.189909][T11842] RIP: 0033:0x7fca4891d37c [ 155.189928][T11842] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 155.189950][T11842] RSP: 002b:00007fca46f87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 155.189973][T11842] RAX: ffffffffffffffda RBX: 00007fca48b45fa0 RCX: 00007fca4891d37c [ 155.189989][T11842] RDX: 000000000000000f RSI: 00007fca46f870a0 RDI: 0000000000000006 [ 155.190003][T11842] RBP: 00007fca46f87090 R08: 0000000000000000 R09: 0000000000000000 [ 155.190018][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.190033][T11842] R13: 0000000000000000 R14: 00007fca48b45fa0 R15: 00007ffdd7634ad8 [ 155.190103][T11842] [ 155.303945][T11847] smc: net device bond0 applied user defined pnetid SYZ2 [ 155.392723][T11844] loop1: detected capacity change from 0 to 2048 [ 155.402956][T11848] smc: net device bond0 erased user defined pnetid SYZ2 [ 155.425617][T11840] Symlink component flag not implemented [ 155.450611][T11844] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.461201][T11840] Symlink component flag not implemented (7) [ 155.500975][T11860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2224'. [ 155.522194][T11860] loop0: detected capacity change from 0 to 512 [ 155.587225][T11860] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.2224: corrupted in-inode xattr: invalid ea_ino [ 155.628685][T11860] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2224: couldn't read orphan inode 15 (err -117) [ 155.708509][T11873] loop5: detected capacity change from 0 to 1024 [ 155.731580][T11873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.757590][T11873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.773826][T11878] loop2: detected capacity change from 0 to 1024 [ 155.788774][T11873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 155.792748][T11878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.797067][T11873] System zones: 0-1, 3-36 [ 155.834322][T11878] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.884568][T11878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 155.892815][T11878] System zones: 0-1, 3-36 [ 156.021005][T11897] FAULT_INJECTION: forcing a failure. [ 156.021005][T11897] name failslab, interval 1, probability 0, space 0, times 0 [ 156.033807][T11897] CPU: 0 UID: 0 PID: 11897 Comm: syz.0.2240 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 156.033870][T11897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.033884][T11897] Call Trace: [ 156.033891][T11897] [ 156.033898][T11897] __dump_stack+0x1d/0x30 [ 156.033995][T11897] dump_stack_lvl+0xe8/0x140 [ 156.034018][T11897] dump_stack+0x15/0x1b [ 156.034096][T11897] should_fail_ex+0x265/0x280 [ 156.034127][T11897] ? alloc_pipe_info+0xae/0x350 [ 156.034223][T11897] should_failslab+0x8c/0xb0 [ 156.034251][T11897] __kmalloc_cache_noprof+0x4c/0x320 [ 156.034272][T11897] alloc_pipe_info+0xae/0x350 [ 156.034339][T11897] splice_direct_to_actor+0x592/0x680 [ 156.034362][T11897] ? file_has_perm+0x324/0x370 [ 156.034432][T11897] ? __pfx_direct_splice_actor+0x10/0x10 [ 156.034462][T11897] do_splice_direct+0xda/0x150 [ 156.034487][T11897] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 156.034513][T11897] do_sendfile+0x380/0x640 [ 156.034651][T11897] __x64_sys_sendfile64+0x105/0x150 [ 156.034681][T11897] x64_sys_call+0xb39/0x2fb0 [ 156.034717][T11897] do_syscall_64+0xd0/0x1a0 [ 156.034743][T11897] ? clear_bhb_loop+0x25/0x80 [ 156.034770][T11897] ? clear_bhb_loop+0x25/0x80 [ 156.034796][T11897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.034823][T11897] RIP: 0033:0x7f74f4fce969 [ 156.034840][T11897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.034889][T11897] RSP: 002b:00007f74f3637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 156.034912][T11897] RAX: ffffffffffffffda RBX: 00007f74f51f5fa0 RCX: 00007f74f4fce969 [ 156.034927][T11897] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000000000000e [ 156.034941][T11897] RBP: 00007f74f3637090 R08: 0000000000000000 R09: 0000000000000000 [ 156.034952][T11897] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000001 [ 156.035041][T11897] R13: 0000000000000000 R14: 00007f74f51f5fa0 R15: 00007fff9e693148 [ 156.035062][T11897] [ 156.035550][T11898] loop5: detected capacity change from 0 to 2048 [ 156.270512][T11898] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.300115][T11909] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 156.309719][T11904] loop0: detected capacity change from 0 to 512 [ 156.403730][T11916] loop6: detected capacity change from 0 to 1024 [ 156.470739][T11904] EXT4-fs (loop0): 1 orphan inode deleted [ 156.489950][T11694] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 156.507470][T11926] loop1: detected capacity change from 0 to 512 [ 156.521005][T11927] loop2: detected capacity change from 0 to 1024 [ 156.529841][T11904] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.543435][T11927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.551490][T11926] ext4: Unknown parameter 'debug_want_extra_isize' [ 156.569403][T11927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.579709][T11927] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 156.587834][T11927] System zones: 0-1, 3-36 [ 156.704405][T11942] loop0: detected capacity change from 0 to 164 [ 156.737110][T11946] loop6: detected capacity change from 0 to 736 [ 156.779269][T11953] loop2: detected capacity change from 0 to 2048 [ 156.810191][T11953] ext4 filesystem being mounted at /465/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.811205][T11904] bond1: entered promiscuous mode [ 156.831504][T11904] bond1: entered allmulticast mode [ 156.840741][T11904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.938480][T11904] bond1 (unregistering): Released all slaves [ 156.956932][T11966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11966 comm=syz.6.2259 [ 157.158214][T11984] loop1: detected capacity change from 0 to 1024 [ 157.179235][T11984] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.225158][T11984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.284512][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 157.294360][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 157.329745][T11984] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 157.382866][T12000] loop2: detected capacity change from 0 to 2048 [ 157.390856][T11984] System zones: 0-1, 3-36 [ 157.419837][T12000] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.571494][T12015] loop6: detected capacity change from 0 to 1024 [ 157.596012][T12021] loop1: detected capacity change from 0 to 1024 [ 157.664277][T12020] loop2: detected capacity change from 0 to 512 [ 157.681260][T12015] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.692900][T12021] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.787597][T12028] netlink: 'syz.0.2277': attribute type 3 has an invalid length. [ 157.863972][T12020] EXT4-fs (loop2): 1 orphan inode deleted [ 157.885604][ T9780] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 157.900534][T12041] FAULT_INJECTION: forcing a failure. [ 157.900534][T12041] name failslab, interval 1, probability 0, space 0, times 0 [ 157.913276][T12041] CPU: 0 UID: 0 PID: 12041 Comm: gtp Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 157.913306][T12041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.913392][T12041] Call Trace: [ 157.913400][T12041] [ 157.913409][T12041] __dump_stack+0x1d/0x30 [ 157.913435][T12041] dump_stack_lvl+0xe8/0x140 [ 157.913458][T12041] dump_stack+0x15/0x1b [ 157.913527][T12041] should_fail_ex+0x265/0x280 [ 157.913563][T12041] should_failslab+0x8c/0xb0 [ 157.913592][T12041] kmem_cache_alloc_node_noprof+0x57/0x320 [ 157.913646][T12041] ? __alloc_skb+0x101/0x320 [ 157.913684][T12041] __alloc_skb+0x101/0x320 [ 157.913723][T12041] netlink_alloc_large_skb+0xba/0xf0 [ 157.913759][T12041] netlink_sendmsg+0x3cf/0x6b0 [ 157.913849][T12041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.913890][T12041] __sock_sendmsg+0x142/0x180 [ 157.913922][T12041] ____sys_sendmsg+0x31e/0x4e0 [ 157.914045][T12041] ___sys_sendmsg+0x17b/0x1d0 [ 157.914086][T12041] __x64_sys_sendmsg+0xd4/0x160 [ 157.914143][T12041] x64_sys_call+0x2999/0x2fb0 [ 157.914193][T12041] do_syscall_64+0xd0/0x1a0 [ 157.914214][T12041] ? clear_bhb_loop+0x25/0x80 [ 157.914234][T12041] ? clear_bhb_loop+0x25/0x80 [ 157.914258][T12041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.914282][T12041] RIP: 0033:0x7ffa766ae969 [ 157.914357][T12041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.914375][T12041] RSP: 002b:00007ffa74d17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.914416][T12041] RAX: ffffffffffffffda RBX: 00007ffa768d5fa0 RCX: 00007ffa766ae969 [ 157.914431][T12041] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 157.914446][T12041] RBP: 00007ffa74d17090 R08: 0000000000000000 R09: 0000000000000000 [ 157.914461][T12041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.914475][T12041] R13: 0000000000000000 R14: 00007ffa768d5fa0 R15: 00007ffe95903478 [ 157.914494][T12041] [ 157.916175][T12039] FAULT_INJECTION: forcing a failure. [ 157.916175][T12039] name failslab, interval 1, probability 0, space 0, times 0 [ 157.924840][T12020] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.926505][T12039] CPU: 0 UID: 0 PID: 12039 Comm: syz.0.2281 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 157.926597][T12039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.926610][T12039] Call Trace: [ 157.926618][T12039] [ 157.926627][T12039] __dump_stack+0x1d/0x30 [ 157.926706][T12039] dump_stack_lvl+0xe8/0x140 [ 157.926728][T12039] dump_stack+0x15/0x1b [ 157.926748][T12039] should_fail_ex+0x265/0x280 [ 157.926795][T12039] should_failslab+0x8c/0xb0 [ 157.926835][T12039] kmem_cache_alloc_node_noprof+0x57/0x320 [ 157.926887][T12039] ? __alloc_skb+0x101/0x320 [ 157.926962][T12039] __alloc_skb+0x101/0x320 [ 157.927000][T12039] netlink_alloc_large_skb+0xba/0xf0 [ 157.927102][T12039] netlink_sendmsg+0x3cf/0x6b0 [ 157.927147][T12039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.927197][T12039] __sock_sendmsg+0x142/0x180 [ 157.927319][T12039] ____sys_sendmsg+0x31e/0x4e0 [ 157.927433][T12039] ___sys_sendmsg+0x17b/0x1d0 [ 157.927482][T12039] __x64_sys_sendmsg+0xd4/0x160 [ 157.927549][T12039] x64_sys_call+0x2999/0x2fb0 [ 157.927577][T12039] do_syscall_64+0xd0/0x1a0 [ 157.927604][T12039] ? clear_bhb_loop+0x25/0x80 [ 157.927698][T12039] ? clear_bhb_loop+0x25/0x80 [ 157.927726][T12039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.927752][T12039] RIP: 0033:0x7f74f4fce969 [ 157.927772][T12039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.927795][T12039] RSP: 002b:00007f74f3637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.927820][T12039] RAX: ffffffffffffffda RBX: 00007f74f51f5fa0 RCX: 00007f74f4fce969 [ 157.927836][T12039] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 157.927929][T12039] RBP: 00007f74f3637090 R08: 0000000000000000 R09: 0000000000000000 [ 157.927944][T12039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.927960][T12039] R13: 0000000000000000 R14: 00007f74f51f5fa0 R15: 00007fff9e693148 [ 157.927985][T12039] [ 157.986644][T12046] loop0: detected capacity change from 0 to 2048 [ 158.000904][T12047] loop5: detected capacity change from 0 to 1024 [ 158.030765][T12046] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.031659][T12047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.184832][T12057] bond0: entered promiscuous mode [ 158.187439][T12047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.191478][T12057] bond0: entered allmulticast mode [ 158.211083][T12047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 158.216447][T12057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.221113][T12047] System zones: [ 158.345005][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 158.348593][T12047] 0-1, 3-36 [ 158.373982][T12020] loop2: detected capacity change from 0 to 164 [ 158.392144][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2287'. [ 158.467242][T12057] bond0 (unregistering): Released all slaves [ 158.507455][T12078] loop1: detected capacity change from 0 to 736 [ 158.557100][T12081] loop2: detected capacity change from 0 to 1024 [ 158.600983][T12081] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.667347][T12076] loop0: detected capacity change from 0 to 512 [ 158.715559][T12102] syz_tun: entered promiscuous mode [ 158.721980][T12102] batadv_slave_0: entered promiscuous mode [ 158.729982][T12102] hsr1: entered allmulticast mode [ 158.735127][T12102] syz_tun: entered allmulticast mode [ 158.740485][T12102] batadv_slave_0: entered allmulticast mode [ 158.740944][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2298'. [ 158.792575][T12109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 158.848286][T12076] EXT4-fs (loop0): 1 orphan inode deleted [ 158.859492][T11698] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 158.859825][T12106] loop6: detected capacity change from 0 to 512 [ 158.880692][T12076] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.934097][T12106] EXT4-fs (loop6): 1 orphan inode deleted [ 158.962157][ T9844] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 158.990514][T12123] loop5: detected capacity change from 0 to 1024 [ 159.018302][T12123] EXT4-fs mount: 122 callbacks suppressed [ 159.018322][T12123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.048307][T12106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.057668][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 159.064413][T12123] ext4 filesystem being mounted at /294/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.083981][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 159.083999][ T29] audit: type=1326 audit(1745819777.116:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca4891d2d0 code=0x7ffc0000 [ 159.106058][T12076] bond1: entered promiscuous mode [ 159.113764][ T29] audit: type=1326 audit(1745819777.116:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fca4891d6b7 code=0x7ffc0000 [ 159.113864][ T29] audit: type=1326 audit(1745819777.116:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca4891d2d0 code=0x7ffc0000 [ 159.113898][ T29] audit: type=1326 audit(1745819777.116:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4891e969 code=0x7ffc0000 [ 159.113966][ T29] audit: type=1326 audit(1745819777.116:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4891e969 code=0x7ffc0000 [ 159.120894][T12106] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.134295][T12137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2305'. [ 159.145617][T12076] bond1: entered allmulticast mode [ 159.201864][ T29] audit: type=1326 audit(1745819777.206:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fca4891e969 code=0x7ffc0000 [ 159.232197][T12106] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.237419][ T29] audit: type=1326 audit(1745819777.226:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4891e969 code=0x7ffc0000 [ 159.237489][ T29] audit: type=1326 audit(1745819777.226:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12122 comm="syz.5.2306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca4891e969 code=0x7ffc0000 [ 159.239267][T12136] loop1: detected capacity change from 0 to 2048 [ 159.287596][T12076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.368872][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.369860][T12136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.398523][T12136] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.450382][T12132] loop0: detected capacity change from 0 to 164 [ 159.468116][T12154] loop6: detected capacity change from 0 to 164 [ 159.485331][T12076] bond1 (unregistering): Released all slaves [ 159.516429][ T29] audit: type=1400 audit(1745819777.546:9005): avc: denied { lock } for pid=12150 comm="syz.5.2309" path="socket:[27875]" dev="sockfs" ino=27875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 159.551625][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.581402][ T29] audit: type=1326 audit(1745819777.576:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12158 comm="syz.2.2311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92033ae969 code=0x7ffc0000 [ 159.583907][T12106] bond1: entered promiscuous mode [ 159.608904][T12151] loop5: detected capacity change from 0 to 128 [ 159.610370][T12106] bond1: entered allmulticast mode [ 159.617769][T12151] FAT-fs (loop5): Directory bread(block 162) failed [ 159.628461][T12106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.629190][T12151] FAT-fs (loop5): Directory bread(block 163) failed [ 159.660244][T12151] FAT-fs (loop5): Directory bread(block 164) failed [ 159.669772][T12151] FAT-fs (loop5): Directory bread(block 165) failed [ 159.676675][T12165] loop1: detected capacity change from 0 to 512 [ 159.695606][T12106] bond1 (unregistering): Released all slaves [ 159.701895][T12151] FAT-fs (loop5): Directory bread(block 166) failed [ 159.717341][T12151] FAT-fs (loop5): Directory bread(block 167) failed [ 159.726208][T12151] FAT-fs (loop5): Directory bread(block 168) failed [ 159.750779][T12151] FAT-fs (loop5): Directory bread(block 169) failed [ 159.767668][T12163] loop2: detected capacity change from 0 to 512 [ 159.801443][T12178] loop6: detected capacity change from 0 to 512 [ 159.809740][T12172] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.810477][T12176] loop1: detected capacity change from 0 to 736 [ 159.829249][T12163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.841941][T12178] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 159.842017][T12178] EXT4-fs (loop6): orphan cleanup on readonly fs [ 159.842185][T12178] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 159.842350][T12178] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 159.842738][T12178] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2318: bg 0: block 40: padding at end of block bitmap is not set [ 159.842919][T12178] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 159.843239][T12178] EXT4-fs (loop6): 1 truncate cleaned up [ 159.843683][T12178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.872120][T12178] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.2318: corrupted xattr block 31: invalid header [ 159.942533][T12163] EXT4-fs (loop2): 1 truncate cleaned up [ 159.954409][T12180] loop0: detected capacity change from 0 to 512 [ 159.963529][T12163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.983684][T12180] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.999153][T12188] smc: net device bond0 applied user defined pnetid SYZ2 [ 160.003452][T12178] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 160.015493][T12178] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.2318: corrupted xattr block 31: invalid header [ 160.028921][T12180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.040204][T12172] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.040213][T12188] smc: net device bond0 erased user defined pnetid SYZ2 [ 160.048862][T12178] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 160.052869][T12186] loop1: detected capacity change from 0 to 1024 [ 160.070674][T12189] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #16: comm syz.6.2318: corrupted xattr block 31: invalid header [ 160.072817][T12178] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.2318: bad symlink. [ 160.088404][T12180] EXT4-fs (loop0): 1 truncate cleaned up [ 160.114733][T12189] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=16 [ 160.125838][T12180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.138450][T12189] EXT4-fs error (device loop6): ext4_get_link:106: inode #16: comm syz.6.2318: bad symlink. [ 160.169564][T12180] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.182009][T12186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.191584][T12190] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.205593][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.219584][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 160.221672][T12186] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.231238][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2323'. [ 160.260398][T12172] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.274915][T12199] loop5: detected capacity change from 0 to 512 [ 160.283656][T12201] loop6: detected capacity change from 0 to 1024 [ 160.290512][T12201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.296025][T12199] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2323: corrupted in-inode xattr: invalid ea_ino [ 160.312015][T12201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.315056][T12192] bond0: entered promiscuous mode [ 160.321981][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.325876][T12192] bond0: entered allmulticast mode [ 160.340344][T12192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.343665][T12199] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2323: couldn't read orphan inode 15 (err -117) [ 160.361821][T12199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.382430][T12190] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.393203][T12201] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 160.401568][T12201] System zones: 0-1, 3-36 [ 160.402694][T12172] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.417956][T12201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.440451][T12208] loop1: detected capacity change from 0 to 736 [ 160.448266][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.459769][T12190] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.495758][T12172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.516839][T12172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.532535][T12172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.542380][T12190] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.565579][T12172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.585626][ T6501] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.605171][T12221] SELinux: Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped). [ 160.611033][T12190] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.644412][T12190] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.661653][T12190] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.675305][T12171] delete_channel: no stack [ 160.678827][T12190] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.714478][T12218] loop1: detected capacity change from 0 to 512 [ 160.732586][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.781463][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 160.790454][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'. [ 160.821517][T12218] EXT4-fs (loop1): 1 orphan inode deleted [ 160.841274][ T9844] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:10: Failed to release dquot type 1 [ 160.853259][T12235] loop2: detected capacity change from 0 to 1024 [ 160.860290][T12235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.875285][T12218] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.890742][T12235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 160.900255][T12218] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.903466][T12235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 160.919581][T12235] System zones: 0-1, 3-36 [ 160.928919][T12235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.929011][T12218] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.027379][T12239] loop1: detected capacity change from 0 to 164 [ 161.050312][T12218] bond1: entered promiscuous mode [ 161.056270][T12218] bond1: entered allmulticast mode [ 161.066827][T12218] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.076794][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.116189][T12242] loop2: detected capacity change from 0 to 2048 [ 161.129967][T12242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.141943][T12218] bond1 (unregistering): Released all slaves [ 161.149676][T12242] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.185741][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.229441][T12248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12248 comm=syz.2.2337 [ 161.273581][T12250] loop1: detected capacity change from 0 to 736 [ 161.322029][T12253] loop2: detected capacity change from 0 to 736 [ 161.471737][T12268] loop1: detected capacity change from 0 to 1024 [ 161.500922][T12272] smc: net device bond0 applied user defined pnetid SYZ2 [ 161.513189][T12268] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.514901][T12272] smc: net device bond0 erased user defined pnetid SYZ2 [ 161.535637][T12268] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.606105][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.651669][T12281] loop5: detected capacity change from 0 to 736 [ 161.720250][T12287] loop1: detected capacity change from 0 to 2048 [ 161.764337][T12287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.779904][T12287] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.839111][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.915780][T12303] netlink: 'syz.6.2356': attribute type 10 has an invalid length. [ 161.935361][T12303] batman_adv: batadv0: Adding interface: team0 [ 161.941599][T12303] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.966838][T12303] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 161.984398][T12314] netlink: 'syz.6.2356': attribute type 10 has an invalid length. [ 161.992379][T12314] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2356'. [ 162.061993][T12314] team0: entered promiscuous mode [ 162.067074][T12314] team_slave_0: entered promiscuous mode [ 162.072962][T12314] team_slave_1: entered promiscuous mode [ 162.078728][T12314] geneve1: entered promiscuous mode [ 162.099792][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.106999][T12314] batman_adv: batadv0: Interface activated: team0 [ 162.113625][T12314] batman_adv: batadv0: Interface deactivated: team0 [ 162.120297][T12314] batman_adv: batadv0: Removing interface: team0 [ 162.137645][T12314] bridge0: port 3(team0) entered blocking state [ 162.144059][T12314] bridge0: port 3(team0) entered disabled state [ 162.157505][T12316] loop6: detected capacity change from 0 to 256 [ 162.164483][T12314] team0: entered allmulticast mode [ 162.169689][T12314] team_slave_0: entered allmulticast mode [ 162.175443][T12314] team_slave_1: entered allmulticast mode [ 162.181398][T12314] geneve1: entered allmulticast mode [ 162.194078][T12314] bridge0: port 3(team0) entered blocking state [ 162.200441][T12314] bridge0: port 3(team0) entered forwarding state [ 162.207186][T12313] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.216242][T12317] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.245974][T12316] FAT-fs (loop6): bogus sectors per cluster 0 [ 162.252170][T12316] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 162.261497][T12316] FAT-fs (loop6): Can't find a valid FAT filesystem [ 162.297767][T12321] loop1: detected capacity change from 0 to 1024 [ 162.340813][T12322] loop5: detected capacity change from 0 to 1024 [ 162.352895][T12325] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.374673][T12321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.400211][T12325] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.407397][T12321] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.462624][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.485775][T12322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.498882][T12322] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.527202][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 162.536151][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2365'. [ 162.612305][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.620329][T12345] hub 9-0:1.0: USB hub found [ 162.626505][T12345] hub 9-0:1.0: 8 ports detected [ 162.647806][T12351] netlink: 'syz.2.2374': attribute type 3 has an invalid length. [ 162.659629][T12349] tipc: Started in network mode [ 162.664622][T12349] tipc: Node identity ac14140f, cluster identity 4711 [ 162.672122][T12349] tipc: New replicast peer: 255.255.255.255 [ 162.678305][T12349] tipc: Enabled bearer , priority 10 [ 162.695407][T12345] loop0: detected capacity change from 0 to 2048 [ 162.700908][T12351] syzkaller0: create flow: hash 1911823491 index 1 [ 162.719007][T12351] loop2: detected capacity change from 0 to 512 [ 162.725574][T12351] EXT4-fs: Ignoring removed nobh option [ 162.733167][T12351] EXT4-fs: Mount option(s) incompatible with ext2 [ 162.749516][T12345] Alternate GPT is invalid, using primary GPT. [ 162.755864][T12345] loop0: p1 p2 p3 [ 162.761783][T12350] syzkaller0: delete flow: hash 1911823491 index 1 [ 162.816188][T12361] program syz.1.2378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.826473][T12361] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.884604][T12367] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 162.901297][T12368] loop0: detected capacity change from 0 to 1024 [ 162.910423][T12368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.917355][T12368] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 162.929098][T12368] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 162.937375][T12368] System zones: 0-1, 3-36 [ 162.943679][T12368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.957771][T12370] loop5: detected capacity change from 0 to 2048 [ 163.003317][T12376] loop1: detected capacity change from 0 to 1024 [ 163.013826][T12370] loop5: p1 < > p4 [ 163.019184][T12370] loop5: p4 size 8388608 extends beyond EOD, truncated [ 163.021211][T12376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.038925][T12376] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.052792][T12359] FAULT_INJECTION: forcing a failure. [ 163.052792][T12359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.066144][T12359] CPU: 0 UID: 0 PID: 12359 Comm: syz.5.2377 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 163.066231][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.066245][T12359] Call Trace: [ 163.066252][T12359] [ 163.066259][T12359] __dump_stack+0x1d/0x30 [ 163.066279][T12359] dump_stack_lvl+0xe8/0x140 [ 163.066299][T12359] dump_stack+0x15/0x1b [ 163.066319][T12359] should_fail_ex+0x265/0x280 [ 163.066422][T12359] should_fail_alloc_page+0xf2/0x100 [ 163.066458][T12359] __alloc_frozen_pages_noprof+0xff/0x360 [ 163.066493][T12359] alloc_pages_mpol+0xb3/0x250 [ 163.066526][T12359] vma_alloc_folio_noprof+0x1aa/0x300 [ 163.066553][T12359] handle_mm_fault+0x1056/0x2ae0 [ 163.066583][T12359] ? __rcu_read_lock+0x37/0x50 [ 163.066653][T12359] __get_user_pages+0xde2/0x1d20 [ 163.066722][T12359] __gup_longterm_locked+0x9c9/0x1010 [ 163.066828][T12359] ? __rcu_read_unlock+0x34/0x70 [ 163.066899][T12359] ? try_get_folio+0x2f1/0x3c0 [ 163.066923][T12359] ? mod_node_page_state+0x1c/0xa0 [ 163.066960][T12359] gup_fast_fallback+0x1134/0x1500 [ 163.067068][T12359] pin_user_pages_fast+0x5f/0x90 [ 163.067129][T12359] iov_iter_extract_pages+0x253/0x420 [ 163.067218][T12359] bio_iov_iter_get_pages+0x2aa/0xc30 [ 163.067261][T12359] ? __rcu_read_unlock+0x4f/0x70 [ 163.067321][T12359] ? bio_associate_blkg+0xc7/0xe0 [ 163.067389][T12359] __blkdev_direct_IO+0x315/0x7e0 [ 163.067421][T12359] ? rep_movs_alternative+0x11/0x90 [ 163.067536][T12359] blkdev_direct_IO+0xa3e/0xa90 [ 163.067574][T12359] ? __list_add_valid_or_report+0x38/0xe0 [ 163.067598][T12359] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 163.067659][T12359] ? _raw_spin_unlock+0x26/0x50 [ 163.067686][T12359] ? __mark_inode_dirty+0x43c/0x760 [ 163.067775][T12359] ? mnt_put_write_access+0x48/0x60 [ 163.067850][T12359] ? touch_atime+0x2a8/0x330 [ 163.067882][T12359] blkdev_read_iter+0x167/0x2e0 [ 163.067984][T12359] do_iter_readv_writev+0x41e/0x4c0 [ 163.068016][T12359] vfs_readv+0x1e3/0x670 [ 163.068081][T12359] __se_sys_preadv2+0xfc/0x1c0 [ 163.068117][T12359] __x64_sys_preadv2+0x67/0x80 [ 163.068146][T12359] x64_sys_call+0x2818/0x2fb0 [ 163.068167][T12359] do_syscall_64+0xd0/0x1a0 [ 163.068187][T12359] ? clear_bhb_loop+0x25/0x80 [ 163.068212][T12359] ? clear_bhb_loop+0x25/0x80 [ 163.068234][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.068254][T12359] RIP: 0033:0x7fca4891e969 [ 163.068269][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.068286][T12359] RSP: 002b:00007fca46f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 163.068361][T12359] RAX: ffffffffffffffda RBX: 00007fca48b45fa0 RCX: 00007fca4891e969 [ 163.068377][T12359] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 000000000000000c [ 163.068390][T12359] RBP: 00007fca46f87090 R08: 0000000000000000 R09: 0000000000000000 [ 163.068402][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.068414][T12359] R13: 0000000000000000 R14: 00007fca48b45fa0 R15: 00007ffdd7634ad8 [ 163.068514][T12359] [ 163.384174][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.408734][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.489486][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2385'. [ 163.537295][T12388] loop5: detected capacity change from 0 to 8192 [ 163.555448][T12410] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.583666][T12410] smc: net device bond0 erased user defined pnetid SYZ2 [ 163.632742][T12424] loop2: detected capacity change from 0 to 512 [ 163.654875][T12424] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2395: corrupted in-inode xattr: invalid ea_ino [ 163.672068][T12427] loop6: detected capacity change from 0 to 736 [ 163.673766][T12422] loop0: detected capacity change from 0 to 512 [ 163.681332][T12424] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2395: couldn't read orphan inode 15 (err -117) [ 163.692409][T12422] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.2396: corrupted in-inode xattr: invalid ea_ino [ 163.713055][T12424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.713258][T12422] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2396: couldn't read orphan inode 15 (err -117) [ 163.754543][T12430] loop5: detected capacity change from 0 to 2048 [ 163.762950][T12422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.792282][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.805039][T12430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.808391][ T9] tipc: Node number set to 2886997007 [ 163.839651][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.848474][T12430] ext4 filesystem being mounted at /310/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.905648][ T5592] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.979746][T12462] loop0: detected capacity change from 0 to 736 [ 163.979758][T12461] loop2: detected capacity change from 0 to 512 [ 163.979877][T12462] ================================================================== [ 163.979920][T12462] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 163.979975][T12462] [ 163.979984][T12462] write to 0xffffffff88e0f520 of 8 bytes by task 12461 on cpu 0: [ 163.980003][T12462] data_alloc+0x203/0x2b0 [ 163.980037][T12462] prb_reserve+0x808/0xaf0 [ 163.980065][T12462] vprintk_store+0x56d/0x860 [ 163.980095][T12462] vprintk_emit+0x178/0x650 [ 163.980112][T12462] vprintk_default+0x26/0x30 [ 163.980134][T12462] vprintk+0x1d/0x30 [ 163.980162][T12462] _printk+0x79/0xa0 [ 163.980195][T12462] set_capacity_and_notify+0x14c/0x1f0 [ 163.980231][T12462] loop_set_size+0x2e/0x70 [ 163.980267][T12462] loop_configure+0x872/0x9f0 [ 163.980301][T12462] lo_ioctl+0x5f8/0x1560 [ 163.980338][T12462] blkdev_ioctl+0x34f/0x440 [ 163.980381][T12462] __se_sys_ioctl+0xcb/0x140 [ 163.980409][T12462] __x64_sys_ioctl+0x43/0x50 [ 163.980433][T12462] x64_sys_call+0x19a8/0x2fb0 [ 163.980460][T12462] do_syscall_64+0xd0/0x1a0 [ 163.980487][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.980515][T12462] [ 163.980524][T12462] read to 0xffffffff88e0f520 of 8 bytes by task 12462 on cpu 1: [ 163.980545][T12462] data_push_tail+0xfd/0x420 [ 163.980583][T12462] data_alloc+0xbf/0x2b0 [ 163.980616][T12462] prb_reserve+0x808/0xaf0 [ 163.980653][T12462] vprintk_store+0x56d/0x860 [ 163.980691][T12462] vprintk_emit+0x178/0x650 [ 163.980709][T12462] vprintk_default+0x26/0x30 [ 163.980726][T12462] vprintk+0x1d/0x30 [ 163.980749][T12462] _printk+0x79/0xa0 [ 163.980794][T12462] set_capacity_and_notify+0x14c/0x1f0 [ 163.980838][T12462] loop_set_size+0x2e/0x70 [ 163.980868][T12462] loop_configure+0x872/0x9f0 [ 163.980897][T12462] lo_ioctl+0x5f8/0x1560 [ 163.980925][T12462] blkdev_ioctl+0x34f/0x440 [ 163.980958][T12462] __se_sys_ioctl+0xcb/0x140 [ 163.980977][T12462] __x64_sys_ioctl+0x43/0x50 [ 163.980995][T12462] x64_sys_call+0x19a8/0x2fb0 [ 163.981016][T12462] do_syscall_64+0xd0/0x1a0 [ 163.981044][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.981069][T12462] [ 163.981076][T12462] value changed: 0x00000000ffffede6 -> 0x00000000fffffa2f [ 163.981091][T12462] [ 163.981098][T12462] Reported by Kernel Concurrency Sanitizer on: [ 163.981113][T12462] CPU: 1 UID: 0 PID: 12462 Comm: syz.0.2409 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 163.981140][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.981153][T12462] ================================================================== [ 164.033082][T12447] loop6: detected capacity change from 0 to 2048 [ 164.093027][T12461] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.2410: corrupted in-inode xattr: invalid ea_ino [ 164.258103][T12461] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2410: couldn't read orphan inode 15 (err -117) [ 164.270687][T12461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.299437][T12447] loop6: p1 < > p4 [ 164.303856][T12447] loop6: p4 size 8388608 extends beyond EOD, truncated [ 164.306030][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.