last executing test programs: 28.366131941s ago: executing program 3 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000031000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c0001"], 0x118}}, 0x0) 28.147156814s ago: executing program 3 (id=1312): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x10}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 27.922184698s ago: executing program 3 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x40810}}], 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 26.923119944s ago: executing program 3 (id=1330): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async, rerun: 32) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c57, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xf5, 0x2e6, &(0x7f0000000540)="$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") (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) (async) r3 = syz_clone(0x22300000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r7 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x3350, 0x1000, 0x2, 0x3bd}) (async, rerun: 32) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) listen(r8, 0x4) recvmmsg(r8, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r7, r8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) (async) process_vm_readv(r3, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, &(0x7f0000000d00)=[{&(0x7f0000000940)=""/92, 0x5c}], 0x1, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000be8214b00000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x38, 0x81, 0x0, 0x0, 0x0, 0x3, 0x3539c, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x400, 0x4}, 0x0, 0xf, 0x5, 0x1, 0x8, 0x20005, 0x2a, 0x0, 0xffffffff, 0x0, 0xffffffffffffff7f}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) getsockopt$inet6_buf(r9, 0x29, 0xd3, &(0x7f0000000080)=""/99, &(0x7f0000000200)=0x63) lgetxattr(0x0, 0x0, 0x0, 0x0) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) fallocate(r0, 0x60, 0x8, 0x8000c62) (async, rerun: 32) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000480)="1d", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) 26.479607121s ago: executing program 3 (id=1334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000180)=[{0xa9, 0x0, 0x1c}, {0x6}]}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000780)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc467b75619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d0bc19fe5e42b5534eab9e9d2587b413e81f603c7f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a767dee6592a5ee08700d24d832163b3def1fce5a8d5235560048286750b6f2d3514a4a5281093e5861f75f", 0x102}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b", 0x2e}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba0000000000000000000000000033", 0x58}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aa", 0xc3}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 25.772729102s ago: executing program 2 (id=1340): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000b59100"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = syz_io_uring_setup(0x1584, &(0x7f00000004c0)={0x0, 0x8e98, 0x80, 0x0, 0x1c7, 0x0, r1}, &(0x7f0000000300)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x1d69, 0x0, 0x0, 0x0, 0x0) 25.702604113s ago: executing program 2 (id=1343): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x80000004}, 0x18) semget$private(0x0, 0x3, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 24.993252735s ago: executing program 3 (id=1347): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0xf5}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r3, @ANYRES32=r4, @ANYRESOCT=r9, @ANYRES32=r10, @ANYRESHEX=r6, @ANYRES8=r8, @ANYRES64=r11, @ANYBLOB="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", @ANYRES16=r9, @ANYRES16=r5, @ANYRES32=r10, @ANYRES8=r7, @ANYBLOB='\ay'], 0x0) 24.981414245s ago: executing program 2 (id=1348): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf371, 0x10100, 0xfffffffe, 0x1}, 0x0, 0x0) (fail_nth: 6) 24.960898475s ago: executing program 32 (id=1347): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x3, {0x4e22, 0xf5}}, 0x10, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r3, @ANYRES32=r4, @ANYRESOCT=r9, @ANYRES32=r10, @ANYRESHEX=r6, @ANYRES8=r8, @ANYRES64=r11, @ANYBLOB="c9477e08a83fabe940ea9539b2aac922893c79acbfc89a7663b4e59998273d9b25017a008d9f64bbbb5d4524d6fef8444bf9913c066be5f59ca265889dfcd29648d12b46ea8d86640ad1ee673e134f6a2c289e79b8fd9ba7915203e00863a4b49d147b2d77211b9727aa78356ce470391a3f3e7118637e1939abc9b6677c9fdf2f84adf20e4e9fac646cf988ede3577f4ebee8cdaf63750dcfb82b95f2ae65bf34f72c903f3ab1811ea30ad63b088349c903633bae9da73e145087efd8f4e5b6ca313646797ab5f0557a42e161a6d20b495e4998b665aba1b335a5afaf5647ceb7df4789d6b9dbabab688f22db690aec2a33598ee949d1a98c3bfe252661a4", @ANYRES16=r9, @ANYRES16=r5, @ANYRES32=r10, @ANYRES8=r7, @ANYBLOB='\ay'], 0x0) 24.646553s ago: executing program 2 (id=1351): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000280)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @broadcast}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200008f, &(0x7f00000003c0), 0x0, 0x554, &(0x7f0000000980)="$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") r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xbb) r7 = openat$cgroup_ro(r0, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'vfat\x00'}]}, 0x11) mmap(&(0x7f0000887000/0x1000)=nil, 0x1000, 0xa, 0x28011, r7, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) msgget$private(0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000080f1000000000000063000000000000009500050000000000d1449c003b097606b153e6dc6de837ae96a815df705fef53cf0ff5e7bdc3bd95cfc0d4800fae421c84b7988e61ed7df452e4b7e139044387aa"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000f00)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000095b7bd0f480812c0e60b60536bb9e1bf1e0aa8723690786552d43ff4b9038c109a158f28549058dcefa8fc6252f15876b7375402a0242e15e7fa2e745603050299e34404d198df7ec675e8a32bfaf767a600400dc93e9ad1f7e4630707698b51de617901a3e1d72c084cda9b888d49d48000"/185], 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d9, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x8, 0x10001, 0x6, {{0x30, 0x4, 0x3, 0x3, 0xc0, 0x68, 0x0, 0x4, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0xf, 0x3b, [@local, @dev={0xac, 0x14, 0x14, 0x43}, @dev={0xac, 0x14, 0x14, 0x39}]}, @cipso={0x86, 0x32, 0xffffffffffffffff, [{0x0, 0xf, "66ddd88837f40223acaaefdefb"}, {0x6, 0x8, "5e27f3dfd020"}, {0x7, 0xb, "f2d0addc19caf300aa"}, {0x1, 0xa, "3da10b0e763cc687"}]}, @rr={0x7, 0xf, 0x6b, [@empty, @rand_addr=0x64010100, @local]}, @timestamp={0x44, 0x10, 0xee, 0x0, 0x0, [0x5, 0x6, 0x8]}, @ssrr={0x89, 0x13, 0xb, [@dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, @multicast2, @broadcast]}, @lsrr={0x83, 0x17, 0x72, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x32}, @local, @empty]}, @rr={0x7, 0x13, 0xf6, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x7, 0xc, "3299454bf071eaf7b077"}]}}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r9}, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 24.235567207s ago: executing program 2 (id=1356): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000380)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x5, @local, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='\t', 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r7, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/131, 0x83}], 0x1, 0xfffffffc, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r9, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x40, 0x700, 0x2, 0x9, {{0x2f, 0x4, 0x1, 0x26, 0xbc, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0xad, 0x0, 0x3, [0x7, 0xb, 0x8, 0x2, 0xe]}, @lsrr={0x83, 0x13, 0x5b, [@private=0xa010100, @broadcast, @private=0xa010100, @broadcast]}, @noop, @cipso={0x86, 0x58, 0x1, [{0x0, 0x11, "48da2a70cd19add61e6550ffffffff"}, {0x2, 0x12, "bd5d4f3cedffa0e2ef4f237c7efacf81"}, {0x6, 0x5, "0b6d1f"}, {0x0, 0x7, "471354f1d3"}, {0x7, 0x11, "91fb97fca377ba0000000000000000"}, {0x6, 0x12, "e5000000000000030000000000002000"}]}, @lsrr={0x83, 0x23, 0x39, [@multicast1, @multicast1, @multicast1, @empty, @broadcast, @empty, @empty, @private=0xa010102]}, @noop]}}}}}) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x3, r10, 0x2}, 0xc) 23.987862191s ago: executing program 2 (id=1358): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23.944165342s ago: executing program 33 (id=1358): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 14.303850188s ago: executing program 4 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) 14.19401465s ago: executing program 4 (id=1485): r0 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000b80)="20ff9c73c90b5653d012e9531e93c6ada81aa59258d92e763e845a7db2090f4ff86477ed939b5452b2b4ea668f4d033ecf88bce44afbfc8060171e16f26a25dd3dfb44294d053fd5dcfef08a96ea80b24c9b2b9b17dd92d4d22fb85c89d396c77896b57cfb11df3248306fdddc17f4aa141b1bea8dd1041a691028548c949f270c6ec80e767410cbd83d41457e35ba4d6e09b829d49d6b0e5b9758e3ade98c1855bc3b613cad9196372c1757470b8f36911fa54d1656a7618cd6f617491533ffd6a4b59939a6cb9f6bb923bfd3bd4e246a40e4d4660a51d29c8958f968ca28b5c4c98e165e08666a7ad4ed67676f4775533f8043ec3ae2743291f562dd68c629eb6f88b040da862fb2115c67bf4ac9d81d49b1f2b0830076e215dec29d7bc1d283f9d057acd2ad2fada348a3acd260548716feb72c3069437f439443d6fe3d2d5798246a11cf480196d2c93cfa49ae4dba490edd323006d771cbca4929fd2a08d2f8b892175e0e2699f9550c3bdff83512909207a8b75160b228d9f57e86614a33943b68e7c3213dd617350e8e000039a721cc51943bf33622bd63f267e7ecdfe16227f78024eb7b6c6398d86f3c440963b89ca25edd902503be6dc2f93f74e3194b6cf46dbc923bdd6bae6fdfbce0f515c4ded69013d621d872e81901243d8b6df0fa55d8db6498482044525086943af7814750d874fbffecdb2af2d370b660cfd8eb7f9fc0b7a69da7d9468de95868368156a522eb91a1caa04ef18bf85fbafee5cdd6d9568f9d56eefd73d452a18add307ebb2372063bee18eb0aa5e6d8f0c33feae94ce94e19d986f73103d29b4acb2eca2f05d3c33882e1e2b333bdd2cf4d56bcd7e88983d6ea5b1ee8ddefaad322788a106b45d44cabf37708164a2ff0998a7e26a3fd0a03149c8e684381c430d3ef798663e3448254f52e2779b4de3d35ec4a1a57d411cf351247fadde899387b0cfe3fd513f9beaa24c021ab0504bca0183498b43d0fd855739b49daeeea89fe3536fac571d6fb4c06bf3a047fe4ed64ddd2554ba0deae5e1ab7664fbc72ab95261acff244e9c02fa103f13cdc9eeaf733e284fd690b322b043371fe62a7487f752502d64622437d93be225bc1e92f0ceb1b904bed8afc5aee6021afda1dc9fbe2b934e02b292c27aee8653efd0765536c47dcc389dd8110dc80527aed5c2b2f4483d7242f5d80aacee9d499c9fb86b954de0a0a8b037549df48a1fdfd95f018ff496d5ae90066ecc91dbc649ec22ecdf3d037e3197582f0f39723da779fb6079742ab570c418a47a8e0646780af1cc9f75a8a55ace5da541d3128702702998643c97d4a5eab829aff5b70f707f06c30339e159de43a92b70031fb00a33a174d3220dd50059dc1012f691ad03b391d1d399d1dbee7afad1281144e3b04b98b0e302f67903ed6006bc20c1f4e3b9b530dbc1e9af4debf5523c879722e80e502a394d641618e8f0ff199c72db07345c093ec6992be688100af2b039ede3cb7fef3eac2aba3210f636e43076245ec668ab9f637910f45c3724c6c0138ebd238ffe69abc1f51bf88c95d3acf54c2314e2c041ac32297dbd5fa28841577bef231310810fa01f69b2dce1697d0d49a5db894d5e6d623c4e9875654ea3cf20f0528a05f4baef3a9ea54639bdbfe3d09b26863f6f2818e94a5251a103edae33703cb7b4a93275f5e19e468bb37d164e543f74fef431ab206ce3496deb9e8385fa2db12e4bb440a5b7231e5852f0848463094d4a2cc58c4db5a08b15e8f98ac9c956c0c0c97c00101026a03a240a98e021a41ee77584b873ba10e0c12b2bce907e773165f0bfbf3aded9c697ae3e92578323d861bd72c8a7e7166e5838de3a11b9afc44f5cae72f049563cd066f66071ec2291bdbc6400e4c81d06d7d26aa561eb797fbb1d3c52ad6f905f2134f5d3e148abd2f33c91eba895df2b4ce90abceb76979cea1291c9968ba1f538ee6a67138a7213e1d24a046ef819887bd76b980afb726b3768e1ab64eed16ae053c4f7aef176a7c0ca628727c876b64401c2e792b66de97a77ac9a5bef226d0e8fa1373ac328a85cf299e31eb628e2d4704d9cf627b330f4f39b0749b0635215ffc764cd722d1a806b5f32723d0f522d81d52e3bfe5e79c6be477afd01ce44f5a3ef4ff2d4bb13503672116ade6dcbf21d3691ab605b3c83140d596e5e724a90b6e23b4f1f754a44afe2099d8e87f546aacdfeac8b24a8bb93cb57c8f1b326815eca7b3dd54b81a7e93e7a517b342764e1bbda20cd74e384c0b2dd04d22813b308945f891ba0ba4b8cf6eb908954e29ba8dc28cbefa8d60c4090a8048196ce34d95bd5c41fd2a0dba0bbcdb02eabace7f928485adf0a61529dfd04368fee406cbc4d8fe6c1542dfa9ae202afc115f621a07743b4d27175117c8c67a310551c89f0f70f0aa7992e2b26a9c618094ed4e54fe71d266de639295ca2a94cd1831a4c518d9732c1a1008f5255c745e225d8a0b9bee855100c230f4b4a89d11783490fed65a5c962748dd8eec730c55f637f58e35222b03f8c6fcc92bc67f2f914e98f6f2384f5dad54a30c4bf2dc641a7d0363f4a78356cc0a39608e097b0b09cd058372f4251a5d86ec57110091d797cd91f7ad9944484961c4b13e94e9a881b7e5b7f7a9c0bc4ec6c590989269725b2f94eeec734de005d16ab0b4c31ca7a5ffc90da4b23bbffb80a938f09389f1affef0703137d8f73d4120d7a13ac17066b7c13de59aa348d70c82dc69ee1cc4386c612c751bf7b60311f3b36ed9f623020472b2784589c60a574a1b368350d724b91f584bdd285a2447330ccf04051c9fe77c34fb6faa79881c81b735101a1665a0ee1a7e98882b52ce869710dcab6274d163c65b16de9dbc7cced71d2724247cdd74ad2c4f85c274bfef57589231fe7bc720efa2a9ce5e8d7e9625685db1e1bdbf969dcfc29bca91bda4dcbdc08ee39a3bdcffd9407fa5277510ee53b52c4c002ba522d655b30a01f9f2d0cfc1d1aebbe728d0ecadc68ffa7f652bd25541cf8540d8b820115fc56f17f806662e775097043a0211a1654534aa1b69d14e9b0427f96975ec8f7bed098739e5ed6d22a5241713dc18e5142daf57bfb3bf475274b2dc06dcfa88a67a960f598d0a3a3b3f46739ceb726eadb1c1a8cac22128e18c722bbf0075050484546a1b5425b6cc6a440707b415a71f258532023ec9aa06efd76d660eb9801d9a209e456087787819fa6c6bb2f37d049e6e327735b83bd8bcc1d6eb6a3b976305b40d94979e97582975457c841e1dfaff5457725af4ba12c5ecca1b1e61740fadc220136050fd2ac9136285ae7643eeb5da99b2c939321eb041244778ee5f927f685869c596f1c7a58091297c7d32ebdb53df88df44db17c8e5b1765df218b0bf56f64990f25284d31e1d37cbf16f6f0c1a132344f9439391ce9a682eaa95f8314f6d0aaa724c5aa4d12c7ddb6911a9d874f6de4be67f44ba73b60fc1765c2d5e8f7409fe47a9efd32b9894fe85bb44f5415ca0f12073ac966eda62895fc04eb3822c597f853dd0868b3b3863b2b0c40005fda20ce7afa87b69347838ecee9f5c66a50aa3798a1a6ca698ab4ca95dc9f4a7a27aaf4fa33db0855c99e0ceea3408b061e6e60eae5fdac0348864b0c55e6d5dff28ca1aef6f7ce3949dc76246771e478864415ef9d6b1ad68ff168d0bee97c943d749716a138f69017d0347ff6f41836131c3a5e4949281a4eba38eccfc4efc362f86ecbb154482f53f56cc03f5609b4337e17175da928f05a01806c1763d3eed1bb1eda3344292b4ba078d8c3a00c9bef0e00488262dcdab99416f293b1fa7605c5e609f985bd0774f53311d1cabd267c7ad0db72d00a29c86fc6e3dec28def4a0db53897974140450b50fe580b40c3963071f97c4439ba8dd742ac405835d9d952acd2142f780f4b024f22d9ece873fe3907a0a54cc937d11901d001c4eb42658caebcbffcd49ac74a5d450d76004002f84e98ae2832422470b4f7b9cf5b07a24080ff03bd1057f34fe69b449b2d878534e80e659b484ea49b36f816bfc5149c72dec65e8ad1f1377b897aaa60e350fa45ec1e9840dfcd5b471814b9ddd73fb97e9ff7ea155686d0f273af1d2b15c90cece1e45e58a89ff795d73c60249b70e9d2b9b833bc65cab23028d166e385d514e6cae176d47a51863314a7b42159a7c87291222386852142388a001a9a3771126f24f274519ecfaf4cc861df96f8a5b460b88248012b118fa79141efc431e2784922ed85d97924bcf42257ff19bc82f7d5d4ab22993dd03d7880923f655f16847087627c51423fdd01a359c0612c4658ac90fbec5c882a33e87ed4b5fabc3bd24a073da9f2a65ddaafa61194519bca5f14ff89521505d86aca7cc9d2e1e2209faaa45df76c60d3ee3e7ae2eb44eb07b853bfd2962c2e9fc2336a10eddd2a25bed40b707d18f45ca5f2015619f4db0b0bef302ff9a096995b5825bb5534d3f5ae1a6985e58618af1d1bfec995f30b0845be9bd8ec2c81f26c7dba3ebe549d21b4ffc247135e82e5bc2b10d7bae387b359abfd7c1a7d748221caa30b9bcc677cb402d0ea7b5ba0c3db7b1559d4fa6d9a79712ae656bc70e2b50c0d07b7d95b2c13cb88162b70f185230013a8b5c3b303ad87236621bef4c4c535dcf607fbb59b81081e571e0f63e774547b144429db64dc7a8a80f82968b735001375247d8798b1398813cbe6764099facc4da743d9f6399782aec4eb42fb692badfe2ce515220ac11e7bdd9bdf93bfad76bd1218cbcb833c7cb88d6f6babe62d6144cfc3b8d940bff4552f5f63ffb8d4136be5d92f8fb25d80cb7d41a3cba703470edc1a34de034a87de582bf2cb1a004fef8ab04c86362f096d4305ee1beef3b73364c37a803d3dcd0164247b369d9365d0fe8369399493c620d1e55fca5145a5cb48ae44820945ca95bcfa3acfc939df6ce9630c10fb540abaffd1d271b64f2a2284eac36a875b65893f0f4c78889c487d3c434a350edd73cbd2814bb3c54be17a9c3ba8c7fa6878aa4a9c008af7e9dd911751a38e0e123a41dd9320b6100e6485be7baaedc4017cfed286f918040d61e31c1d233c0979bbd014f70805e82b4cbc11d926524f6c8508783e000fff9b73ad17d9681d07df7c41150b7c1d1c304fa612712f504c0aaef919cfaf38bd898721a5fc0a1185e1bbe0b1a789a7e837b8d966921501d9c98b2ace23af8e7b4d14db6077d493f302d3e9f36e045d8586da22d16cd0ec20ea7d00d9a3e9cc4a69d692885fcb22e3ed10532d92c43d79f7b453be18a9280da0143339c641f5cc62abbfb013b940713975b44653938627eef534a1cd68aa2b64e9e0310870ff9da518b0258fe31919132441a5c0f1b8e642caf6c1d9750f34d124971a6576f7dee6239c5e23fef273e7d49317bf2e2245aaf5796d7ede6790eefca59d8e66fc31255839801c16246efee7c3bb5379be14010519bc67494707819fe741168c2b15fbd3f27fc4ecc3e962d2a6b77d02d535cc818ba8dd64e91526269a4078e2f061875483cfede60bcac69ba7228276e448c10eabaf3d84cb4b1df587c737e81392a475601d40984ea95c684016011f08ba293b41b075a9ef55018ea175c301b40afc43fc3b9d386428ada30a70355fcff9bbaea65641390be2d8424fa291827d119d639a2cdda85b758e6b8174ed81e909036187c9f4f1cc9af917cde0391ebd9677de7fe4ee439ec934c22cf62f246ff354e88d7390102046d614987610f79f4c4c13c97a3b030992f", 0x1000, 0xfffffffffffffffe) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000480)=0x0) (async) r3 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000580)={{0x1, r2, 0x0, r2, 0x0, 0xa, 0xfffd}, 0x80000001, 0x80, 0x2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0xfff2}) (async) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r2, r4) (async) close_range(r1, r1, 0x2) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000080)=0x6) (async) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x521, &(0x7f0000000640)="$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") 14.045068002s ago: executing program 4 (id=1489): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000440), 0x0, 0x10, &(0x7f00000004c0), &(0x7f00000006c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13) rt_sigpending(0x0, 0xa84e7df75718b5b5) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000400"/13, @ANYRESDEC=r8, @ANYRES64=r6], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) 13.730479157s ago: executing program 4 (id=1493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) lseek(r0, 0x8, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f0000000700)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, './file1/file4/file5'}}, {@noauto_da_alloc}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x5, 0x8000, 0x5c, 0xdb4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r7 = getpid() r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000004000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = syz_pidfd_open(r7, 0x0) setns(r10, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=0x0, @ANYRESDEC=r6, @ANYRES32=r11], 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r6}, &(0x7f00000005c0), &(0x7f00000004c0)='%+9llu \x00'}, 0x20) 13.091712868s ago: executing program 4 (id=1497): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0xdd86, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 12.32755851s ago: executing program 4 (id=1504): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000440), 0x0, 0x10, &(0x7f00000004c0), &(0x7f00000006c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13) rt_sigpending(0x0, 0xa84e7df75718b5b5) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000400"/13, @ANYRESDEC=r8, @ANYRES64=r6], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) 12.32685483s ago: executing program 34 (id=1504): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r1, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000440), 0x0, 0x10, &(0x7f00000004c0), &(0x7f00000006c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xb, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x13) rt_sigpending(0x0, 0xa84e7df75718b5b5) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="000400"/13, @ANYRESDEC=r8, @ANYRES64=r6], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) 3.331916236s ago: executing program 5 (id=1590): r0 = socket(0x11, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) readv(r1, &(0x7f0000000180)=[{0x0, 0x100000}, {&(0x7f00000012c0)=""/73, 0x49}], 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001640)={"84b9f4d4fac021f6c9550bcbc631b6ba", r5, r6, {0x9d, 0x8002}, {0x7cf31e26, 0x7}, 0x5, [0x3, 0x8157, 0x7, 0x101, 0x10003, 0x2, 0xfffffffffffffffb, 0x1, 0x2, 0xcaf, 0x7, 0xcf, 0x8b19, 0x1, 0x9de1, 0x80000001]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000001280)='f2fs_map_blocks\x00', r8, 0x0, 0x5}, 0xffffffffffffff89) rename(0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaa0d, 0x2}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001200)='svcsock_tcp_state\x00'}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 3.135734059s ago: executing program 7 (id=1592): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000880)={0x4, 0xff, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000001e40), 0x0, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 3.05583408s ago: executing program 6 (id=1594): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40efc, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff44) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x13, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0x6506, 0x4000, 0x1, 0x6}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x40, @private2}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 3.05310812s ago: executing program 7 (id=1595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x40810}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r9, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 2.497921039s ago: executing program 5 (id=1597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 2.43156092s ago: executing program 5 (id=1598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="08000000020000000c000000c144d38fd5ed2ec9ef0bc649b1a0354276852af52aa5b1b1fc348ebb7d5b3ea9fd8b5aa32b8c16ab031a69c3ffb48705299710eb4b03a318fb63b60456d1bc2209d7ee66cbbc2582534feda00cb3c835f5df76e97011f07c2f4b796e2e0b847743f5b6a4abfcd1b46a3f223395ec99827bfae71424f35ae4f9ed75be68f1"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7c08f033, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac69ac094b0fac701ce2bb79e8a16ba6f7a6edb3367b5cc888e1fd5102ae2d3d05f251f8d490254eab4152b6e6d87cd6088e97a9d06d29143", 0x35}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0xee00) keyctl$chown(0x4, r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 2.43081976s ago: executing program 0 (id=1599): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) syz_open_procfs(r0, &(0x7f00000004c0)='net/sctp\x00') (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) (async) getpgrp(0x0) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x40}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0xc4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1bb30400000000000000010000000c000600020000000200000008000300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x78}, 0x1, 0x0, 0x0, 0x24004001}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802", @ANYRES32], 0x50) (async) timerfd_create(0x4, 0x800) (async) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000"], 0x48) socket(0x10, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.43041311s ago: executing program 6 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x40000000, 0x0) shutdown(r2, 0x1) 2.363779851s ago: executing program 0 (id=1602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x40810}}], 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 2.280547572s ago: executing program 6 (id=1603): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x80000004}, 0x18) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.187525254s ago: executing program 5 (id=1605): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000880)={0x4, 0xff, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000001e40), 0x0, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.155701985s ago: executing program 7 (id=1606): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) semget$private(0x0, 0x3, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.752058951s ago: executing program 5 (id=1607): r0 = socket(0x11, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xa0002, 0x0) readv(r1, &(0x7f0000000180)=[{0x0, 0x100000}, {&(0x7f00000012c0)=""/73, 0x49}], 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000001340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000001640)={"84b9f4d4fac021f6c9550bcbc631b6ba", r5, r6, {0x9d, 0x8002}, {0x7cf31e26, 0x7}, 0x5, [0x3, 0x8157, 0x7, 0x101, 0x10003, 0x2, 0xfffffffffffffffb, 0x1, 0x2, 0xcaf, 0x7, 0xcf, 0x8b19, 0x1, 0x9de1, 0x80000001]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000001280)='f2fs_map_blocks\x00', r8, 0x0, 0x5}, 0xffffffffffffff89) rename(0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaa0d, 0x2}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001200)='svcsock_tcp_state\x00'}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 1.744677171s ago: executing program 6 (id=1608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 1.499845165s ago: executing program 6 (id=1609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.349067108s ago: executing program 0 (id=1611): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40efc, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff44) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x7, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0x6506, 0x4000, 0x1, 0x6}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x40, @private2}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.338374388s ago: executing program 7 (id=1612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nobarrier}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@mblk_io_submit}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf8) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.17284764s ago: executing program 1 (id=1614): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0xfe09) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/7, &(0x7f0000000080)=0x20) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xc404, &(0x7f00000003c0)={[{@dots}, {@fat=@discard}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@fat=@umask={'umask', 0x3d, 0x403}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2db}}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x1}}, {@dots}, {@nodots}, {@fat=@nfs_nostale_ro}, {@nodots}, {}, {@dots}]}, 0xfd, 0x207, &(0x7f0000000780)="$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") 1.15384412s ago: executing program 1 (id=1615): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0xf2ce1000) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file1\x00', 0x1010000, &(0x7f0000000180)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8no}, {@utf8}, {@numtail}, {@numtail}, {}, {@shortname_lower}, {@utf8no}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@fat=@time_offset={'time_offset', 0x3d, 0x495}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1ff}}]}, 0x1, 0x363, &(0x7f0000000280)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@raw=[@tail_call, @jmp={0x5, 0x0, 0x4, 0x0, 0x6, 0x1, 0x1}], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xb, 0x10001, 0x1}, 0x10, 0x2e3c8, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[r1, r3, r4], 0x0, 0x10, 0x5, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) 1.105086651s ago: executing program 7 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000480)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="08000000020000000c000000c144d38fd5ed2ec9ef0bc649b1a0354276852af52aa5b1b1fc348ebb7d5b3ea9fd8b5aa32b8c16ab031a69c3ffb48705299710eb4b03a318fb63b60456d1bc2209d7ee66cbbc2582534feda00cb3c835f5df76e97011f07c2f4b796e2e0b847743f5b6a4abfcd1b46a3f223395ec99827bfae71424f35ae4f9ed75be68f1"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x7c08f033, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x826e, 0x40, 0x3, 0xf0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc9610e10ac69ac094b0fac701ce2bb79e8a16ba6f7a6edb3367b5cc888e1fd5102ae2d3d05f251f8d490254eab4152b6e6d87cd6088e97a9d06d29143", 0x35}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee01, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.059900162s ago: executing program 1 (id=1617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x40810}}], 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r9, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 958.389414ms ago: executing program 0 (id=1618): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000840), 0x100, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000880)={0x4, 0xff, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r3, &(0x7f0000001e40), 0x0, 0x4040) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 837.564356ms ago: executing program 0 (id=1619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0)) 837.139226ms ago: executing program 5 (id=1620): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x80000004}, 0x18) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 721.128158ms ago: executing program 0 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000012b8b42bff01000000000000000000000000000101000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x90) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = inotify_init() r6 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r7 = inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r6, &(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x69) close(r6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r8]}}], 0x18, 0x40810}}], 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r10, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 720.250127ms ago: executing program 7 (id=1622): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x80000004}, 0x18) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 532.786591ms ago: executing program 6 (id=1623): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) semget$private(0x0, 0x3, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 199.106866ms ago: executing program 1 (id=1624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}], 0x3, 0x40000000, 0x0) shutdown(r2, 0x1) 94.737518ms ago: executing program 1 (id=1625): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x20044851) 0s ago: executing program 1 (id=1626): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x80000}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.765471][ T6814] RSP: 002b:00007fe239434fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 127.765490][ T6814] RAX: ffffffffffffffda RBX: 00007fe23b036160 RCX: 00007fe23ae0e929 [ 127.765504][ T6814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004d100000 [ 127.765520][ T6814] RBP: 00007fe239435090 R08: 0000000000000000 R09: 0000000000000000 [ 127.765534][ T6814] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 127.765549][ T6814] R13: 0000000000000000 R14: 00007fe23b036160 R15: 00007fff3f571bf8 [ 127.765569][ T6814] [ 128.111025][ T6803] syz.4.1078 (6803) used greatest stack depth: 9304 bytes left [ 128.190800][ T3298] printk: udevd: 65 output lines suppressed due to ratelimiting [ 128.205041][ T6827] loop4: detected capacity change from 0 to 512 [ 128.234196][ T6827] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.482856][ T6856] loop4: detected capacity change from 0 to 1024 [ 128.499186][ T6856] EXT4-fs: Ignoring removed orlov option [ 128.714536][ T6873] loop1: detected capacity change from 0 to 8192 [ 128.732791][ T6878] vlan2: entered promiscuous mode [ 128.737953][ T6878] vlan2: entered allmulticast mode [ 128.743406][ T6878] hsr_slave_1: entered allmulticast mode [ 128.770976][ T6876] loop2: detected capacity change from 0 to 8192 [ 128.787635][ T6878] FAULT_INJECTION: forcing a failure. [ 128.787635][ T6878] name failslab, interval 1, probability 0, space 0, times 0 [ 128.800327][ T6878] CPU: 1 UID: 0 PID: 6878 Comm: syz.4.1099 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 128.800433][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.800449][ T6878] Call Trace: [ 128.800458][ T6878] [ 128.800466][ T6878] __dump_stack+0x1d/0x30 [ 128.800539][ T6878] dump_stack_lvl+0xe8/0x140 [ 128.800564][ T6878] dump_stack+0x15/0x1b [ 128.800591][ T6878] should_fail_ex+0x265/0x280 [ 128.800633][ T6878] should_failslab+0x8c/0xb0 [ 128.800738][ T6878] kmem_cache_alloc_node_noprof+0x57/0x320 [ 128.800775][ T6878] ? __alloc_skb+0x101/0x320 [ 128.800815][ T6878] __alloc_skb+0x101/0x320 [ 128.800862][ T6878] netlink_alloc_large_skb+0xba/0xf0 [ 128.800967][ T6878] netlink_sendmsg+0x3cf/0x6b0 [ 128.800989][ T6878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.801015][ T6878] __sock_sendmsg+0x142/0x180 [ 128.801048][ T6878] ____sys_sendmsg+0x31e/0x4e0 [ 128.801140][ T6878] ___sys_sendmsg+0x17b/0x1d0 [ 128.801207][ T6878] __x64_sys_sendmsg+0xd4/0x160 [ 128.801249][ T6878] x64_sys_call+0x2999/0x2fb0 [ 128.801270][ T6878] do_syscall_64+0xd2/0x200 [ 128.801313][ T6878] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.801373][ T6878] ? clear_bhb_loop+0x40/0x90 [ 128.801400][ T6878] ? clear_bhb_loop+0x40/0x90 [ 128.801421][ T6878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.801447][ T6878] RIP: 0033:0x7f497f62e929 [ 128.801514][ T6878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.801533][ T6878] RSP: 002b:00007f497dc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.801557][ T6878] RAX: ffffffffffffffda RBX: 00007f497f855fa0 RCX: 00007f497f62e929 [ 128.801573][ T6878] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 128.801588][ T6878] RBP: 00007f497dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 128.801601][ T6878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.801667][ T6878] R13: 0000000000000000 R14: 00007f497f855fa0 R15: 00007ffdd69193f8 [ 128.801694][ T6878] [ 129.052648][ T6873] loop1: p1 p2 p3 [ 129.101741][ T6876] loop2: p1 p2 p3 [ 129.224444][ T6890] loop2: detected capacity change from 0 to 2048 [ 129.314683][ T6890] loop2: p1 < > p4 [ 129.319181][ T6890] loop2: p4 size 8388608 extends beyond EOD, truncated [ 129.348077][ T6896] loop0: detected capacity change from 0 to 2048 [ 129.412027][ T6896] loop0: p1 < > p4 [ 129.421287][ T6896] loop0: p4 size 8388608 extends beyond EOD, truncated [ 129.584827][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 129.584857][ T29] audit: type=1400 audit(2000000037.030:1750): avc: denied { write } for pid=6908 comm="syz.2.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 129.648863][ T6915] loop3: detected capacity change from 0 to 164 [ 129.659040][ T6914] loop2: detected capacity change from 0 to 1024 [ 129.666606][ T29] audit: type=1400 audit(2000000037.110:1751): avc: denied { mount } for pid=6912 comm="syz.3.1113" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 129.673902][ T6914] EXT4-fs: Ignoring removed nobh option [ 129.694713][ T6914] EXT4-fs: Ignoring removed nobh option [ 129.702624][ T6914] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 129.712829][ T6915] syz.3.1113: attempt to access beyond end of device [ 129.712829][ T6915] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 129.713218][ T6914] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1112: inode #4294967295: comm syz.2.1112: iget: illegal inode # [ 129.727609][ T6915] syz.3.1113: attempt to access beyond end of device [ 129.727609][ T6915] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 129.755902][ T6914] EXT4-fs (loop2): no journal found [ 129.761287][ T6914] EXT4-fs (loop2): can't get journal size [ 129.762086][ T6914] EXT4-fs (loop2): failed to initialize system zone (-22) [ 129.776206][ T6914] EXT4-fs (loop2): mount failed [ 129.790004][ T6914] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 129.792113][ T29] audit: type=1400 audit(2000000037.230:1752): avc: denied { watch } for pid=6913 comm="syz.2.1112" path="/213/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 129.821894][ T29] audit: type=1400 audit(2000000037.230:1753): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 129.848671][ T29] audit: type=1400 audit(2000000037.250:1754): avc: denied { relabelto } for pid=6913 comm="syz.2.1112" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 129.875011][ T29] audit: type=1400 audit(2000000037.250:1755): avc: denied { associate } for pid=6913 comm="syz.2.1112" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 129.915823][ T6923] loop3: detected capacity change from 0 to 1024 [ 129.929007][ T6923] EXT4-fs: Ignoring removed orlov option [ 130.008656][ T29] audit: type=1400 audit(2000000037.450:1756): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 130.129520][ T29] audit: type=1400 audit(2000000037.570:1757): avc: denied { create } for pid=6928 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.179424][ T29] audit: type=1400 audit(2000000037.600:1758): avc: denied { bind } for pid=6928 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 130.198867][ T29] audit: type=1400 audit(2000000037.600:1759): avc: denied { append } for pid=6928 comm="syz.4.1118" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 130.698171][ T3311] EXT4-fs unmount: 57 callbacks suppressed [ 130.698191][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.890759][ T6948] 9pnet_fd: Insufficient options for proto=fd [ 130.922183][ T6954] loop3: detected capacity change from 0 to 1024 [ 130.933309][ T6950] loop1: detected capacity change from 0 to 512 [ 130.937056][ T6952] loop2: detected capacity change from 0 to 8192 [ 130.940477][ T6950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.946804][ T6954] EXT4-fs: Ignoring removed nobh option [ 130.960764][ T6950] EXT4-fs (loop1): 1 truncate cleaned up [ 130.961674][ T6954] EXT4-fs: Ignoring removed bh option [ 130.967923][ T6950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.972723][ T6954] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.011427][ T6952] loop2: p1 p2 p3 [ 131.049789][ T6954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.144867][ T6954] __nla_validate_parse: 1 callbacks suppressed [ 131.144889][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'. [ 131.162258][ T6960] loop2: detected capacity change from 0 to 512 [ 131.169374][ T6960] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.182718][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 131.197914][ T6960] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.209277][ T6960] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 131.222645][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.237921][ T6954] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.1127: Allocating blocks 497-513 which overlap fs metadata [ 131.253115][ T6960] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 131.253484][ T6973] netlink: 'syz.0.1133': attribute type 1 has an invalid length. [ 131.264827][ T6960] EXT4-fs (loop2): failed to initialize system zone (-117) [ 131.289985][ T6973] bond0: entered promiscuous mode [ 131.295418][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.306624][ T6973] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1133'. [ 131.318764][ T6973] batadv0: entered promiscuous mode [ 131.324073][ T6973] batadv0: entered allmulticast mode [ 131.330678][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.338078][ T6960] EXT4-fs (loop2): mount failed [ 131.340971][ T6973] bond0: (slave batadv0): making interface the new active one [ 131.351533][ T6973] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 131.363293][ T6980] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1133'. [ 131.375349][ T6980] batadv1: entered promiscuous mode [ 131.380659][ T6980] batadv1: entered allmulticast mode [ 131.386919][ T6980] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.395264][ T6980] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 131.408790][ T6973] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1133'. [ 131.423692][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.504864][ T6992] loop0: detected capacity change from 0 to 2048 [ 131.545108][ T6994] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1139'. [ 131.554271][ T6994] bond_slave_0: entered promiscuous mode [ 131.560084][ T6994] bond_slave_1: entered promiscuous mode [ 131.568465][ T6992] loop0: p1 < > p4 [ 131.573022][ T6992] loop0: p4 size 8388608 extends beyond EOD, truncated [ 131.591702][ T6994] loop3: detected capacity change from 0 to 512 [ 131.599993][ T6994] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.732913][ T6994] EXT4-fs (loop3): 1 orphan inode deleted [ 131.738735][ T6994] EXT4-fs (loop3): 1 truncate cleaned up [ 131.756435][ T6994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.775936][ T7002] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1142'. [ 132.374676][ T7018] loop1: detected capacity change from 0 to 1024 [ 132.374946][ T7018] EXT4-fs: Ignoring removed orlov option [ 132.383809][ T7018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.391063][ T7015] loop2: detected capacity change from 0 to 164 [ 132.399419][ T7015] syz.2.1146: attempt to access beyond end of device [ 132.399419][ T7015] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.551536][ T7015] syz.2.1146: attempt to access beyond end of device [ 132.551536][ T7015] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.671167][ T7035] 9pnet_fd: Insufficient options for proto=fd [ 132.718324][ T7032] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1151'. [ 132.752929][ T7041] loop2: detected capacity change from 0 to 1024 [ 132.753228][ T7041] EXT4-fs: Ignoring removed orlov option [ 132.760070][ T7041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.774600][ T7034] lo speed is unknown, defaulting to 1000 [ 132.796950][ T7032] infiniband syz!: set down [ 132.796972][ T7032] infiniband syz!: added team_slave_0 [ 132.826124][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.856441][ T7032] RDS/IB: syz!: added [ 132.856462][ T7032] smc: adding ib device syz! with port count 1 [ 132.856517][ T7032] smc: ib device syz! port 1 has pnetid [ 132.931394][ T7046] loop1: detected capacity change from 0 to 1024 [ 132.938178][ T7046] EXT4-fs: Ignoring removed orlov option [ 132.950537][ T7046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.156415][ T7030] loop0: detected capacity change from 0 to 1024 [ 133.180089][ T7030] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.225203][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.237970][ T7030] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 133.298063][ T7030] EXT4-fs (loop0): orphan cleanup on readonly fs [ 133.311143][ T7053] loop1: detected capacity change from 0 to 1024 [ 133.334793][ T7030] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #3: comm syz.0.1150: iget: bad i_size value: 1407392063428608 [ 133.348203][ T7053] EXT4-fs: Ignoring removed orlov option [ 133.375519][ T7030] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.1150: Bad quota inode: 3, type: 0 [ 133.394935][ T7053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.433879][ T7030] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 133.448691][ T7030] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 133.464653][ T7030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.579102][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.591840][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.779251][ T7066] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1161'. [ 133.789292][ T7066] gretap0: entered promiscuous mode [ 134.246783][ T7071] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1161'. [ 134.284096][ T7070] loop2: detected capacity change from 0 to 164 [ 134.292921][ T7070] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.303909][ T7070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.374580][ T7071] 0ͺXΉ¦D: renamed from gretap0 [ 134.576776][ T7071] 0ͺXΉ¦D: left promiscuous mode [ 134.581812][ T7071] 0ͺXΉ¦D: entered allmulticast mode [ 134.634206][ T7071] A link change request failed with some changes committed already. Interface 30ͺXΉ¦D may have been left with an inconsistent configuration, please check. [ 134.673564][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.706829][ T7078] 9pnet_fd: Insufficient options for proto=fd [ 134.775151][ T7083] loop1: detected capacity change from 0 to 1024 [ 134.794330][ T7085] loop2: detected capacity change from 0 to 1024 [ 134.801788][ T7083] EXT4-fs: Ignoring removed orlov option [ 134.824975][ T7085] EXT4-fs: Ignoring removed orlov option [ 134.831869][ T7083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.985410][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.139659][ T6956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 135.254259][ T6956] EXT4-fs (loop3): Remounting filesystem read-only [ 135.670773][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.682357][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.708451][ T7101] loop1: detected capacity change from 0 to 512 [ 135.715641][ T7101] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 135.743360][ T7101] EXT4-fs (loop1): failed to open journal device unknown-block(11,131) -6 [ 135.784601][ T7108] loop1: detected capacity change from 0 to 128 [ 135.894089][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.894089][ T146] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 135.909084][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.909084][ T146] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 135.924413][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.924413][ T146] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 135.937883][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.937883][ T146] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 135.952619][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.952619][ T146] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 135.966172][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.966172][ T146] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 135.979743][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.979743][ T146] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 135.993146][ T146] kworker/u8:4: attempt to access beyond end of device [ 135.993146][ T146] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 136.006526][ T146] kworker/u8:4: attempt to access beyond end of device [ 136.006526][ T146] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 136.019996][ T146] kworker/u8:4: attempt to access beyond end of device [ 136.019996][ T146] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 136.087591][ T7115] xt_TCPMSS: Only works on TCP SYN packets [ 136.135162][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 136.135177][ T29] audit: type=1400 audit(2000000043.580:1855): avc: denied { write } for pid=7122 comm="syz.1.1178" path="socket:[15626]" dev="sockfs" ino=15626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 136.170662][ T7123] netlink: 'syz.1.1178': attribute type 13 has an invalid length. [ 136.180670][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1177'. [ 136.251246][ T7129] loop1: detected capacity change from 0 to 1024 [ 136.269757][ T7129] EXT4-fs: Ignoring removed orlov option [ 136.282363][ T29] audit: type=1400 audit(2000000043.730:1856): avc: denied { append } for pid=7125 comm="syz.0.1180" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 136.320403][ T7129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.616133][ T7135] capability: warning: `syz.2.1183' uses 32-bit capabilities (legacy support in use) [ 136.705502][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.740590][ T7141] loop2: detected capacity change from 0 to 1024 [ 136.776184][ T7141] EXT4-fs: Ignoring removed orlov option [ 136.833454][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.878900][ T7141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.946788][ T7149] FAULT_INJECTION: forcing a failure. [ 136.946788][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 136.959795][ T7149] CPU: 0 UID: 0 PID: 7149 Comm: syz.4.1186 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 136.959848][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.959863][ T7149] Call Trace: [ 136.959931][ T7149] [ 136.959939][ T7149] __dump_stack+0x1d/0x30 [ 136.959996][ T7149] dump_stack_lvl+0xe8/0x140 [ 136.960015][ T7149] dump_stack+0x15/0x1b [ 136.960034][ T7149] should_fail_ex+0x265/0x280 [ 136.960078][ T7149] ? allocate_file_region_entries+0xd2/0x310 [ 136.960105][ T7149] should_failslab+0x8c/0xb0 [ 136.960194][ T7149] __kmalloc_cache_noprof+0x4c/0x320 [ 136.960232][ T7149] allocate_file_region_entries+0xd2/0x310 [ 136.960284][ T7149] region_chg+0x232/0x2d0 [ 136.960308][ T7149] alloc_hugetlb_folio+0x312/0x1070 [ 136.960514][ T7149] hugetlb_fault+0xd0f/0x1be0 [ 136.960537][ T7149] ? vma_set_page_prot+0xc3/0xf0 [ 136.960584][ T7149] handle_mm_fault+0x1861/0x2be0 [ 136.960615][ T7149] ? mt_find+0x200/0x320 [ 136.960641][ T7149] ? down_read+0x77/0xe0 [ 136.960741][ T7149] __get_user_pages+0x1036/0x1fb0 [ 136.960775][ T7149] __mm_populate+0x243/0x3a0 [ 136.960862][ T7149] __se_sys_remap_file_pages+0x39b/0x600 [ 136.960887][ T7149] ? fput+0x8f/0xc0 [ 136.960916][ T7149] __x64_sys_remap_file_pages+0x67/0x80 [ 136.961011][ T7149] x64_sys_call+0x2c64/0x2fb0 [ 136.961041][ T7149] do_syscall_64+0xd2/0x200 [ 136.961062][ T7149] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.961093][ T7149] ? clear_bhb_loop+0x40/0x90 [ 136.961114][ T7149] ? clear_bhb_loop+0x40/0x90 [ 136.961137][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.961165][ T7149] RIP: 0033:0x7f497f62e929 [ 136.961232][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.961257][ T7149] RSP: 002b:00007f497dc76038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 136.961281][ T7149] RAX: ffffffffffffffda RBX: 00007f497f856080 RCX: 00007f497f62e929 [ 136.961294][ T7149] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 136.961307][ T7149] RBP: 00007f497dc76090 R08: 0000000000000000 R09: 0000000000000000 [ 136.961319][ T7149] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000001 [ 136.961331][ T7149] R13: 0000000000000000 R14: 00007f497f856080 R15: 00007ffdd69193f8 [ 136.961350][ T7149] [ 137.124084][ T7157] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 137.250121][ T7160] SELinux: Context ά is not valid (left unmapped). [ 137.259118][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.274750][ T7163] loop4: detected capacity change from 0 to 1024 [ 137.284948][ T7157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.292163][ T7163] EXT4-fs: Ignoring removed orlov option [ 137.294398][ T7160] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.305552][ T7160] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 137.306284][ T7158] bond1: (slave gretap1): making interface the new active one [ 137.312911][ T29] audit: type=1400 audit(2000000044.740:1857): avc: denied { create } for pid=7159 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.340220][ T29] audit: type=1400 audit(2000000044.740:1858): avc: denied { create } for pid=7159 comm="syz.3.1191" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 137.349733][ T7158] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 137.363726][ T29] audit: type=1400 audit(2000000044.740:1859): avc: denied { associate } for pid=7159 comm="syz.3.1191" name="memory.swap.current" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=DC [ 137.396423][ T29] audit: type=1400 audit(2000000044.740:1860): avc: denied { read append open } for pid=7159 comm="syz.3.1191" path="/229/memory.swap.current" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 137.422547][ T29] audit: type=1400 audit(2000000044.740:1861): avc: denied { map } for pid=7159 comm="syz.3.1191" path="/229/memory.swap.current" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 137.447557][ T29] audit: type=1400 audit(2000000044.740:1862): avc: denied { execute } for pid=7159 comm="syz.3.1191" path="/229/memory.swap.current" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 137.472718][ T29] audit: type=1400 audit(2000000044.740:1863): avc: denied { write } for pid=7159 comm="syz.3.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.503275][ T29] audit: type=1400 audit(2000000044.950:1864): avc: denied { unlink } for pid=3311 comm="syz-executor" name="memory.swap.current" dev="tmpfs" ino=1307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=DC [ 137.529359][ T7163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.577687][ T7170] syz_tun: entered allmulticast mode [ 137.605846][ T7173] loop2: detected capacity change from 0 to 764 [ 137.625597][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.641923][ T7177] loop1: detected capacity change from 0 to 1024 [ 137.644697][ T7179] syz_tun: left allmulticast mode [ 137.648940][ T7177] EXT4-fs: Ignoring removed orlov option [ 137.659510][ T7173] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 137.709066][ T7183] loop2: detected capacity change from 0 to 512 [ 137.717383][ T7177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.722513][ T7183] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.778337][ T7183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.833227][ T7183] EXT4-fs (loop2): 1 truncate cleaned up [ 137.842437][ T7183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.917194][ T7183] EXT4-fs (loop2): shut down requested (0) [ 137.973776][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.011650][ T7195] loop4: detected capacity change from 0 to 512 [ 138.043052][ T7195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.096965][ T7195] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.137484][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 138.167191][ T7195] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.1203: mark_inode_dirty error [ 138.181866][ T7195] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.1203: corrupted inode contents [ 138.197132][ T7195] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1203: mark_inode_dirty error [ 138.333585][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.347266][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.366405][ T7212] loop1: detected capacity change from 0 to 2048 [ 138.383711][ T7212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.500186][ T7233] loop2: detected capacity change from 0 to 2048 [ 138.515549][ T7235] loop4: detected capacity change from 0 to 1024 [ 138.524064][ T7235] EXT4-fs: Ignoring removed orlov option [ 138.533932][ T7235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.556975][ T7233] loop2: p2 p3 p7 [ 138.610182][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.254799][ T7253] loop2: detected capacity change from 0 to 2048 [ 139.262120][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.273863][ T7251] wireguard0: entered promiscuous mode [ 139.322159][ T7253] loop2: p1 < > p4 [ 139.328903][ T7253] loop2: p4 size 8388608 extends beyond EOD, truncated [ 139.415530][ T7262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 139.452478][ T7269] FAULT_INJECTION: forcing a failure. [ 139.452478][ T7269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.465879][ T7269] CPU: 1 UID: 0 PID: 7269 Comm: syz.0.1221 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 139.465914][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.465938][ T7269] Call Trace: [ 139.465944][ T7269] [ 139.465951][ T7269] __dump_stack+0x1d/0x30 [ 139.465973][ T7269] dump_stack_lvl+0xe8/0x140 [ 139.465996][ T7269] dump_stack+0x15/0x1b [ 139.466018][ T7269] should_fail_ex+0x265/0x280 [ 139.466059][ T7269] should_fail_alloc_page+0xf2/0x100 [ 139.466099][ T7269] __alloc_frozen_pages_noprof+0xff/0x360 [ 139.466145][ T7269] alloc_pages_mpol+0xb3/0x250 [ 139.466179][ T7269] vma_alloc_folio_noprof+0x1aa/0x300 [ 139.466236][ T7269] do_wp_page+0x673/0x2400 [ 139.466267][ T7269] ? __rcu_read_lock+0x37/0x50 [ 139.466309][ T7269] handle_mm_fault+0x77d/0x2be0 [ 139.466391][ T7269] ? mas_walk+0xf2/0x120 [ 139.466439][ T7269] do_user_addr_fault+0x636/0x1090 [ 139.466550][ T7269] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 139.466662][ T7269] exc_page_fault+0x62/0xa0 [ 139.466696][ T7269] asm_exc_page_fault+0x26/0x30 [ 139.466721][ T7269] RIP: 0033:0x7fd989550d50 [ 139.466741][ T7269] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 139.466765][ T7269] RSP: 002b:00007fd987cf64a0 EFLAGS: 00010202 [ 139.466859][ T7269] RAX: 0000000000011005 RBX: 00007fd987cf6540 RCX: 0000000000000101 [ 139.466872][ T7269] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007fd987cf65e0 [ 139.466972][ T7269] RBP: 0000000000000102 R08: 00007fd97f8d7000 R09: 0000000000000008 [ 139.467058][ T7269] R10: 0000200000001902 R11: 0000000000000782 R12: 0000000000000601 [ 139.467070][ T7269] R13: 00007fd98972c120 R14: 0000000000000015 R15: 00007fd987cf65e0 [ 139.467090][ T7269] [ 139.467099][ T7269] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 139.489996][ T7271] loop1: detected capacity change from 0 to 1024 [ 139.645890][ T7276] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 139.658657][ T7271] EXT4-fs: Ignoring removed orlov option [ 139.679010][ T7271] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 139.754553][ T7276] xt_hashlimit: size too large, truncated to 1048576 [ 139.881868][ T7285] loop4: detected capacity change from 0 to 128 [ 139.894986][ T7286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.954644][ T7271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.990729][ T7285] FAULT_INJECTION: forcing a failure. [ 139.990729][ T7285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.004157][ T7285] CPU: 0 UID: 0 PID: 7285 Comm: syz.4.1226 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 140.004269][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.004285][ T7285] Call Trace: [ 140.004294][ T7285] [ 140.004304][ T7285] __dump_stack+0x1d/0x30 [ 140.004374][ T7285] dump_stack_lvl+0xe8/0x140 [ 140.004399][ T7285] dump_stack+0x15/0x1b [ 140.004440][ T7285] should_fail_ex+0x265/0x280 [ 140.004511][ T7285] should_fail_alloc_page+0xf2/0x100 [ 140.004596][ T7285] __alloc_frozen_pages_noprof+0xff/0x360 [ 140.004643][ T7285] alloc_pages_mpol+0xb3/0x250 [ 140.004699][ T7285] vma_alloc_folio_noprof+0x1aa/0x300 [ 140.004780][ T7285] handle_mm_fault+0xec2/0x2be0 [ 140.004814][ T7285] ? __rcu_read_lock+0x37/0x50 [ 140.004862][ T7285] __get_user_pages+0x1036/0x1fb0 [ 140.004938][ T7285] __gup_longterm_locked+0x9c9/0x1010 [ 140.004965][ T7285] ? try_get_folio+0x379/0x3c0 [ 140.005085][ T7285] ? mod_node_page_state+0x1c/0xa0 [ 140.005132][ T7285] gup_fast_fallback+0x1f9/0x1730 [ 140.005187][ T7285] pin_user_pages_fast+0x5f/0x90 [ 140.005215][ T7285] iov_iter_extract_pages+0x253/0x420 [ 140.005323][ T7285] __blockdev_direct_IO+0x8ba/0x1ec0 [ 140.005368][ T7285] ? __pfx_fat_get_block+0x10/0x10 [ 140.005483][ T7285] ? __pfx_fat_get_block+0x10/0x10 [ 140.005537][ T7285] fat_direct_IO+0x102/0x1d0 [ 140.005582][ T7285] generic_file_read_iter+0x21b/0x330 [ 140.005622][ T7285] aio_read+0x1dd/0x2e0 [ 140.005670][ T7285] io_submit_one+0xab2/0x11d0 [ 140.005707][ T7285] __se_sys_io_submit+0xfb/0x280 [ 140.005782][ T7285] __x64_sys_io_submit+0x43/0x50 [ 140.005889][ T7285] x64_sys_call+0xfc4/0x2fb0 [ 140.005913][ T7285] do_syscall_64+0xd2/0x200 [ 140.005932][ T7285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.005966][ T7285] ? clear_bhb_loop+0x40/0x90 [ 140.006087][ T7285] ? clear_bhb_loop+0x40/0x90 [ 140.006114][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.006141][ T7285] RIP: 0033:0x7f497f62e929 [ 140.006211][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.006234][ T7285] RSP: 002b:00007f497dc97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 140.006258][ T7285] RAX: ffffffffffffffda RBX: 00007f497f855fa0 RCX: 00007f497f62e929 [ 140.006275][ T7285] RDX: 0000200000001d00 RSI: 0000000000000002 RDI: 00007f4980391000 [ 140.006338][ T7285] RBP: 00007f497dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 140.006355][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.006371][ T7285] R13: 0000000000000000 R14: 00007f497f855fa0 R15: 00007ffdd69193f8 [ 140.006397][ T7285] [ 140.009909][ T7286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.219976][ T7262] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1218: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 140.285944][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1223'. [ 140.370856][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.404893][ T7286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.452900][ T7304] FAULT_INJECTION: forcing a failure. [ 140.452900][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 140.465680][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.4.1231 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 140.465719][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.465735][ T7304] Call Trace: [ 140.465743][ T7304] [ 140.465752][ T7304] __dump_stack+0x1d/0x30 [ 140.465856][ T7304] dump_stack_lvl+0xe8/0x140 [ 140.465881][ T7304] dump_stack+0x15/0x1b [ 140.465901][ T7304] should_fail_ex+0x265/0x280 [ 140.465933][ T7304] should_failslab+0x8c/0xb0 [ 140.465957][ T7304] __kvmalloc_node_noprof+0x123/0x4e0 [ 140.465997][ T7304] ? alloc_netdev_mqs+0x8b7/0xab0 [ 140.466079][ T7304] ? __kmalloc_cache_noprof+0x22e/0x320 [ 140.466119][ T7304] alloc_netdev_mqs+0x8b7/0xab0 [ 140.466227][ T7304] ip6_tnl_locate+0x37e/0x4a0 [ 140.466303][ T7304] ip6_tnl_siocdevprivate+0x550/0x920 [ 140.466332][ T7304] dev_ifsioc+0x8f8/0xaa0 [ 140.466418][ T7304] dev_ioctl+0x78d/0x960 [ 140.466438][ T7304] sock_ioctl+0x593/0x610 [ 140.466468][ T7304] ? __pfx_sock_ioctl+0x10/0x10 [ 140.466547][ T7304] __se_sys_ioctl+0xce/0x140 [ 140.466578][ T7304] __x64_sys_ioctl+0x43/0x50 [ 140.466614][ T7304] x64_sys_call+0x19a8/0x2fb0 [ 140.466642][ T7304] do_syscall_64+0xd2/0x200 [ 140.466741][ T7304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 140.466776][ T7304] ? clear_bhb_loop+0x40/0x90 [ 140.466807][ T7304] ? clear_bhb_loop+0x40/0x90 [ 140.466836][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.466863][ T7304] RIP: 0033:0x7f497f62e929 [ 140.466900][ T7304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.466923][ T7304] RSP: 002b:00007f497dc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.466946][ T7304] RAX: ffffffffffffffda RBX: 00007f497f855fa0 RCX: 00007f497f62e929 [ 140.466962][ T7304] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 140.466977][ T7304] RBP: 00007f497dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 140.467001][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.467017][ T7304] R13: 0000000000000000 R14: 00007f497f855fa0 R15: 00007ffdd69193f8 [ 140.467037][ T7304] [ 140.695346][ T7286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.713350][ T7302] loop3: detected capacity change from 0 to 2048 [ 140.737783][ T7305] netlink: 'syz.1.1228': attribute type 2 has an invalid length. [ 140.745616][ T7305] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 140.753429][ T7305] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1228'. [ 140.783200][ T7302] loop3: p1 < > p4 [ 140.806223][ T7286] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.807867][ T7302] loop3: p4 size 8388608 extends beyond EOD, truncated [ 140.827685][ T7286] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.854878][ T7308] loop2: detected capacity change from 0 to 512 [ 140.893280][ T7286] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.911016][ T7308] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 140.921068][ T7286] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.923090][ T7317] loop4: detected capacity change from 0 to 1024 [ 140.930955][ T7308] System zones: 0-2, 18-18, 34-35 [ 140.936455][ T7317] EXT4-fs: Ignoring removed orlov option [ 140.945938][ T7308] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #4: comm syz.2.1232: iget: bad i_size value: 5910974510929920 [ 140.969981][ T7317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.982899][ T7308] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.1232: Bad quota inode: 4, type: 1 [ 141.006643][ T7308] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.076959][ T7308] EXT4-fs (loop2): mount failed [ 141.153785][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 141.153801][ T29] audit: type=1400 audit(2000000003.440:2168): avc: denied { write } for pid=7307 comm="syz.2.1232" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.164581][ T7328] netlink: '+}[@': attribute type 13 has an invalid length. [ 141.190818][ T29] audit: type=1400 audit(2000000003.440:2169): avc: denied { connect } for pid=7327 comm="syz.1.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.210570][ T29] audit: type=1400 audit(2000000003.440:2170): avc: denied { write } for pid=7327 comm="syz.1.1237" path="socket:[16727]" dev="sockfs" ino=16727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 141.253763][ T29] audit: type=1400 audit(2000000003.540:2171): avc: denied { mount } for pid=7331 comm="syz.0.1238" name="/" dev="ramfs" ino=16008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 141.255917][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.316377][ T7328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.332083][ T36] lo speed is unknown, defaulting to 1000 [ 141.337903][ T36] syz2: Port: 1 Link ACTIVE [ 141.360241][ T29] audit: type=1400 audit(2000000003.630:2172): avc: denied { create } for pid=7334 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.380043][ T29] audit: type=1400 audit(2000000003.630:2173): avc: denied { setopt } for pid=7334 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.403894][ T7336] IPv4: Oversized IP packet from 127.202.26.0 [ 141.421283][ T29] audit: type=1400 audit(2000000003.690:2174): avc: denied { ioctl } for pid=7334 comm="syz.3.1239" path="socket:[16011]" dev="sockfs" ino=16011 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.446277][ T29] audit: type=1400 audit(2000000003.690:2175): avc: denied { write } for pid=7334 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 141.509144][ T29] audit: type=1400 audit(2000000003.710:2176): avc: denied { read } for pid=7334 comm="syz.3.1239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 141.588017][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.646996][ T29] audit: type=1326 audit(2000000003.930:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd98968e929 code=0x7ffc0000 [ 141.676892][ T7340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1242'. [ 141.702015][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1241'. [ 141.738123][ T7344] loop1: detected capacity change from 0 to 1024 [ 141.774486][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 141.806616][ T7344] EXT4-fs: Ignoring removed orlov option [ 141.944019][ T7344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.050608][ T7362] loop4: detected capacity change from 0 to 1024 [ 142.063910][ T7362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.571660][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.710051][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.780813][ T7373] loop4: detected capacity change from 0 to 2048 [ 142.872130][ T7373] loop4: p1 < > p4 [ 142.878330][ T7373] loop4: p4 size 8388608 extends beyond EOD, truncated [ 142.989311][ T7378] loop4: detected capacity change from 0 to 1024 [ 143.001714][ T7378] EXT4-fs: Ignoring removed orlov option [ 143.023393][ T7371] loop1: detected capacity change from 0 to 8192 [ 143.052231][ T7378] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.081978][ T7371] loop1: p1 p2 p3 [ 143.202748][ T7381] loop1: detected capacity change from 0 to 256 [ 143.209463][ T7381] vfat: Unknown parameter 'Ž)΅Ζ՝š©ρ"' [ 143.468233][ T7390] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 143.505299][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.604285][ T7399] loop1: detected capacity change from 0 to 512 [ 143.643331][ T7399] EXT4-fs (loop1): 1 orphan inode deleted [ 143.649622][ T7399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.665882][ T3448] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 143.683328][ T7399] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.710864][ T7404] loop4: detected capacity change from 0 to 2048 [ 143.781633][ T7404] loop4: p1 < > p4 [ 143.786147][ T7404] loop4: p4 size 8388608 extends beyond EOD, truncated [ 143.991385][ T7421] loop2: detected capacity change from 0 to 1024 [ 144.010779][ T7421] EXT4-fs: Ignoring removed orlov option [ 144.062456][ T7421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.081395][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 144.378328][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.418799][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.616604][ T7450] FAULT_INJECTION: forcing a failure. [ 145.616604][ T7450] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.629986][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.4.1271 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 145.630023][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.630040][ T7450] Call Trace: [ 145.630048][ T7450] [ 145.630055][ T7450] __dump_stack+0x1d/0x30 [ 145.630077][ T7450] dump_stack_lvl+0xe8/0x140 [ 145.630149][ T7450] dump_stack+0x15/0x1b [ 145.630171][ T7450] should_fail_ex+0x265/0x280 [ 145.630254][ T7450] should_fail_alloc_page+0xf2/0x100 [ 145.630286][ T7450] __alloc_frozen_pages_noprof+0xff/0x360 [ 145.630345][ T7450] alloc_pages_mpol+0xb3/0x250 [ 145.630387][ T7450] vma_alloc_folio_noprof+0x1aa/0x300 [ 145.630450][ T7450] do_wp_page+0x673/0x2400 [ 145.630480][ T7450] ? __rcu_read_lock+0x37/0x50 [ 145.630513][ T7450] handle_mm_fault+0x77d/0x2be0 [ 145.630566][ T7450] ? mas_walk+0xf2/0x120 [ 145.630633][ T7450] do_user_addr_fault+0x636/0x1090 [ 145.630671][ T7450] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 145.630706][ T7450] exc_page_fault+0x62/0xa0 [ 145.630808][ T7450] asm_exc_page_fault+0x26/0x30 [ 145.630840][ T7450] RIP: 0033:0x7f497f4f0d50 [ 145.630857][ T7450] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 145.630944][ T7450] RSP: 002b:00007f497dc754a0 EFLAGS: 00010202 [ 145.630960][ T7450] RAX: 0000000000006005 RBX: 00007f497dc75540 RCX: 0000000000000101 [ 145.631020][ T7450] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f497dc755e0 [ 145.631036][ T7450] RBP: 0000000000000102 R08: 00007f4975856000 R09: 0000000000000004 [ 145.631052][ T7450] R10: 0000200000000582 R11: 0000000000000436 R12: 0000000000000301 [ 145.631064][ T7450] R13: 00007f497f6cc120 R14: 0000000000000013 R15: 00007f497dc755e0 [ 145.631084][ T7450] [ 145.631095][ T7450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 145.888295][ T7450] loop4: detected capacity change from 0 to 512 [ 145.895451][ T7450] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.013079][ T7450] EXT4-fs (loop4): 1 truncate cleaned up [ 146.020107][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.074821][ T7462] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.116578][ T7464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.220410][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 146.220496][ T29] audit: type=1400 audit(2000000008.500:2286): avc: denied { setopt } for pid=7455 comm="syz.2.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 146.225885][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.258828][ T7464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.287890][ T7472] loop4: detected capacity change from 0 to 1024 [ 146.296594][ T7472] EXT4-fs: Ignoring removed orlov option [ 146.404924][ T7472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.475466][ T7464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.555502][ T7464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.712181][ T7464] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.734463][ T7464] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.750685][ T7464] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.773957][ T7464] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.782424][ T7486] loop2: detected capacity change from 0 to 8192 [ 146.821096][ T7488] loop3: detected capacity change from 0 to 2048 [ 146.831931][ T7486] loop2: p1 p2 p3 [ 146.842704][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.861620][ T7488] loop3: p1 < > p4 [ 146.866573][ T7488] loop3: p4 size 8388608 extends beyond EOD, truncated [ 146.874979][ T29] audit: type=1400 audit(2000000009.160:2287): avc: denied { create } for pid=7489 comm="syz.4.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 146.919523][ T29] audit: type=1400 audit(2000000009.180:2288): avc: denied { write } for pid=7489 comm="syz.4.1288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 147.056168][ T29] audit: type=1400 audit(2000000009.340:2289): avc: denied { relabelfrom } for pid=7498 comm="syz.0.1292" name="" dev="pipefs" ino=17457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 147.089797][ T29] audit: type=1400 audit(2000000009.370:2290): avc: denied { audit_read } for pid=7501 comm="syz.1.1293" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.265474][ T7510] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 147.590808][ T29] audit: type=1400 audit(2000000009.490:2291): avc: denied { name_bind } for pid=7502 comm="syz.2.1294" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 147.612617][ T29] audit: type=1400 audit(2000000009.560:2292): avc: denied { relabelto } for pid=7502 comm="syz.2.1294" name="250" dev="tmpfs" ino=1445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 147.638747][ T29] audit: type=1400 audit(2000000009.560:2293): avc: denied { associate } for pid=7502 comm="syz.2.1294" name="250" dev="tmpfs" ino=1445 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 147.670712][ T29] audit: type=1400 audit(2000000009.960:2294): avc: denied { create } for pid=7516 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.728561][ T7519] loop1: detected capacity change from 0 to 1024 [ 147.737628][ T7521] loop3: detected capacity change from 0 to 1024 [ 147.746810][ T7521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.755755][ T7519] EXT4-fs: Ignoring removed orlov option [ 147.763421][ T29] audit: type=1400 audit(2000000010.040:2295): avc: denied { create } for pid=7516 comm="syz.2.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.857694][ T7519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.858803][ T7521] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 147.904851][ T7521] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.940848][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 147.949937][ T7525] loop4: detected capacity change from 0 to 8192 [ 147.956699][ T7521] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.965061][ T7521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.971840][ T7521] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1298: Inode bitmap for bg 0 marked uninitialized [ 147.984848][ T7521] EXT4-fs (loop3): Remounting filesystem read-only [ 147.991986][ T7525] loop4: p1 p2 p3 [ 148.040657][ T7521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.059971][ T7528] loop2: detected capacity change from 0 to 1024 [ 148.111931][ T7528] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 148.146659][ T7528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 148.160345][ T7542] tmpfs: Bad value for 'mpol' [ 148.165671][ T7528] System zones: 0-1, 3-36 [ 148.174703][ T7528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.194593][ T7521] xt_hashlimit: max too large, truncated to 1048576 [ 148.205570][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.215054][ T7528] EXT4-fs (loop2): 1 orphan inode deleted [ 148.235847][ T7528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.274968][ T7521] netlink: 8 bytes leftover after parsing attributes in process `£ύΊΚHA?ŠΞœN'. [ 148.355542][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.367127][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.398319][ T7551] loop4: detected capacity change from 0 to 2048 [ 148.472690][ T7551] loop4: p1 < > p4 [ 148.501504][ T7551] loop4: p4 size 8388608 extends beyond EOD, truncated [ 148.591462][ T7560] loop3: detected capacity change from 0 to 1024 [ 148.598573][ T7560] EXT4-fs: Ignoring removed nobh option [ 148.604518][ T7560] journal_path: Lookup failure for './file0' [ 148.610565][ T7560] EXT4-fs: error: could not find journal device path [ 148.731797][ T7564] loop2: detected capacity change from 0 to 512 [ 148.794693][ T7565] netlink: 'syz.4.1311': attribute type 1 has an invalid length. [ 148.805364][ T7564] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.872699][ T7564] EXT4-fs (loop2): 1 truncate cleaned up [ 148.934359][ T7564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.328229][ T7591] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1321'. [ 149.350908][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.495270][ T7598] loop2: detected capacity change from 0 to 2048 [ 149.551641][ T7598] loop2: p1 < > p4 [ 149.556266][ T7598] loop2: p4 size 8388608 extends beyond EOD, truncated [ 149.603754][ T7596] syz.4.1324 (7596) used greatest stack depth: 8896 bytes left [ 149.685048][ T7607] loop1: detected capacity change from 0 to 1024 [ 149.742961][ T7607] EXT4-fs: Ignoring removed orlov option [ 149.808207][ T7607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.013759][ T7614] loop3: detected capacity change from 0 to 8192 [ 150.190992][ T3311] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 150.199062][ T3311] FAT-fs (loop3): Filesystem has been set read-only [ 150.656045][ T7637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.704937][ T10] Process accounting resumed [ 150.717874][ T7641] FAULT_INJECTION: forcing a failure. [ 150.717874][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.731069][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.4.1338 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 150.731170][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.731186][ T7641] Call Trace: [ 150.731194][ T7641] [ 150.731204][ T7641] __dump_stack+0x1d/0x30 [ 150.731226][ T7641] dump_stack_lvl+0xe8/0x140 [ 150.731274][ T7641] dump_stack+0x15/0x1b [ 150.731291][ T7641] should_fail_ex+0x265/0x280 [ 150.731365][ T7641] should_fail+0xb/0x20 [ 150.731394][ T7641] should_fail_usercopy+0x1a/0x20 [ 150.731503][ T7641] _copy_to_user+0x20/0xa0 [ 150.731530][ T7641] simple_read_from_buffer+0xb5/0x130 [ 150.731565][ T7641] proc_fail_nth_read+0x100/0x140 [ 150.731586][ T7641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.731639][ T7641] vfs_read+0x1a0/0x6f0 [ 150.731672][ T7641] ? __rcu_read_unlock+0x4f/0x70 [ 150.731726][ T7641] ? __fget_files+0x184/0x1c0 [ 150.731750][ T7641] ksys_read+0xda/0x1a0 [ 150.731830][ T7641] __x64_sys_read+0x40/0x50 [ 150.731864][ T7641] x64_sys_call+0x2d77/0x2fb0 [ 150.731887][ T7641] do_syscall_64+0xd2/0x200 [ 150.731906][ T7641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.731976][ T7641] ? clear_bhb_loop+0x40/0x90 [ 150.731998][ T7641] ? clear_bhb_loop+0x40/0x90 [ 150.732021][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.732084][ T7641] RIP: 0033:0x7f497f62d33c [ 150.732100][ T7641] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.732119][ T7641] RSP: 002b:00007f497dc97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.732142][ T7641] RAX: ffffffffffffffda RBX: 00007f497f855fa0 RCX: 00007f497f62d33c [ 150.732193][ T7641] RDX: 000000000000000f RSI: 00007f497dc970a0 RDI: 0000000000000007 [ 150.732206][ T7641] RBP: 00007f497dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 150.732219][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.732233][ T7641] R13: 0000000000000000 R14: 00007f497f855fa0 R15: 00007ffdd69193f8 [ 150.732254][ T7641] [ 151.030465][ T7654] loop2: detected capacity change from 0 to 1024 [ 151.044914][ T7654] EXT4-fs: Ignoring removed orlov option [ 151.246862][ T7663] loop1: detected capacity change from 0 to 2048 [ 151.302301][ T7663] loop1: p1 < > p4 [ 151.310091][ T7663] loop1: p4 size 8388608 extends beyond EOD, truncated [ 151.409739][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 151.409756][ T29] audit: type=1326 audit(2000000013.690:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.472134][ T29] audit: type=1326 audit(2000000013.730:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.495644][ T29] audit: type=1326 audit(2000000013.730:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.519148][ T29] audit: type=1326 audit(2000000013.730:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.542671][ T29] audit: type=1326 audit(2000000013.730:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.566171][ T29] audit: type=1326 audit(2000000013.730:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.590205][ T29] audit: type=1326 audit(2000000013.730:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.613895][ T29] audit: type=1326 audit(2000000013.730:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.637482][ T29] audit: type=1326 audit(2000000013.730:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.660916][ T29] audit: type=1326 audit(2000000013.730:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7664 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d374ce929 code=0x7ffc0000 [ 151.706259][ T3448] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.753452][ T3448] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.768837][ T7670] FAULT_INJECTION: forcing a failure. [ 151.768837][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 151.781581][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.2.1348 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 151.781678][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.781695][ T7670] Call Trace: [ 151.781703][ T7670] [ 151.781713][ T7670] __dump_stack+0x1d/0x30 [ 151.781874][ T7670] dump_stack_lvl+0xe8/0x140 [ 151.781897][ T7670] dump_stack+0x15/0x1b [ 151.781913][ T7670] should_fail_ex+0x265/0x280 [ 151.781948][ T7670] should_failslab+0x8c/0xb0 [ 151.782057][ T7670] __kvmalloc_node_noprof+0x123/0x4e0 [ 151.782090][ T7670] ? io_alloc_cache_init+0x31/0xa0 [ 151.782120][ T7670] io_alloc_cache_init+0x31/0xa0 [ 151.782250][ T7670] io_ring_ctx_alloc+0x2b7/0x6a0 [ 151.782286][ T7670] io_uring_create+0x10f/0x610 [ 151.782319][ T7670] __se_sys_io_uring_setup+0x1f7/0x210 [ 151.782435][ T7670] __x64_sys_io_uring_setup+0x31/0x40 [ 151.782470][ T7670] x64_sys_call+0x184b/0x2fb0 [ 151.782498][ T7670] do_syscall_64+0xd2/0x200 [ 151.782522][ T7670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 151.782613][ T7670] ? clear_bhb_loop+0x40/0x90 [ 151.782641][ T7670] ? clear_bhb_loop+0x40/0x90 [ 151.782670][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.782698][ T7670] RIP: 0033:0x7f27f3e2e929 [ 151.782715][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.782775][ T7670] RSP: 002b:00007f27f2496fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 151.782799][ T7670] RAX: ffffffffffffffda RBX: 00007f27f4055fa0 RCX: 00007f27f3e2e929 [ 151.782815][ T7670] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 00000000000024fe [ 151.782831][ T7670] RBP: 0000200000000300 R08: 0000000000000000 R09: 0000000000000000 [ 151.782906][ T7670] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 151.782922][ T7670] R13: 0000000000000000 R14: 00000000000024fe R15: 0000000000000000 [ 151.782947][ T7670] [ 152.042706][ T3448] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.078387][ T7679] loop2: detected capacity change from 0 to 128 [ 152.090700][ T3448] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.174737][ T7672] lo speed is unknown, defaulting to 1000 [ 152.336128][ T3448] bridge_slave_1: left allmulticast mode [ 152.341975][ T3448] bridge_slave_1: left promiscuous mode [ 152.347684][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.356226][ T3448] bridge_slave_0: left allmulticast mode [ 152.361946][ T3448] bridge_slave_0: left promiscuous mode [ 152.367681][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.384761][ T3448] bond_slave_0: left promiscuous mode [ 152.390263][ T3448] bond_slave_1: left promiscuous mode [ 152.410398][ T3317] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 152.419202][ T3317] FAT-fs (loop2): Filesystem has been set read-only [ 152.636376][ T7701] loop1: detected capacity change from 0 to 2048 [ 152.665387][ T3448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.681964][ T7701] loop1: p1 < > p4 [ 152.687323][ T7701] loop1: p4 size 8388608 extends beyond EOD, truncated [ 152.699930][ T3448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.709981][ T3448] bond0 (unregistering): Released all slaves [ 152.722276][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 152.815426][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.823121][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.833143][ T3448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.840642][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.848070][ T7709] loop1: detected capacity change from 0 to 1024 [ 152.855377][ T7709] EXT4-fs: Ignoring removed bh option [ 152.861266][ T3448] veth1_macvtap: left promiscuous mode [ 152.867292][ T3448] veth1_vlan: left promiscuous mode [ 152.872815][ T3448] veth0_vlan: left promiscuous mode [ 152.984281][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.991878][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.011061][ T7672] bridge_slave_0: entered allmulticast mode [ 153.024719][ T7672] bridge_slave_0: entered promiscuous mode [ 153.033331][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.040443][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.047872][ T7672] bridge_slave_1: entered allmulticast mode [ 153.054475][ T7672] bridge_slave_1: entered promiscuous mode [ 153.092360][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.113733][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.159116][ T7672] team0: Port device team_slave_0 added [ 153.172704][ T7672] team0: Port device team_slave_1 added [ 153.182609][ T7724] loop4: detected capacity change from 0 to 8192 [ 153.208737][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.215769][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.242590][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.273552][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.280573][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.306695][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.320895][ T7724] loop4: p1 p2 p3 [ 153.357161][ T7710] lo speed is unknown, defaulting to 1000 [ 153.440542][ T7672] hsr_slave_0: entered promiscuous mode [ 153.472202][ T7672] hsr_slave_1: entered promiscuous mode [ 153.494159][ T7672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.505608][ T7672] Cannot create hsr debugfs directory [ 153.619626][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 153.672752][ T7672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 153.681572][ T7672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 153.690458][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.697620][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.704981][ T7710] bridge_slave_0: entered allmulticast mode [ 153.711671][ T7710] bridge_slave_0: entered promiscuous mode [ 153.718534][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.725675][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.733078][ T7710] bridge_slave_1: entered allmulticast mode [ 153.739669][ T7710] bridge_slave_1: entered promiscuous mode [ 153.746106][ T7672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.760132][ T7747] loop4: detected capacity change from 0 to 2048 [ 153.783666][ T7672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.796115][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.809263][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.820464][ T7747] loop4: p1 < > p4 [ 153.825396][ T7747] loop4: p4 size 8388608 extends beyond EOD, truncated [ 153.845986][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1370'. [ 153.864364][ T7710] team0: Port device team_slave_0 added [ 153.881940][ T7710] team0: Port device team_slave_1 added [ 153.911106][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.918832][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.945010][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.000007][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.007197][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.033320][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.066362][ T7761] loop4: detected capacity change from 0 to 1024 [ 154.098186][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.150592][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.220507][ T7710] hsr_slave_0: entered promiscuous mode [ 154.226760][ T7710] hsr_slave_1: entered promiscuous mode [ 154.232850][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.240522][ T7710] Cannot create hsr debugfs directory [ 154.247991][ T3448] bridge_slave_1: left allmulticast mode [ 154.253699][ T3448] bridge_slave_1: left promiscuous mode [ 154.259385][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.272055][ T3448] bridge_slave_0: left allmulticast mode [ 154.277799][ T3448] bridge_slave_0: left promiscuous mode [ 154.283531][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.374413][ T3448] νΔ (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.383828][ T3448] νΔ (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.403525][ T3448] νΔ (unregistering): Released all slaves [ 154.430726][ T7672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.441246][ T7672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.483424][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.490566][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.499596][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.506845][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.574822][ T3448] hsr_slave_0: left promiscuous mode [ 154.583810][ T7759] FAULT_INJECTION: forcing a failure. [ 154.583810][ T7759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.588797][ T3448] hsr_slave_1: left promiscuous mode [ 154.597076][ T7759] CPU: 1 UID: 0 PID: 7759 Comm: syz.1.1372 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 154.597119][ T7759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.597139][ T7759] Call Trace: [ 154.597169][ T7759] [ 154.597179][ T7759] __dump_stack+0x1d/0x30 [ 154.597219][ T7759] dump_stack_lvl+0xe8/0x140 [ 154.597262][ T7759] dump_stack+0x15/0x1b [ 154.597285][ T7759] should_fail_ex+0x265/0x280 [ 154.597330][ T7759] should_fail+0xb/0x20 [ 154.597428][ T7759] should_fail_usercopy+0x1a/0x20 [ 154.597483][ T7759] _copy_from_user+0x1c/0xb0 [ 154.597514][ T7759] ___sys_sendmsg+0xc1/0x1d0 [ 154.597583][ T7759] __x64_sys_sendmsg+0xd4/0x160 [ 154.597669][ T7759] x64_sys_call+0x2999/0x2fb0 [ 154.597700][ T7759] do_syscall_64+0xd2/0x200 [ 154.597771][ T7759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.597810][ T7759] ? clear_bhb_loop+0x40/0x90 [ 154.597839][ T7759] ? clear_bhb_loop+0x40/0x90 [ 154.597883][ T7759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.597913][ T7759] RIP: 0033:0x7f3d374ce929 [ 154.597936][ T7759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.597962][ T7759] RSP: 002b:00007f3d35b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.597991][ T7759] RAX: ffffffffffffffda RBX: 00007f3d376f5fa0 RCX: 00007f3d374ce929 [ 154.598016][ T7759] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000e [ 154.598033][ T7759] RBP: 00007f3d35b37090 R08: 0000000000000000 R09: 0000000000000000 [ 154.598051][ T7759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.598067][ T7759] R13: 0000000000000000 R14: 00007f3d376f5fa0 R15: 00007ffe73dfcac8 [ 154.598096][ T7759] [ 154.781071][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.791701][ T3448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.993352][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.021384][ T7710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.041378][ T7710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.070021][ T7710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.101583][ T7710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.256240][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.294454][ T7672] veth0_vlan: entered promiscuous mode [ 155.303572][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.315499][ T7672] veth1_vlan: entered promiscuous mode [ 155.342823][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.349993][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.363295][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.370439][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.389428][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.407428][ T7672] veth0_macvtap: entered promiscuous mode [ 155.416829][ T7672] veth1_macvtap: entered promiscuous mode [ 155.435020][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.483447][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.500067][ T7672] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.508943][ T7672] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.514928][ T7805] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1376' sets config #1186 [ 155.517951][ T7672] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.536034][ T7672] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.565610][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.701427][ T7810] wireguard0: entered promiscuous mode [ 155.803324][ T7710] veth0_vlan: entered promiscuous mode [ 155.815483][ T7710] veth1_vlan: entered promiscuous mode [ 155.835806][ T7710] veth0_macvtap: entered promiscuous mode [ 155.846444][ T7710] veth1_macvtap: entered promiscuous mode [ 155.868379][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.892777][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.905613][ T7710] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.914433][ T7710] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.923274][ T7710] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.932246][ T7710] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.043508][ T7836] loop1: detected capacity change from 0 to 2048 [ 156.112019][ T7836] loop1: p1 < > p4 [ 156.116125][ T7841] 9pnet: Could not find request transport: fd0x0000000000000006 [ 156.124625][ T7836] loop1: p4 size 8388608 extends beyond EOD, truncated [ 156.236059][ T7850] netlink: 'syz.6.1386': attribute type 29 has an invalid length. [ 156.244519][ T7850] netlink: 'syz.6.1386': attribute type 29 has an invalid length. [ 156.253116][ T7850] netlink: 500 bytes leftover after parsing attributes in process `syz.6.1386'. [ 156.318140][ T7856] loop1: detected capacity change from 0 to 512 [ 156.327260][ T7856] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.387010][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'. [ 156.388591][ T7856] EXT4-fs (loop1): 1 truncate cleaned up [ 156.395928][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1386'. [ 156.452584][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 156.452599][ T29] audit: type=1400 audit(2000000018.740:2678): avc: denied { create } for pid=7863 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.456895][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'. [ 156.458890][ T29] audit: type=1400 audit(2000000018.740:2679): avc: denied { bind } for pid=7863 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.506753][ T29] audit: type=1400 audit(2000000018.740:2680): avc: denied { write } for pid=7863 comm="syz.1.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.626329][ T7871] loop1: detected capacity change from 0 to 1024 [ 156.649127][ T7871] EXT4-fs: Ignoring removed orlov option [ 156.706162][ T7876] 9pnet: Could not find request transport: fd0x0000000000000006 [ 156.743800][ T7882] loop5: detected capacity change from 0 to 2048 [ 156.782055][ T7882] loop5: p1 < > p4 [ 156.786512][ T7882] loop5: p4 size 8388608 extends beyond EOD, truncated [ 156.889707][ T7892] loop5: detected capacity change from 0 to 512 [ 156.897967][ T7892] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 156.910074][ T29] audit: type=1400 audit(2000000019.200:2681): avc: denied { append } for pid=7885 comm="syz.0.1398" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 156.912246][ T7892] EXT4-fs (loop5): 1 truncate cleaned up [ 156.953684][ T29] audit: type=1400 audit(2000000019.230:2682): avc: denied { shutdown } for pid=7885 comm="syz.0.1398" lport=55436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.954464][ T7890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1399'. [ 156.974509][ T29] audit: type=1400 audit(2000000019.230:2683): avc: denied { getopt } for pid=7885 comm="syz.0.1398" lport=55436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 157.004365][ T7890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1399'. [ 157.026236][ T7890] loop1: detected capacity change from 0 to 512 [ 157.038689][ T7897] loop6: detected capacity change from 0 to 1024 [ 157.047541][ T7897] EXT4-fs: Ignoring removed orlov option [ 157.056160][ T7890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.068968][ T7890] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 157.082024][ T29] audit: type=1400 audit(2000000019.370:2684): avc: denied { setcheckreqprot } for pid=7889 comm="syz.1.1399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 157.109776][ T7890] loop1: detected capacity change from 0 to 512 [ 157.116726][ T7890] EXT4-fs: Invalid want_extra_isize 1144140397 [ 157.125315][ T7890] loop1: detected capacity change from 0 to 128 [ 157.149950][ T7904] loop6: detected capacity change from 0 to 256 [ 157.151409][ T29] audit: type=1400 audit(2000000019.430:2685): avc: denied { accept } for pid=7903 comm="syz.6.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 157.224051][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 157.272348][ T7912] loop1: detected capacity change from 0 to 8192 [ 157.296556][ T7919] loop4: detected capacity change from 0 to 2048 [ 157.321484][ T7912] loop1: p1 p2 p3 [ 157.335522][ T7919] loop4: p1 < > p4 [ 157.345432][ T7919] loop4: p4 size 8388608 extends beyond EOD, truncated [ 157.359099][ T7924] loop6: detected capacity change from 0 to 1024 [ 157.372633][ T7924] EXT4-fs: Ignoring removed orlov option [ 157.416175][ T7929] loop1: detected capacity change from 0 to 512 [ 157.426962][ T7929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.620714][ T7929] EXT4-fs (loop1): 1 truncate cleaned up [ 157.746111][ T7936] loop4: detected capacity change from 0 to 1024 [ 157.774485][ T7936] EXT4-fs: Ignoring removed orlov option [ 157.809929][ T7939] FAULT_INJECTION: forcing a failure. [ 157.809929][ T7939] name failslab, interval 1, probability 0, space 0, times 0 [ 157.822765][ T7939] CPU: 0 UID: 0 PID: 7939 Comm: syz.1.1415 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 157.822797][ T7939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.822811][ T7939] Call Trace: [ 157.822818][ T7939] [ 157.822826][ T7939] __dump_stack+0x1d/0x30 [ 157.822847][ T7939] dump_stack_lvl+0xe8/0x140 [ 157.822950][ T7939] dump_stack+0x15/0x1b [ 157.822971][ T7939] should_fail_ex+0x265/0x280 [ 157.823012][ T7939] should_failslab+0x8c/0xb0 [ 157.823090][ T7939] kmem_cache_alloc_node_noprof+0x57/0x320 [ 157.823202][ T7939] ? __alloc_skb+0x101/0x320 [ 157.823243][ T7939] __alloc_skb+0x101/0x320 [ 157.823281][ T7939] tcp_stream_alloc_skb+0x2d/0x1d0 [ 157.823390][ T7939] tcp_sendmsg_locked+0x12f0/0x2cc0 [ 157.823446][ T7939] ? __pfx_tcp_sendmsg+0x10/0x10 [ 157.823480][ T7939] tcp_sendmsg+0x2f/0x50 [ 157.823586][ T7939] inet_sendmsg+0x76/0xd0 [ 157.823609][ T7939] __sock_sendmsg+0x102/0x180 [ 157.823649][ T7939] __sys_sendto+0x268/0x330 [ 157.823699][ T7939] __x64_sys_sendto+0x76/0x90 [ 157.823771][ T7939] x64_sys_call+0x2eb6/0x2fb0 [ 157.823829][ T7939] do_syscall_64+0xd2/0x200 [ 157.823886][ T7939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.823984][ T7939] ? clear_bhb_loop+0x40/0x90 [ 157.824004][ T7939] ? clear_bhb_loop+0x40/0x90 [ 157.824125][ T7939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.824162][ T7939] RIP: 0033:0x7f3d374ce929 [ 157.824180][ T7939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.824275][ T7939] RSP: 002b:00007f3d35b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.824296][ T7939] RAX: ffffffffffffffda RBX: 00007f3d376f5fa0 RCX: 00007f3d374ce929 [ 157.824382][ T7939] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.824452][ T7939] RBP: 00007f3d35b37090 R08: 0000000000000000 R09: 0000000000000000 [ 157.824468][ T7939] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.824485][ T7939] R13: 0000000000000000 R14: 00007f3d376f5fa0 R15: 00007ffe73dfcac8 [ 157.824510][ T7939] [ 158.145488][ T7944] loop6: detected capacity change from 0 to 4096 [ 158.192909][ T29] audit: type=1400 audit(2000000020.470:2686): avc: denied { read } for pid=7940 comm="syz.6.1416" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 158.236794][ T29] audit: type=1400 audit(2000000020.480:2687): avc: denied { create } for pid=7940 comm="syz.6.1416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 158.314862][ T7954] 9pnet_fd: Insufficient options for proto=fd [ 158.435215][ T7970] loop5: detected capacity change from 0 to 512 [ 158.442303][ T7970] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.455456][ T7970] EXT4-fs (loop5): 1 truncate cleaned up [ 158.516543][ T7974] loop5: detected capacity change from 0 to 2048 [ 158.541693][ T7974] loop5: p1 < > p4 [ 158.546234][ T7974] loop5: p4 size 8388608 extends beyond EOD, truncated [ 158.602884][ T7976] loop5: detected capacity change from 0 to 1024 [ 158.609703][ T7976] EXT4-fs: Ignoring removed orlov option [ 158.669650][ T7979] loop1: detected capacity change from 0 to 1024 [ 158.676416][ T7979] EXT4-fs: Ignoring removed orlov option [ 158.908093][ T7987] 9pnet_fd: Insufficient options for proto=fd [ 158.999771][ T7996] netlink: 'syz.5.1435': attribute type 64 has an invalid length. [ 159.040581][ T7998] loop5: detected capacity change from 0 to 512 [ 159.059543][ T7998] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 159.081853][ T7998] EXT4-fs (loop5): 1 truncate cleaned up [ 159.184669][ T8005] loop4: detected capacity change from 0 to 2048 [ 159.225478][ T8007] loop5: detected capacity change from 0 to 1024 [ 159.242516][ T8005] loop4: p1 < > p4 [ 159.248041][ T8007] EXT4-fs: Ignoring removed orlov option [ 159.257249][ T8005] loop4: p4 size 8388608 extends beyond EOD, truncated [ 159.394300][ T8012] loop6: detected capacity change from 0 to 1024 [ 159.401249][ T8012] EXT4-fs: Ignoring removed orlov option [ 159.446150][ T8016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=8016 comm=syz.5.1440 [ 159.482918][ T8018] 9pnet_fd: Insufficient options for proto=fd [ 159.663892][ T8021] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.692343][ T8023] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1443'. [ 159.720619][ T8030] FAULT_INJECTION: forcing a failure. [ 159.720619][ T8030] name failslab, interval 1, probability 0, space 0, times 0 [ 159.733652][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.5.1448 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 159.733680][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.733695][ T8030] Call Trace: [ 159.733702][ T8030] [ 159.733711][ T8030] __dump_stack+0x1d/0x30 [ 159.733738][ T8030] dump_stack_lvl+0xe8/0x140 [ 159.733762][ T8030] dump_stack+0x15/0x1b [ 159.733783][ T8030] should_fail_ex+0x265/0x280 [ 159.733818][ T8030] should_failslab+0x8c/0xb0 [ 159.733841][ T8030] kmem_cache_alloc_noprof+0x50/0x310 [ 159.733868][ T8030] ? mas_alloc_nodes+0x265/0x520 [ 159.733894][ T8030] mas_alloc_nodes+0x265/0x520 [ 159.733920][ T8030] mas_preallocate+0x32b/0x510 [ 159.733967][ T8030] __split_vma+0x240/0x650 [ 159.734001][ T8030] ? should_fail_ex+0x30/0x280 [ 159.734038][ T8030] vms_gather_munmap_vmas+0x172/0x7a0 [ 159.734064][ T8030] ? mas_find+0x515/0x610 [ 159.734087][ T8030] mmap_region+0x4ce/0x1580 [ 159.734120][ T8030] ? sidtab_context_to_sid+0x5d/0x5e0 [ 159.734149][ T8030] ? mls_compute_sid+0x139/0x560 [ 159.734187][ T8030] ? mls_context_isvalid+0x85/0x1f0 [ 159.734252][ T8030] do_mmap+0x9b3/0xbe0 [ 159.734289][ T8030] vm_mmap_pgoff+0x17a/0x2e0 [ 159.734328][ T8030] ksys_mmap_pgoff+0x2d0/0x310 [ 159.734372][ T8030] x64_sys_call+0x1602/0x2fb0 [ 159.734399][ T8030] do_syscall_64+0xd2/0x200 [ 159.734419][ T8030] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.734445][ T8030] ? clear_bhb_loop+0x40/0x90 [ 159.734470][ T8030] ? clear_bhb_loop+0x40/0x90 [ 159.734499][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.734546][ T8030] RIP: 0033:0x7fb2445ee929 [ 159.734565][ T8030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.734586][ T8030] RSP: 002b:00007fb242c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.734605][ T8030] RAX: ffffffffffffffda RBX: 00007fb244815fa0 RCX: 00007fb2445ee929 [ 159.734617][ T8030] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 159.734630][ T8030] RBP: 00007fb242c57090 R08: ffffffffffffffff R09: 0000000000000000 [ 159.734645][ T8030] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 159.734660][ T8030] R13: 0000000000000001 R14: 00007fb244815fa0 R15: 00007ffde3f36048 [ 159.734685][ T8030] [ 160.009002][ T8034] loop5: detected capacity change from 0 to 512 [ 160.016293][ T8034] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 160.035628][ T8034] EXT4-fs (loop5): 1 truncate cleaned up [ 160.118240][ T8044] loop4: detected capacity change from 0 to 1024 [ 160.141822][ T8044] EXT4-fs: Ignoring removed orlov option [ 160.147987][ T8044] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 160.170313][ T8044] FAULT_INJECTION: forcing a failure. [ 160.170313][ T8044] name failslab, interval 1, probability 0, space 0, times 0 [ 160.183031][ T8044] CPU: 1 UID: 0 PID: 8044 Comm: syz.4.1454 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 160.183088][ T8044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.183103][ T8044] Call Trace: [ 160.183110][ T8044] [ 160.183186][ T8044] __dump_stack+0x1d/0x30 [ 160.183212][ T8044] dump_stack_lvl+0xe8/0x140 [ 160.183237][ T8044] dump_stack+0x15/0x1b [ 160.183259][ T8044] should_fail_ex+0x265/0x280 [ 160.183300][ T8044] should_failslab+0x8c/0xb0 [ 160.183377][ T8044] kmem_cache_alloc_noprof+0x50/0x310 [ 160.183545][ T8044] ? ext4_mb_new_blocks+0x2ce/0x2050 [ 160.183569][ T8044] ? __mark_inode_dirty+0x43c/0x760 [ 160.183593][ T8044] ext4_mb_new_blocks+0x2ce/0x2050 [ 160.183621][ T8044] ? iput+0x1ca/0x5b0 [ 160.183643][ T8044] ? __rcu_read_unlock+0x34/0x70 [ 160.183717][ T8044] ext4_new_meta_blocks+0xc3/0x1b0 [ 160.183751][ T8044] ext4_xattr_block_set+0x10ff/0x1a30 [ 160.183775][ T8044] ? errseq_check+0x2c/0x50 [ 160.183827][ T8044] ext4_xattr_set_handle+0xa4f/0xe70 [ 160.183882][ T8044] ext4_initxattrs+0x62/0xc0 [ 160.183911][ T8044] security_inode_init_security+0x25c/0x330 [ 160.183944][ T8044] ? __pfx_ext4_initxattrs+0x10/0x10 [ 160.184050][ T8044] ext4_init_security+0x34/0x50 [ 160.184080][ T8044] __ext4_new_inode+0x20fb/0x22e0 [ 160.184187][ T8044] ext4_symlink+0x284/0x660 [ 160.184235][ T8044] vfs_symlink+0xd1/0x1e0 [ 160.184359][ T8044] do_symlinkat+0xc7/0x3c0 [ 160.184404][ T8044] __x64_sys_symlink+0x50/0x60 [ 160.184422][ T8044] x64_sys_call+0x2d8d/0x2fb0 [ 160.184443][ T8044] do_syscall_64+0xd2/0x200 [ 160.184543][ T8044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.184617][ T8044] ? clear_bhb_loop+0x40/0x90 [ 160.184638][ T8044] ? clear_bhb_loop+0x40/0x90 [ 160.184660][ T8044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.184687][ T8044] RIP: 0033:0x7f497f62e929 [ 160.184706][ T8044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.184780][ T8044] RSP: 002b:00007f497dc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 160.184810][ T8044] RAX: ffffffffffffffda RBX: 00007f497f855fa0 RCX: 00007f497f62e929 [ 160.184824][ T8044] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000200000000340 [ 160.184892][ T8044] RBP: 00007f497dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 160.184908][ T8044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.184923][ T8044] R13: 0000000000000000 R14: 00007f497f855fa0 R15: 00007ffdd69193f8 [ 160.184953][ T8044] [ 160.469618][ T8051] lo speed is unknown, defaulting to 1000 [ 160.486949][ T8044] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.1454: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 160.536500][ T8044] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.1454: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 160.959686][ T3307] EXT4-fs unmount: 38 callbacks suppressed [ 160.959703][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.012645][ T8058] 9pnet_fd: Insufficient options for proto=fd [ 161.038979][ T8067] loop6: detected capacity change from 0 to 1024 [ 161.048932][ T8067] EXT4-fs: Ignoring removed orlov option [ 161.051889][ T8067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.116332][ T8079] loop5: detected capacity change from 0 to 512 [ 161.121513][ T8079] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.127685][ T8079] EXT4-fs (loop5): 1 truncate cleaned up [ 161.128156][ T8079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.258461][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.294047][ T8085] loop5: detected capacity change from 0 to 512 [ 161.307114][ T8085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.327816][ T8085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.327931][ T8085] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.355374][ T8085] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 161.355439][ T8085] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 161.355494][ T8085] EXT4-fs (loop5): This should not happen!! Data will be lost [ 161.355494][ T8085] [ 161.355524][ T8085] EXT4-fs (loop5): Total free blocks count 0 [ 161.355540][ T8085] EXT4-fs (loop5): Free/Dirty block details [ 161.355555][ T8085] EXT4-fs (loop5): free_blocks=39626 [ 161.355570][ T8085] EXT4-fs (loop5): dirty_blocks=15 [ 161.355584][ T8085] EXT4-fs (loop5): Block reservation details [ 161.355595][ T8085] EXT4-fs (loop5): i_reserved_data_blocks=15 [ 161.421979][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.449507][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.611355][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 161.611443][ T29] audit: type=1400 audit(2000000023.900:2806): avc: denied { getopt } for pid=8091 comm="syz.5.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.614284][ T29] audit: type=1400 audit(2000000023.900:2807): avc: denied { mount } for pid=8091 comm="syz.5.1469" name="/" dev="configfs" ino=752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 161.906329][ T8101] loop6: detected capacity change from 0 to 1024 [ 161.906587][ T8101] EXT4-fs: Ignoring removed orlov option [ 161.970726][ T8101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.163932][ T8114] 9pnet_fd: Insufficient options for proto=fd [ 162.205505][ T8116] loop5: detected capacity change from 0 to 512 [ 162.213926][ T8116] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 162.238403][ T8118] loop1: detected capacity change from 0 to 1024 [ 162.240659][ T8116] EXT4-fs (loop5): 1 truncate cleaned up [ 162.251139][ T8116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.264974][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.283255][ T8118] EXT4-fs: Ignoring removed orlov option [ 162.295083][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.307361][ T8118] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.337115][ T29] audit: type=1400 audit(2000000024.620:2808): avc: denied { load_policy } for pid=8120 comm="syz.6.1478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.359133][ T8121] SELinux: failed to load policy [ 162.365029][ T8121] SELinux: syz.6.1478 (8121) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.383681][ T8118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.412148][ T8118] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1476: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 162.454933][ T8118] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.1476: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 162.455028][ T29] audit: type=1400 audit(2000000024.730:2809): avc: denied { validate_trans } for pid=8131 comm="syz.0.1482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 162.478450][ T8118] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.1476: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 162.520526][ T8138] loop4: detected capacity change from 0 to 512 [ 162.569008][ T8138] EXT4-fs (loop4): 1 orphan inode deleted [ 162.581416][ T3448] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.591277][ T3448] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 162.601629][ T8138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.624998][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.635376][ T8138] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.664882][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.699163][ T8156] loop4: detected capacity change from 0 to 512 [ 162.706670][ T8155] loop1: detected capacity change from 0 to 1024 [ 162.713846][ T8155] EXT4-fs: Ignoring removed orlov option [ 162.724989][ T8155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.740068][ T8156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.816695][ T8156] EXT4-fs (loop4): 1 truncate cleaned up [ 162.833714][ T8156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.959584][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.981493][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.024757][ T8167] Driver unsupported XDP return value 0 on prog (id 1162) dev N/A, expect packet loss! [ 163.083869][ T8170] loop4: detected capacity change from 0 to 512 [ 163.108200][ T8170] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 163.138009][ T8170] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e12c, mo2=0002] [ 163.146100][ T8170] System zones: 1-12 [ 163.150253][ T8170] EXT4-fs (loop4): orphan cleanup on readonly fs [ 163.158443][ T8170] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1493: bg 0: block 361: padding at end of block bitmap is not set [ 163.176000][ T8170] EXT4-fs (loop4): Remounting filesystem read-only [ 163.208677][ T8170] EXT4-fs (loop4): 1 truncate cleaned up [ 163.222203][ T8170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 163.243232][ T29] audit: type=1326 audit(2000000025.530:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497f62e929 code=0x7ffc0000 [ 163.271494][ T29] audit: type=1326 audit(2000000025.530:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497f62e929 code=0x7ffc0000 [ 163.294996][ T29] audit: type=1326 audit(2000000025.530:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497f62e929 code=0x7ffc0000 [ 163.318476][ T29] audit: type=1326 audit(2000000025.530:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f497f62e929 code=0x7ffc0000 [ 163.342024][ T29] audit: type=1326 audit(2000000025.530:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8166 comm="syz.4.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497f62e929 code=0x7ffc0000 [ 163.376100][ T8167] lo speed is unknown, defaulting to 1000 [ 163.579268][ T3307] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 163.760267][ T8187] loop5: detected capacity change from 0 to 1024 [ 163.771362][ T8187] EXT4-fs: Ignoring removed nobh option [ 163.776992][ T8187] EXT4-fs: Ignoring removed bh option [ 163.782550][ T8187] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.802763][ T8187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.912008][ T8193] lo speed is unknown, defaulting to 1000 [ 164.090947][ T8199] loop6: detected capacity change from 0 to 1024 [ 164.166222][ T8199] EXT4-fs: Ignoring removed orlov option [ 164.217135][ T8199] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.253814][ T8187] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1501: Allocating blocks 497-513 which overlap fs metadata [ 164.318147][ T8174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 164.320953][ T361] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.388639][ T361] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.407131][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.533313][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.546102][ T361] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.594920][ T361] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.651579][ T8206] lo speed is unknown, defaulting to 1000 [ 164.694171][ T8230] lo speed is unknown, defaulting to 1000 [ 164.704798][ T361] bridge_slave_1: left allmulticast mode [ 164.710526][ T361] bridge_slave_1: left promiscuous mode [ 164.716297][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.732680][ T10] kernel write not supported for file /780/net/rt_cache (pid: 10 comm: kworker/0:1) [ 164.748978][ T361] bridge_slave_0: left allmulticast mode [ 164.754790][ T361] bridge_slave_0: left promiscuous mode [ 164.760551][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.883562][ T361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.895079][ T361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.905130][ T361] bond0 (unregistering): Released all slaves [ 165.006299][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1513'. [ 165.019327][ T361] hsr_slave_0: left promiscuous mode [ 165.025787][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.033342][ T361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.040874][ T361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.048514][ T361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.058477][ T361] veth0_macvtap: left promiscuous mode [ 165.064169][ T361] veth1_vlan: left promiscuous mode [ 165.069428][ T361] veth0_vlan: left promiscuous mode [ 165.135477][ T12] smc: removing ib device syz! [ 165.227806][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 165.269294][ T8250] loop1: detected capacity change from 0 to 512 [ 165.276841][ T8250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 165.305077][ T8250] EXT4-fs (loop1): 1 truncate cleaned up [ 165.314884][ T8250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.349731][ T8257] loop5: detected capacity change from 0 to 1024 [ 165.358190][ T8257] EXT4-fs: Ignoring removed orlov option [ 165.366901][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.374142][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.384480][ T8257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.387466][ T8206] bridge_slave_0: entered allmulticast mode [ 165.405918][ T8206] bridge_slave_0: entered promiscuous mode [ 165.413970][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.421129][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.429945][ T8206] bridge_slave_1: entered allmulticast mode [ 165.436954][ T8206] bridge_slave_1: entered promiscuous mode [ 165.467080][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.497422][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.588248][ T8206] team0: Port device team_slave_0 added [ 165.647780][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.668817][ T8206] team0: Port device team_slave_1 added [ 165.744096][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.751110][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.777169][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.791949][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.798926][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.825013][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.908798][ T8264] loop1: detected capacity change from 0 to 8192 [ 165.942420][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.964419][ T8206] hsr_slave_0: entered promiscuous mode [ 165.979825][ T8206] hsr_slave_1: entered promiscuous mode [ 166.148331][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.156066][ T8206] Cannot create hsr debugfs directory [ 166.271124][ T8275] loop1: detected capacity change from 0 to 1024 [ 166.313729][ T8275] EXT4-fs: Ignoring removed orlov option [ 166.413264][ T8275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.486270][ T8206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.504884][ T8206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.520137][ T8206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.529529][ T8206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.650747][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.717181][ T8206] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.749652][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.756859][ T4661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.766528][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 166.797681][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.804843][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.861098][ T8206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.871647][ T8206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.933157][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.975082][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.285161][ T8316] loop6: detected capacity change from 0 to 512 [ 167.329668][ T8316] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 167.433712][ T8316] EXT4-fs (loop6): 1 truncate cleaned up [ 167.440210][ T8316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.584577][ T8206] veth0_vlan: entered promiscuous mode [ 167.592649][ T8206] veth1_vlan: entered promiscuous mode [ 167.603483][ T8329] loop5: detected capacity change from 0 to 1024 [ 167.616097][ T8329] EXT4-fs: Ignoring removed orlov option [ 167.624534][ T8206] veth0_macvtap: entered promiscuous mode [ 167.625308][ T8329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.631895][ T8206] veth1_macvtap: entered promiscuous mode [ 167.655013][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.666732][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.680525][ T8206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.689444][ T8206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.698273][ T8206] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.707119][ T8206] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.726210][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.899988][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1533'. [ 167.921920][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 167.921948][ T29] audit: type=1400 audit(2000000030.180:2887): avc: denied { read } for pid=8342 comm="syz.7.1533" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.950929][ T29] audit: type=1400 audit(2000000030.180:2888): avc: denied { open } for pid=8342 comm="syz.7.1533" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 167.980432][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.996423][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1535'. [ 168.020850][ T8347] team0 (unregistering): Port device team_slave_0 removed [ 168.022174][ T8349] loop5: detected capacity change from 0 to 1024 [ 168.034746][ T8349] EXT4-fs: Ignoring removed orlov option [ 168.036656][ T8347] team0 (unregistering): Port device team_slave_1 removed [ 168.227445][ T8349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.268730][ T8355] loop7: detected capacity change from 0 to 1024 [ 168.295723][ T8355] EXT4-fs: Ignoring removed nobh option [ 168.301465][ T8355] EXT4-fs: Ignoring removed bh option [ 168.306940][ T8355] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.463198][ T8355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.528188][ T8362] loop6: detected capacity change from 0 to 1024 [ 168.535207][ T8362] EXT4-fs: Ignoring removed orlov option [ 168.544984][ T8362] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.580617][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.592908][ T8355] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1538: Allocating blocks 497-513 which overlap fs metadata [ 168.744620][ T8206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.759623][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.017437][ T8371] loop7: detected capacity change from 0 to 512 [ 169.026547][ T8371] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 169.038029][ T8371] EXT4-fs (loop7): 1 truncate cleaned up [ 169.044254][ T8371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.073398][ T8372] tipc: Started in network mode [ 169.078370][ T8372] tipc: Node identity 4, cluster identity 4711 [ 169.084616][ T8372] tipc: Node number set to 4 [ 169.196690][ T29] audit: type=1400 audit(2000000031.480:2889): avc: denied { ioctl } for pid=8378 comm="syz.5.1545" path="socket:[20448]" dev="sockfs" ino=20448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.524470][ T8388] loop5: detected capacity change from 0 to 1024 [ 169.584780][ T8388] EXT4-fs: Ignoring removed orlov option [ 169.637342][ T8388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.680000][ T8206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.731585][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1551'. [ 169.764222][ T8403] loop6: detected capacity change from 0 to 1024 [ 169.771215][ T8403] EXT4-fs: Ignoring removed nobh option [ 169.776815][ T8403] EXT4-fs: Ignoring removed bh option [ 169.782311][ T8403] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.797226][ T8403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.913126][ T8403] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1553: Allocating blocks 497-513 which overlap fs metadata [ 170.054067][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.073987][ T7672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.203541][ T8416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.294619][ T8416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.778111][ T8431] loop7: detected capacity change from 0 to 512 [ 170.786608][ T8431] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 170.810440][ T8431] EXT4-fs (loop7): 1 truncate cleaned up [ 170.825079][ T8431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.029787][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1564'. [ 171.055526][ T8206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.064797][ T8444] loop1: detected capacity change from 0 to 1024 [ 171.071631][ T8444] EXT4-fs: Ignoring removed orlov option [ 171.096248][ T8444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.166559][ T8449] loop6: detected capacity change from 0 to 1024 [ 171.173521][ T8449] EXT4-fs: Ignoring removed nobh option [ 171.179221][ T8449] EXT4-fs: Ignoring removed bh option [ 171.184681][ T8449] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.238336][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.253552][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.316216][ T8449] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1567: Allocating blocks 497-513 which overlap fs metadata [ 171.396273][ T8458] loop1: detected capacity change from 0 to 1024 [ 171.420275][ T8458] EXT4-fs: Ignoring removed orlov option [ 171.467670][ T8458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.560684][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.727049][ T8467] loop6: detected capacity change from 0 to 1024 [ 171.734159][ T8467] EXT4-fs: Ignoring removed orlov option [ 171.752372][ T8467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.834144][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.880518][ T29] audit: type=1400 audit(2000000034.160:2890): avc: denied { create } for pid=8475 comm="syz.1.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 171.910973][ T29] audit: type=1400 audit(2000000034.190:2891): avc: denied { create } for pid=8477 comm="syz.5.1574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 171.932725][ T29] audit: type=1400 audit(2000000034.220:2892): avc: denied { setattr } for pid=8475 comm="syz.1.1572" name="PPPOE" dev="sockfs" ino=21311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.056798][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1577'. [ 172.090088][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.110448][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 172.139761][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 172.156598][ T8492] loop6: detected capacity change from 0 to 1024 [ 172.209084][ T8492] EXT4-fs: Ignoring removed orlov option [ 172.319489][ T8492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.511431][ T8503] loop7: detected capacity change from 0 to 1024 [ 172.571908][ T7710] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.582227][ T8503] EXT4-fs: Ignoring removed nobh option [ 172.587847][ T8503] EXT4-fs: Ignoring removed bh option [ 172.593307][ T8503] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.624319][ T8503] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.740928][ T8503] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1581: Allocating blocks 497-513 which overlap fs metadata [ 173.154539][ T8206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.217312][ T8518] loop7: detected capacity change from 0 to 1024 [ 173.225529][ T8518] EXT4-fs: Ignoring removed orlov option [ 173.272686][ T8518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.314642][ T8527] loop1: detected capacity change from 0 to 1024 [ 173.332954][ T8527] EXT4-fs: Ignoring removed orlov option [ 173.341281][ T8527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.564189][ T8537] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 173.573813][ T8206] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.598323][ T8539] loop1: detected capacity change from 0 to 1024 [ 173.609188][ T8539] EXT4-fs: Ignoring removed orlov option [ 173.634986][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1592'. [ 173.778435][ T8552] loop1: detected capacity change from 0 to 1024 [ 173.785428][ T8552] EXT4-fs: Ignoring removed nobh option [ 173.791037][ T8552] EXT4-fs: Ignoring removed bh option [ 173.796499][ T8552] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.129363][ T8552] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.1596: Allocating blocks 497-513 which overlap fs metadata [ 174.255241][ T8560] loop5: detected capacity change from 0 to 512 [ 174.263414][ T8560] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 174.292855][ T8560] EXT4-fs (loop5): 1 truncate cleaned up [ 174.443601][ T29] audit: type=1400 audit(2000000036.720:2893): avc: denied { read } for pid=8572 comm="syz.1.1601" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 174.467139][ T29] audit: type=1400 audit(2000000036.720:2894): avc: denied { open } for pid=8572 comm="syz.1.1601" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 174.494414][ T8578] loop6: detected capacity change from 0 to 1024 [ 174.501900][ T8578] EXT4-fs: Ignoring removed orlov option [ 174.568327][ T8585] loop7: detected capacity change from 0 to 1024 [ 174.598956][ T8585] EXT4-fs: Ignoring removed orlov option [ 174.614376][ T8582] loop1: detected capacity change from 0 to 1024 [ 174.621504][ T8582] EXT4-fs: Ignoring removed orlov option [ 174.921349][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 175.348752][ T8605] loop1: detected capacity change from 0 to 1024 [ 175.379517][ T8605] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1610: error while reading EA inode 20 err=-116 [ 175.399468][ T8605] EXT4-fs (loop1): Remounting filesystem read-only [ 175.406048][ T8611] loop7: detected capacity change from 0 to 1024 [ 175.406531][ T8605] EXT4-fs warning (device loop1): ext4_xattr_block_set:2190: inode #19: comm syz.1.1610: dec ref error=-30 [ 175.415628][ T8611] EXT4-fs: Ignoring removed nobh option [ 175.429603][ T8611] EXT4-fs: Ignoring removed bh option [ 175.435062][ T8611] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.494962][ T8611] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1612: Allocating blocks 497-513 which overlap fs metadata [ 175.568510][ T29] audit: type=1400 audit(2000000037.850:2895): avc: denied { map } for pid=8620 comm="syz.1.1615" path="socket:[21474]" dev="sockfs" ino=21474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 175.624270][ T8623] loop7: detected capacity change from 0 to 512 [ 175.666990][ T8623] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 175.727030][ T8623] EXT4-fs (loop7): 1 truncate cleaned up [ 175.778928][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1618'. [ 175.928635][ T8635] loop5: detected capacity change from 0 to 1024 [ 175.992697][ T8635] EXT4-fs: Ignoring removed orlov option [ 176.249271][ T8642] loop7: detected capacity change from 0 to 1024 [ 176.265420][ T8643] loop6: detected capacity change from 0 to 1024 [ 176.285583][ T8642] EXT4-fs: Ignoring removed orlov option [ 176.296619][ T8643] EXT4-fs: Ignoring removed orlov option [ 176.708223][ T8648] ================================================================== [ 176.716377][ T8648] BUG: KCSAN: data-race in filemap_read / filemap_read [ 176.723307][ T8648] [ 176.725673][ T8648] write to 0xffff888118e4cfa8 of 8 bytes by task 8642 on cpu 0: [ 176.733430][ T8648] filemap_read+0x974/0xa00 [ 176.737996][ T8648] generic_file_read_iter+0x79/0x330 [ 176.743338][ T8648] ext4_file_read_iter+0x1cc/0x290 [ 176.748496][ T8648] copy_splice_read+0x3c1/0x5f0 [ 176.753419][ T8648] splice_direct_to_actor+0x290/0x680 [ 176.759034][ T8648] do_splice_direct+0xda/0x150 [ 176.763843][ T8648] do_sendfile+0x380/0x650 [ 176.768305][ T8648] __x64_sys_sendfile64+0x105/0x150 [ 176.773546][ T8648] x64_sys_call+0xb39/0x2fb0 [ 176.778176][ T8648] do_syscall_64+0xd2/0x200 [ 176.782736][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.788832][ T8648] [ 176.791182][ T8648] read to 0xffff888118e4cfa8 of 8 bytes by task 8648 on cpu 1: [ 176.798760][ T8648] filemap_read+0x6f/0xa00 [ 176.803227][ T8648] generic_file_read_iter+0x79/0x330 [ 176.808562][ T8648] ext4_file_read_iter+0x1cc/0x290 [ 176.813713][ T8648] copy_splice_read+0x3c1/0x5f0 [ 176.818612][ T8648] splice_direct_to_actor+0x290/0x680 [ 176.824036][ T8648] do_splice_direct+0xda/0x150 [ 176.828861][ T8648] do_sendfile+0x380/0x650 [ 176.833320][ T8648] __x64_sys_sendfile64+0x105/0x150 [ 176.838556][ T8648] x64_sys_call+0xb39/0x2fb0 [ 176.843185][ T8648] do_syscall_64+0xd2/0x200 [ 176.847707][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.853618][ T8648] [ 176.856034][ T8648] value changed: 0x00000000000002dd -> 0x00000000000002de [ 176.863163][ T8648] [ 176.865498][ T8648] Reported by Kernel Concurrency Sanitizer on: [ 176.871662][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.7.1622 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(voluntary) [ 176.884179][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.894256][ T8648] ================================================================== [ 185.651298][ T23] page_pool_release_retry() stalled pool shutdown: id 25, 15 inflight 60 sec