last executing test programs: 9.58828789s ago: executing program 0 (id=184): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(0x0, 0x40, 0x110, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x3, 0xf7, 0x8, 0x11, @dev={0xfe, 0x80, '\x00', 0x2d}, @rand_addr=' \x01\x00', 0x10, 0x700, 0x2, 0x232c621}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000", @ANYRESOCT=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', r2, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000100)={0x20000014}) ppoll(&(0x7f0000000000)=[{r1, 0x1045}], 0x1, 0x0, 0x0, 0x0) close_range(r1, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x8000000000000001, &(0x7f0000000240)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x68040200) 9.212656846s ago: executing program 0 (id=191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0xa, [@volatile={0xc, 0x0, 0x0, 0x9, 0x3}, @struct={0x7, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x3, 0x5e90}, {0x6, 0x5}, {0x0, 0x4, 0x7f}, {0xe, 0x1, 0x7}]}, @datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x39, 0x2}], 'z.\t'}, @const={0x5}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000005c0)=""/188, 0x92, 0xbc, 0x1, 0x8, 0x10000}, 0x28) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x15, &(0x7f0000000380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x0, 0x8, 0x7, 0x6, 0x80, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='GPL\x00', 0x80000001, 0xaa, &(0x7f0000000440)=""/170, 0x41000, 0x50, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x8, 0x4, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r2], &(0x7f0000000780)=[{0x3, 0x2, 0x0, 0x2}, {0x4, 0x4, 0x6, 0x8}, {0x2, 0x4, 0x9, 0xb}], 0x10, 0x3}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 9.192820576s ago: executing program 0 (id=192): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioprio_get$pid(0x3, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) pipe(0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0xa, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfc, 0x87, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000045, [0xfffffffe, 0x89ff]}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) 8.966869409s ago: executing program 0 (id=194): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x10, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0x1, 0x5a8, &(0x7f0000000640)="$eJzs3c9rXNUeAPDvmZmkTdM26ePBe7ULAwVbUJMmrSgi2GLdufBHwVXBmKSldNqGJoKtFVuo/4H+AYI7QcRlESnqxq07wa0gxSJtNu5G7syddNrO5Oekt/Z+PnAz59wzl3PuTL5z7j1z7p0ASmss+1OJ2BsR8ylipKOsFnnhWOt5d+9cmVm6c2UmRaPxzl8pUr6u/fyUPw7nG2+PiF9+SPGf6sP1Lly6fHa6Xp+7mOcnFs/NTyxcuvz8mXPTp+dOz52fmnxx8oUjh6eOHOrLfu6KiJ/Gj9eun3pt3zczX+755LuvbqQ4Gjvz8s796JexGFt+TTplr+tL/a6sINV8fzrf4lQrsEGsS/v9G4iI/8VIVOPemzcSn75VaOOALdVIEQ2gpJL4h5JqHwdk57/tpdgjEuBRuX2sNQBwN7XG9paW47/WGhuM7c2xgR1LKTqHdVJE9GNkLqtj/pk0ki2xReNwQHdXr0XE/7v1/6kZm6PNUfws/iv3xX8lIt7MH7P1b2+w/tZnzL3RY/EPj85m4v+9jvh/f4P1jz2QF/8AAAAAAACwcTePRcRz3b7/qyzP/4ku83+GI+JoH+pf/fu/yq0+VAN0cftYxCsR0Z77t9QR/7nRap7b1ZwPMJBOnanPHYqI3RFxMAa2ZfnJFeoY2/fzQM+yjvl/2ZLV354LmLfjVm3b/dvMTi9Ob2afgZbb1yKeqnWL/7Tc/6cu/X/W98+vsY7G8Vd/7FW2evwDW6XxRcSBrv3/vTtXpJXvzzHRPB6YaB8VPOyjkze+7VW/+IfiZP3/jpXjfzR13q9nYf11fPznb5uI/+7H/4PpRPOigcF83YfTi4sXJyMG0xsPr59af5vhSdSOh3a8ZPF/cH/38/+Vjv+HIuLqGus88f3r13uV6f+hOEPXImbX1f+vP7H/3c//7lX/2vr/I80+/WC+xvgfrGytAVp0OwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg36gSETsjVcaX05XK+HjEcET8N3ZU6hcWFp89deGD87NZWfP3/yvtX/odaeVT+/f/RzvyUw/kD0fEnoj4rDrUzI/PXKjPFr3zAAAAAAAAAAAAAAAAAAAA8JgY7nH9f+aPatGtA7ZcregGAIUR/1Be4h/KS/xDeYl/KC/xD+Ul/qG8xD+Ul/iH8qo2vj5ZdBsAAAAAAIC+2fP0zV9TRFx9eai5ZAbzsoFCWwZstaNFNwAojFv8QHmZ+gfltdo5vjEAePKlVcq3b3hLAAAAAAAAAAAAAKBfDux1/T+UVaXoBgCF6X39vzsDwJPO9f9QXs7xAdf/AwAAAAAAAAAAAMDjb+HS5bPT9frcxY0mtm1ucwmJtSZ+3936n32wKEYjHo8WrpaI1IeIe0SJoj+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtn8CAAD//48P88E=") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x39) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = socket$inet(0x2, 0x0, 0x8000204) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000f8ffffffb703000008000000b70400000000080000005068af79f6579428376300"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x29, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) r11 = dup(r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x80, 0x20, 0x3, 0x7, {{0x2e, 0x4, 0x3, 0x9, 0xb8, 0x64, 0x0, 0x7, 0x0, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x2b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0x34, [@empty, @multicast1, @local, @multicast2]}, @lsrr={0x83, 0x2b, 0x9a, [@loopback, @private=0x1, @rand_addr=0x64010101, @local, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ssrr={0x89, 0x7, 0x64, [@local]}, @end, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x3, [{@private=0xa010101, 0x1}, {@multicast1, 0x5}]}, @rr={0x7, 0x2b, 0x62, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @remote, @rand_addr=0x64010101, @empty, @remote, @multicast1]}]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa653cc596f61a114, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xfffffefa, 0x0, 0x40f00, 0x2, '\x00', r12, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000400)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r12}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r13, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r14 = gettid() process_vm_writev(r14, &(0x7f0000000540), 0x0, &(0x7f0000121000)=[{&(0x7f0000000f80)=""/246, 0xf6}], 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000300)='./file2/file0\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 8.201845472s ago: executing program 0 (id=204): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001dc0)=[{{0x0, 0x6558, 0x0}, 0x1}], 0x1, 0x0, 0x0) 7.479938153s ago: executing program 0 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x7cf, &(0x7f0000002080)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 7.414456944s ago: executing program 32 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x7cf, &(0x7f0000002080)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 3.319287349s ago: executing program 3 (id=262): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x486, &(0x7f0000001040)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 2.57712437s ago: executing program 5 (id=276): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x10, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0x1, 0x5a8, &(0x7f0000000640)="$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") r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x39) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = socket$inet(0x2, 0x0, 0x8000204) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000f8ffffffb703000008000000b70400000000080000005068af79f6579428376300"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x29, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10], 0x90}}, 0x0) r11 = dup(r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000d00)={'sit0\x00', 0x0, 0x80, 0x20, 0x3, 0x7, {{0x2e, 0x4, 0x3, 0x9, 0xb8, 0x64, 0x0, 0x7, 0x0, 0x0, @remote, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x2b, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x13, 0x34, [@empty, @multicast1, @local, @multicast2]}, @lsrr={0x83, 0x2b, 0x9a, [@loopback, @private=0x1, @rand_addr=0x64010101, @local, @multicast2, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2e}]}, @ssrr={0x89, 0x7, 0x64, [@local]}, @end, @timestamp_addr={0x44, 0x14, 0xd, 0x1, 0x3, [{@private=0xa010101, 0x1}, {@multicast1, 0x5}]}, @rr={0x7, 0x2b, 0x62, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x38}, @remote, @rand_addr=0x64010101, @empty, @remote, @multicast1]}]}}}}}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa653cc596f61a114, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0xfffffefa, 0x0, 0x40f00, 0x2, '\x00', r12, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000400)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, r12}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r13, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r14 = gettid() process_vm_writev(r14, &(0x7f0000000540), 0x0, &(0x7f0000121000)=[{&(0x7f0000000f80)=""/246, 0xf6}], 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000300)='./file2/file0\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2.242627165s ago: executing program 3 (id=278): socket$nl_generic(0x10, 0x3, 0x10) fchown(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001800000400000000000000001801ffe1202070250000000000202a2e2b01fba1d941125e874a20207b1af8ff00000000bfa100000000001b07010000f8f7ffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r4 = io_uring_setup(0x3cfc, &(0x7f0000000080)={0x0, 0x0, 0x4000, 0x0, 0x12e, 0x0, r3}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, 0x0) pread64(r3, &(0x7f0000001300)=""/4118, 0x1016, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000002018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70cbd0000000000798af8ff008f0000bfa20000000000000702000000000000b70400090000000085020000c300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) pipe(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH8gP0oXxB8gyioSG9GWFlQOXjSacDEx0YMea6kEWcDQmgghUo3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att2tbbfbBefzSab73vx6782b13kzb2cDKK1q9ieJ2BERv0TEaDO6eIVq8+PG9cszf12/PJNEvf7KH0ljvT+vX54pVt2Rf27P9zmWRqQfJrHQJt25i5fOTNdqsxfy+MT82bcn5i5eevL02elTs6dmz00dP37s6OQzT089tSHlHMnyuu+98/v3nnj9k5dmYuGN77/M8j+QL28tR1Ol6zSrUY16vV5PF80dbvw91PXeby8jLeFksI8ZYU2y8z+rrqFG+x+NgbhVeaPx4gd9zRzQU9n1adeyuc2rYnooaSwH/q+0cSir4oqf3f8W0+b2QPrr2nPNG6Cs3DfyqblkMLL79qTSvGMf6FH6OyLitYW/P82maPscAgBgY32d9X+eaNf/S+PelvV25mNDlYg4HBG7I+LuiNgTEfdENNa9LyLuX2P61SXx5f2fn7auq2CrlPX/ns3Hthb3/26O2lQG8thIo/xDyZuna7NH8mMyFkNbsvjkCml888LPH3daVm3p/2VTln7RF8zz8fvglsXbnJyen+6mzK2uvR+xb7Bd+ZObIwFJROyNiH3r2H92zE4//sX+LLxz+/Ll/13+FWzAOFP984jHmvW/EEvKX0iaKXUan5y4K2qzRyaKs2K5H368+nJrfKgl3FX5N0BW/9vanv95+YtmUIzXzq09jau/ftTxnma95/9w8mojPJzPe3d6fv7CZMRwPmPR/Klb2xbxYv2s/GMH27f/3RH/fJZv90BEZCfxgxHxUEQcyPP+cEQ8EhEHVyj/d88/+tbKR6i/9X+yQ/3nZ0AlaR2vX0dg4My3X3VKf3X1f6wRGsvnrOb/32oz2N3RAwAAgDtD2hiDTtLxm+E0HR9vfod/T2xLa+fn5g9X451zJ5tj1ZUYSosnXaMtz0Mn82fDRXxqSfxoROxqfNNoayM+PnO+NtLvwkPJbe/Q/jO/9epLL8DtY03jaEnv8gFsPu9rQnlp/1Be2j+Ul/YP5dWu/V+JuNGHrACbzPUfykv7h/LS/qG8tH8opeWvxBc/t7KeN/1vBXaf6GrzEgUGutt8IiLaLorWH+3oQSDSPh66+pV6vZv9pP2v9wtzB/LAlohY7VZXelqnS8+fFXk7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCP8GwAA///IPOO2") r8 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x4, 0xb6, 0xe, 0x9, 0x31, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x7, 0x8000, 0x10000, 0x9}}) 2.152803797s ago: executing program 4 (id=280): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004cc0)={0x34, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x1, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80884}, 0x20000000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x79c8, 0x0, 0x0, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x40010) timer_getoverrun(r10) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="16000000", @ANYRES16=r8, @ANYBLOB="08002dbd7000ffdbdf2546000000"], 0x14}}, 0x8000) 1.93641629s ago: executing program 2 (id=281): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x0, &(0x7f00000012c0), 0x1, 0x1240, &(0x7f0000001300)="$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") 1.91421923s ago: executing program 1 (id=282): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_to_bond\x00', &(0x7f00000001c0)=@ethtool_link_settings={0x4d, 0x0, 0x9, 0xd, 0x4, 0x0, 0x8, 0x1, 0x7f, 0x8, [0xeb2f, 0x1, 0x9, 0x100, 0x4, 0x98b2, 0xa4, 0xff]}}) acct(&(0x7f00000001c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xf, 0xe}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c001}, 0x2000c8c8) open(0x0, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r4, 0x0, 0x0, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, &(0x7f0000000380), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x40000020) rt_sigqueueinfo(0x0, 0x1b, &(0x7f0000000140)={0x3, 0x0, 0x9}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r6, 0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r5, 0x0, 0x0) 1.91300915s ago: executing program 3 (id=283): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 1.865419871s ago: executing program 2 (id=284): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(0xffffffffffffffff, &(0x7f0000001400)=""/4076, 0xfffffeea) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) inotify_init1(0x800) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x3, 0x101000) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES64=r1, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB="6c9af951e47d2a2b00000400"], 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000005ccf9909fc0b4009a6e6c8b844077be8b32294da6a229062f9855ab1b6a1ae6d64a527531ba097c7cc65a85e3d705d509ad37407800f59549941d0ecdc4f02aa1dbac85a83692c82730d87bc9aeca5a45d33bf0c4fbb70d3dbfce69dac454625be16a1d4bf4ccc1853330d049f26ff558f7c200bd1196327f96a68c65223c1569b11230fa93dc7c466c2b4d7025c66a2ab73c6783daa618a5b7c028f7dcaf368307851fe0dae95dc6a9ad44d8654d10996372517313a44e4b9fee515904380234b1372b01f90581cdab6b9bade32d4d52d1221aa821118b97d0491af45f9f1c5d39982cfae411fd828322698d33dc40e544c18cceee63cd6e35b2aa8006f96d049480f0f8b3516f0ce81bfdaf317f128c44613e8a498982b6f02bfcfbaab0bdf6d0a72f80f88c09d7549d507d5b5bef2a620141f2a851660eefa03f4ac3a12dfe949742d3161cea934991eaa8d8b0accb2e51c4539053515522246b7c8614760a08302d448ae72ff672a6ee4e65e54f9e8b2ece88415f56dfb6dde3266ae5299b71c2a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfcdf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) 1.812047672s ago: executing program 3 (id=285): r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x25a, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3) (fail_nth: 5) 1.810903322s ago: executing program 5 (id=286): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x7cf, &(0x7f0000002080)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') 1.764370383s ago: executing program 2 (id=287): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1.763920183s ago: executing program 3 (id=288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (fail_nth: 4) 1.458059637s ago: executing program 3 (id=289): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x50, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x1, 0x2, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x96, {{0x8, 0x24, 0x6, 0x0, 0x0, "5d2c11"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x5, 0x4, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x428, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7f, 0x7, 0x7f}}}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x1, 0x8, 0x8, 0x5}, 0xdf, &(0x7f0000000880)=ANY=[@ANYBLOB="050fdf00041410047d9bc0cf26d86aee7baa23311c5068ce73c010160c957dff97584610d9854ae0eb4973d84eb53574cf77d424560b3458bf5f984779f856c447321310a6e82465eeaef6ef6b6888931782513e6c9e9f344a74e47e91f546411d29a48b2fc3d8f24e87543ec453c6f0cff360bdb85a5649958e273141c42b2c5e450b148180a257b7fac4009f9bc89695c188c8a801d6b0ca3d444be65401340945e3f9932ed93158c3a962b10402e4674cac9ae4bd917a6619f4375b0b9413f19df45587933e4e321057e3882ca2691e266488525194713603100b03100b"], 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4b, &(0x7f0000000980)=@string={0x4b, 0x3, "14f74739df3441d011e30fb7d2ee986211e47d62de0e0d43d0cc431366bcefccecdffe18ea410c92c2f525fde84b3ac4fff39cf2c66d8dad8a01054190005ca52d2a797514350d014b"}}, {0x28, &(0x7f0000000480)=@string={0x28, 0x3, "98aa39b42077f1b2ad09a8fb5bf6b5029039430711e480a67d208e2c86b2dad9766b8ea82656"}}, {0x0, 0x0}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x380a}}]}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r4}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000740)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x7f000000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}], ['\x00']}) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc) 1.219141251s ago: executing program 4 (id=290): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000001080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x486, &(0x7f0000001040)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 1.211548401s ago: executing program 5 (id=291): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.109334423s ago: executing program 2 (id=292): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "010081c8", "8cf63ecbc640735f"}, 0x38) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.108317143s ago: executing program 5 (id=293): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f00000004c0)="330000001a005f0214f9f407000904001f000000ff00000000000000c8e7fe37ffbfd0f626a5b0a28aa5ff1e86dc9eeab25e53e32d1d439586a1123a457334f4c64284552b17acdeefdef0491f32fd1f6418e3389867aa1798bd48f32bc56f813bf92cae08d916308e6aefc5f399cffa92501470628ec735b3c7370c827e871ae008ab0c9582a7a12a7b38a22299bdb9585718dff4440d86fe853c179d395d549e6a3ce7cf14654c45c0c34fde1e70f8f787c189c3a021cd51fb26754dfed03fb27ee712ce607213801366a9324f56784c46370ba5d28ce4", 0xd8) recvmmsg(r1, &(0x7f0000003bc0), 0x0, 0x2000a002, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711013000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x286242, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r3, r4, 0x0, 0x1000000000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffff9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r8}, 0x4) 1.105991323s ago: executing program 2 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000900020073797a300000000005000400000000000500050002000000052205000100000004000780050001000700000007992336cda84bf9a8a64066e6a8d15d26956367fc3296ad96f2d9fd9477c01d3c2f651055605de8f45f08a13402aef3bb649bbf3bbc25914738c83be2b7ab4320946ab0d0f95d4d5ca1cfafe27b97e7193364873571738b25edba011280dd"], 0x44}}, 0x20000001) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES8=r3], 0x48) unshare(0x2c060000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x2ff3, 0x20, 0x6, 0x5}, {0xad, 0x6, 0x5, 0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x77f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYBLOB="6b8c59cedd54dae8c6e329e7cad31f908f689fbfb0cbb0295868db3f6bea6f9f1d24d7ee7bbe72d3416d3d9b0cebab3b960445349d80bc080f5441f5cba79c86dacfe59c4932f083193a9815ca8ba43f81c0c847f33a19da3627b325e99bb5b6b931b8d8090626091313c608d66e9dd5407774c4973fce3da3f02ffc2abc1a22928e25ea62", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES32=r7, @ANYRESOCT=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9135}, 0x18) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000010000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000a40700"/28], 0x50) unshare(0x2c020400) unshare(0xc000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) 1.034978834s ago: executing program 1 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000900020073797a300000000005000400000000000500050002000000052205000100000004000780050001000700000007992336cda84bf9a8a64066e6a8d15d26956367fc3296ad96f2d9fd9477c01d3c2f651055605de8f45f08a13402aef3bb649bbf3bbc25914738c83be2b7ab4320946ab0d0f95d4d5ca1cfafe27b97e7193364873571738b25edba011280dd"], 0x44}}, 0x20000001) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYRES8=r3], 0x48) unshare(0x2c060000) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0x2ff3, 0x20, 0x6, 0x5}, {0xad, 0x6, 0x5, 0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x77f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYBLOB="6b8c59cedd54dae8c6e329e7cad31f908f689fbfb0cbb0295868db3f6bea6f9f1d24d7ee7bbe72d3416d3d9b0cebab3b960445349d80bc080f5441f5cba79c86dacfe59c4932f083193a9815ca8ba43f81c0c847f33a19da3627b325e99bb5b6b931b8d8090626091313c608d66e9dd5407774c4973fce3da3f02ffc2abc1a22928e25ea62", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC=r4, @ANYRES32=r7, @ANYRESOCT=r6], &(0x7f0000000040)='GPL\x00', 0x0, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x9135}, 0x18) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000010000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000a40700"/28], 0x50) unshare(0x2c020400) unshare(0xc000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a320000000008004100727865001400330076657468305f746f5f626f6e64"], 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) 1.006200634s ago: executing program 2 (id=296): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000009998d6ebbcc8d9a03a7f11eff10000"], 0x50) r3 = memfd_secret(0x80000) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180003000000000000000cc00c5aa06663499b63", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703009de065a3fb388eed957fd1e3e900000000008500000083000000bf090000f7ffffff55090100000000009500000000000000bf91000000000000b7020000010000008500000885000000b70000000000000095000000c6c8814f0075809ab190bf91766900000000"], &(0x7f00000004c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCUNBRIDGECHAN(r3, 0x7434) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 977.071415ms ago: executing program 1 (id=297): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d6"], &(0x7f0000000100)='GPL\x00', 0x4b7901da}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getcwd(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45c601, 0x2) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000180)=@hci={0x1f, 0x2}, 0xcb, &(0x7f0000000500)=[{&(0x7f0000000580)="296a88271c967616c60ce6eab3d0693201a50b7a9ff9186eb6c983e493aca42225112f61643e2466bc7027d6d59ff9ebbf87b7543bf21362269800329065e97ffc9adf30eb5ff11ce1324df70d49fe1e9794064f95826f6c30e61bda52c82aa8c2b3fa28d54eed41a81866e5431515b47e3774c8ef11042faa007ad026d8c582fa35d42a99aa0a5ca293db0f362e3fe97f00888e0c9879b270c027e7f260e634e953e4071734c1b370f9c382189eee6f0631f92e15bb5627aae2ac01ff4966a28ca3c56b4403666995a07ef5c4271ffe66bd49752837a3a0f20778e8ddd046e6a0e1afc0e127b22292a0d99055499ec092766e6b", 0xf4}, {&(0x7f0000000380)="d1b2682dabad7a486b09722490687ad1e75ed4a27fc35dc2f7b050b85245054452d100ee55d236ac7fb9f2b706907299e7ce7f2737495996bb98586afced8d68e981f62dea556160e8bc539377038ca551a410d910eb72fc726271621c3cb0f607f3876031dceed832f2e5888d294525eae9bdf2e68463a94ad5a75b4f6aa257316570bea051bf6fa32e59adbc1f49de9d8d887fb7", 0x95}, {&(0x7f0000000780)="4554a5da2440a145b0ad2b44fd54427188825d7a2d5865b34ccb57f4da4a404ebd8b2d6e27d5950546691a0c8c56015ace701e63b39ab080573aaaae1c700fc5b23bcecbc36e3aca94bc37e041d17655c7391b404691787c9f757dab8a86c872ae396fff17adf521cb674c406f25403784f4f0cf266b857011afa561bb53b616b971ca5171f3278b71fd5db41e0caf40946f7bd2f833dbd114bd9f0db43e5282151382ea6726ddea997fb3b3c6bc14da7214024520d9d7fd5f278742b3dbb36da285922885cf5c0508bf8d8e0814a18d46943f4bab2f2be5ade8af33ab04358ebb101c6e340edf34d6c68332bd26e2fa", 0xf0}, {&(0x7f00000004c0)}], 0x4}, 0x40400a4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) pwritev2(r6, 0x0, 0x0, 0x9, 0xffffffff, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r9 = socket(0x10, 0x3, 0x0) unshare(0x24020400) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d", @ANYRESDEC]) 478.289703ms ago: executing program 1 (id=298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 437.001153ms ago: executing program 4 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x19) write$cgroup_subtree(r3, 0x0, 0x0) r4 = eventfd2(0x9, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c0001"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r8}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r9 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r9, 0x16) 320.388786ms ago: executing program 1 (id=300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 291.075436ms ago: executing program 1 (id=301): shmctl$SHM_INFO(0x0, 0xe, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) futex(0x0, 0x3, 0x801, 0x0, 0x0, 0xfffffffc) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000200)=0x488) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000e134647c31b86eb5fb840e77", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x700, 0x1, 0xfff, 0x34f, {{0x8, 0x4, 0x3, 0x3b, 0x20, 0x66, 0x0, 0xc, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x94, 0x9, "7ab6f14dd4df48"}]}}}}}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000009060100000000000000030000000900020073797a01f3527e25a7c46fff2931c3f59d102e6edf2064a683000000000500010007000000280007800c00c392299a0140ffffffff0c001480fe"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x140, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x97, 0xc, "d54b1d72ce499396deb771d201a81003170746b682531a0a0011e1b30bc250efa577ee83b62fe17cfc32f743f84e2ab8a0360d4fe16a2dab058f669bddc2d8fb1f9596902cce5154131679864cafd43af52643997bd16bfecd9bbd2ecbb70364185ca4184bb4411764d3a4607cc8c6eb87739615ffdd4bbbafb7db3133fe102d9c2cbbdb35b9199209f03e84ff2f477258f701"}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, [""]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1e0}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0x48d}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 259.998747ms ago: executing program 5 (id=302): syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f000000000000000014000200e72f57e30882e55d00000000000000000d0001007564703a73"], 0x54}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x30}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x19, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}, 0x1, 0x0, 0x8000000}, 0x0) 189.864317ms ago: executing program 4 (id=303): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 148.043898ms ago: executing program 4 (id=304): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004cc0)={0x34, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x79c8, 0x0, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x40010) timer_getoverrun(r8) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82, 0xca9a3b}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48000020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="16000000", @ANYRES16=r6, @ANYBLOB="08002dbd7000ffdbdf2546000000"], 0x14}}, 0x8000) 36.13404ms ago: executing program 5 (id=305): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x0) 0s ago: executing program 4 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0x12) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x1, r4, 0x4004) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x2c040) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000004c0)={0x5, 0x0, {0x2, 0x0, 0x8, 0x3}, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c783, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x118, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}]}}]}, 0x148}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 21.506100][ T29] audit: type=1400 audit(1752947548.344:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.506983][ T3293] cgroup: Unknown subsys name 'net' [ 21.528820][ T29] audit: type=1400 audit(1752947548.344:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.556163][ T29] audit: type=1400 audit(1752947548.374:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.668447][ T3293] cgroup: Unknown subsys name 'cpuset' [ 21.674474][ T3293] cgroup: Unknown subsys name 'rlimit' [ 21.824163][ T29] audit: type=1400 audit(1752947548.664:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.848440][ T29] audit: type=1400 audit(1752947548.664:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.868925][ T29] audit: type=1400 audit(1752947548.664:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.875665][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.889341][ T29] audit: type=1400 audit(1752947548.664:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.918130][ T29] audit: type=1400 audit(1752947548.674:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.927341][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.942935][ T29] audit: type=1400 audit(1752947548.674:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.974987][ T29] audit: type=1400 audit(1752947548.734:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.083163][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 23.208505][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.215603][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.222804][ T3305] bridge_slave_0: entered allmulticast mode [ 23.229194][ T3305] bridge_slave_0: entered promiscuous mode [ 23.235676][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 23.255205][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.262320][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.273422][ T3305] bridge_slave_1: entered allmulticast mode [ 23.279727][ T3305] bridge_slave_1: entered promiscuous mode [ 23.310843][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 23.325775][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 23.342633][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.359106][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 23.377320][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.410371][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.417484][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.424661][ T3306] bridge_slave_0: entered allmulticast mode [ 23.431070][ T3306] bridge_slave_0: entered promiscuous mode [ 23.454038][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.461218][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.468315][ T3306] bridge_slave_1: entered allmulticast mode [ 23.474566][ T3306] bridge_slave_1: entered promiscuous mode [ 23.481359][ T3305] team0: Port device team_slave_0 added [ 23.504448][ T3305] team0: Port device team_slave_1 added [ 23.517252][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.524324][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.532252][ T3310] bridge_slave_0: entered allmulticast mode [ 23.538719][ T3310] bridge_slave_0: entered promiscuous mode [ 23.545856][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.565191][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.572338][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.580277][ T3310] bridge_slave_1: entered allmulticast mode [ 23.586541][ T3310] bridge_slave_1: entered promiscuous mode [ 23.593563][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.615888][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.623017][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.630120][ T3309] bridge_slave_0: entered allmulticast mode [ 23.636548][ T3309] bridge_slave_0: entered promiscuous mode [ 23.650980][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.657976][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.683872][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.694614][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.701710][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.708879][ T3312] bridge_slave_0: entered allmulticast mode [ 23.715196][ T3312] bridge_slave_0: entered promiscuous mode [ 23.721654][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.728735][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.735918][ T3309] bridge_slave_1: entered allmulticast mode [ 23.742365][ T3309] bridge_slave_1: entered promiscuous mode [ 23.761985][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.768941][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 23.794886][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.808712][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.815782][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.822955][ T3312] bridge_slave_1: entered allmulticast mode [ 23.829386][ T3312] bridge_slave_1: entered promiscuous mode [ 23.841177][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.851388][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.860983][ T3306] team0: Port device team_slave_0 added [ 23.867374][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.886596][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.900907][ T3306] team0: Port device team_slave_1 added [ 23.907486][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.931037][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.949311][ T3309] team0: Port device team_slave_0 added [ 23.964052][ T3310] team0: Port device team_slave_0 added [ 23.974594][ T3309] team0: Port device team_slave_1 added [ 23.982576][ T3305] hsr_slave_0: entered promiscuous mode [ 23.988525][ T3305] hsr_slave_1: entered promiscuous mode [ 23.999755][ T3310] team0: Port device team_slave_1 added [ 24.010396][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.017339][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.043271][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.064574][ T3312] team0: Port device team_slave_0 added [ 24.071058][ T3312] team0: Port device team_slave_1 added [ 24.081039][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.088020][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.113935][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.132543][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.139578][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.165573][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.180746][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.187685][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.213635][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.225601][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.232556][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.258502][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.273450][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.280414][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.306350][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.322022][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.328993][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.354907][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.380646][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.387600][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.413550][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.454021][ T3309] hsr_slave_0: entered promiscuous mode [ 24.460010][ T3309] hsr_slave_1: entered promiscuous mode [ 24.465743][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.473304][ T3309] Cannot create hsr debugfs directory [ 24.486555][ T3306] hsr_slave_0: entered promiscuous mode [ 24.492506][ T3306] hsr_slave_1: entered promiscuous mode [ 24.498273][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.505797][ T3306] Cannot create hsr debugfs directory [ 24.528769][ T3312] hsr_slave_0: entered promiscuous mode [ 24.534572][ T3312] hsr_slave_1: entered promiscuous mode [ 24.540416][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.548072][ T3312] Cannot create hsr debugfs directory [ 24.560738][ T3310] hsr_slave_0: entered promiscuous mode [ 24.566677][ T3310] hsr_slave_1: entered promiscuous mode [ 24.572599][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.580153][ T3310] Cannot create hsr debugfs directory [ 24.742308][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.751083][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.759945][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.768357][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.790509][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.802282][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.813903][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.822727][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.854371][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 24.873131][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 24.883202][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.891611][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.921521][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.932839][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.941629][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.950075][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.966834][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.979226][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.989124][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.003093][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.011700][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.021462][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.031669][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.042863][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.055038][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.062155][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.083034][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.090169][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.098752][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.105809][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.114760][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.121803][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.223740][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.236769][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.252584][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.266483][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.277744][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.286980][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.299821][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.317815][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.328250][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.346102][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.353165][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.366840][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.373981][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.388120][ T1575] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.395153][ T1575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.415598][ T1675] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422808][ T1675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.432972][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.440107][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.460530][ T1675] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.467686][ T1675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.509461][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.538508][ T3305] veth0_vlan: entered promiscuous mode [ 25.549815][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.562778][ T3305] veth1_vlan: entered promiscuous mode [ 25.579534][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.632346][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.662178][ T3305] veth0_macvtap: entered promiscuous mode [ 25.669882][ T3310] veth0_vlan: entered promiscuous mode [ 25.681190][ T3305] veth1_macvtap: entered promiscuous mode [ 25.707713][ T3310] veth1_vlan: entered promiscuous mode [ 25.715700][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.730520][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.745782][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.754596][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.763358][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.772135][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.784004][ T3312] veth0_vlan: entered promiscuous mode [ 25.796711][ T3312] veth1_vlan: entered promiscuous mode [ 25.813198][ T3312] veth0_macvtap: entered promiscuous mode [ 25.827285][ T3310] veth0_macvtap: entered promiscuous mode [ 25.844886][ T3310] veth1_macvtap: entered promiscuous mode [ 25.851702][ T3312] veth1_macvtap: entered promiscuous mode [ 25.874117][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.894143][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.906362][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.917507][ T3309] veth0_vlan: entered promiscuous mode [ 25.927377][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.942942][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.951713][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.960439][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.969239][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.982561][ T3309] veth1_vlan: entered promiscuous mode [ 25.996999][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.023742][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.023843][ T3474] loop1: detected capacity change from 0 to 1024 [ 26.032518][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.032553][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.040488][ T3474] ======================================================= [ 26.040488][ T3474] WARNING: The mand mount option has been deprecated and [ 26.040488][ T3474] and is ignored by this kernel. Remove the mand [ 26.040488][ T3474] option from the mount to silence this warning. [ 26.040488][ T3474] ======================================================= [ 26.047557][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.089075][ T3474] EXT4-fs: Ignoring removed nobh option [ 26.107821][ T3306] veth0_vlan: entered promiscuous mode [ 26.119744][ T3309] veth0_macvtap: entered promiscuous mode [ 26.125708][ T3474] EXT4-fs: Ignoring removed bh option [ 26.127144][ T3309] veth1_macvtap: entered promiscuous mode [ 26.154837][ T3474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.158449][ T3306] veth1_vlan: entered promiscuous mode [ 26.192098][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.210052][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.247731][ T3483] can: request_module (can-proto-4) failed. [ 26.248841][ T3306] veth0_macvtap: entered promiscuous mode [ 26.265059][ T3306] veth1_macvtap: entered promiscuous mode [ 26.274370][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.284992][ T3486] Zero length message leads to an empty skb [ 26.295018][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.305296][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.314098][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.322911][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.331631][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.348264][ T3488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 26.357000][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 26.367503][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.385753][ T3492] loop3: detected capacity change from 0 to 512 [ 26.400399][ T3492] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.9: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 26.418584][ T3492] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.9: Bad quota inode: 3, type: 0 [ 26.429601][ T3492] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 26.444865][ T3492] EXT4-fs (loop3): mount failed [ 26.464637][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.473482][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.482220][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.490965][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.544210][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 26.544225][ T29] audit: type=1326 audit(1752947553.384:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.579600][ T29] audit: type=1326 audit(1752947553.384:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.602829][ T29] audit: type=1326 audit(1752947553.384:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.626076][ T29] audit: type=1326 audit(1752947553.384:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.626978][ T3501] loop0: detected capacity change from 0 to 2048 [ 26.649247][ T29] audit: type=1326 audit(1752947553.384:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.678748][ T29] audit: type=1326 audit(1752947553.384:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.689515][ T3501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.701941][ T29] audit: type=1326 audit(1752947553.384:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.701979][ T29] audit: type=1326 audit(1752947553.384:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.732506][ T3501] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.10: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 26.737061][ T29] audit: type=1326 audit(1752947553.414:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.763448][ T3501] EXT4-fs (loop0): Remounting filesystem read-only [ 26.778024][ T29] audit: type=1326 audit(1752947553.424:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.0.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafef0e9a9 code=0x7ffc0000 [ 26.895301][ T3508] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 26.913429][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.941076][ T3506] infiniband syz2: set active [ 26.945791][ T3506] infiniband syz2: added veth0_to_bond [ 26.966597][ T3506] RDS/IB: syz2: added [ 26.970894][ T3506] smc: adding ib device syz2 with port count 1 [ 26.977088][ T3506] smc: ib device syz2 port 1 has pnetid [ 26.983749][ T3511] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 27.058197][ T3518] loop0: detected capacity change from 0 to 2048 [ 27.080621][ T3518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.155322][ T3518] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.13: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 27.173072][ T3518] EXT4-fs (loop0): Remounting filesystem read-only [ 27.230188][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.309295][ T3526] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 27.318207][ T3528] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 27.384308][ T3536] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 27.452770][ T3543] loop1: detected capacity change from 0 to 512 [ 27.465916][ T3506] syz.3.11 (3506) used greatest stack depth: 10616 bytes left [ 27.503018][ T3543] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.22: casefold flag without casefold feature [ 27.549384][ T3543] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.22: couldn't read orphan inode 15 (err -117) [ 27.550439][ T3557] syz2: rxe_newlink: already configured on veth0_to_bond [ 27.569039][ T3543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.694458][ T3559] loop2: detected capacity change from 0 to 8192 [ 27.712023][ T3566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 27.720866][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 27.860792][ T3575] loop0: detected capacity change from 0 to 512 [ 27.894928][ T3575] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.31: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 27.898542][ T3554] infiniband syz1: set active [ 27.917404][ T3554] infiniband syz1: added bond0 [ 27.945149][ T3582] loop2: detected capacity change from 0 to 512 [ 27.955469][ T3566] syz.3.28 (3566) used greatest stack depth: 10560 bytes left [ 27.983318][ T3575] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.31: Bad quota inode: 3, type: 0 [ 27.998314][ T3554] RDS/IB: syz1: added [ 28.002511][ T3554] smc: adding ib device syz1 with port count 1 [ 28.013527][ T3554] smc: ib device syz1 port 1 has pnetid [ 28.030917][ T3582] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.33: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 28.053495][ T3575] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 28.082367][ T3586] loop3: detected capacity change from 0 to 512 [ 28.086730][ T3575] EXT4-fs (loop0): mount failed [ 28.103286][ T3582] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.33: Bad quota inode: 3, type: 0 [ 28.133674][ T3586] EXT4-fs: Ignoring removed nobh option [ 28.150898][ T3582] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 28.188107][ T3586] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.208703][ T3582] EXT4-fs (loop2): mount failed [ 28.246865][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.35: corrupted inode contents [ 28.312484][ T3586] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.35: mark_inode_dirty error [ 28.339476][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.35: corrupted inode contents [ 28.362153][ T3591] loop0: detected capacity change from 0 to 2048 [ 28.362557][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.373808][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.377593][ T3586] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.35: mark_inode_dirty error [ 28.398702][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.432270][ T3586] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.35: Failed to acquire dquot type 0 [ 28.433040][ T3591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.456748][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.35: corrupted inode contents [ 28.475873][ T3595] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 28.491016][ T3591] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.36: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 28.506030][ T3597] loop1: detected capacity change from 0 to 2048 [ 28.510999][ T3595] team0: Port device dummy0 added [ 28.533610][ T3586] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.35: mark_inode_dirty error [ 28.546307][ T3591] EXT4-fs (loop0): Remounting filesystem read-only [ 28.559542][ T3595] mmap: syz.2.37 (3595) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 28.560263][ T3597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.590720][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.35: corrupted inode contents [ 28.604096][ T3595] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 28.605094][ T3597] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.38: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 28.629113][ T3597] EXT4-fs (loop1): Remounting filesystem read-only [ 28.648383][ T3595] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 28.659309][ T3595] team0: Failed to send options change via netlink (err -105) [ 28.659577][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.666814][ T3595] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 28.676755][ T3586] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.35: mark_inode_dirty error [ 28.684855][ T3595] team0: Port device dummy0 removed [ 28.703265][ T3595] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 28.715507][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.724539][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.35: corrupted inode contents [ 28.737366][ T3586] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 28.784346][ T3586] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.35: corrupted inode contents [ 28.817859][ T3586] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.35: mark_inode_dirty error [ 28.818178][ T3595] loop2: detected capacity change from 0 to 512 [ 28.850771][ T3586] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 28.872410][ T3586] EXT4-fs (loop3): 1 truncate cleaned up [ 28.880395][ T3586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.886229][ T3595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.908217][ T3586] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.921011][ T3595] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.991230][ T3586] syz.3.35 (3586) used greatest stack depth: 9800 bytes left [ 28.999010][ T3617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'. [ 29.030750][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.112208][ T3621] bridge_slave_0: left allmulticast mode [ 29.117581][ T3618] rdma_rxe: rxe_newlink: failed to add bond0 [ 29.117950][ T3621] bridge_slave_0: left promiscuous mode [ 29.129615][ T3621] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.172144][ C1] hrtimer: interrupt took 60422 ns [ 29.210023][ T3621] bridge_slave_1: left allmulticast mode [ 29.215867][ T3621] bridge_slave_1: left promiscuous mode [ 29.221628][ T3621] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.245883][ T3621] bond0: (slave bond_slave_0): Releasing backup interface [ 29.267650][ T3621] bond0: (slave bond_slave_1): Releasing backup interface [ 29.293907][ T3621] team0: Port device team_slave_0 removed [ 29.321621][ T3621] team0: Port device team_slave_1 removed [ 29.341779][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.349221][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 29.429078][ T3621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.436504][ T3621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 29.601759][ T23] syz2: Port: 1 Link DOWN [ 29.740361][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.754934][ T3623] loop0: detected capacity change from 0 to 512 [ 29.782432][ T3623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 29.820143][ T3623] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.848178][ T3623] EXT4-fs (loop0): 1 truncate cleaned up [ 29.855903][ T3634] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 29.879371][ T3623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.995199][ T3637] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 30.012085][ T3631] loop3: detected capacity change from 0 to 512 [ 30.063425][ T3631] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 30.107745][ T3642] syz1: rxe_newlink: already configured on bond0 [ 30.117414][ T3631] EXT4-fs (loop3): 1 truncate cleaned up [ 30.127682][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.136779][ T3641] loop2: detected capacity change from 0 to 512 [ 30.155103][ T3631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.182076][ T3641] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.50: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 30.276459][ T3641] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.50: Bad quota inode: 3, type: 0 [ 30.301929][ T3647] bridge_slave_0: left allmulticast mode [ 30.307648][ T3647] bridge_slave_0: left promiscuous mode [ 30.313358][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.329000][ T3641] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 30.359762][ T3647] bridge_slave_1: left allmulticast mode [ 30.365564][ T3647] bridge_slave_1: left promiscuous mode [ 30.371318][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.379679][ T3641] EXT4-fs (loop2): mount failed [ 30.413238][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.432670][ T3647] bond0: (slave bond_slave_0): Releasing backup interface [ 30.463033][ T3652] process 'syz.3.52' launched './file1' with NULL argv: empty string added [ 30.495287][ T3647] bond0: (slave bond_slave_1): Releasing backup interface [ 30.513045][ T3655] loop2: detected capacity change from 0 to 512 [ 30.592955][ T3647] team0: Port device team_slave_0 removed [ 30.605199][ T3647] team0: Port device team_slave_1 removed [ 30.611981][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.619655][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.644133][ T3647] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.652059][ T3647] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.659981][ T3655] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.54: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 30.701780][ T3655] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.54: Bad quota inode: 3, type: 0 [ 30.739500][ T3655] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 30.880632][ T3662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.56'. [ 30.889566][ T3662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 30.900227][ T3655] EXT4-fs (loop2): mount failed [ 31.068906][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.085595][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.096180][ T3670] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 31.108542][ T3657] loop3: detected capacity change from 0 to 512 [ 31.113399][ T3670] team0: Port device dummy0 added [ 31.141443][ T3670] netlink: 'syz.1.59': attribute type 10 has an invalid length. [ 31.150242][ T3657] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.166070][ T3670] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.187781][ T3657] EXT4-fs (loop3): 1 truncate cleaned up [ 31.195214][ T3670] team0: Failed to send options change via netlink (err -105) [ 31.207888][ T3657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.207948][ T3670] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.232163][ T3670] team0: Port device dummy0 removed [ 31.240079][ T3670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 31.256849][ T3674] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 31.331708][ T3670] loop1: detected capacity change from 0 to 512 [ 31.379748][ T3670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.398694][ T3678] loop0: detected capacity change from 0 to 8192 [ 31.404784][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.409076][ T3670] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.628534][ T3688] rdma_rxe: rxe_newlink: failed to add bond0 [ 31.840626][ T3693] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 31.911824][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.931920][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.944943][ T3698] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 31.950948][ T3697] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 31.989569][ T3697] team0: Port device dummy0 added [ 32.030140][ T3697] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 32.047027][ T3697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 32.075356][ T3697] team0: Failed to send options change via netlink (err -105) [ 32.094629][ T3697] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 32.116263][ T3697] team0: Port device dummy0 removed [ 32.127404][ T3697] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 32.175742][ T3697] loop4: detected capacity change from 0 to 512 [ 32.251162][ T3697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.263874][ T3697] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.886994][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.015853][ T3710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.72'. [ 33.062408][ T3712] syz2: rxe_newlink: already configured on veth0_to_bond [ 33.133013][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 33.133029][ T29] audit: type=1326 audit(1752947559.974:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.170390][ T3719] loop3: detected capacity change from 0 to 512 [ 33.175868][ T29] audit: type=1326 audit(1752947559.974:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.199779][ T29] audit: type=1326 audit(1752947560.004:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.222945][ T29] audit: type=1326 audit(1752947560.004:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.243303][ T3717] loop0: detected capacity change from 0 to 8192 [ 33.246120][ T29] audit: type=1326 audit(1752947560.004:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.275652][ T29] audit: type=1326 audit(1752947560.004:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.298784][ T29] audit: type=1326 audit(1752947560.004:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.321946][ T29] audit: type=1326 audit(1752947560.004:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.345123][ T29] audit: type=1326 audit(1752947560.004:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.368113][ T29] audit: type=1326 audit(1752947560.004:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 33.393393][ T3719] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.74: casefold flag without casefold feature [ 33.420737][ T3719] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.74: couldn't read orphan inode 15 (err -117) [ 33.462764][ T3719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.512355][ T3715] loop4: detected capacity change from 0 to 512 [ 33.544364][ T3715] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.590757][ T3715] EXT4-fs (loop4): 1 truncate cleaned up [ 33.614164][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.692930][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.753150][ T3730] syz2: rxe_newlink: already configured on veth0_to_bond [ 33.792060][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.821879][ T3734] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 33.896155][ T3740] loop3: detected capacity change from 0 to 2048 [ 33.930059][ T3740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.946783][ T3741] syz1: rxe_newlink: already configured on bond0 [ 33.979719][ T3740] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.85: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.996177][ T3740] EXT4-fs (loop3): Remounting filesystem read-only [ 34.013718][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.148840][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.208384][ T3748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 34.217202][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 34.310420][ T3752] loop2: detected capacity change from 0 to 512 [ 34.359778][ T3752] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.88: casefold flag without casefold feature [ 34.376832][ T3752] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.88: couldn't read orphan inode 15 (err -117) [ 34.499295][ T3752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.571200][ T3758] loop0: detected capacity change from 0 to 512 [ 34.608957][ T3758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.629250][ T3758] EXT4-fs (loop0): 1 truncate cleaned up [ 34.635235][ T3758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.820061][ T3763] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 35.000281][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.015758][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.074820][ T3771] bond0: (slave dummy0): Releasing backup interface [ 35.095244][ T3771] bridge_slave_0: left allmulticast mode [ 35.100945][ T3771] bridge_slave_0: left promiscuous mode [ 35.106698][ T3771] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.174647][ T3771] bridge_slave_1: left allmulticast mode [ 35.180445][ T3771] bridge_slave_1: left promiscuous mode [ 35.186174][ T3771] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.247711][ T3771] bond0: (slave bond_slave_0): Releasing backup interface [ 35.274587][ T3771] bond0: (slave bond_slave_1): Releasing backup interface [ 35.304386][ T3771] team0: Port device team_slave_0 removed [ 35.326407][ T3771] team0: Port device team_slave_1 removed [ 35.344024][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.352347][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.373190][ T3771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.380717][ T3771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.454399][ T3775] bond0: (slave dummy0): Releasing backup interface [ 35.462251][ T3786] loop3: detected capacity change from 0 to 512 [ 35.474731][ T3775] bridge_slave_0: left allmulticast mode [ 35.480536][ T3775] bridge_slave_0: left promiscuous mode [ 35.486293][ T3775] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.494705][ T3788] netlink: 20 bytes leftover after parsing attributes in process `syz.0.101'. [ 35.503733][ T3788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 35.514071][ T3786] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.102: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 35.533674][ T3775] bridge_slave_1: left allmulticast mode [ 35.539368][ T3775] bridge_slave_1: left promiscuous mode [ 35.545069][ T3775] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.558750][ T3786] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.102: Bad quota inode: 3, type: 0 [ 35.570558][ T3792] SELinux: Context system_u:object_r:inetd_child_exec_t:s0 is not valid (left unmapped). [ 35.580839][ T3775] bond0: (slave bond_slave_0): Releasing backup interface [ 35.583970][ T3786] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.606211][ T3775] bond0: (slave bond_slave_1): Releasing backup interface [ 35.622369][ T3775] team0: Port device team_slave_0 removed [ 35.629839][ T3786] EXT4-fs (loop3): mount failed [ 35.645227][ T3775] team0: Port device team_slave_1 removed [ 35.666118][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.673729][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.690285][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.697704][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.810286][ T3800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.820681][ T3800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.959640][ T3800] loop2: detected capacity change from 0 to 8192 [ 36.027330][ T3812] FAULT_INJECTION: forcing a failure. [ 36.027330][ T3812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 36.040453][ T3812] CPU: 1 UID: 0 PID: 3812 Comm: syz.0.111 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 36.040486][ T3812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.040503][ T3812] Call Trace: [ 36.040509][ T3812] [ 36.040516][ T3812] __dump_stack+0x1d/0x30 [ 36.040544][ T3812] dump_stack_lvl+0xe8/0x140 [ 36.040603][ T3812] dump_stack+0x15/0x1b [ 36.040623][ T3812] should_fail_ex+0x265/0x280 [ 36.040658][ T3812] should_fail+0xb/0x20 [ 36.040686][ T3812] should_fail_usercopy+0x1a/0x20 [ 36.040758][ T3812] _copy_from_user+0x1c/0xb0 [ 36.040778][ T3812] __sys_bpf+0x178/0x790 [ 36.040812][ T3812] __x64_sys_bpf+0x41/0x50 [ 36.040841][ T3812] x64_sys_call+0x2478/0x2fb0 [ 36.040947][ T3812] do_syscall_64+0xd2/0x200 [ 36.040965][ T3812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.040993][ T3812] ? clear_bhb_loop+0x40/0x90 [ 36.041014][ T3812] ? clear_bhb_loop+0x40/0x90 [ 36.041055][ T3812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.041077][ T3812] RIP: 0033:0x7fcafef0e9a9 [ 36.041095][ T3812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.041114][ T3812] RSP: 002b:00007fcafd56f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.041136][ T3812] RAX: ffffffffffffffda RBX: 00007fcaff135fa0 RCX: 00007fcafef0e9a9 [ 36.041164][ T3812] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 36.041180][ T3812] RBP: 00007fcafd56f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.041192][ T3812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.041204][ T3812] R13: 0000000000000000 R14: 00007fcaff135fa0 R15: 00007fff4a445a98 [ 36.041222][ T3812] [ 36.342265][ T3818] loop0: detected capacity change from 0 to 4096 [ 36.352604][ T3805] loop3: detected capacity change from 0 to 512 [ 36.363170][ T3805] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.381909][ T3818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.422448][ T3805] EXT4-fs (loop3): 1 truncate cleaned up [ 36.436717][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.454443][ T3828] 9pnet_fd: Insufficient options for proto=fd [ 36.518092][ T3829] Falling back ldisc for ttyS3. [ 36.612805][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.643447][ T3833] loop3: detected capacity change from 0 to 512 [ 36.678425][ T3835] loop2: detected capacity change from 0 to 512 [ 36.685880][ T3833] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.115: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 36.710052][ T3835] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.719104][ T3835] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 36.745103][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.758668][ T3839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 36.782467][ T3835] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 36.817934][ T3835] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 36.832141][ T3833] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.115: Bad quota inode: 3, type: 0 [ 36.866911][ T3835] System zones: 0-2, 18-18, 34-34 [ 36.872781][ T3847] netlink: 96 bytes leftover after parsing attributes in process `syz.4.120'. [ 36.882148][ T3835] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.116: iget: bad i_size value: 360287970189639680 [ 36.902421][ T3833] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 36.958102][ T3835] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.116: couldn't read orphan inode 15 (err -117) [ 36.971013][ T3833] EXT4-fs (loop3): mount failed [ 36.988304][ T3835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.001432][ T3849] rdma_rxe: rxe_newlink: failed to add bond0 [ 37.093971][ T3853] loop4: detected capacity change from 0 to 764 [ 37.097774][ T3854] ipvlan2: entered promiscuous mode [ 37.129512][ T3854] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 37.194446][ T3854] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 37.209376][ T3860] netlink: 452 bytes leftover after parsing attributes in process `syz.3.123'. [ 37.242287][ T3860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.278217][ T3860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.304340][ T3862] rock: directory entry would overflow storage [ 37.310548][ T3862] rock: sig=0x4f50, size=4, remaining=3 [ 37.316175][ T3862] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 37.381236][ T3857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 37.438178][ T3861] loop1: detected capacity change from 0 to 2048 [ 37.518657][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.699107][ T3861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.762919][ T3861] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.124: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 37.850891][ T3861] EXT4-fs (loop1): Remounting filesystem read-only [ 37.964693][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.045194][ T3878] syz2: rxe_newlink: already configured on veth0_to_bond [ 38.171067][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 38.171083][ T29] audit: type=1326 audit(1752947565.014:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.211348][ T3882] loop3: detected capacity change from 0 to 512 [ 38.219625][ T3882] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.132: casefold flag without casefold feature [ 38.241582][ T29] audit: type=1326 audit(1752947565.014:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.264871][ T29] audit: type=1326 audit(1752947565.044:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.280983][ T3882] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.132: couldn't read orphan inode 15 (err -117) [ 38.288099][ T29] audit: type=1326 audit(1752947565.044:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.323199][ T29] audit: type=1326 audit(1752947565.044:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.346491][ T29] audit: type=1326 audit(1752947565.044:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.369742][ T29] audit: type=1326 audit(1752947565.044:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.392790][ T29] audit: type=1326 audit(1752947565.044:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.416029][ T29] audit: type=1326 audit(1752947565.044:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.439187][ T29] audit: type=1326 audit(1752947565.044:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3881 comm="syz.3.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 38.464083][ T3882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.484310][ T3885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.133'. [ 38.607330][ T3892] pim6reg: entered allmulticast mode [ 38.614876][ T3892] pim6reg: left allmulticast mode [ 38.664014][ T3900] loop0: detected capacity change from 0 to 512 [ 38.675115][ T3892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.135'. [ 38.702656][ T3900] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.140: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 38.747542][ T3906] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 38.764193][ T3905] FAULT_INJECTION: forcing a failure. [ 38.764193][ T3905] name failslab, interval 1, probability 0, space 0, times 1 [ 38.776879][ T3905] CPU: 0 UID: 0 PID: 3905 Comm: syz.1.142 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 38.776911][ T3905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.776924][ T3905] Call Trace: [ 38.776930][ T3905] [ 38.776937][ T3905] __dump_stack+0x1d/0x30 [ 38.776957][ T3905] dump_stack_lvl+0xe8/0x140 [ 38.777003][ T3905] dump_stack+0x15/0x1b [ 38.777024][ T3905] should_fail_ex+0x265/0x280 [ 38.777060][ T3905] should_failslab+0x8c/0xb0 [ 38.777115][ T3905] kmem_cache_alloc_noprof+0x50/0x310 [ 38.777147][ T3905] ? security_file_alloc+0x32/0x100 [ 38.777188][ T3905] security_file_alloc+0x32/0x100 [ 38.777227][ T3905] init_file+0x5c/0x1d0 [ 38.777276][ T3905] alloc_empty_file+0x8b/0x200 [ 38.777305][ T3905] path_openat+0x68/0x2170 [ 38.777364][ T3905] ? _parse_integer_limit+0x170/0x190 [ 38.777401][ T3905] ? kstrtoull+0x111/0x140 [ 38.777433][ T3905] ? kstrtouint+0x76/0xc0 [ 38.777460][ T3905] do_filp_open+0x109/0x230 [ 38.777567][ T3905] do_sys_openat2+0xa6/0x110 [ 38.777600][ T3905] __x64_sys_openat+0xf2/0x120 [ 38.777633][ T3905] x64_sys_call+0x1af/0x2fb0 [ 38.777660][ T3905] do_syscall_64+0xd2/0x200 [ 38.777719][ T3905] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.777751][ T3905] ? clear_bhb_loop+0x40/0x90 [ 38.777778][ T3905] ? clear_bhb_loop+0x40/0x90 [ 38.777803][ T3905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.777901][ T3905] RIP: 0033:0x7fa57f1ae9a9 [ 38.777918][ T3905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.777988][ T3905] RSP: 002b:00007fa57d80f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.778006][ T3905] RAX: ffffffffffffffda RBX: 00007fa57f3d5fa0 RCX: 00007fa57f1ae9a9 [ 38.778019][ T3905] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 38.778032][ T3905] RBP: 00007fa57d80f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.778118][ T3905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.778131][ T3905] R13: 0000000000000000 R14: 00007fa57f3d5fa0 R15: 00007ffc5a05fdb8 [ 38.778153][ T3905] [ 38.998196][ T3900] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.140: Bad quota inode: 3, type: 0 [ 39.021443][ T3900] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 39.037520][ T3900] EXT4-fs (loop0): mount failed [ 39.047525][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.122165][ T3909] loop3: detected capacity change from 0 to 512 [ 39.131669][ T3914] netlink: 96 bytes leftover after parsing attributes in process `syz.1.145'. [ 39.144294][ T3909] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.143: casefold flag without casefold feature [ 39.180124][ T3919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.195305][ T3909] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.143: couldn't read orphan inode 15 (err -117) [ 39.234287][ T3909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.287684][ T3929] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.149'. [ 39.305956][ T2997] udevd[2997]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 39.318473][ T3933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3933 comm=syz.4.150 [ 39.333913][ T2997] udevd[2997]: worker [3295] failed while handling '/devices/virtual/block/loop1' [ 39.385562][ T3935] netlink: 'syz.1.151': attribute type 27 has an invalid length. [ 39.448909][ T3940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.153'. [ 39.563392][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.599421][ T3935] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.608546][ T3935] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.617804][ T3935] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.627223][ T3935] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.644992][ T3942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 39.653919][ T3942] netlink: 152 bytes leftover after parsing attributes in process `syz.4.154'. [ 39.718847][ T3951] netlink: 96 bytes leftover after parsing attributes in process `syz.1.157'. [ 39.754727][ T3957] ip6t_srh: unknown srh invflags 4000 [ 39.822899][ T3967] FAULT_INJECTION: forcing a failure. [ 39.822899][ T3967] name failslab, interval 1, probability 0, space 0, times 0 [ 39.835610][ T3967] CPU: 1 UID: 0 PID: 3967 Comm: syz.4.165 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 39.835641][ T3967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.835656][ T3967] Call Trace: [ 39.835662][ T3967] [ 39.835668][ T3967] __dump_stack+0x1d/0x30 [ 39.835689][ T3967] dump_stack_lvl+0xe8/0x140 [ 39.835709][ T3967] dump_stack+0x15/0x1b [ 39.835759][ T3967] should_fail_ex+0x265/0x280 [ 39.835793][ T3967] should_failslab+0x8c/0xb0 [ 39.835817][ T3967] kmem_cache_alloc_node_noprof+0x57/0x320 [ 39.835848][ T3967] ? __alloc_skb+0x101/0x320 [ 39.835957][ T3967] __alloc_skb+0x101/0x320 [ 39.835985][ T3967] ? locks_remove_posix+0x1b4/0x300 [ 39.836022][ T3967] qrtr_port_remove+0x71/0x200 [ 39.836060][ T3967] qrtr_release+0x153/0x1e0 [ 39.836105][ T3967] sock_close+0x68/0x150 [ 39.836127][ T3967] ? __pfx_sock_close+0x10/0x10 [ 39.836156][ T3967] __fput+0x298/0x650 [ 39.836182][ T3967] ____fput+0x1c/0x30 [ 39.836208][ T3967] task_work_run+0x131/0x1a0 [ 39.836275][ T3967] exit_to_user_mode_loop+0xe4/0x100 [ 39.836311][ T3967] do_syscall_64+0x1d6/0x200 [ 39.836331][ T3967] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.836359][ T3967] ? clear_bhb_loop+0x40/0x90 [ 39.836386][ T3967] ? clear_bhb_loop+0x40/0x90 [ 39.836414][ T3967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.836502][ T3967] RIP: 0033:0x7f67ea64e9a9 [ 39.836520][ T3967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.836536][ T3967] RSP: 002b:00007f67e8caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 39.836554][ T3967] RAX: 0000000000000000 RBX: 00007f67ea875fa0 RCX: 00007f67ea64e9a9 [ 39.836615][ T3967] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 39.836629][ T3967] RBP: 00007f67e8caf090 R08: 0000000000000000 R09: 0000000000000000 [ 39.836642][ T3967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.836656][ T3967] R13: 0000000000000000 R14: 00007f67ea875fa0 R15: 00007ffd156dec38 [ 39.836673][ T3967] [ 40.083241][ T3963] loop3: detected capacity change from 0 to 512 [ 40.090851][ T3963] EXT4-fs: Ignoring removed orlov option [ 40.100094][ T3963] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.121465][ T3963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 40.138503][ T3972] loop0: detected capacity change from 0 to 512 [ 40.139583][ T3963] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.164: corrupted in-inode xattr: e_value size too large [ 40.145356][ T3972] EXT4-fs: Ignoring removed orlov option [ 40.164430][ T3963] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.164: couldn't read orphan inode 15 (err -117) [ 40.179007][ T3976] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.167'. [ 40.190237][ T3972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.213547][ T3963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.229382][ T3972] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.166: bg 0: block 248: padding at end of block bitmap is not set [ 40.245072][ T3972] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.166: Failed to acquire dquot type 1 [ 40.268498][ T3972] EXT4-fs (loop0): 1 truncate cleaned up [ 40.278399][ T3972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.303355][ T3972] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.324142][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.164'. [ 40.446957][ T3963] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 40.448200][ T3972] syz.0.166 (3972) used greatest stack depth: 9304 bytes left [ 40.484919][ T3963] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 40.526688][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.747379][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.769240][ T3999] bond0: (slave dummy0): Releasing backup interface [ 40.781876][ T3999] bridge_slave_0: left allmulticast mode [ 40.787536][ T3999] bridge_slave_0: left promiscuous mode [ 40.793368][ T3999] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.831873][ T3999] bridge_slave_1: left allmulticast mode [ 40.837619][ T3999] bridge_slave_1: left promiscuous mode [ 40.843542][ T3999] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.890490][ T3999] bond0: (slave bond_slave_0): Releasing backup interface [ 40.910759][ T3999] bond0: (slave bond_slave_1): Releasing backup interface [ 40.959491][ T3999] team0: Port device team_slave_0 removed [ 40.971336][ T3999] team0: Port device team_slave_1 removed [ 40.979515][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.986923][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.029488][ T3999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.036919][ T3999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.290537][ T4006] loop1: detected capacity change from 0 to 512 [ 41.337629][ T4006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.354877][ T4018] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 41.358943][ T4020] loop0: detected capacity change from 0 to 512 [ 41.394244][ T4020] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.180: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 41.410576][ T4006] EXT4-fs (loop1): 1 truncate cleaned up [ 41.431648][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.468443][ T4020] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.180: Bad quota inode: 3, type: 0 [ 41.507470][ T4020] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 41.554612][ T4020] EXT4-fs (loop0): mount failed [ 41.612003][ T4028] FAULT_INJECTION: forcing a failure. [ 41.612003][ T4028] name failslab, interval 1, probability 0, space 0, times 0 [ 41.624699][ T4028] CPU: 0 UID: 0 PID: 4028 Comm: syz.3.182 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 41.624782][ T4028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.624795][ T4028] Call Trace: [ 41.624802][ T4028] [ 41.624810][ T4028] __dump_stack+0x1d/0x30 [ 41.624865][ T4028] dump_stack_lvl+0xe8/0x140 [ 41.624886][ T4028] dump_stack+0x15/0x1b [ 41.624903][ T4028] should_fail_ex+0x265/0x280 [ 41.624974][ T4028] should_failslab+0x8c/0xb0 [ 41.625000][ T4028] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 41.625110][ T4028] ? sidtab_sid2str_get+0xa0/0x130 [ 41.625139][ T4028] kmemdup_noprof+0x2b/0x70 [ 41.625245][ T4028] sidtab_sid2str_get+0xa0/0x130 [ 41.625271][ T4028] security_sid_to_context_core+0x1eb/0x2e0 [ 41.625299][ T4028] security_sid_to_context+0x27/0x40 [ 41.625343][ T4028] selinux_lsmprop_to_secctx+0x67/0xf0 [ 41.625366][ T4028] security_lsmprop_to_secctx+0x43/0x80 [ 41.625397][ T4028] audit_log_task_context+0x77/0x190 [ 41.625448][ T4028] audit_log_task+0xf4/0x250 [ 41.625481][ T4028] audit_seccomp+0x61/0x100 [ 41.625509][ T4028] ? __seccomp_filter+0x68c/0x10d0 [ 41.625533][ T4028] __seccomp_filter+0x69d/0x10d0 [ 41.625576][ T4028] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.625615][ T4028] ? vfs_write+0x75e/0x8e0 [ 41.625655][ T4028] __secure_computing+0x82/0x150 [ 41.625680][ T4028] syscall_trace_enter+0xcf/0x1e0 [ 41.625792][ T4028] do_syscall_64+0xac/0x200 [ 41.625813][ T4028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.625903][ T4028] ? clear_bhb_loop+0x40/0x90 [ 41.625988][ T4028] ? clear_bhb_loop+0x40/0x90 [ 41.626074][ T4028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.626099][ T4028] RIP: 0033:0x7fc2124fe9a9 [ 41.626115][ T4028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.626134][ T4028] RSP: 002b:00007fc210b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 41.626166][ T4028] RAX: ffffffffffffffda RBX: 00007fc212725fa0 RCX: 00007fc2124fe9a9 [ 41.626179][ T4028] RDX: 0000000000000000 RSI: 0000000000000220 RDI: 0000000000000003 [ 41.626194][ T4028] RBP: 00007fc210b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.626209][ T4028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.626223][ T4028] R13: 0000000000000000 R14: 00007fc212725fa0 R15: 00007ffc0b0972f8 [ 41.626244][ T4028] [ 42.007027][ T4036] loop2: detected capacity change from 0 to 512 [ 42.019237][ T4036] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.186: casefold flag without casefold feature [ 42.044519][ T4036] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.186: couldn't read orphan inode 15 (err -117) [ 42.064337][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.095546][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.222221][ T4047] loop3: detected capacity change from 0 to 128 [ 42.237799][ T4045] loop1: detected capacity change from 0 to 512 [ 42.364960][ T4045] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.188: casefold flag without casefold feature [ 42.381362][ T4045] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.188: couldn't read orphan inode 15 (err -117) [ 42.401515][ T4045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.445396][ T4047] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.461265][ T4058] capability: warning: `syz.4.193' uses deprecated v2 capabilities in a way that may be insecure [ 42.524861][ T4047] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.551651][ T4060] loop0: detected capacity change from 0 to 1024 [ 42.585845][ T4060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.596505][ T4062] loop4: detected capacity change from 0 to 2048 [ 42.619847][ T4060] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.194: Failed to acquire dquot type 0 [ 42.640893][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.660149][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.663058][ T4060] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.685133][ T4062] EXT4-fs (loop4): shut down requested (0) [ 42.748060][ T4060] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.194: corrupted inode contents [ 42.748488][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.764597][ T4060] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.194: mark_inode_dirty error [ 42.783517][ T4070] netlink: 'syz.2.197': attribute type 13 has an invalid length. [ 42.812606][ T23] IPVS: starting estimator thread 0... [ 42.816744][ T4060] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.194: corrupted inode contents [ 42.818786][ T4066] IPVS: ip_vs_add_dest(): server weight less than zero [ 42.837325][ T4060] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.194: mark_inode_dirty error [ 42.857467][ T4060] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.194: corrupted inode contents [ 42.889497][ T4060] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 42.889852][ T4076] FAULT_INJECTION: forcing a failure. [ 42.889852][ T4076] name failslab, interval 1, probability 0, space 0, times 0 [ 42.889879][ T4076] CPU: 1 UID: 0 PID: 4076 Comm: syz.4.198 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 42.889963][ T4076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.889995][ T4076] Call Trace: [ 42.890003][ T4076] [ 42.890011][ T4076] __dump_stack+0x1d/0x30 [ 42.890035][ T4076] dump_stack_lvl+0xe8/0x140 [ 42.890058][ T4076] dump_stack+0x15/0x1b [ 42.890078][ T4076] should_fail_ex+0x265/0x280 [ 42.890200][ T4076] should_failslab+0x8c/0xb0 [ 42.890227][ T4076] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 42.890264][ T4076] ? sidtab_sid2str_get+0xa0/0x130 [ 42.890339][ T4076] kmemdup_noprof+0x2b/0x70 [ 42.890366][ T4076] sidtab_sid2str_get+0xa0/0x130 [ 42.890393][ T4076] security_sid_to_context_core+0x1eb/0x2e0 [ 42.890465][ T4076] security_sid_to_context+0x27/0x40 [ 42.890490][ T4076] selinux_lsmprop_to_secctx+0x67/0xf0 [ 42.890518][ T4076] security_lsmprop_to_secctx+0x43/0x80 [ 42.890564][ T4076] audit_log_task_context+0x77/0x190 [ 42.890606][ T4076] audit_log_task+0xf4/0x250 [ 42.890640][ T4076] audit_seccomp+0x61/0x100 [ 42.890695][ T4076] ? __seccomp_filter+0x68c/0x10d0 [ 42.890721][ T4076] __seccomp_filter+0x69d/0x10d0 [ 42.890749][ T4076] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.890791][ T4076] ? vfs_write+0x75e/0x8e0 [ 42.890872][ T4076] __secure_computing+0x82/0x150 [ 42.890897][ T4076] syscall_trace_enter+0xcf/0x1e0 [ 42.890926][ T4076] do_syscall_64+0xac/0x200 [ 42.890947][ T4076] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.891046][ T4076] ? clear_bhb_loop+0x40/0x90 [ 42.891122][ T4076] ? clear_bhb_loop+0x40/0x90 [ 42.891213][ T4076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.891239][ T4076] RIP: 0033:0x7f67ea64e9a9 [ 42.891256][ T4076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.891277][ T4076] RSP: 002b:00007f67e8caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 42.891377][ T4076] RAX: ffffffffffffffda RBX: 00007f67ea875fa0 RCX: 00007f67ea64e9a9 [ 42.891420][ T4076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.891434][ T4076] RBP: 00007f67e8caf090 R08: 0000000000000000 R09: 0000000000000000 [ 42.891449][ T4076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.891463][ T4076] R13: 0000000000000000 R14: 00007f67ea875fa0 R15: 00007ffd156dec38 [ 42.891558][ T4076] [ 42.898022][ T4060] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.194: corrupted inode contents [ 42.900209][ T4060] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.194: mark_inode_dirty error [ 42.900916][ T4060] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 42.908236][ T4060] EXT4-fs (loop0): 1 truncate cleaned up [ 42.908732][ T4060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.938441][ T4073] IPVS: using max 2688 ests per chain, 134400 per kthread [ 42.947031][ T4070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.974479][ T4070] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 42.987613][ T4060] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.045070][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.064749][ T4087] netlink: 'syz.4.200': attribute type 1 has an invalid length. [ 43.069782][ T4087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.159700][ T4095] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 43.202282][ T4093] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 43.324040][ T3310] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 74: comm syz-executor: path /50/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=768, inode=0, rec_len=0, size=1024 fake=0 [ 43.329974][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 43.329988][ T29] audit: type=1400 audit(1752947570.124:896): avc: denied { execute } for pid=4059 comm="syz.0.194" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 43.393403][ T4093] loop4: detected capacity change from 0 to 2048 [ 43.451262][ T29] audit: type=1400 audit(1752947570.294:897): avc: denied { read } for pid=4085 comm="syz.1.202" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.494675][ T4093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.513036][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.524564][ T4101] FAULT_INJECTION: forcing a failure. [ 43.524564][ T4101] name failslab, interval 1, probability 0, space 0, times 0 [ 43.537300][ T4101] CPU: 1 UID: 0 PID: 4101 Comm: syz.2.205 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 43.537384][ T4101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.537399][ T4101] Call Trace: [ 43.537406][ T4101] [ 43.537414][ T4101] __dump_stack+0x1d/0x30 [ 43.537438][ T4101] dump_stack_lvl+0xe8/0x140 [ 43.537462][ T4101] dump_stack+0x15/0x1b [ 43.537483][ T4101] should_fail_ex+0x265/0x280 [ 43.537548][ T4101] should_failslab+0x8c/0xb0 [ 43.537576][ T4101] kmem_cache_alloc_node_noprof+0x57/0x320 [ 43.537611][ T4101] ? __alloc_skb+0x101/0x320 [ 43.537647][ T4101] __alloc_skb+0x101/0x320 [ 43.537700][ T4101] alloc_skb_with_frags+0x7d/0x470 [ 43.537810][ T4101] ? __rcu_read_unlock+0x4f/0x70 [ 43.537837][ T4101] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 43.537879][ T4101] sock_alloc_send_pskb+0x43a/0x4f0 [ 43.537906][ T4101] ? __scm_send+0x8f6/0xae0 [ 43.537932][ T4101] queue_oob+0x69/0x500 [ 43.538011][ T4101] unix_stream_sendmsg+0x7e0/0x8e0 [ 43.538039][ T4101] ? selinux_socket_sendmsg+0x175/0x1b0 [ 43.538081][ T4101] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 43.538116][ T4101] __sock_sendmsg+0x142/0x180 [ 43.538146][ T4101] ____sys_sendmsg+0x31e/0x4e0 [ 43.538198][ T4101] ___sys_sendmsg+0x17b/0x1d0 [ 43.538298][ T4101] __x64_sys_sendmsg+0xd4/0x160 [ 43.538488][ T4101] x64_sys_call+0x2999/0x2fb0 [ 43.538514][ T4101] do_syscall_64+0xd2/0x200 [ 43.538537][ T4101] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.538570][ T4101] ? clear_bhb_loop+0x40/0x90 [ 43.538597][ T4101] ? clear_bhb_loop+0x40/0x90 [ 43.538626][ T4101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.538708][ T4101] RIP: 0033:0x7f3a051de9a9 [ 43.538726][ T4101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.538748][ T4101] RSP: 002b:00007f3a03847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.538803][ T4101] RAX: ffffffffffffffda RBX: 00007f3a05405fa0 RCX: 00007f3a051de9a9 [ 43.538818][ T4101] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004 [ 43.538834][ T4101] RBP: 00007f3a03847090 R08: 0000000000000000 R09: 0000000000000000 [ 43.538849][ T4101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.538864][ T4101] R13: 0000000000000000 R14: 00007f3a05405fa0 R15: 00007ffe44527f08 [ 43.538886][ T4101] [ 43.807082][ T29] audit: type=1326 audit(1752947570.644:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.830491][ T29] audit: type=1326 audit(1752947570.644:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.853762][ T29] audit: type=1326 audit(1752947570.644:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.877020][ T29] audit: type=1326 audit(1752947570.644:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.895741][ T4108] loop2: detected capacity change from 0 to 512 [ 43.900522][ T29] audit: type=1326 audit(1752947570.684:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.929939][ T29] audit: type=1326 audit(1752947570.684:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.943998][ T4108] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.207: casefold flag without casefold feature [ 43.953153][ T29] audit: type=1326 audit(1752947570.684:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 43.988883][ T29] audit: type=1326 audit(1752947570.684:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4104 comm="syz.2.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a051de9a9 code=0x7ffc0000 [ 44.022277][ T4108] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.207: couldn't read orphan inode 15 (err -117) [ 44.047432][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.069132][ T4108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.102057][ T4114] __nla_validate_parse: 6 callbacks suppressed [ 44.102071][ T4114] netlink: 96 bytes leftover after parsing attributes in process `syz.1.210'. [ 44.133645][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.152080][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.184609][ T4117] xt_hashlimit: max too large, truncated to 1048576 [ 44.273690][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.292017][ T4132] loop4: detected capacity change from 0 to 1024 [ 44.299839][ T4132] EXT4-fs: Ignoring removed nobh option [ 44.305436][ T4132] EXT4-fs: Ignoring removed bh option [ 44.364585][ T4136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.215'. [ 44.373521][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 44.382874][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.384605][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.426967][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.563405][ T4155] FAULT_INJECTION: forcing a failure. [ 44.563405][ T4155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.576641][ T4155] CPU: 0 UID: 0 PID: 4155 Comm: syz.2.218 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 44.576692][ T4155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.576707][ T4155] Call Trace: [ 44.576714][ T4155] [ 44.576722][ T4155] __dump_stack+0x1d/0x30 [ 44.576744][ T4155] dump_stack_lvl+0xe8/0x140 [ 44.576828][ T4155] dump_stack+0x15/0x1b [ 44.576848][ T4155] should_fail_ex+0x265/0x280 [ 44.576879][ T4155] should_fail+0xb/0x20 [ 44.576968][ T4155] should_fail_usercopy+0x1a/0x20 [ 44.577000][ T4155] _copy_from_user+0x1c/0xb0 [ 44.577024][ T4155] __tun_chr_ioctl+0x147/0x14c0 [ 44.577061][ T4155] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 44.577153][ T4155] tun_chr_ioctl+0x27/0x40 [ 44.577182][ T4155] __se_sys_ioctl+0xce/0x140 [ 44.577286][ T4155] __x64_sys_ioctl+0x43/0x50 [ 44.577316][ T4155] x64_sys_call+0x19a8/0x2fb0 [ 44.577340][ T4155] do_syscall_64+0xd2/0x200 [ 44.577359][ T4155] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.577401][ T4155] ? clear_bhb_loop+0x40/0x90 [ 44.577426][ T4155] ? clear_bhb_loop+0x40/0x90 [ 44.577451][ T4155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.577476][ T4155] RIP: 0033:0x7f3a051de9a9 [ 44.577543][ T4155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.577565][ T4155] RSP: 002b:00007f3a03826038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.577586][ T4155] RAX: ffffffffffffffda RBX: 00007f3a05406080 RCX: 00007f3a051de9a9 [ 44.577602][ T4155] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 44.577617][ T4155] RBP: 00007f3a03826090 R08: 0000000000000000 R09: 0000000000000000 [ 44.577631][ T4155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.577646][ T4155] R13: 0000000000000001 R14: 00007f3a05406080 R15: 00007ffe44527f08 [ 44.577690][ T4155] [ 44.810358][ T41] bond0 (unregistering): Released all slaves [ 45.021946][ T41] hsr_slave_0: left promiscuous mode [ 45.042407][ T41] hsr_slave_1: left promiscuous mode [ 45.050955][ T41] veth1_macvtap: left promiscuous mode [ 45.056508][ T41] veth0_macvtap: left promiscuous mode [ 45.063154][ T41] veth1_vlan: left promiscuous mode [ 45.073289][ T41] veth0_vlan: left promiscuous mode [ 45.079201][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.227288][ T4196] loop2: detected capacity change from 0 to 512 [ 45.238412][ T4196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 45.253797][ T4119] chnl_net:caif_netlink_parms(): no params data found [ 45.263719][ T4196] EXT4-fs (loop2): 1 truncate cleaned up [ 45.292879][ T4196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.398616][ T4209] loop4: detected capacity change from 0 to 2048 [ 45.449225][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.456313][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.470472][ T4209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.488176][ T4119] bridge_slave_0: entered allmulticast mode [ 45.494697][ T4119] bridge_slave_0: entered promiscuous mode [ 45.505917][ T4200] loop1: detected capacity change from 0 to 512 [ 45.508552][ T4209] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.227: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 45.529306][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.536360][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.550337][ T4200] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.562042][ T4209] EXT4-fs (loop4): Remounting filesystem read-only [ 45.563399][ T4119] bridge_slave_1: entered allmulticast mode [ 45.588490][ T4119] bridge_slave_1: entered promiscuous mode [ 45.600209][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.625241][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.634707][ T4200] EXT4-fs (loop1): 1 truncate cleaned up [ 45.641536][ T4200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.690930][ T4119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.702973][ T4119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.746254][ T4232] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 45.752910][ T4232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.760426][ T4232] vhci_hcd vhci_hcd.0: Device attached [ 45.772757][ T4119] team0: Port device team_slave_0 added [ 45.794495][ T4119] team0: Port device team_slave_1 added [ 45.799385][ T4234] vhci_hcd: connection closed [ 45.801849][ T12] vhci_hcd: stop threads [ 45.810815][ T12] vhci_hcd: release socket [ 45.815220][ T12] vhci_hcd: disconnect device [ 45.859592][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.862281][ T4241] loop4: detected capacity change from 0 to 2048 [ 45.912518][ T4245] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 45.919703][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.926667][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.952839][ T4119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.964376][ T4119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.971353][ T4119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.989986][ T4241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.997285][ T4119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.054457][ T4251] loop1: detected capacity change from 0 to 2048 [ 46.071275][ T4241] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.234: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.072703][ T4119] hsr_slave_0: entered promiscuous mode [ 46.088578][ T4241] EXT4-fs (loop4): Remounting filesystem read-only [ 46.108981][ T4119] hsr_slave_1: entered promiscuous mode [ 46.110151][ T4251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.114975][ T4119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.134370][ T4119] Cannot create hsr debugfs directory [ 46.140259][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.153810][ T4251] EXT4-fs (loop1): shut down requested (0) [ 46.207109][ T4258] loop4: detected capacity change from 0 to 512 [ 46.215507][ T4258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.249474][ T4258] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 46.257497][ T4258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 46.293996][ T4258] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 46.303569][ T4258] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 46.322874][ T4119] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.341144][ T4258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.360222][ T4119] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.369379][ T4271] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.369379][ T4271] program syz.2.239 not setting count and/or reply_len properly [ 46.399536][ T4258] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 46.414086][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 46.427061][ T4119] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.446384][ T4119] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.463928][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 46.506856][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.549754][ T4119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.579446][ T4119] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.599141][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.606195][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.621797][ T4298] loop4: detected capacity change from 0 to 512 [ 46.646070][ T4298] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.243: bg 0: block 248: padding at end of block bitmap is not set [ 46.662983][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.670106][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.680126][ T4298] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.243: Failed to acquire dquot type 1 [ 46.707884][ T4298] EXT4-fs (loop4): 1 truncate cleaned up [ 46.714360][ T4119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.726568][ T4298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.748053][ T4298] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.764942][ T4298] syz.4.243 (4298) used greatest stack depth: 9096 bytes left [ 46.784082][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.787271][ T4291] loop2: detected capacity change from 0 to 512 [ 46.808134][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 46.827118][ T4291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.841714][ T4119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.842207][ T4291] EXT4-fs (loop2): 1 truncate cleaned up [ 46.899494][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.910552][ T4291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.956016][ T4331] loop1: detected capacity change from 0 to 1024 [ 46.968434][ T4328] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 46.991752][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.073273][ T4343] loop4: detected capacity change from 0 to 512 [ 47.100990][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 47.136040][ T4119] veth0_vlan: entered promiscuous mode [ 47.162299][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.172100][ T4119] veth1_vlan: entered promiscuous mode [ 47.181213][ T4343] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.248: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 47.209517][ T4343] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.248: Bad quota inode: 3, type: 0 [ 47.239938][ T4119] veth0_macvtap: entered promiscuous mode [ 47.247102][ T4343] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 47.263353][ T4119] veth1_macvtap: entered promiscuous mode [ 47.269263][ T4343] EXT4-fs (loop4): mount failed [ 47.279205][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.300078][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.309904][ T4119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.324795][ T4367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.250'. [ 47.333737][ T4367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 47.342720][ T4358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.245'. [ 47.352808][ T4119] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.361744][ T4119] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.370485][ T4119] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.379226][ T4119] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.414583][ T4363] loop2: detected capacity change from 0 to 2048 [ 47.494007][ T4363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.064982][ T4409] loop1: detected capacity change from 0 to 2048 [ 48.105457][ T4409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.135925][ T4409] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.257: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 48.154876][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 48.179549][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 48.195003][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.231637][ T4429] netlink: 20 bytes leftover after parsing attributes in process `syz.5.263'. [ 48.268249][ T4425] loop3: detected capacity change from 0 to 512 [ 48.339261][ T4425] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.262: casefold flag without casefold feature [ 48.358419][ T4425] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.262: couldn't read orphan inode 15 (err -117) [ 48.372578][ T4425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.385891][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 48.385903][ T29] audit: type=1326 audit(1752947575.234:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2124fd310 code=0x7ffc0000 [ 48.421764][ T29] audit: type=1326 audit(1752947575.234:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fc2124fd6f7 code=0x7ffc0000 [ 48.445080][ T29] audit: type=1326 audit(1752947575.234:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2124fd310 code=0x7ffc0000 [ 48.468548][ T29] audit: type=1326 audit(1752947575.234:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.491984][ T29] audit: type=1326 audit(1752947575.234:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.527231][ T29] audit: type=1326 audit(1752947575.364:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.550748][ T29] audit: type=1326 audit(1752947575.364:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.574194][ T29] audit: type=1326 audit(1752947575.364:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.597521][ T29] audit: type=1326 audit(1752947575.364:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.3.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2124fe9a9 code=0x7ffc0000 [ 48.659803][ T4460] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 48.715714][ T4465] loop5: detected capacity change from 0 to 2048 [ 48.753880][ T4470] loop4: detected capacity change from 0 to 512 [ 48.763696][ T4465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.780772][ T4470] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.272: casefold flag without casefold feature [ 48.815720][ T4465] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.271: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 48.832272][ T4470] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.272: couldn't read orphan inode 15 (err -117) [ 48.840903][ T29] audit: type=1326 audit(1752947575.674:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4467 comm="syz.1.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa57f1ae9a9 code=0x7ffc0000 [ 48.867507][ T4465] EXT4-fs (loop5): Remounting filesystem read-only [ 48.871660][ T4470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.874484][ T4477] loop2: detected capacity change from 0 to 512 [ 48.903397][ T4119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.947679][ T4477] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.274: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 48.976809][ T4468] loop1: detected capacity change from 0 to 2048 [ 48.985547][ T4484] loop5: detected capacity change from 0 to 1024 [ 48.998977][ T4477] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.274: Bad quota inode: 3, type: 0 [ 49.001062][ T4468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.010117][ T4484] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.051881][ T4484] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.276: Failed to acquire dquot type 0 [ 49.060366][ T4477] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 49.100954][ T4477] EXT4-fs (loop2): mount failed [ 49.133745][ T4484] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.158034][ T4484] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.276: corrupted inode contents [ 49.196545][ T4492] __nla_validate_parse: 2 callbacks suppressed [ 49.196559][ T4492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'. [ 49.205535][ T4484] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #13: comm syz.5.276: mark_inode_dirty error [ 49.229154][ T4484] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.276: corrupted inode contents [ 49.247857][ T4484] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.276: mark_inode_dirty error [ 49.259861][ T4484] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.276: corrupted inode contents [ 49.272183][ T4484] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 49.281489][ T4484] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.276: corrupted inode contents [ 49.293547][ T4484] EXT4-fs error (device loop5): ext4_truncate:4597: inode #13: comm syz.5.276: mark_inode_dirty error [ 49.305118][ T4484] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 49.311795][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.317162][ T4484] EXT4-fs (loop5): 1 truncate cleaned up [ 49.351001][ T4498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.279'. [ 49.358388][ T4484] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.359919][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 49.398995][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.428039][ T4484] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 49.446119][ T4500] loop3: detected capacity change from 0 to 512 [ 49.457732][ T4503] xt_CT: No such helper "pptp" [ 49.458530][ T4500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.481105][ T4500] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.489070][ T4500] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 49.497586][ T4500] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 49.507129][ T4500] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 49.518810][ T4500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.565343][ T4500] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 49.575263][ T4508] loop2: detected capacity change from 0 to 1764 [ 49.715527][ T4519] FAULT_INJECTION: forcing a failure. [ 49.715527][ T4519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.728637][ T4519] CPU: 1 UID: 0 PID: 4519 Comm: syz.3.285 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 49.728665][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.728706][ T4519] Call Trace: [ 49.728713][ T4519] [ 49.728719][ T4519] __dump_stack+0x1d/0x30 [ 49.728742][ T4519] dump_stack_lvl+0xe8/0x140 [ 49.728763][ T4519] dump_stack+0x15/0x1b [ 49.728780][ T4519] should_fail_ex+0x265/0x280 [ 49.728829][ T4519] should_fail+0xb/0x20 [ 49.728856][ T4519] should_fail_usercopy+0x1a/0x20 [ 49.728946][ T4519] _copy_to_user+0x20/0xa0 [ 49.728967][ T4519] simple_read_from_buffer+0xb5/0x130 [ 49.729000][ T4519] proc_fail_nth_read+0x100/0x140 [ 49.729099][ T4519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.729135][ T4519] vfs_read+0x1a0/0x6f0 [ 49.729165][ T4519] ? __rcu_read_unlock+0x4f/0x70 [ 49.729230][ T4519] ? __fget_files+0x184/0x1c0 [ 49.729254][ T4519] ksys_read+0xda/0x1a0 [ 49.729356][ T4519] __x64_sys_read+0x40/0x50 [ 49.729398][ T4519] x64_sys_call+0x2d77/0x2fb0 [ 49.729425][ T4519] do_syscall_64+0xd2/0x200 [ 49.729445][ T4519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.729475][ T4519] ? clear_bhb_loop+0x40/0x90 [ 49.729543][ T4519] ? clear_bhb_loop+0x40/0x90 [ 49.729568][ T4519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.729592][ T4519] RIP: 0033:0x7fc2124fd3bc [ 49.729608][ T4519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.729626][ T4519] RSP: 002b:00007fc210b5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.729644][ T4519] RAX: ffffffffffffffda RBX: 00007fc212725fa0 RCX: 00007fc2124fd3bc [ 49.729657][ T4519] RDX: 000000000000000f RSI: 00007fc210b5f0a0 RDI: 0000000000000004 [ 49.729734][ T4519] RBP: 00007fc210b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.729746][ T4519] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 49.729758][ T4519] R13: 0000000000000000 R14: 00007fc212725fa0 R15: 00007ffc0b0972f8 [ 49.729776][ T4519] [ 49.942794][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 49.957439][ T4524] FAULT_INJECTION: forcing a failure. [ 49.957439][ T4524] name failslab, interval 1, probability 0, space 0, times 0 [ 49.970211][ T4524] CPU: 1 UID: 0 PID: 4524 Comm: syz.3.288 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 49.970279][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.970294][ T4524] Call Trace: [ 49.970300][ T4524] [ 49.970308][ T4524] __dump_stack+0x1d/0x30 [ 49.970328][ T4524] dump_stack_lvl+0xe8/0x140 [ 49.970406][ T4524] dump_stack+0x15/0x1b [ 49.970456][ T4524] should_fail_ex+0x265/0x280 [ 49.970559][ T4524] should_failslab+0x8c/0xb0 [ 49.970586][ T4524] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 49.970634][ T4524] ? sidtab_sid2str_get+0xa0/0x130 [ 49.970661][ T4524] kmemdup_noprof+0x2b/0x70 [ 49.970683][ T4524] sidtab_sid2str_get+0xa0/0x130 [ 49.970725][ T4524] security_sid_to_context_core+0x1eb/0x2e0 [ 49.970825][ T4524] security_sid_to_context+0x27/0x40 [ 49.970849][ T4524] selinux_lsmprop_to_secctx+0x67/0xf0 [ 49.970877][ T4524] security_lsmprop_to_secctx+0x43/0x80 [ 49.970913][ T4524] audit_log_task_context+0x77/0x190 [ 49.970981][ T4524] audit_log_task+0xf4/0x250 [ 49.971065][ T4524] audit_seccomp+0x61/0x100 [ 49.971092][ T4524] ? __seccomp_filter+0x68c/0x10d0 [ 49.971173][ T4524] __seccomp_filter+0x69d/0x10d0 [ 49.971206][ T4524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.971278][ T4524] ? vfs_write+0x75e/0x8e0 [ 49.971320][ T4524] __secure_computing+0x82/0x150 [ 49.971384][ T4524] syscall_trace_enter+0xcf/0x1e0 [ 49.971413][ T4524] do_syscall_64+0xac/0x200 [ 49.971435][ T4524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.971465][ T4524] ? clear_bhb_loop+0x40/0x90 [ 49.971564][ T4524] ? clear_bhb_loop+0x40/0x90 [ 49.971586][ T4524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.971653][ T4524] RIP: 0033:0x7fc2124fe9a9 [ 49.971670][ T4524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.971689][ T4524] RSP: 002b:00007fc210b5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 49.971707][ T4524] RAX: ffffffffffffffda RBX: 00007fc212725fa0 RCX: 00007fc2124fe9a9 [ 49.971720][ T4524] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 49.971772][ T4524] RBP: 00007fc210b5f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.971786][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.971800][ T4524] R13: 0000000000000000 R14: 00007fc212725fa0 R15: 00007ffc0b0972f8 [ 49.971934][ T4524] [ 50.013028][ T4526] loop5: detected capacity change from 0 to 2048 [ 50.077099][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.082607][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 50.087520][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.254283][ T4529] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 50.267071][ T4526] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.286: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 50.285293][ T4526] EXT4-fs (loop5): Remounting filesystem read-only [ 50.296559][ T4529] team0: Port device dummy0 added [ 50.313933][ T4529] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 50.323236][ T4529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.334362][ T4529] team0: Failed to send options change via netlink (err -105) [ 50.342341][ T4529] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 50.352048][ T4529] team0: Port device dummy0 removed [ 50.360356][ T4529] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.385256][ T4534] loop4: detected capacity change from 0 to 512 [ 50.423407][ T4529] loop3: detected capacity change from 0 to 512 [ 50.429079][ T4534] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.290: casefold flag without casefold feature [ 50.448900][ T4534] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.290: couldn't read orphan inode 15 (err -117) [ 50.485556][ T4542] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 50.506534][ T4547] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 50.555433][ T4529] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.615699][ T4556] infiniband syz!: set down [ 50.620356][ T4556] infiniband syz!: added team_slave_0 [ 50.643061][ T4579] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.653912][ T4579] tmpfs: Bad value for 'mpol' [ 50.657213][ T4556] RDS/IB: syz!: added [ 50.678044][ T4556] smc: adding ib device syz! with port count 1 [ 50.684265][ T4556] smc: ib device syz! port 1 has pnetid [ 50.780975][ T4557] loop5: detected capacity change from 0 to 512 [ 50.821918][ T4557] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.940724][ T4557] EXT4-fs (loop5): 1 truncate cleaned up [ 51.070179][ T4622] syz.1.298 uses obsolete (PF_INET,SOCK_PACKET) [ 51.273037][ T4634] netlink: 60 bytes leftover after parsing attributes in process `syz.1.301'. [ 51.295136][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.352600][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.409763][ T4643] xt_CT: No such helper "pptp" [ 51.567984][ C1] ================================================================== [ 51.576097][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 51.583298][ C1] [ 51.585610][ C1] read-write to 0xffff8881012306b8 of 8 bytes by interrupt on cpu 0: [ 51.593661][ C1] wq_worker_tick+0x60/0x230 [ 51.598244][ C1] sched_tick+0x11a/0x270 [ 51.602570][ C1] update_process_times+0x15f/0x190 [ 51.607774][ C1] tick_nohz_handler+0x249/0x2d0 [ 51.612706][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 51.617899][ C1] hrtimer_interrupt+0x21a/0x460 [ 51.622836][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 51.628732][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 51.634365][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.640342][ C1] strncpy_from_user+0x1ef/0x230 [ 51.645277][ C1] strncpy_from_user_nofault+0x68/0xf0 [ 51.650746][ C1] bpf_probe_read_user_str+0x2a/0x70 [ 51.656036][ C1] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 51.661483][ C1] bpf_trace_run2+0x107/0x1c0 [ 51.666158][ C1] __traceiter_kfree+0x2b/0x50 [ 51.670929][ C1] kfree+0x27b/0x320 [ 51.674819][ C1] io_free_region+0xa3/0x160 [ 51.679400][ C1] io_ring_ctx_free+0x1d0/0x390 [ 51.684250][ C1] io_ring_exit_work+0x529/0x560 [ 51.689190][ C1] process_scheduled_works+0x4cb/0x9d0 [ 51.694651][ C1] worker_thread+0x582/0x770 [ 51.699242][ C1] kthread+0x489/0x510 [ 51.703303][ C1] ret_from_fork+0xda/0x150 [ 51.707797][ C1] ret_from_fork_asm+0x1a/0x30 [ 51.712557][ C1] [ 51.714865][ C1] read-write to 0xffff8881012306b8 of 8 bytes by interrupt on cpu 1: [ 51.722918][ C1] wq_worker_tick+0x60/0x230 [ 51.727501][ C1] sched_tick+0x11a/0x270 [ 51.731823][ C1] update_process_times+0x15f/0x190 [ 51.737027][ C1] tick_nohz_handler+0x249/0x2d0 [ 51.741963][ C1] __hrtimer_run_queues+0x20c/0x5a0 [ 51.747156][ C1] hrtimer_interrupt+0x21a/0x460 [ 51.752087][ C1] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 51.757980][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 51.763615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 51.769587][ C1] __sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 51.775559][ C1] strncpy_from_user+0x7b/0x230 [ 51.780404][ C1] strncpy_from_user_nofault+0x68/0xf0 [ 51.785872][ C1] bpf_probe_read_user_str+0x2a/0x70 [ 51.791161][ C1] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 51.796608][ C1] bpf_trace_run2+0x107/0x1c0 [ 51.801284][ C1] __traceiter_kfree+0x2b/0x50 [ 51.806054][ C1] kfree+0x27b/0x320 [ 51.809945][ C1] io_free_region+0xa3/0x160 [ 51.814534][ C1] io_ring_ctx_free+0x1d0/0x390 [ 51.819383][ C1] io_ring_exit_work+0x529/0x560 [ 51.824320][ C1] process_scheduled_works+0x4cb/0x9d0 [ 51.829780][ C1] worker_thread+0x582/0x770 [ 51.834373][ C1] kthread+0x489/0x510 [ 51.838431][ C1] ret_from_fork+0xda/0x150 [ 51.842928][ C1] ret_from_fork_asm+0x1a/0x30 [ 51.847687][ C1] [ 51.850008][ C1] value changed: 0x0000000000011170 -> 0x0000000000013880 [ 51.857102][ C1] [ 51.859412][ C1] Reported by Kernel Concurrency Sanitizer on: [ 51.865551][ C1] CPU: 1 UID: 0 PID: 4580 Comm: kworker/u8:28 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 51.878216][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.888271][ C1] Workqueue: iou_exit io_ring_exit_work [ 51.893822][ C1] ==================================================================