last executing test programs: 2m42.234908602s ago: executing program 4 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) 2m42.218102682s ago: executing program 4 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (fail_nth: 7) 2m42.158364103s ago: executing program 4 (id=106): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") pwritev2(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000240)='_', 0x1}], 0x1, 0xfff, 0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x8}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) read$watch_queue(r3, &(0x7f0000001d40)=""/4095, 0xfdef) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (fail_nth: 5) 2m41.811799308s ago: executing program 4 (id=107): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = openat(r2, &(0x7f0000000040)='./file1\x00', 0x212842, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x4b}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x294040) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0xfe}, 'port1\x00', 0x0, 0x400, 0xfffffffc, 0x3, 0x6c54, 0x3d, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x28, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r7) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x18) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r11 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r11, 0x1, 0x455b843fbdb64c65) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000000)={0x7, 0xfffe, 0x5, 0x9, 0xf1, 0x6, 0xe}, 0xc) r13 = dup(r10) r14 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r14, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x50a) ioctl$PTP_EXTTS_REQUEST2(r13, 0x43403d05, 0x0) 2m41.315368236s ago: executing program 4 (id=118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000140)={[{@nomblk_io_submit}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") (fail_nth: 13) 2m40.710525595s ago: executing program 4 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (rerun: 64) fstat(r1, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m40.710203475s ago: executing program 32 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) (async, rerun: 64) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) (rerun: 64) fstat(r1, &(0x7f00000001c0)) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m51.825767316s ago: executing program 3 (id=742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'vlan1\x00'}) 1m50.458170778s ago: executing program 3 (id=759): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xe, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)={0x54, r3, 0x80d, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x3}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xac, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20008004}, 0x40041) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xffffffffffffffb4, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002bbd7000fedbdf25940000000c0091005d0a0000b50000800a000600ffffffffffff00001b001300ec06b08bc8e00018830c65a080c8848c8282033603300c0006001000deacc800"], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x20000091) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000100)={0x5, 0x9, 0x4, 0xb, 0x49, 0x9, &(0x7f00000001c0)="176e991090590e7fa184e817063dd2134d18b6f536e89e17c5ac79b34041b6b3687740d8bcb53988e013535b922ec53d857edda525ed06f150286117e95c9fef52a753167c8c43eb92"}) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r11, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x2000, 0x7, 0x3511, r10, 0x0, 0x0, 0x0, 0x0, 0x1, r10}]) syz_open_dev$usbfs(&(0x7f0000000800), 0x4, 0xc2f5eca4f6bc8744) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000840)=0x2eb, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m50.010559835s ago: executing program 3 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2000) 1m49.185260528s ago: executing program 3 (id=778): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x3454, &(0x7f0000000480)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r3}, 0x10) mremap(&(0x7f0000043000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00002d8000/0x4000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") io_uring_setup(0x5f6f, &(0x7f0000000000)={0x0, 0x84bf, 0x40, 0x20, 0xfffffffd}) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t r'], 0x27) r5 = open(&(0x7f0000000080)='./file1\x00', 0x1, 0x7e) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) connect$can_bcm(r0, &(0x7f00000005c0), 0x31) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{0x0}, {&(0x7f0000001a00)=""/254, 0xfe}], 0x2}}], 0x1, 0x40010121, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r7}, 0x10) sendmmsg$inet6(r6, &(0x7f0000001c80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_setscheduler(r8, 0x1, &(0x7f00000000c0)=0x10000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) 1m48.842364053s ago: executing program 3 (id=784): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES16=r7, @ANYBLOB="14e97c373985d12fafef50feece6acc6dee941b8d929522711a181aaadd1d85be7311061d665092d8354b3c8c19e0a6f7f8defa265367a1046ec1cb3e3adebe45be79422f43913550e7d1bd75a9ee1c652735806de81718c07258a423522167af5b2fb424c12d0b854312891f078c79c274e840270d780025472ccd645e581d2eef4b5539a245c449f2d0f1cb6", @ANYRESOCT=r8, @ANYRES16=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001600850000005900000095"], 0x0, 0x0, 0x3c, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000006c0)='9p_client_res\x00', r11, 0x0, 0x4}, 0x18) (async) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYRESHEX, @ANYRES16=r13, @ANYBLOB="0000000000000000b70500000800000085000000b600000095", @ANYRESOCT=r4, @ANYRES16=r9], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r14}, 0x18) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x18, 0x0, "01d787"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) sendto$inet(r0, &(0x7f0000000a00)="c07b69a5fa88d04f03fdd7b712d0b86cd9e575c898eb9e9199780ab2175f4def2a5fad74206c230f408d7779092c0bade0556d879e0e0a0feb9d85b26a9b8a0f746ba974eaaaec9e8bb610cff8cedf46c1ffb9463a8c00258fbe66061347e2dfe8b083a1167d731d6e035cafe8c70198adf81151a7270b35bb807ec07b37889a542424a48089d33625a57ca50a37b1f4122b8d04728fd4d22c127a85e0ec85f31080607e7344d2adadb081e3f7e11619e1f007c19cb7eefea2ea622dd571bac3cf7e54587d5240afc531929bfa6c1b3ee970d4a045ba02bf946e", 0xda, 0x4085, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 1m48.625818527s ago: executing program 3 (id=788): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) finit_module(r0, 0x0, 0x3) 1m48.625685957s ago: executing program 33 (id=788): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) finit_module(r0, 0x0, 0x3) 2.449224381s ago: executing program 6 (id=2198): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.426289192s ago: executing program 1 (id=2200): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) socket$kcm(0x10, 0x2, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r2, r3, 0x200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='kfree\x00', r0, 0x0, 0x4000004}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@local, @rand_addr, 0x0}, &(0x7f0000000440)=0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f0000000540)=@xdp={0x2c, 0x8, r5, 0x4}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000005c0)="392faea0b698e98db465323bd4f92d91fb3e36824ebbfcbbd07b2aeca37f16977a60995947970f4ca81e0a8a751d8a41a7cd3cb022fd6bda6058f0129fb3fce0d258208f7a35234a7b7c4b05c59dcf0f4f2d4e0c8460", 0x56}, {&(0x7f0000000880)="bac6a2ded9d46a9c98184a2dfd1176cf78c9a2a71a15b67d9e24e43314482776eda1e7a402292b587683aa9c757b79af7f4f569b6f5a8dd2936cbf3038ae1a064886217ce9c6dc1642da36c1373ae727672942e69c9f3a54639ea3eac806b772babf35379609446d371514ebc18c4be748265ef73f7419acc039", 0x7a}, {&(0x7f0000000900)="d92236912b9f1f8870bf67a9ffbb86fa922a9015d5d9094a118b3f8f80760f4bdd6ee7d9227645fc2ee191b4fdbbaabb09a9128f6692c8eacdd095d709540705ab8297c67e54908d82ba", 0x4a}], 0x3, &(0x7f0000001100)=[{0xc8, 0x102, 0x6, "6be44640054865bd17e77f76a51470498be5dc85577557d0d59fa91f3ae52cf1f658840a6fd282d32840dedaf277167a37277ccb7d80a960c79a8604e34855490aa9aaf4d8c08e8389da1f6f67ab507b9bab5ffd6877192e5bd174251e7134124be79952f659648fc1e8e2ae0ddfd047e2290e468f9c3425897515e4d13819dcc8eef7dffd633b77c934be5b3b6ea934180290c034d6372e6ac45c213dd5d265ceadd50f6511b039d04c39247b6e93c49ccf"}, {0x100, 0x6, 0xd, "9a857944b6d14b7cd863b56816ea058e9c5380d2eaebfd3c08b55b103bf8329dddde24e391777aecbe6fb998a7bb4a66074a96fc5d6ee5beb9374feaed1b96f981019db51548918433f5d5a6a187465af0b93a7ae6eb765d7c06bd995d806686b42208513d72c4f851fbe9a075ea851add6d6a4d91b4b90f891bbdb6f5430d2d4c10a8c922bb02ffcf655d836b012ecfebd45fa2230a8e31072592d5823e7af2216e06dc532d39199917993532cc163010e70e2cbaf17286d499b30c645ff913a56d16f1793b959c2195767cefd0ab7317f2b1338b90f8479039883f043624dd16c349cf802ee419094b7691"}, {0x60, 0x10d, 0x5, "930fad25b54afcb974d209021f2aa2a74feb6c2261d52411447268844c565bf9ac813d109e9c907e14487539f3ba264e8aa027d1bb1383f6b868d474e86851c98d8ed77ffb0480f0e1a95e46"}, {0x90, 0x10e, 0xd, "46351909715d1dbe474d0b2d88ff37b65c1f643acac6ba766ced6cc7e42b8036a3dccbb151eae2f16f80a20d0592b2045018e2c73b3ae269bd0e168ec6404dbbc162bdd9926302a605cbf904c2eff9182f358256b8a5e22853f3ef1f0c124c2852ea3bad54e261aaa291ea6fb643556cb24322073f933629c4f55afcda92e7"}, {0xd0, 0x110, 0x7, "3efce92ffc81d31800bd229b5b27635086ca1913a8af6ce27559b16fa9cce9a6fe47651deab759bbf737c6bc284bfca6f79f6f0e98f80999441aeb2c2d7132448411f69777baf5495d4f31734435585de8f907455cf8cbedbd7c8d3b837a5b25c1ce91951734c0cb8acea222bd78b6da3dc8a8cb3528fc5e746efb16d392d45a917f4721d92f716be1bb924e282e683a20b0c0969fea3c45f973e40cb4b1b7b375a2c8d81f24b3d381baef94e3615dde2def5ba6ad4dfd6b576378"}, {0x70, 0xa71478983268d929, 0x48, "e3b543635b8ea7ab942b38c0ceab63763f7320eebcd19f915986cffaacb86a93b2ae060d44fe915426a3f48dd30f2b2ddb878fb08c54d147f0394d1017b2cfd6f484231f36a6b84fbff58ba3596c9bfdafa304d41cc4bf66b59558"}, {0xd8, 0x102, 0xe, "d606024016e19b4fb7ce8accde45f2771abe837a91527b73f7f11c3eb231dda56806ce661987738747666961500064ffd42ea0ed21814749931da90381c65cbcb15f742f0d4522d162f7e5465f5d9c270a0bc687627df2c8ef9dce68778d25b87be1bfc6b4e11c45ea73e3d36607e8a922daea78304f5d261dfe85ba32669f33033b57da465ddb5b16dc1ba7f5a258e5acefebb5adeb60279d2fa6c99e22286db55094b47a55d79933a119ce4dd5b8ac66f3e1366649cde21ad35fd85ab9828c15fe"}, {0x90, 0x10e, 0x5, "b75f2ee183c4a645029266c2307df36956ebc7373b05fe50dbd757008a985742fcb299a95f548aee8f654965b42de5255b8dc2a7e8baa98477b9703cbf381499b03742f06d7998edafcc24f1bc6a11acd41ed829a0deb3dd766be562c9ce01aa1b48c59a9c2444cb4f4983f45a60672684ec5b8b6225b56b0735"}], 0x560}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000740)="b4f0", 0x2}], 0x1, &(0x7f0000000c00)=[{0x100, 0x0, 0x2, "1c0c1b85e824b00366f67115ead188e2e954a4ba97eac066d0bc4c59d73b34d13204d94b1e027fc2e38076ab55f20bbb02486ee9198e28fc266bdc750f1ce167e94a1760d19c862cb35d79218923fca415c4b4f6ba410fe213fc9c2e060b9e83d5619bfde714a01492f7fce8b71f60cdd2bc666d3443c973e8bb70fefcec74b84a694c42903e61f296a1a940b4bf9bd457e21b8470ff637c43b5548bb3e43fdbbb9e8b59453d8a8d4bbd3bc9c0a5274dd3e12d2d54006f8aa330302303ef6d3f21ddafc99617106e25c0bef851cc43f9c23928f02019da2bc3f5293bbb574ef121e0c200145a91afe824bce481a4"}, {0xd8, 0x10f, 0x2, "f7cc101f1479766243b3452fa898749d2f79e8a8b5eacd62fe929fa6a72a95b871e40ddceec6941a314a239db9267f5830d3a03da495213368d8204ca36de465c7c03f739b0e3cc8a52a9b7803570a6b8eadd8070128c646e63f6adc620e8f314f411026f1641ba2ea6d719c01d697f518e11879ef72e9dc4a451fc1fe1945e1542206b6a41a00385b9a716f9aa3b94697cc14d9081cadedc232ee7f2a169f8201d0dee3666472790a8839c09317f6988ceebf55fd0e28905637c0381fc1f3958a1ee39305ffa88d"}, {0x80, 0x113, 0x3, "c43a7ee8f7810b904c5bbe5571b8278028cfc0ad50ae00602b25172a079a4c2ac553ae90eed3796b5f68e5803f4e6e2199af8923bfc905f0947beb7cf41a39338b4933ad29aea43420bfc8954740c1203552ba62beeb3a27337e5985a1009ed4aedcde98e2dcdfcce647"}], 0x258}}, {{&(0x7f0000000980)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="010e74198fbd75b5069dc32d37ced0f3d6bfeb349c69d8f5f61e34e2ccce641be0c80500463a139808dab8c05c81583102d293e34eef1d4d4b2277c32868489f84e299bb8d", 0x45}, {&(0x7f0000000a80)="71a7636e227528996cc10f95bca7e8f640", 0x11}], 0x2, &(0x7f0000001680)=[{0x1010, 0x112, 0xbe, "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"}, {0x60, 0x102, 0x6e5, "8184be528a19ffbe2cb700411b405338c248b7be9de7dcab271acfa36a87c95daf4edceaa93505122661415ca1957f6b31802aedc3cb30d239571fafc85ad25152c4c73d8d0836fa64f2e0221e272668"}, {0x58, 0x113, 0x4, "ddd2134f8a8a3a3da6668569e1406b8066cdf162067119e4e6704ea4d8d1a3d3bbd8a5ac42a4faa00d623724c9acad65438b7bef307d0ec7dcee0faab3301f1fcf80d7413c784556"}, {0xa0, 0x116, 0x81, "ccb5a6c9a26876df354e8a4025faf2d201979f7c50824d08672b37a0832b2cc23fb04f81931ddbef679a857af0b083d294d9abe71e2cd18c14b174464ba46411256c921069d46232bf51a86d90655a03e3cc467a03a6b01c383dc54ef001119fe4d252c4f2bae3072ee151bd4960b205c71f28be83a0e4042f39712e571a3ca88af08d9ef9a75326be4e7efcbe057a"}], 0x1168}}, {{&(0x7f0000000b00)=@rc={0x1f, @any, 0x9}, 0x80, 0x0}}, {{&(0x7f0000003800)=@l2={0x1f, 0xb5, @none, 0x0, 0x1}, 0x80, &(0x7f0000003980)=[{&(0x7f0000003880)="81d8eb0b2a586a80fbfd296cc3fb53452bf7aa9acb788d49018b286523e19b6defa3c4682f137676e9a001b1e7fc97823293d8bec1206ec79221e4c4ffb1cb8b97fed92feee33f7ca4671d71ed2ee7c5e757a456783c31922395632bf1c152210bf2fbf63a0b07b589ebff7572124468111d565fc95d64770e214f7c9718a742f8f7ec680b3af90320d255161acc3cc96bae094b56f1b7ff17231e7b0db81317d1677f2bcd93afec6d5b8c", 0xab}, {&(0x7f0000003940)="9ff933ee20fe1017", 0x8}], 0x2, &(0x7f00000039c0)=[{0x18, 0x29, 0x7d45e09b, "d50592bdb47a"}, {0xc8, 0x107, 0xffffffff, "75428333c437c89558c0e0015019c348632b6095c5df387af21e18d7410be6554cb8eb92d1eacd732570ade204ae36ff0d4ba74669cef3dcac8b6edd9aaa0f32861ac0e762c3c5454d1ef88b0cef833e0c94de3eda25387cdd0da29a0aaa908ff7a355ac8a32c03b9bd83cc6046662eee2617aa8975ded69d2721767cb7de74d4e6281ef31c03d3a80fc7d238b3ab370fccbc0d14ef97fe67bb35e8f075d68f57819ca190ddb7fdd004a23e9c10cc5b7bc"}], 0xe0}}], 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.393900532s ago: executing program 6 (id=2201): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e1d, @remote}, 0x10) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) preadv(r1, &(0x7f0000000a00), 0x0, 0x0, 0xffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8080c61) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) syz_emit_ethernet(0xc5, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="d7b95fbef69e", @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x1}}, {@generic={0x6006, "4a0903100bff3e988eeae3eecfde270d51845b204350e759adf20744b8ef5e6054841218133daab004c08d2f1c0c4e301ec5ba7f9e195aa947e1ae06da822cb458fa924c9d1905f8fc110cf3d2e954732ebe84dbfb2774000c982a62d7836bc24628502029560ae76be1a23c0011298bb4138210fe4c17f981691df3a4e53f33f5f4fc979c980af968ad275002ad1ff5b09d4b539f77615ab0047c4c9c68acec0f3217ebb7ea93db5acc10b3b1c807"}}}, &(0x7f0000000300)={0x0, 0x2, [0xe2c, 0x48c, 0x9af, 0xb3]}) write$P9_RSETATTR(r1, &(0x7f0000000540)={0x7, 0x1b, 0x2}, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r5, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r5) 2.291116414s ago: executing program 0 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1, 0x0, 0x7fff}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x7}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'vlan1\x00'}) 2.259472494s ago: executing program 6 (id=2204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000050000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08"], 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000001000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f844", 0x3a}, {0x0}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1", 0xb19}], 0x4, &(0x7f0000001480)}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$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") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/232, 0xe8, 0x1, &(0x7f0000000200)=""/51, 0x33}, &(0x7f0000000300)=0x40) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001980)=[{0x0}], 0x1, 0x8, 0x365) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.428629277s ago: executing program 0 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000040000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='f2fs_reserve_new_blocks\x00', r0, 0x0, 0xffffffff}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1080f2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) close_range(r1, r2, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000940)=0xfffffffd) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) 1.289425449s ago: executing program 5 (id=2209): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) eventfd2(0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fd, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @remote}, &(0x7f00000001c0)=0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r3, &(0x7f0000000080)='3', 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000058c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) io_getevents(0x0, 0x13e, 0x0, 0x0, 0x0) 1.288774869s ago: executing program 1 (id=2210): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.23266723s ago: executing program 0 (id=2211): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}}}, 0x0) 1.23183622s ago: executing program 0 (id=2212): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfffffffffffffd5a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x220, 0x220, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@private=0xa010102, @multicast1, 0xff, 0xff, 0x9, 0x4, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xfc6, 0x7f, 0xe9b, 0x4, 0x8, 0xe, 'veth1_to_team\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x0, 0x284}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x3, 0xc, &(0x7f0000000d00)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd56, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffda, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r5, @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r10}, 0x10) setitimer(0x1, 0x0, 0x0) write$UHID_CREATE(r9, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) add_key$user(&(0x7f0000000040), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000001bc0)="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", 0x1000, 0xfffffffffffffffa) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@dev, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getgid() 1.193559001s ago: executing program 1 (id=2213): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="757466382c626c6f636b3d307830303030303030303030303030323030006e6f726f636b2c63727566742c6d61703d6f66662c646d6f64653d3078303430303030303030303030303063664173657373696f6e3d3078303030303030303030303030303033382c756e686964652c756e686964652c6769643d29e0cd5c372ab078c28fb05c6421428d066455368833565fd726743513f4466efa8d4fba06d57341875f5775ab343c0f6bc59fbde784ec3597e0e286d8d0dbf360afa3bc5c145b6e4f8b0305932fb55ff13f9fcb5035769f5fca33ac02bdeacb24c58103edc3d8b46df7614aa493952584ee662174309b11a4ad19e64dcdeeca1c148170b8d1aaf26082364b0d90d63d8502ffa63dde945e4612ac134315f389af667a04931ad25ff10b9b5107e517dbbcf5dcb60f564f54b344218d9325b53e829c38c96c69adc9e745202923a1b8124333cce0a8f1c748d42a272eb3e5502051090f1ac34fe5e8f038", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000380)='mm_page_alloc\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r11, 0x0, &(0x7f0000002740)=""/4096}, 0x20) r12 = syz_open_dev$usbfs(&(0x7f00000008c0), 0x9, 0x47e3929cb81af8bd) ioctl$USBDEVFS_WAIT_FOR_RESUME(r12, 0x5523) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.126929562s ago: executing program 1 (id=2214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) 1.107865482s ago: executing program 6 (id=2215): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0ae"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a1180002000202000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f00"], 0xffbf) 1.087828203s ago: executing program 1 (id=2216): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffc54, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208001e0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f2143e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000100004002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8c00010002000000140003006e657464657673696d3000000000000018001680140001801000020001040000af01000000000000"], 0x4c}}, 0x800) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff0000000000000002000000000200000059f0f4eb0200000000005f00"], 0x0, 0x44}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf250c0000000800040004007e4f"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x8, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRES8=r6, @ANYBLOB="18c40bd262be33260ed4a4d6e16f695278ed0bb91a2b8845b3c3001b1cfb0db87adfb44115600708455f5b646037c459e6a4279802d7b29a8d4152adae8ee1f9511f966a5d", @ANYRESOCT=r3, @ANYRES8=r5, @ANYRESHEX=r6, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r1, @ANYRES64=0x0, @ANYRES32=0x0, @ANYRESOCT=r2], 0x6, 0x2ec, &(0x7f0000000a40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x2402}], 0x1, 0x83a4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r9, &(0x7f0000000340)="04", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.006423344s ago: executing program 5 (id=2217): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000080)={0x0, 0xae0}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, &(0x7f0000000480)=0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r4 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r4, 0x4c06, 0x3) chdir(&(0x7f0000000440)='./file0\x00') r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000"], 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1}) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 952.435265ms ago: executing program 5 (id=2218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 927.591505ms ago: executing program 5 (id=2219): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0000}]}) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x138) unshare(0x62040200) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX=r6], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r9], 0x48) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 872.065696ms ago: executing program 6 (id=2220): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x4) write(r2, 0x0, 0x0) 871.614476ms ago: executing program 2 (id=2221): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40080c0) gettid() newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) getgid() gettid() r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x528) 871.025156ms ago: executing program 2 (id=2222): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback}}}}, 0x0) 855.208946ms ago: executing program 2 (id=2223): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 662.323919ms ago: executing program 2 (id=2224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000040000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='f2fs_reserve_new_blocks\x00', r0, 0x0, 0xffffffff}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1080f2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) close_range(r1, r2, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000940)=0xfffffffd) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}]}}}}}}}, 0x0) 604.04656ms ago: executing program 2 (id=2225): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000b"], 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r5}, 0xc) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x80, 0x8, 0x62a, 0x4, {{0x26, 0x4, 0x1, 0x12, 0x98, 0x64, 0x0, 0x89, 0x29, 0x0, @multicast1, @empty, {[@ra={0x94, 0x4, 0x1}, @generic={0x44, 0xa, "75cef25d73b63f2f"}, @ssrr={0x89, 0xf, 0xef, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x1b, 0x0, [{0x1, 0xd, "62f8aa44be1e371e9f9cb9"}, {0x5, 0x8, "d29bbd70b6a8"}]}, @timestamp_prespec={0x44, 0x4c, 0x82, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0xffff8000}, {@rand_addr=0x64010102, 0x6}, {@empty, 0xffffffff}, {@empty, 0xfff}, {@loopback, 0x6}, {@multicast2, 0x1ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@rand_addr=0x64010102, 0x5}, {@remote, 0x6d}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 526.195351ms ago: executing program 2 (id=2226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000050000000060a01040000000000000000020000002400048020000180070001006374000014000280080002400000000f08"], 0x78}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000740)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6cc200009078000001000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f844", 0x3a}, {0x0}, {&(0x7f0000000300)="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", 0xb19}], 0x4, &(0x7f0000001480)}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x4011, &(0x7f0000000000)={[{@nobh}, {@norecovery}, {@nobh}]}, 0x9, 0x66d, &(0x7f00000011c0)="$eJzs3c1rHG8dAPDvTHaTNPnp5ldE7cUGRFrQJk3aShHBFq+l1JebF2OTltq0KU1EUwsmUC+KePEgePJg/S9swasHrx68eBApBJEerFSzMpvd7Ft2s0l2d9Lk84Fp5pnZmeeZ3X73mXn2eWYCOLWms3/SiHMR8SSJKDWsK0R15fTO697+6/ndbEqiXP7WP5N4/pNko3FfSfXvZHXj/5Ui+XMacXakPd/V9WcPF5aXl55W07Nrj57Mrq4/u/Tg0cL9pftLj+e/PH/92tVr1+cuH+n4ylXZ/K0X3/9h6We3v/O737xP5n7/19tJ3Ijtatmy42rdduxIOWfv2XQt/3f1pWnl3+tH3Pdx8e9S5aNuequSQn7l4WDuVeO8GBGfiVKMRP3DK8VPv5Fr4YCBKif1OhI4bZL947/Yvmh8MIUBhqh2HlC7tt/rOrhdOuCzEmAYtm7uNADsxH4xImrxX9hpG4zxStvAxNskGpt1kog4WsvcjiyPP/3x9otsig7tcMBgbGzWmm5b6/+kEptTMV5JTbxNs/h/VdsubZiy74Vvtu641Fv+0y1p8Q/Ds7EZEZ+t1v+jsV/872qN/+8dMn/xDwAAAAAAAP3z+mZEfGmv/n/pbv+f0Zb+P0l1jN+NPuQ/3TI2sPn3vyzn9E1DtkAfbd2M+Gpb/9//NvYOnhqp/s7/iUp/gGJ678Hy0uWI+GREXIziWJaea95tUwfhS784++tO+Tf2/8umLP9aX8Dqrt4UWgbiLi6sLfTn6OF029qMeFfp/3u+uqS5/09W/ydt/X9//vUswJ/0mMfZL7y807Tg7/Wvh/3jHxiU8m8jLuw5/qd+up10vz/HbOV8YLZ2VtDucz/+5R865S/+IT9Z/T/RPf7Hksb79awebP/ZFfyV9UK50/rDnv+PJt8eqe0/86OFtbWncxGjya325fPN2xcPdghwYtTioRYvWfxf/HyX9r8kqZ//N8ThmYjY6DHPT29P/m030dKKp/6H/GTxv9i9/p9qrv8POjMe8y+nXnWqdu/0VP9frdTpF6tLtP9Bo/b7cfQaoLkUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+cGlEfBRJOrM7n6YzMxGTEfGpmEiXV1bXvnhv5QePF7N1zc//L+2kk9rz/6ca0vMt6SsR8XFE/GrkTCU9c3dleTHvgwcAAAAAAAAAAAAAAAAAAIBjYrIy5r881jr+P/OPkbxLBwxcofpXvMPpUzj0luWxvhYEGLrDxz/woes9/osDLQcwfJ3j/937csVQiwMM0W78fzffcgDDd8jrfz8XwAmg/Q9Oqx7b9MYHXQ4gDz3X/1uDLQcAAAAAANAXH59//ZckIja+cqYyZUar63T2h5MtzbsAQG726cM7OqxyAMNXWMm7BEBeXOMDye7cf/Yc7L9H7//tnfsCJAMtFwAAAAAAAAAAAABQd+Fc8/j/Qm/j/z8aVvmAwUkjujzCW99+OMm6jP/fK/g98gtOkM6P/uil7k96O0Pw6CA4loz/B+r1+Oae6ztX4UmX9gMAAAAAAAAAAAAAoK/Gnz1cWF5eerq6ns/MWEQcdvOv7fea2tPN8zzA1pmNhaFmGhsRA89re7/X1D6Ig+25eIT/G8d5JonsU+n2btRuwdGHTIuH3DyfryMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDd/wMAAP//0VIyIg==") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/232, 0xe8, 0x1, &(0x7f0000000200)=""/51, 0x33}, &(0x7f0000000300)=0x40) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001980)=[{0x0}], 0x1, 0x8, 0x365) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 394.294573ms ago: executing program 0 (id=2227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) 314.297215ms ago: executing program 0 (id=2228): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) r4 = socket(0xa, 0x4, 0x2) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x2d, 0x0, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r8, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1023}}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x3000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r9) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r12, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') mkdir(&(0x7f0000000680)='./file0\x00', 0x5b) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xd, &(0x7f0000000200)=ANY=[], 0x0, 0x449, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 190.527596ms ago: executing program 1 (id=2229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 35.49676ms ago: executing program 5 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 15.8431ms ago: executing program 6 (id=2231): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e1d, @remote}, 0x10) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000040)={0x0, 0x2}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) preadv(r1, &(0x7f0000000a00), 0x0, 0x0, 0xffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x490, &(0x7f0000000000), 0x2, 0x786, &(0x7f0000000f80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8080c61) pwrite64(r2, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) syz_emit_ethernet(0xc5, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="d7b95fbef69e", @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x1, 0x1}}, {@generic={0x6006, "4a0903100bff3e988eeae3eecfde270d51845b204350e759adf20744b8ef5e6054841218133daab004c08d2f1c0c4e301ec5ba7f9e195aa947e1ae06da822cb458fa924c9d1905f8fc110cf3d2e954732ebe84dbfb2774000c982a62d7836bc24628502029560ae76be1a23c0011298bb4138210fe4c17f981691df3a4e53f33f5f4fc979c980af968ad275002ad1ff5b09d4b539f77615ab0047c4c9c68acec0f3217ebb7ea93db5acc10b3b1c807"}}}, &(0x7f0000000300)={0x0, 0x2, [0xe2c, 0x48c, 0x9af, 0xb3]}) write$P9_RSETATTR(r1, &(0x7f0000000540)={0x7, 0x1b, 0x2}, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) sendto$inet6(r5, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r5) 0s ago: executing program 5 (id=2232): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffff9, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073"], 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff3}, {0xd, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001780)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64=r0], 0x1, 0x2f4, &(0x7f0000000900)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0xfdb99d11ed387c24, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7f, '\x00', 0x0, 0x2}, 0xfffffdd5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r7, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080006"], 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffff}, 0x1320, 0x0, 0x3, 0x0, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5516, 0x1000000}) kernel console output (not intermixed with test programs): ap blk 4 in block_group 0 [ 152.816132][ T7776] validate_nla: 1 callbacks suppressed [ 152.816148][ T7776] netlink: 'syz.0.1529': attribute type 10 has an invalid length. [ 152.838093][ T7777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.844391][ T7776] dummy0: entered promiscuous mode [ 152.862272][ T7767] EXT4-fs (loop6): Remounting filesystem read-only [ 152.898459][ T7781] loop5: detected capacity change from 0 to 128 [ 152.906115][ T7776] team0: Port device dummy0 removed [ 152.916133][ T7776] bridge0: port 3(dummy0) entered blocking state [ 152.922567][ T7776] bridge0: port 3(dummy0) entered disabled state [ 152.930324][ T7776] dummy0: entered allmulticast mode [ 152.938370][ T7777] tipc: Enabling of bearer rejected, failed to enable media [ 152.953686][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.959851][ T7777] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 152.979894][ T7777] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1530: Invalid inode bitmap blk 4 in block_group 0 [ 152.995698][ T7777] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 153.024887][ T7789] netlink: 'syz.6.1534': attribute type 6 has an invalid length. [ 153.042688][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.059194][ T7792] loop6: detected capacity change from 0 to 1024 [ 153.095994][ T7795] loop0: detected capacity change from 0 to 1024 [ 153.116435][ T7795] EXT4-fs: Ignoring removed nobh option [ 153.121222][ T7792] EXT4-fs error (device loop6): __ext4_fill_super:5500: comm syz.6.1534: inode #2: comm syz.6.1534: iget: illegal inode # [ 153.122093][ T7795] EXT4-fs: Ignoring removed nobh option [ 153.141570][ T7798] loop2: detected capacity change from 0 to 2048 [ 153.162462][ T7792] EXT4-fs (loop6): get root inode failed [ 153.168141][ T7792] EXT4-fs (loop6): mount failed [ 153.176424][ T7795] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 153.187657][ T7798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.199922][ T7795] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1537: inode #4294967295: comm syz.0.1537: iget: illegal inode # [ 153.216946][ T7795] EXT4-fs (loop0): no journal found [ 153.222248][ T7795] EXT4-fs (loop0): can't get journal size [ 153.246414][ T7798] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 153.260956][ T7795] EXT4-fs (loop0): failed to initialize system zone (-22) [ 153.268329][ T7795] EXT4-fs (loop0): mount failed [ 153.279556][ T7798] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 769 with error 28 [ 153.292473][ T7798] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.292473][ T7798] [ 153.302271][ T7798] EXT4-fs (loop2): Total free blocks count 0 [ 153.308274][ T7798] EXT4-fs (loop2): Free/Dirty block details [ 153.314214][ T7798] EXT4-fs (loop2): free_blocks=4096 [ 153.319423][ T7798] EXT4-fs (loop2): dirty_blocks=800 [ 153.324657][ T7798] EXT4-fs (loop2): Block reservation details [ 153.330646][ T7798] EXT4-fs (loop2): i_reserved_data_blocks=50 [ 153.368514][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 153.495464][ T7825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.516827][ T7827] loop6: detected capacity change from 0 to 1024 [ 153.592759][ T7827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.606105][ T7827] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.641696][ T7827] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 153.657530][ T7827] EXT4-fs (loop6): Remounting filesystem read-only [ 153.674062][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.695095][ T7841] netlink: 'syz.6.1549': attribute type 10 has an invalid length. [ 153.703305][ T7841] dummy0: entered promiscuous mode [ 153.713165][ T7841] team0: Port device dummy0 removed [ 153.719388][ T7841] bridge0: port 3(dummy0) entered blocking state [ 153.725813][ T7841] bridge0: port 3(dummy0) entered disabled state [ 153.733775][ T7841] dummy0: entered allmulticast mode [ 153.794439][ T7848] smc: net device bond0 applied user defined pnetid SYZ2 [ 153.804901][ T7848] smc: net device bond0 erased user defined pnetid SYZ2 [ 153.822141][ T7852] loop6: detected capacity change from 0 to 2048 [ 153.842768][ T7852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.885991][ T7852] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 153.900515][ T7852] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 977 with error 28 [ 153.913303][ T7852] EXT4-fs (loop6): This should not happen!! Data will be lost [ 153.913303][ T7852] [ 153.923051][ T7852] EXT4-fs (loop6): Total free blocks count 0 [ 153.929201][ T7852] EXT4-fs (loop6): Free/Dirty block details [ 153.935147][ T7852] EXT4-fs (loop6): free_blocks=4096 [ 153.940353][ T7852] EXT4-fs (loop6): dirty_blocks=1008 [ 153.945717][ T7852] EXT4-fs (loop6): Block reservation details [ 153.951728][ T7852] EXT4-fs (loop6): i_reserved_data_blocks=63 [ 153.967194][ T7863] Invalid ELF header magic: != ELF [ 153.983444][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 154.261929][ T7871] lo speed is unknown, defaulting to 1000 [ 154.508686][ T7875] loop2: detected capacity change from 0 to 512 [ 154.537829][ T7875] EXT4-fs (loop2): 1 orphan inode deleted [ 154.545335][ T7875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.548080][ T7883] netlink: 'syz.1.1567': attribute type 10 has an invalid length. [ 154.567235][ T41] __quota_error: 56 callbacks suppressed [ 154.567250][ T41] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 154.568652][ T7875] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.573126][ T41] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 154.637501][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.703028][ T7892] Invalid ELF header magic: != ELF [ 154.726103][ T7896] netlink: 'syz.2.1572': attribute type 21 has an invalid length. [ 154.730595][ T29] audit: type=1326 audit(2000000000.090:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x0 [ 154.814151][ T7903] loop0: detected capacity change from 0 to 512 [ 154.823983][ T7903] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.840965][ T29] audit: type=1326 audit(2000000000.200:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 154.864584][ T29] audit: type=1326 audit(2000000000.200:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 154.888046][ T29] audit: type=1326 audit(2000000000.200:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 154.984748][ T29] audit: type=1326 audit(2000000000.330:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 155.008261][ T29] audit: type=1326 audit(2000000000.330:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7897 comm="syz.1.1573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 155.092901][ T7907] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 155.153987][ T7907] loop5: detected capacity change from 0 to 128 [ 155.426761][ T7924] loop5: detected capacity change from 0 to 1024 [ 155.476223][ T7924] EXT4-fs: Ignoring removed bh option [ 155.539742][ T7929] loop6: detected capacity change from 0 to 1024 [ 155.606569][ T7929] EXT4-fs: Ignoring removed nobh option [ 155.612332][ T7929] EXT4-fs: Ignoring removed nobh option [ 155.728121][ T7929] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 155.784327][ T7939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7939 comm=syz.1.1589 [ 155.797354][ T29] audit: type=1326 audit(2000000000.460:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 155.820874][ T29] audit: type=1326 audit(2000000000.460:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 155.844480][ T29] audit: type=1326 audit(2000000000.460:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.1.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 155.882357][ T7929] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.1583: inode #4294967295: comm syz.6.1583: iget: illegal inode # [ 155.899817][ T7903] EXT4-fs (loop0): 1 truncate cleaned up [ 155.934629][ T7924] EXT4-fs error (device loop5): ext4_xattr_set_entry:1660: inode #15: comm syz.5.1585: corrupted xattr entries [ 155.947164][ T7924] EXT4-fs (loop5): Remounting filesystem read-only [ 156.100818][ T7924] EXT4-fs warning (device loop5): ext4_xattr_block_set:2190: inode #19: comm syz.5.1585: dec ref error=-30 [ 156.165175][ T7929] EXT4-fs (loop6): no journal found [ 156.170456][ T7929] EXT4-fs (loop6): can't get journal size [ 156.182869][ T7950] __nla_validate_parse: 16 callbacks suppressed [ 156.182886][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 156.284540][ T7929] EXT4-fs (loop6): failed to initialize system zone (-22) [ 156.316078][ T7929] EXT4-fs (loop6): mount failed [ 156.342790][ T7959] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1593'. [ 156.544544][ T7975] loop0: detected capacity change from 0 to 2048 [ 156.783348][ T7988] loop5: detected capacity change from 0 to 512 [ 156.796791][ T7980] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 156.804709][ T7980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1604'. [ 157.496072][ T7990] loop6: detected capacity change from 0 to 512 [ 157.610531][ T7991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1606'. [ 157.619617][ T7991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1606'. [ 157.628666][ T7991] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1606'. [ 157.650808][ T7980] bridge0: port 3(dummy0) entered blocking state [ 157.657284][ T7980] bridge0: port 3(dummy0) entered forwarding state [ 157.731146][ T7988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.741140][ T7990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 158.672303][ T7997] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1607'. [ 159.811326][ T7988] EXT4-fs: error -4 creating inode table initialization thread [ 159.819170][ T7988] EXT4-fs (loop5): mount failed [ 160.071313][ T7990] EXT4-fs: error -4 creating inode table initialization thread [ 160.078954][ T7990] EXT4-fs (loop6): mount failed [ 160.378683][ T8009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1611'. [ 160.443043][ T8011] netlink: 'syz.1.1613': attribute type 298 has an invalid length. [ 160.452152][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 160.452166][ T29] audit: type=1326 audit(2000000005.140:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.5.1615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f908982e929 code=0x0 [ 160.487721][ T29] audit: type=1400 audit(2000000005.140:4104): avc: denied { append } for pid=8010 comm="syz.1.1613" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 160.699062][ T8027] lo speed is unknown, defaulting to 1000 [ 160.766605][ T29] audit: type=1326 audit(2000000005.440:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.1.1617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd9f32e929 code=0x0 [ 160.810690][ T8026] loop0: detected capacity change from 0 to 1024 [ 160.867241][ T8026] EXT4-fs: Ignoring removed nobh option [ 160.872904][ T8026] EXT4-fs: Ignoring removed nobh option [ 160.889045][ T29] audit: type=1326 audit(2000000005.540:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.2.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0b88ce929 code=0x0 [ 161.330803][ T8035] IPv6: Can't replace route, no match found [ 161.349830][ T29] audit: type=1326 audit(2000000006.030:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.5.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x0 [ 161.453671][ T29] audit: type=1326 audit(2000000006.140:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 161.477289][ T29] audit: type=1326 audit(2000000006.140:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 161.500808][ T29] audit: type=1326 audit(2000000006.140:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 161.524317][ T29] audit: type=1326 audit(2000000006.140:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.5.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 161.589119][ T8026] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 161.619011][ T8026] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1616: inode #4294967295: comm syz.0.1616: iget: illegal inode # [ 161.660022][ T8026] EXT4-fs (loop0): no journal found [ 161.665523][ T8026] EXT4-fs (loop0): can't get journal size [ 161.722822][ T8026] EXT4-fs (loop0): failed to initialize system zone (-22) [ 161.749937][ T8026] EXT4-fs (loop0): mount failed [ 161.761244][ T8044] netlink: 'syz.6.1621': attribute type 21 has an invalid length. [ 161.786035][ T8041] loop2: detected capacity change from 0 to 8192 [ 161.793550][ T8044] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1621'. [ 161.814478][ T8026] syz.0.1616 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 161.825624][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.0.1616 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 161.825667][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.825681][ T8026] Call Trace: [ 161.825688][ T8026] [ 161.825696][ T8026] __dump_stack+0x1d/0x30 [ 161.825715][ T8026] dump_stack_lvl+0xe8/0x140 [ 161.825735][ T8026] dump_stack+0x15/0x1b [ 161.825750][ T8026] dump_header+0x81/0x220 [ 161.825863][ T8026] oom_kill_process+0x334/0x3f0 [ 161.825908][ T8026] out_of_memory+0x979/0xb80 [ 161.825938][ T8026] try_charge_memcg+0x5e6/0x9e0 [ 161.825989][ T8026] charge_memcg+0x51/0xc0 [ 161.826018][ T8026] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 161.826050][ T8026] __read_swap_cache_async+0x1df/0x350 [ 161.826145][ T8026] swap_cluster_readahead+0x277/0x3e0 [ 161.826180][ T8026] swapin_readahead+0xde/0x6f0 [ 161.826241][ T8026] ? __filemap_get_folio+0x4f7/0x6b0 [ 161.826282][ T8026] ? __rcu_read_unlock+0x34/0x70 [ 161.826303][ T8026] ? swap_cache_get_folio+0x77/0x200 [ 161.826448][ T8026] do_swap_page+0x301/0x2430 [ 161.826468][ T8026] ? css_rstat_updated+0xcd/0x5b0 [ 161.826496][ T8026] ? __pfx_default_wake_function+0x10/0x10 [ 161.826519][ T8026] handle_mm_fault+0x9a5/0x2be0 [ 161.826596][ T8026] ? mas_walk+0xf2/0x120 [ 161.826633][ T8026] do_user_addr_fault+0x636/0x1090 [ 161.826671][ T8026] exc_page_fault+0x62/0xa0 [ 161.826768][ T8026] asm_exc_page_fault+0x26/0x30 [ 161.826790][ T8026] RIP: 0033:0x7f718cae00e3 [ 161.826804][ T8026] Code: 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 63 00 00 00 0f 05 48 3d [ 161.826846][ T8026] RSP: 002b:00007f718b125e68 EFLAGS: 00010286 [ 161.826863][ T8026] RAX: ffffffffffffffff RBX: 00007f718b125ef0 RCX: ffffffffffffffa8 [ 161.826876][ T8026] RDX: 0000200000000740 RSI: 0000200000000040 RDI: 00007f718b125eb0 [ 161.826890][ T8026] RBP: 0000200000000740 R08: 00007f718b125ef0 R09: 0000000000004011 [ 161.826920][ T8026] R10: 0000000000004011 R11: 0000000000000246 R12: 0000200000000040 [ 161.827010][ T8026] R13: 00007f718b125eb0 R14: 000000000000066d R15: 0000200000000000 [ 161.827031][ T8026] [ 161.827038][ T8026] memory: usage 307200kB, limit 307200kB, failcnt 2061 [ 162.048855][ T8026] memory+swap: usage 308176kB, limit 9007199254740988kB, failcnt 0 [ 162.056827][ T8026] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 162.064161][ T8026] Memory cgroup stats for /syz0: [ 162.083535][ T8053] Invalid ELF header magic: != ELF [ 162.178638][ T8057] loop6: detected capacity change from 0 to 8192 [ 162.208584][ T8026] cache 0 [ 162.211622][ T8026] rss 4096 [ 162.214703][ T8026] shmem 0 [ 162.217637][ T8026] mapped_file 0 [ 162.221123][ T8026] dirty 0 [ 162.224123][ T8026] writeback 32768 [ 162.227746][ T8026] workingset_refault_anon 463 [ 162.232524][ T8026] workingset_refault_file 1406 [ 162.237289][ T8026] swap 999424 [ 162.240640][ T8026] swapcached 32768 [ 162.245715][ T8026] pgpgin 127036 [ 162.249185][ T8026] pgpgout 127027 [ 162.253267][ T8026] pgfault 131904 [ 162.256830][ T8026] pgmajfault 366 [ 162.260366][ T8026] inactive_anon 32768 [ 162.264377][ T8026] active_anon 0 [ 162.267830][ T8026] inactive_file 4096 [ 162.271751][ T8026] active_file 0 [ 162.275210][ T8026] unevictable 0 [ 162.278758][ T8026] hierarchical_memory_limit 314572800 [ 162.284292][ T8026] hierarchical_memsw_limit 9223372036854771712 [ 162.290495][ T8026] total_cache 0 [ 162.294010][ T8026] total_rss 4096 [ 162.297549][ T8026] total_shmem 0 [ 162.301075][ T8026] total_mapped_file 0 [ 162.305344][ T8026] total_dirty 0 [ 162.308813][ T8026] total_writeback 32768 [ 162.313033][ T8026] total_workingset_refault_anon 463 [ 162.318254][ T8026] total_workingset_refault_file 1406 [ 162.323575][ T8026] total_swap 999424 [ 162.327421][ T8026] total_swapcached 32768 [ 162.331694][ T8026] total_pgpgin 127036 [ 162.335664][ T8026] total_pgpgout 127027 [ 162.339730][ T8026] total_pgfault 131904 [ 162.343856][ T8026] total_pgmajfault 366 [ 162.347935][ T8026] total_inactive_anon 32768 [ 162.352470][ T8026] total_active_anon 0 [ 162.356487][ T8026] total_inactive_file 4096 [ 162.360897][ T8026] total_active_file 0 [ 162.364896][ T8026] total_unevictable 0 [ 162.368952][ T8026] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1616,pid=8020,uid=0 [ 162.383011][ T8060] loop5: detected capacity change from 0 to 2048 [ 162.383655][ T8026] Memory cgroup out of memory: Killed process 8020 (syz.0.1616) total-vm:93752kB, anon-rss:936kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 162.434928][ T8060] EXT4-fs mount: 4 callbacks suppressed [ 162.434942][ T8060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.541705][ T8059] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 162.594251][ T8067] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.618235][ T8059] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 162.631141][ T8059] EXT4-fs (loop5): This should not happen!! Data will be lost [ 162.631141][ T8059] [ 162.640829][ T8059] EXT4-fs (loop5): Total free blocks count 0 [ 162.646945][ T8059] EXT4-fs (loop5): Free/Dirty block details [ 162.652885][ T8059] EXT4-fs (loop5): free_blocks=4096 [ 162.658094][ T8059] EXT4-fs (loop5): dirty_blocks=512 [ 162.663360][ T8059] EXT4-fs (loop5): Block reservation details [ 162.669347][ T8059] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 162.722264][ T8069] loop2: detected capacity change from 0 to 1024 [ 162.729716][ T8067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1628'. [ 162.738871][ T8067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1628'. [ 162.741600][ T8069] EXT4-fs: Ignoring removed bh option [ 162.747986][ T8067] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1628'. [ 162.772248][ T8067] smc: net device bond0 erased user defined pnetid SYZ2 [ 162.824321][ T8069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.839668][ T29] audit: type=1326 audit(2000000007.520:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8070 comm="syz.1.1630" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd9f32e929 code=0x0 [ 162.876477][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 162.895076][ T8069] EXT4-fs error (device loop2): ext4_xattr_set_entry:1660: inode #15: comm syz.2.1629: corrupted xattr entries [ 162.907552][ T8069] EXT4-fs (loop2): Remounting filesystem read-only [ 162.914840][ T8069] EXT4-fs warning (device loop2): ext4_xattr_block_set:2190: inode #19: comm syz.2.1629: dec ref error=-30 [ 162.939409][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.950973][ T8078] smc: net device bond0 applied user defined pnetid SYZ2 [ 162.967491][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1631'. [ 162.993897][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1632'. [ 163.003050][ T8078] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1632'. [ 163.012239][ T8078] netlink: 38 bytes leftover after parsing attributes in process `syz.5.1632'. [ 163.092692][ T8085] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1635'. [ 163.115376][ T8078] smc: net device bond0 erased user defined pnetid SYZ2 [ 163.121752][ T8087] IPv6: Can't replace route, no match found [ 163.149664][ T8095] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.160969][ T8095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1638'. [ 163.171751][ T8095] smc: net device bond0 erased user defined pnetid SYZ2 [ 163.255663][ T8100] lo speed is unknown, defaulting to 1000 [ 163.407540][ T8106] netlink: 'syz.5.1640': attribute type 10 has an invalid length. [ 163.587169][ T8113] loop2: detected capacity change from 0 to 1024 [ 163.673271][ T8115] smc: net device bond0 applied user defined pnetid SYZ2 [ 163.711478][ T8113] EXT4-fs: Ignoring removed nobh option [ 163.717157][ T8113] EXT4-fs: Ignoring removed nobh option [ 163.808085][ T8112] loop6: detected capacity change from 0 to 8192 [ 163.973234][ T8113] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 164.050363][ T8113] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.1641: inode #4294967295: comm syz.2.1641: iget: illegal inode # [ 164.092742][ T8134] IPv6: Can't replace route, no match found [ 164.200398][ T8113] EXT4-fs (loop2): no journal found [ 164.205793][ T8113] EXT4-fs (loop2): can't get journal size [ 164.394714][ T8113] EXT4-fs (loop2): failed to initialize system zone (-22) [ 164.407558][ T8146] netlink: 'syz.5.1653': attribute type 10 has an invalid length. [ 164.609031][ T8113] EXT4-fs (loop2): mount failed [ 164.681234][ T8151] netlink: 'syz.6.1655': attribute type 10 has an invalid length. [ 164.732667][ T8151] dummy0: left allmulticast mode [ 164.764960][ T8151] dummy0: left promiscuous mode [ 164.770033][ T8151] bridge0: port 3(dummy0) entered disabled state [ 164.806334][ T8149] loop5: detected capacity change from 0 to 8192 [ 164.839962][ T8151] team0: Port device dummy0 added [ 165.695530][ T8161] smc: net device bond0 erased user defined pnetid SYZ2 [ 165.705061][ T8165] loop5: detected capacity change from 0 to 1024 [ 165.717118][ T8164] loop2: detected capacity change from 0 to 2048 [ 165.733486][ T8165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.754708][ T8165] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.771157][ T8169] IPv6: Can't replace route, no match found [ 165.778082][ T8164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.796796][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 165.796811][ T29] audit: type=1326 audit(2000000010.480:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x0 [ 165.833647][ T8165] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 165.849403][ T8164] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 165.865515][ T8165] EXT4-fs (loop5): Remounting filesystem read-only [ 165.881912][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.901168][ T29] audit: type=1326 audit(2000000010.580:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 165.928472][ T8177] netlink: 'syz.6.1665': attribute type 21 has an invalid length. [ 165.967587][ T8179] Invalid ELF header magic: != ELF [ 166.005755][ T8183] smc: net device bond0 applied user defined pnetid SYZ2 [ 166.016658][ T8183] smc: net device bond0 erased user defined pnetid SYZ2 [ 166.057904][ T29] audit: type=1326 audit(2000000010.590:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 166.081641][ T29] audit: type=1326 audit(2000000010.590:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 166.105056][ T29] audit: type=1326 audit(2000000010.590:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 166.128560][ T29] audit: type=1326 audit(2000000010.590:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8168 comm="syz.0.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 166.155633][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.256714][ T8193] FAULT_INJECTION: forcing a failure. [ 166.256714][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.270013][ T8193] CPU: 1 UID: 0 PID: 8193 Comm: syz.5.1669 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 166.270043][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.270056][ T8193] Call Trace: [ 166.270105][ T8193] [ 166.270113][ T8193] __dump_stack+0x1d/0x30 [ 166.270135][ T8193] dump_stack_lvl+0xe8/0x140 [ 166.270155][ T8193] dump_stack+0x15/0x1b [ 166.270169][ T8193] should_fail_ex+0x265/0x280 [ 166.270278][ T8193] should_fail+0xb/0x20 [ 166.270301][ T8193] should_fail_usercopy+0x1a/0x20 [ 166.270329][ T8193] _copy_from_user+0x1c/0xb0 [ 166.270350][ T8193] __copy_msghdr+0x244/0x300 [ 166.270419][ T8193] ___sys_sendmsg+0x109/0x1d0 [ 166.270494][ T8193] __sys_sendmmsg+0x178/0x300 [ 166.270523][ T8193] __x64_sys_sendmmsg+0x57/0x70 [ 166.270539][ T8193] x64_sys_call+0x2f2f/0x2fb0 [ 166.270558][ T8193] do_syscall_64+0xd2/0x200 [ 166.270576][ T8193] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.270605][ T8193] ? clear_bhb_loop+0x40/0x90 [ 166.270627][ T8193] ? clear_bhb_loop+0x40/0x90 [ 166.270650][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.270677][ T8193] RIP: 0033:0x7f908982e929 [ 166.270690][ T8193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.270706][ T8193] RSP: 002b:00007f9087e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.270723][ T8193] RAX: ffffffffffffffda RBX: 00007f9089a55fa0 RCX: 00007f908982e929 [ 166.270737][ T8193] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 166.270780][ T8193] RBP: 00007f9087e97090 R08: 0000000000000000 R09: 0000000000000000 [ 166.270792][ T8193] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 166.270805][ T8193] R13: 0000000000000000 R14: 00007f9089a55fa0 R15: 00007ffc3c899c08 [ 166.270824][ T8193] [ 166.569154][ T8203] loop2: detected capacity change from 0 to 1024 [ 166.577901][ T8203] EXT4-fs: Ignoring removed bh option [ 166.613134][ T8203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.688100][ T29] audit: type=1326 audit(2000000000.070:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b88ce929 code=0x7ffc0000 [ 166.711576][ T29] audit: type=1326 audit(2000000000.070:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b88ce929 code=0x7ffc0000 [ 166.749337][ T8216] lo speed is unknown, defaulting to 1000 [ 166.993203][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.996222][ T29] audit: type=1326 audit(2000000000.190:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0b88ce929 code=0x7ffc0000 [ 167.025637][ T29] audit: type=1326 audit(2000000000.190:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.2.1675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b88ce929 code=0x7ffc0000 [ 167.062864][ T8230] FAULT_INJECTION: forcing a failure. [ 167.062864][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.066494][ T8233] __nla_validate_parse: 21 callbacks suppressed [ 167.066511][ T8233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1685'. [ 167.076052][ T8230] CPU: 1 UID: 0 PID: 8230 Comm: syz.0.1686 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 167.076156][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.076169][ T8230] Call Trace: [ 167.076176][ T8230] [ 167.076184][ T8230] __dump_stack+0x1d/0x30 [ 167.076205][ T8230] dump_stack_lvl+0xe8/0x140 [ 167.076250][ T8230] dump_stack+0x15/0x1b [ 167.076267][ T8230] should_fail_ex+0x265/0x280 [ 167.076338][ T8230] should_fail+0xb/0x20 [ 167.076432][ T8230] should_fail_usercopy+0x1a/0x20 [ 167.076463][ T8230] strncpy_from_user+0x25/0x230 [ 167.076487][ T8230] ? __kmalloc_cache_noprof+0x189/0x320 [ 167.076587][ T8230] __se_sys_memfd_create+0x1ff/0x590 [ 167.076690][ T8230] __x64_sys_memfd_create+0x31/0x40 [ 167.076719][ T8230] x64_sys_call+0x122f/0x2fb0 [ 167.076739][ T8230] do_syscall_64+0xd2/0x200 [ 167.076771][ T8230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.076857][ T8230] ? clear_bhb_loop+0x40/0x90 [ 167.076878][ T8230] ? clear_bhb_loop+0x40/0x90 [ 167.076958][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.076978][ T8230] RIP: 0033:0x7f718cade929 [ 167.076994][ T8230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.077011][ T8230] RSP: 002b:00007f718b146e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 167.077031][ T8230] RAX: ffffffffffffffda RBX: 000000000000052c RCX: 00007f718cade929 [ 167.077082][ T8230] RDX: 00007f718b146ef0 RSI: 0000000000000000 RDI: 00007f718cb614cc [ 167.077093][ T8230] RBP: 0000200000000640 R08: 00007f718b146bb7 R09: 00007f718b146e40 [ 167.077105][ T8230] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000c40 [ 167.077117][ T8230] R13: 00007f718b146ef0 R14: 00007f718b146eb0 R15: 0000200000000c80 [ 167.077136][ T8230] [ 167.097816][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1687'. [ 167.109351][ T8233] netlink: 'syz.2.1685': attribute type 10 has an invalid length. [ 167.218067][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1689'. [ 167.224434][ T8233] bridge0: port 3(dummy0) entered disabled state [ 167.358984][ T8233] dummy0: left allmulticast mode [ 167.366376][ T8233] dummy0: left promiscuous mode [ 167.371541][ T8233] bridge0: port 3(dummy0) entered disabled state [ 167.390920][ T8233] team0: Port device dummy0 added [ 167.423259][ T8248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1692'. [ 167.470636][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 167.488917][ T8252] loop0: detected capacity change from 0 to 1024 [ 167.507822][ T8252] EXT4-fs: Ignoring removed nobh option [ 167.513661][ T8252] EXT4-fs: Ignoring removed nobh option [ 167.521563][ T8252] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 167.546271][ T8252] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1694: inode #4294967295: comm syz.0.1694: iget: illegal inode # [ 167.574566][ T8252] EXT4-fs (loop0): no journal found [ 167.579952][ T8252] EXT4-fs (loop0): can't get journal size [ 167.595441][ T8252] EXT4-fs (loop0): failed to initialize system zone (-22) [ 167.606889][ T8252] EXT4-fs (loop0): mount failed [ 167.639618][ T8262] netlink: '+}[@': attribute type 13 has an invalid length. [ 167.730663][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.737938][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.773033][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1704'. [ 167.785466][ T8279] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 167.816224][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.826257][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.989766][ T8262] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.998861][ T8262] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.007834][ T8262] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.016716][ T8262] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.401008][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1707'. [ 168.421057][ T8292] smc: net device bond0 applied user defined pnetid SYZ2 [ 168.458143][ T8292] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1708'. [ 168.467352][ T8292] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1708'. [ 168.476463][ T8292] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1708'. [ 168.520886][ T8279] dummy0: left allmulticast mode [ 168.525922][ T8279] dummy0: left promiscuous mode [ 168.530894][ T8279] bridge0: port 3(dummy0) entered disabled state [ 168.546252][ T8294] smc: net device bond0 erased user defined pnetid SYZ2 [ 168.566137][ T8279] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.579749][ T8279] team0: Failed to send options change via netlink (err -105) [ 168.587371][ T8279] team0: Port device dummy0 added [ 168.701271][ T8281] lo speed is unknown, defaulting to 1000 [ 168.765005][ T8307] loop0: detected capacity change from 0 to 1024 [ 168.769437][ T8303] smc: net device bond0 applied user defined pnetid SYZ2 [ 168.781272][ T8303] smc: net device bond0 erased user defined pnetid SYZ2 [ 168.804556][ T8307] EXT4-fs: Ignoring removed bh option [ 168.825751][ T8307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.874387][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.907738][ T8317] Invalid ELF header magic: != ELF [ 168.934464][ T8319] loop0: detected capacity change from 0 to 2048 [ 169.013154][ T8321] loop5: detected capacity change from 0 to 512 [ 169.016618][ T8319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.019974][ T8321] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 169.046664][ T8321] EXT4-fs (loop5): 1 truncate cleaned up [ 169.052863][ T8321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.071930][ T8338] netlink: 'syz.6.1724': attribute type 10 has an invalid length. [ 169.111849][ T8319] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 169.120716][ T8338] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 169.126926][ T8319] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 169.147757][ T8319] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.147757][ T8319] [ 169.157448][ T8319] EXT4-fs (loop0): Total free blocks count 0 [ 169.163761][ T8319] EXT4-fs (loop0): Free/Dirty block details [ 169.169779][ T8319] EXT4-fs (loop0): free_blocks=4096 [ 169.175037][ T8319] EXT4-fs (loop0): dirty_blocks=512 [ 169.180320][ T8319] EXT4-fs (loop0): Block reservation details [ 169.183441][ T8348] smc: net device bond0 applied user defined pnetid SYZ2 [ 169.186322][ T8319] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 169.202039][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.229544][ T8348] smc: net device bond0 erased user defined pnetid SYZ2 [ 169.310919][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.403515][ T8366] Invalid ELF header magic: != ELF [ 169.557383][ T8380] loop5: detected capacity change from 0 to 1024 [ 169.579773][ T8380] EXT4-fs: Ignoring removed nobh option [ 169.585588][ T8380] EXT4-fs: Ignoring removed nobh option [ 169.617265][ T8383] loop2: detected capacity change from 0 to 512 [ 169.624876][ T8383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.636376][ T8383] EXT4-fs (loop2): 1 truncate cleaned up [ 169.642521][ T8383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.827217][ T8404] Invalid ELF header magic: != ELF [ 169.837331][ T8380] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 169.849477][ T8405] netlink: 'syz.1.1751': attribute type 21 has an invalid length. [ 169.860294][ T8406] loop0: detected capacity change from 0 to 1024 [ 169.877816][ T8406] EXT4-fs: Ignoring removed bh option [ 169.912725][ T8406] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.935703][ T8380] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.1741: inode #4294967295: comm syz.5.1741: iget: illegal inode # [ 170.004649][ T8406] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #15: comm syz.0.1752: corrupted xattr entries [ 170.056476][ T8380] EXT4-fs (loop5): no journal found [ 170.061799][ T8380] EXT4-fs (loop5): can't get journal size [ 170.073203][ T8406] EXT4-fs (loop0): Remounting filesystem read-only [ 170.092389][ T8406] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.1752: dec ref error=-30 [ 170.161595][ T8380] EXT4-fs (loop5): failed to initialize system zone (-22) [ 170.192731][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.219187][ T8426] netem: change failed [ 170.227581][ T8380] EXT4-fs (loop5): mount failed [ 170.591791][ T8444] netlink: 'syz.0.1765': attribute type 21 has an invalid length. [ 170.806128][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 170.806143][ T29] audit: type=1326 audit(2000000003.960:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x0 [ 170.874886][ T29] audit: type=1400 audit(2000000004.030:4284): avc: denied { append } for pid=8458 comm="syz.5.1771" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.905235][ T29] audit: type=1400 audit(2000000004.050:4285): avc: denied { ioctl } for pid=8458 comm="syz.5.1771" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 170.934399][ T29] audit: type=1326 audit(2000000004.090:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 170.960906][ T29] audit: type=1326 audit(2000000004.110:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 170.984542][ T29] audit: type=1326 audit(2000000004.110:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 171.008089][ T29] audit: type=1326 audit(2000000004.110:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8451 comm="syz.0.1769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718cade929 code=0x7ffc0000 [ 171.091076][ T29] audit: type=1326 audit(2000000004.220:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 171.114717][ T29] audit: type=1326 audit(2000000004.220:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 171.138312][ T29] audit: type=1326 audit(2000000004.220:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8463 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 171.219654][ T8467] netlink: 'syz.1.1775': attribute type 10 has an invalid length. [ 171.255328][ T8473] loop6: detected capacity change from 0 to 512 [ 171.262826][ T8467] dummy0: entered promiscuous mode [ 171.279177][ T8473] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.291925][ T8467] team0: Port device dummy0 removed [ 171.316503][ T8467] bridge0: port 3(dummy0) entered blocking state [ 171.323113][ T8467] bridge0: port 3(dummy0) entered disabled state [ 171.330435][ T8467] dummy0: entered allmulticast mode [ 171.330732][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.354651][ T8473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.381385][ T8473] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.394663][ T8473] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1777: corrupted xattr block 19: overlapping e_value [ 171.421550][ T8473] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 171.430564][ T8473] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1777: corrupted xattr block 19: overlapping e_value [ 171.446704][ T8488] smc: net device bond0 applied user defined pnetid SYZ2 [ 171.453758][ T8473] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 171.453881][ T8473] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1777: corrupted xattr block 19: overlapping e_value [ 171.463750][ T8491] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.1777: corrupted xattr block 19: overlapping e_value [ 171.495291][ T8473] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 171.496478][ T8491] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 171.520290][ T8493] loop2: detected capacity change from 0 to 1024 [ 171.528099][ T8488] smc: net device bond0 erased user defined pnetid SYZ2 [ 171.535883][ T8493] EXT4-fs: Ignoring removed bh option [ 171.542305][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.556707][ T8493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.611659][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.486871][ T8516] loop5: detected capacity change from 0 to 512 [ 172.499038][ T8517] loop6: detected capacity change from 0 to 512 [ 172.688672][ T8514] netlink: 'syz.1.1792': attribute type 10 has an invalid length. [ 172.697365][ T8514] dummy0: left allmulticast mode [ 172.702583][ T8514] dummy0: left promiscuous mode [ 172.707670][ T8514] bridge0: port 3(dummy0) entered disabled state [ 172.715760][ T8514] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 172.726736][ T8514] team0: Failed to send options change via netlink (err -105) [ 172.734270][ T8514] team0: Port device dummy0 added [ 172.821132][ T8516] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.831228][ T8517] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 173.408127][ T8531] __nla_validate_parse: 21 callbacks suppressed [ 173.408190][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1800'. [ 173.429075][ T8516] EXT4-fs (loop5): 1 truncate cleaned up [ 173.435268][ T8516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.460012][ T8517] EXT4-fs (loop6): 1 truncate cleaned up [ 173.466320][ T8517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.517680][ T8538] Invalid ELF header magic: != ELF [ 173.542564][ T8540] smc: net device bond0 applied user defined pnetid SYZ2 [ 173.620651][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.651642][ T8540] smc: net device bond0 erased user defined pnetid SYZ2 [ 173.680706][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.758305][ T8556] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 173.782543][ T8556] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 173.799507][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1806'. [ 173.873183][ T8570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1815'. [ 173.947352][ T8579] smc: net device bond0 applied user defined pnetid SYZ2 [ 173.970357][ T8579] smc: net device bond0 erased user defined pnetid SYZ2 [ 174.040935][ T8591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1825'. [ 174.050172][ T8591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1825'. [ 174.059279][ T8591] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1825'. [ 174.068947][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 174.190956][ T8606] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 174.198834][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1833'. [ 174.199445][ T8610] Invalid ELF header magic: != ELF [ 174.224599][ T8611] loop6: detected capacity change from 0 to 2048 [ 174.231487][ T8606] dummy0: entered promiscuous mode [ 174.244008][ T8606] team0: Port device dummy0 removed [ 174.249998][ T8606] bridge0: port 3(dummy0) entered blocking state [ 174.256564][ T8606] bridge0: port 3(dummy0) entered disabled state [ 174.266553][ T8606] dummy0: entered allmulticast mode [ 174.272451][ T8611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.295627][ T8614] smc: net device bond0 applied user defined pnetid SYZ2 [ 174.330163][ T8614] smc: net device bond0 erased user defined pnetid SYZ2 [ 174.340811][ T8626] Invalid ELF header magic: != ELF [ 174.344755][ T8611] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 174.360949][ T8611] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 753 with error 28 [ 174.373873][ T8611] EXT4-fs (loop6): This should not happen!! Data will be lost [ 174.373873][ T8611] [ 174.383579][ T8611] EXT4-fs (loop6): Total free blocks count 0 [ 174.389632][ T8611] EXT4-fs (loop6): Free/Dirty block details [ 174.395585][ T8611] EXT4-fs (loop6): free_blocks=4096 [ 174.400889][ T8611] EXT4-fs (loop6): dirty_blocks=784 [ 174.406182][ T8611] EXT4-fs (loop6): Block reservation details [ 174.412259][ T8611] EXT4-fs (loop6): i_reserved_data_blocks=49 [ 174.458637][ T8635] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1844'. [ 174.478703][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 174.489128][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 174.582879][ T8652] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 174.602860][ T8652] dummy0: entered promiscuous mode [ 174.620561][ T8652] team0: Port device dummy0 removed [ 174.642340][ T8652] bridge0: port 3(dummy0) entered blocking state [ 174.648762][ T8652] bridge0: port 3(dummy0) entered disabled state [ 174.677357][ T8652] dummy0: entered allmulticast mode [ 174.790543][ T8669] netlink: 'syz.2.1859': attribute type 10 has an invalid length. [ 174.798684][ T8669] dummy0: left allmulticast mode [ 174.803765][ T8669] dummy0: left promiscuous mode [ 174.808869][ T8669] bridge0: port 3(dummy0) entered disabled state [ 174.825824][ T8669] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 174.837015][ T8669] team0: Failed to send options change via netlink (err -105) [ 174.844572][ T8669] team0: Port device dummy0 added [ 174.906729][ T8676] lo speed is unknown, defaulting to 1000 [ 175.001833][ T8677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.026472][ T8677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.665211][ T8711] netlink: 'syz.2.1875': attribute type 10 has an invalid length. [ 175.688273][ T8711] dummy0: entered promiscuous mode [ 175.697201][ T8711] team0: Port device dummy0 removed [ 175.703555][ T8711] bridge0: port 3(dummy0) entered blocking state [ 175.709947][ T8711] bridge0: port 3(dummy0) entered disabled state [ 175.717554][ T8711] dummy0: entered allmulticast mode [ 175.739955][ T8715] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 175.827862][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 175.827878][ T29] audit: type=1326 audit(2000000008.980:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31db6458e7 code=0x7ffc0000 [ 175.859770][ T29] audit: type=1326 audit(2000000008.980:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31db5eab19 code=0x7ffc0000 [ 175.883286][ T29] audit: type=1326 audit(2000000008.980:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31db6458e7 code=0x7ffc0000 [ 175.906643][ T29] audit: type=1326 audit(2000000008.980:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31db5eab19 code=0x7ffc0000 [ 175.930092][ T29] audit: type=1326 audit(2000000008.980:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31db6458e7 code=0x7ffc0000 [ 175.953414][ T29] audit: type=1326 audit(2000000008.980:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31db5eab19 code=0x7ffc0000 [ 175.976817][ T29] audit: type=1326 audit(2000000008.980:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31db6458e7 code=0x7ffc0000 [ 176.000145][ T29] audit: type=1326 audit(2000000008.980:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31db5eab19 code=0x7ffc0000 [ 176.023595][ T29] audit: type=1326 audit(2000000008.980:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31db6458e7 code=0x7ffc0000 [ 176.046916][ T29] audit: type=1326 audit(2000000008.980:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.6.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f31db5eab19 code=0x7ffc0000 [ 176.246446][ T8746] loop6: detected capacity change from 0 to 1024 [ 176.259236][ T8747] lo speed is unknown, defaulting to 1000 [ 176.336985][ T8746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.389895][ T8752] lo speed is unknown, defaulting to 1000 [ 176.516348][ T8746] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.558870][ T8746] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 176.577372][ T8746] EXT4-fs (loop6): Remounting filesystem read-only [ 176.693080][ T8758] netlink: 'syz.1.1891': attribute type 10 has an invalid length. [ 176.785753][ T8757] netlink: 'syz.0.1890': attribute type 21 has an invalid length. [ 176.795835][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.091060][ T8785] loop6: detected capacity change from 0 to 128 [ 177.112677][ T8785] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.132759][ T8787] netlink: 'syz.1.1904': attribute type 21 has an invalid length. [ 177.152765][ T8785] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.211929][ T8792] block device autoloading is deprecated and will be removed. [ 177.226449][ T8796] netlink: 'syz.5.1906': attribute type 10 has an invalid length. [ 177.311801][ T8806] SELinux: syz.5.1911 (8806) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 177.387611][ T8812] loop2: detected capacity change from 0 to 2048 [ 177.493620][ T8812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.544921][ T8825] loop0: detected capacity change from 0 to 1024 [ 177.563007][ T8825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.578549][ T8812] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 177.594406][ T8825] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.607680][ T8812] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 177.620508][ T8812] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.620508][ T8812] [ 177.630304][ T8812] EXT4-fs (loop2): Total free blocks count 0 [ 177.636331][ T8812] EXT4-fs (loop2): Free/Dirty block details [ 177.642328][ T8812] EXT4-fs (loop2): free_blocks=4096 [ 177.647658][ T8812] EXT4-fs (loop2): dirty_blocks=512 [ 177.652993][ T8812] EXT4-fs (loop2): Block reservation details [ 177.658985][ T8812] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 177.674492][ T8825] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 177.690468][ T8825] EXT4-fs (loop0): Remounting filesystem read-only [ 177.716700][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.735958][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 177.753366][ T8835] netlink: 'syz.0.1920': attribute type 10 has an invalid length. [ 177.761470][ T8835] dummy0: entered promiscuous mode [ 177.771607][ T8835] team0: Port device dummy0 removed [ 177.786328][ T8835] bridge0: port 3(dummy0) entered blocking state [ 177.792907][ T8835] bridge0: port 3(dummy0) entered disabled state [ 177.807529][ T8835] dummy0: entered allmulticast mode [ 177.871780][ T8844] loop5: detected capacity change from 0 to 2048 [ 177.891834][ T9] IPVS: starting estimator thread 0... [ 177.981177][ T8849] IPVS: using max 2688 ests per chain, 134400 per kthread [ 178.004915][ T8857] loop0: detected capacity change from 0 to 1024 [ 178.033086][ T8857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.052335][ T8857] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.085545][ T8857] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 178.101859][ T8857] EXT4-fs (loop0): Remounting filesystem read-only [ 178.120350][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.132595][ T8860] netlink: 'syz.5.1932': attribute type 10 has an invalid length. [ 178.164532][ T8866] smc: net device bond0 applied user defined pnetid SYZ2 [ 178.185058][ T8866] smc: net device bond0 erased user defined pnetid SYZ2 [ 178.376127][ T8892] smc: net device bond0 applied user defined pnetid SYZ2 [ 178.386796][ T8892] smc: net device bond0 erased user defined pnetid SYZ2 [ 178.432303][ T8902] __nla_validate_parse: 26 callbacks suppressed [ 178.432321][ T8902] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1950'. [ 178.561180][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.601373][ T8905] lo speed is unknown, defaulting to 1000 [ 178.674014][ T8907] loop5: detected capacity change from 0 to 512 [ 178.685381][ T8908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 178.696071][ T8907] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.711504][ T8907] EXT4-fs (loop5): 1 truncate cleaned up [ 178.718579][ T8907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.989290][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1957'. [ 179.032891][ T8929] lo speed is unknown, defaulting to 1000 [ 179.047559][ T8925] macsec0: entered promiscuous mode [ 179.108402][ T8934] smc: net device bond0 applied user defined pnetid SYZ2 [ 179.138964][ T8934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1961'. [ 179.141693][ T8937] Invalid ELF header magic: != ELF [ 179.148125][ T8934] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1961'. [ 179.162473][ T8934] netlink: 38 bytes leftover after parsing attributes in process `syz.2.1961'. [ 179.163370][ T8936] loop0: detected capacity change from 0 to 1024 [ 179.185445][ T8936] EXT4-fs: Ignoring removed nobh option [ 179.191158][ T8936] EXT4-fs: Ignoring removed nobh option [ 179.249625][ T8934] smc: net device bond0 erased user defined pnetid SYZ2 [ 179.320065][ T8936] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 179.320237][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.339926][ T8936] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.1959: inode #4294967295: comm syz.0.1959: iget: illegal inode # [ 179.370671][ T8936] EXT4-fs (loop0): no journal found [ 179.375964][ T8936] EXT4-fs (loop0): can't get journal size [ 179.398423][ T8944] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1965'. [ 179.403322][ T8936] EXT4-fs (loop0): failed to initialize system zone (-22) [ 179.421356][ T8936] EXT4-fs (loop0): mount failed [ 179.448605][ T8949] loop6: detected capacity change from 0 to 512 [ 179.455398][ T8949] EXT4-fs: Ignoring removed oldalloc option [ 179.462508][ T8949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 179.478389][ T8949] EXT4-fs (loop6): orphan cleanup on readonly fs [ 179.485568][ T8949] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1966: Failed to acquire dquot type 1 [ 179.497437][ T8949] EXT4-fs (loop6): 1 truncate cleaned up [ 179.503654][ T8949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 179.527040][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.601137][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.610599][ T8962] netlink: 'syz.2.1971': attribute type 21 has an invalid length. [ 179.626226][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1971'. [ 179.674197][ T8968] loop5: detected capacity change from 0 to 1024 [ 179.687729][ T8968] EXT4-fs: Ignoring removed bh option [ 179.722999][ T8968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.779060][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.913199][ T8976] lo speed is unknown, defaulting to 1000 [ 180.341200][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1976'. [ 180.400948][ T8987] loop5: detected capacity change from 0 to 1024 [ 180.430808][ T8987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.453420][ T8987] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.540282][ T8987] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 180.556329][ T8987] EXT4-fs (loop5): Remounting filesystem read-only [ 180.582213][ T8997] loop0: detected capacity change from 0 to 2048 [ 180.589422][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.626244][ T8997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.641147][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.692255][ T8997] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 180.707515][ T9018] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1985'. [ 180.721609][ T8997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 180.734455][ T8997] EXT4-fs (loop0): This should not happen!! Data will be lost [ 180.734455][ T8997] [ 180.744135][ T8997] EXT4-fs (loop0): Total free blocks count 0 [ 180.750239][ T8997] EXT4-fs (loop0): Free/Dirty block details [ 180.756168][ T8997] EXT4-fs (loop0): free_blocks=4096 [ 180.761406][ T8997] EXT4-fs (loop0): dirty_blocks=512 [ 180.766605][ T8997] EXT4-fs (loop0): Block reservation details [ 180.772627][ T8997] EXT4-fs (loop0): i_reserved_data_blocks=32 [ 180.849729][ T9026] loop2: detected capacity change from 0 to 512 [ 180.858681][ T9026] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 180.914699][ T9030] loop6: detected capacity change from 0 to 512 [ 180.922043][ T9030] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.963074][ T9030] EXT4-fs (loop6): 1 truncate cleaned up [ 180.969521][ T9030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.024148][ T9026] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.1992: invalid block [ 181.037925][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 181.064176][ T9026] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1992: invalid indirect mapped block 4294967295 (level 1) [ 181.084993][ T9026] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1992: invalid indirect mapped block 4294967295 (level 1) [ 181.101005][ T9026] EXT4-fs (loop2): 2 truncates cleaned up [ 181.107540][ T9026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.157594][ T9026] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.330888][ T29] kauditd_printk_skb: 5197 callbacks suppressed [ 181.330912][ T29] audit: type=1326 audit(2000000014.480:9743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2002" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x0 [ 181.427797][ T9056] loop5: detected capacity change from 0 to 512 [ 181.440727][ T29] audit: type=1326 audit(2000000014.590:9744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 181.464347][ T29] audit: type=1326 audit(2000000014.590:9745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 181.487821][ T29] audit: type=1326 audit(2000000014.590:9746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 181.511214][ T29] audit: type=1326 audit(2000000014.590:9747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 181.565446][ T9056] EXT4-fs error (device loop5): ext4_iget_extra_inode:5035: inode #15: comm syz.5.2004: corrupted in-inode xattr: invalid ea_ino [ 181.579321][ T9056] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2004: couldn't read orphan inode 15 (err -117) [ 181.592511][ T9056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.606164][ T29] audit: type=1326 audit(2000000014.760:9748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 181.631663][ T29] audit: type=1326 audit(2000000014.780:9749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 181.655121][ T29] audit: type=1326 audit(2000000014.780:9750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 181.678552][ T29] audit: type=1326 audit(2000000014.780:9751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 181.681146][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.701986][ T29] audit: type=1326 audit(2000000014.780:9752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9055 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908982e929 code=0x7ffc0000 [ 181.922887][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.083162][ T9070] lo speed is unknown, defaulting to 1000 [ 182.463372][ T9073] loop5: detected capacity change from 0 to 2048 [ 182.486727][ T9077] loop2: detected capacity change from 0 to 2048 [ 182.542108][ T9077] loop2: p4 < > [ 182.547157][ T9073] Alternate GPT is invalid, using primary GPT. [ 182.553644][ T9073] loop5: p1 p2 p3 [ 182.607703][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.714648][ T9085] smc: net device bond0 applied user defined pnetid SYZ2 [ 182.722100][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.733142][ T9085] smc: net device bond0 erased user defined pnetid SYZ2 [ 182.884660][ T9109] smc: net device bond0 applied user defined pnetid SYZ2 [ 182.926487][ T9110] loop6: detected capacity change from 0 to 512 [ 182.929898][ T9109] smc: net device bond0 erased user defined pnetid SYZ2 [ 182.934070][ T9110] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.953111][ T9116] netlink: 'syz.2.2028': attribute type 33 has an invalid length. [ 182.955253][ T9114] loop5: detected capacity change from 0 to 2048 [ 182.968128][ T9110] EXT4-fs (loop6): 1 truncate cleaned up [ 182.974144][ T9110] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.974740][ T9116] dummy0 (unregistering): left allmulticast mode [ 183.011002][ T9116] bridge0: port 3(dummy0) entered disabled state [ 183.018922][ T9114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.032168][ T9120] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.053905][ T9120] smc: net device bond0 erased user defined pnetid SYZ2 [ 183.079705][ T9114] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 183.095732][ T9114] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 183.108524][ T9114] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.108524][ T9114] [ 183.118189][ T9114] EXT4-fs (loop5): Total free blocks count 0 [ 183.124260][ T9114] EXT4-fs (loop5): Free/Dirty block details [ 183.130235][ T9114] EXT4-fs (loop5): free_blocks=4096 [ 183.135458][ T9114] EXT4-fs (loop5): dirty_blocks=512 [ 183.140724][ T9114] EXT4-fs (loop5): Block reservation details [ 183.146757][ T9114] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 183.188642][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 183.204317][ T9130] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 183.324634][ T9151] Invalid ELF header magic: != ELF [ 183.375133][ T9160] loop0: detected capacity change from 0 to 2048 [ 183.397571][ T9166] netlink: 'syz.5.2047': attribute type 10 has an invalid length. [ 183.413176][ T9160] loop0: p4 < > [ 183.417515][ T9166] bridge0: port 3(dummy0) entered disabled state [ 183.425925][ T9166] dummy0: left allmulticast mode [ 183.431681][ T9166] dummy0: left promiscuous mode [ 183.436707][ T9166] bridge0: port 3(dummy0) entered disabled state [ 183.473525][ T9166] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 183.488601][ T9166] team0: Failed to send options change via netlink (err -105) [ 183.496125][ T9166] team0: Port device dummy0 added [ 183.504326][ T9160] FAULT_INJECTION: forcing a failure. [ 183.504326][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 183.517075][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.0.2042 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 183.517104][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.517116][ T9160] Call Trace: [ 183.517123][ T9160] [ 183.517131][ T9160] __dump_stack+0x1d/0x30 [ 183.517160][ T9160] dump_stack_lvl+0xe8/0x140 [ 183.517179][ T9160] dump_stack+0x15/0x1b [ 183.517209][ T9160] should_fail_ex+0x265/0x280 [ 183.517241][ T9160] should_failslab+0x8c/0xb0 [ 183.517265][ T9160] __kmalloc_noprof+0xa5/0x3e0 [ 183.517293][ T9160] ? vmalloc_info_show+0x3f/0x850 [ 183.517389][ T9160] vmalloc_info_show+0x3f/0x850 [ 183.517409][ T9160] ? trace_kmalloc+0x4e/0x70 [ 183.517433][ T9160] ? seq_read_iter+0x404/0x940 [ 183.517533][ T9160] seq_read_iter+0x319/0x940 [ 183.517562][ T9160] proc_reg_read_iter+0x110/0x180 [ 183.517586][ T9160] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 183.517685][ T9160] vfs_read+0x5cd/0x6f0 [ 183.517710][ T9160] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 183.517786][ T9160] ksys_read+0xda/0x1a0 [ 183.517879][ T9160] __x64_sys_read+0x40/0x50 [ 183.517907][ T9160] x64_sys_call+0x2d77/0x2fb0 [ 183.517930][ T9160] do_syscall_64+0xd2/0x200 [ 183.518013][ T9160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.518039][ T9160] ? clear_bhb_loop+0x40/0x90 [ 183.518071][ T9160] ? clear_bhb_loop+0x40/0x90 [ 183.518089][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.518109][ T9160] RIP: 0033:0x7f718cade929 [ 183.518125][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.518146][ T9160] RSP: 002b:00007f718b147038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.518163][ T9160] RAX: ffffffffffffffda RBX: 00007f718cd05fa0 RCX: 00007f718cade929 [ 183.518174][ T9160] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000004 [ 183.518247][ T9160] RBP: 00007f718b147090 R08: 0000000000000000 R09: 0000000000000000 [ 183.518260][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.518273][ T9160] R13: 0000000000000000 R14: 00007f718cd05fa0 R15: 00007ffef05212e8 [ 183.518293][ T9160] [ 183.761174][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.779346][ T9171] loop5: detected capacity change from 0 to 8192 [ 183.800885][ T9168] __nla_validate_parse: 15 callbacks suppressed [ 183.800899][ T9168] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2046'. [ 183.848981][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.900844][ T9182] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 183.907390][ T9182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.914969][ T9182] vhci_hcd vhci_hcd.0: Device attached [ 183.916540][ T9187] FAULT_INJECTION: forcing a failure. [ 183.916540][ T9187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.933552][ T9187] CPU: 0 UID: 0 PID: 9187 Comm: syz.1.2054 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 183.933584][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.933644][ T9187] Call Trace: [ 183.933650][ T9187] [ 183.933729][ T9187] __dump_stack+0x1d/0x30 [ 183.933751][ T9187] dump_stack_lvl+0xe8/0x140 [ 183.933779][ T9187] dump_stack+0x15/0x1b [ 183.933797][ T9187] should_fail_ex+0x265/0x280 [ 183.933830][ T9187] should_fail+0xb/0x20 [ 183.933929][ T9187] should_fail_usercopy+0x1a/0x20 [ 183.933958][ T9187] _copy_from_iter+0xcf/0xe40 [ 183.933984][ T9187] ? __build_skb_around+0x1a0/0x200 [ 183.934068][ T9187] ? __alloc_skb+0x223/0x320 [ 183.934126][ T9187] netlink_sendmsg+0x471/0x6b0 [ 183.934145][ T9187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.934242][ T9187] __sock_sendmsg+0x142/0x180 [ 183.934341][ T9187] ____sys_sendmsg+0x31e/0x4e0 [ 183.934369][ T9187] ___sys_sendmsg+0x17b/0x1d0 [ 183.934408][ T9187] __x64_sys_sendmsg+0xd4/0x160 [ 183.934497][ T9187] x64_sys_call+0x2999/0x2fb0 [ 183.934573][ T9187] do_syscall_64+0xd2/0x200 [ 183.934588][ T9187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.934610][ T9187] ? clear_bhb_loop+0x40/0x90 [ 183.934627][ T9187] ? clear_bhb_loop+0x40/0x90 [ 183.934717][ T9187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.934734][ T9187] RIP: 0033:0x7fbd9f32e929 [ 183.934753][ T9187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.934768][ T9187] RSP: 002b:00007fbd9d997038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.934788][ T9187] RAX: ffffffffffffffda RBX: 00007fbd9f555fa0 RCX: 00007fbd9f32e929 [ 183.934917][ T9187] RDX: 0000000000040000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 183.934927][ T9187] RBP: 00007fbd9d997090 R08: 0000000000000000 R09: 0000000000000000 [ 183.934937][ T9187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.934947][ T9187] R13: 0000000000000000 R14: 00007fbd9f555fa0 R15: 00007fff3a867a18 [ 183.934963][ T9187] [ 184.150182][ T9184] vhci_hcd: connection closed [ 184.154606][ T3441] vhci_hcd: stop threads [ 184.163736][ T3441] vhci_hcd: release socket [ 184.165012][ T9191] loop0: detected capacity change from 0 to 1024 [ 184.168139][ T3441] vhci_hcd: disconnect device [ 184.182873][ T9191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.211555][ T36] vhci_hcd: vhci_device speed not set [ 184.221175][ T9191] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2056: Allocating blocks 449-513 which overlap fs metadata [ 184.312366][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 184.735387][ T9205] loop5: detected capacity change from 0 to 512 [ 184.741472][ T9209] loop6: detected capacity change from 0 to 1764 [ 184.748258][ T9205] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.748534][ T9207] loop2: detected capacity change from 0 to 2048 [ 184.760390][ T9205] EXT4-fs (loop5): 1 truncate cleaned up [ 184.770563][ T9205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.789399][ T9207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.791752][ T9214] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2062'. [ 184.810538][ T9190] EXT4-fs (loop0): pa ffff888106a53850: logic 48, phys. 177, len 21 [ 184.811157][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.818650][ T9190] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 184.854446][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.864414][ T9207] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 184.881358][ T9216] loop6: detected capacity change from 0 to 256 [ 184.888690][ T9207] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 625 with error 28 [ 184.901441][ T9207] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.901441][ T9207] [ 184.911078][ T9207] EXT4-fs (loop2): Total free blocks count 0 [ 184.917101][ T9207] EXT4-fs (loop2): Free/Dirty block details [ 184.923131][ T9207] EXT4-fs (loop2): free_blocks=4096 [ 184.928342][ T9207] EXT4-fs (loop2): dirty_blocks=656 [ 184.929613][ T9219] loop0: detected capacity change from 0 to 1024 [ 184.933555][ T9207] EXT4-fs (loop2): Block reservation details [ 184.933568][ T9207] EXT4-fs (loop2): i_reserved_data_blocks=41 [ 184.952712][ T9219] EXT4-fs: Ignoring removed bh option [ 184.961218][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 184.963982][ T9219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.992900][ T9219] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #15: comm syz.0.2064: corrupted xattr entries [ 185.004876][ T9219] EXT4-fs (loop0): Remounting filesystem read-only [ 185.011476][ T9219] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.2064: dec ref error=-30 [ 185.039206][ T9230] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2067'. [ 185.070318][ T9234] netlink: 'syz.6.2069': attribute type 21 has an invalid length. [ 185.079498][ T9234] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2069'. [ 185.122825][ T9242] smc: net device bond0 applied user defined pnetid SYZ2 [ 185.124296][ T9243] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2073'. [ 185.143936][ T9242] smc: net device bond0 erased user defined pnetid SYZ2 [ 185.184530][ T9249] netlink: 'syz.6.2077': attribute type 10 has an invalid length. [ 185.192525][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2077'. [ 185.207093][ T9253] netlink: 'syz.1.2078': attribute type 10 has an invalid length. [ 185.209551][ T9249] dummy0: entered promiscuous mode [ 185.215089][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2078'. [ 185.227944][ T9256] loop0: detected capacity change from 0 to 1024 [ 185.237868][ T9249] team0: Port device dummy0 removed [ 185.243504][ T9254] xt_CT: No such helper "pptp" [ 185.249161][ T9249] bridge0: port 3(dummy0) entered blocking state [ 185.255658][ T9249] bridge0: port 3(dummy0) entered disabled state [ 185.263031][ T9256] EXT4-fs: Ignoring removed bh option [ 185.269304][ T9249] dummy0: entered allmulticast mode [ 185.290950][ T9256] EXT4-fs error (device loop0): ext4_xattr_set_entry:1660: inode #15: comm syz.0.2079: corrupted xattr entries [ 185.317895][ T9256] EXT4-fs (loop0): Remounting filesystem read-only [ 185.320258][ T9263] loop6: detected capacity change from 0 to 128 [ 185.330831][ T9256] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #19: comm syz.0.2079: dec ref error=-30 [ 185.364193][ T9271] tls_set_device_offload_rx: netdev not found [ 185.384175][ T9273] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€ [ 185.435138][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 185.436539][ T9279] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2086'. [ 185.469558][ T9281] smc: net device bond0 applied user defined pnetid SYZ2 [ 185.483762][ T9281] smc: net device bond0 erased user defined pnetid SYZ2 [ 185.514848][ T9273] usb usb8: usbfs: process 9273 (syz.0.2084) did not claim interface 0 before use [ 185.553101][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.623976][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.630814][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.637649][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.644427][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.651154][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.657957][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.664748][ T9291] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 185.682552][ T9294] FAULT_INJECTION: forcing a failure. [ 185.682552][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.695642][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.6.2092 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 185.695669][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.695737][ T9294] Call Trace: [ 185.695802][ T9294] [ 185.695811][ T9294] __dump_stack+0x1d/0x30 [ 185.695833][ T9294] dump_stack_lvl+0xe8/0x140 [ 185.695932][ T9294] dump_stack+0x15/0x1b [ 185.695946][ T9294] should_fail_ex+0x265/0x280 [ 185.695974][ T9294] should_fail+0xb/0x20 [ 185.696049][ T9294] should_fail_usercopy+0x1a/0x20 [ 185.696077][ T9294] _copy_from_user+0x1c/0xb0 [ 185.696095][ T9294] __sys_connect+0xd0/0x2b0 [ 185.696187][ T9294] __x64_sys_connect+0x3f/0x50 [ 185.696217][ T9294] x64_sys_call+0x1daa/0x2fb0 [ 185.696235][ T9294] do_syscall_64+0xd2/0x200 [ 185.696251][ T9294] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.696338][ T9294] ? clear_bhb_loop+0x40/0x90 [ 185.696380][ T9294] ? clear_bhb_loop+0x40/0x90 [ 185.696460][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.696479][ T9294] RIP: 0033:0x7f31db64e929 [ 185.696543][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.696563][ T9294] RSP: 002b:00007f31d9c96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 185.696606][ T9294] RAX: ffffffffffffffda RBX: 00007f31db876080 RCX: 00007f31db64e929 [ 185.696617][ T9294] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000009 [ 185.696627][ T9294] RBP: 00007f31d9c96090 R08: 0000000000000000 R09: 0000000000000000 [ 185.696638][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.696648][ T9294] R13: 0000000000000000 R14: 00007f31db876080 R15: 00007ffc5e9e6dc8 [ 185.696664][ T9294] [ 185.886192][ T9298] lo speed is unknown, defaulting to 1000 [ 186.067715][ T9299] bridge0: port 3(dummy0) entered blocking state [ 186.074211][ T9299] bridge0: port 3(dummy0) entered forwarding state [ 186.213105][ T9306] loop2: detected capacity change from 0 to 1024 [ 186.297185][ T9306] EXT4-fs: Ignoring removed bh option [ 186.360270][ T9317] smc: net device bond0 applied user defined pnetid SYZ2 [ 186.371562][ T9317] smc: net device bond0 erased user defined pnetid SYZ2 [ 186.466199][ T9330] loop6: detected capacity change from 0 to 512 [ 186.629423][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 186.629437][ T29] audit: type=1400 audit(2000000019.780:9916): avc: denied { setopt } for pid=9326 comm="syz.1.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 186.663966][ T9329] loop0: detected capacity change from 0 to 8192 [ 186.744204][ T9325] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 186.974552][ T9330] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 187.044896][ T9330] EXT4-fs (loop6): 1 truncate cleaned up [ 187.424694][ T9337] loop2: detected capacity change from 0 to 8192 [ 187.445846][ T3409] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 187.473028][ T3409] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.670289][ T9346] loop0: detected capacity change from 0 to 8192 [ 188.217417][ T9348] smc: net device bond0 applied user defined pnetid SYZ2 [ 188.256968][ T9348] smc: net device bond0 erased user defined pnetid SYZ2 [ 188.380103][ T9350] loop2: detected capacity change from 0 to 2048 [ 188.423011][ T9352] netlink: 'syz.1.2112': attribute type 21 has an invalid length. [ 188.453156][ T9358] smc: net device bond0 applied user defined pnetid SYZ2 [ 188.490615][ T9350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 188.509913][ T9358] smc: net device bond0 erased user defined pnetid SYZ2 [ 188.512632][ T9350] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 673 with error 28 [ 188.529650][ T9350] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.529650][ T9350] [ 188.539453][ T9350] EXT4-fs (loop2): Total free blocks count 0 [ 188.545559][ T9350] EXT4-fs (loop2): Free/Dirty block details [ 188.551877][ T9350] EXT4-fs (loop2): free_blocks=4096 [ 188.557081][ T9350] EXT4-fs (loop2): dirty_blocks=704 [ 188.562363][ T9350] EXT4-fs (loop2): Block reservation details [ 188.568361][ T9350] EXT4-fs (loop2): i_reserved_data_blocks=44 [ 188.599578][ T29] audit: type=1326 audit(2000000021.750:9917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.623174][ T29] audit: type=1326 audit(2000000021.750:9918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.650773][ T3441] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 188.663055][ T3441] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.663055][ T3441] [ 188.665624][ T29] audit: type=1326 audit(2000000021.750:9919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.696246][ T29] audit: type=1326 audit(2000000021.750:9920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.719837][ T29] audit: type=1326 audit(2000000021.750:9921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.743395][ T29] audit: type=1326 audit(2000000021.750:9922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.766915][ T29] audit: type=1326 audit(2000000021.750:9923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.790335][ T29] audit: type=1326 audit(2000000021.750:9924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.813834][ T29] audit: type=1326 audit(2000000021.750:9925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9366 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd9f32e929 code=0x7ffc0000 [ 188.971146][ C0] net_ratelimit: 5375 callbacks suppressed [ 188.971173][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.655620][ T9387] loop2: detected capacity change from 0 to 512 [ 189.666718][ T9388] loop0: detected capacity change from 0 to 512 [ 189.967183][ T9382] loop6: detected capacity change from 0 to 512 [ 189.983368][ T9382] EXT4-fs (loop6): 1 orphan inode deleted [ 189.989920][ T9382] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.001160][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.008387][ T3325] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 190.091138][ T9387] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.101070][ T9388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.051131][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.351597][ T9387] EXT4-fs (loop2): 1 truncate cleaned up [ 191.466526][ T9388] EXT4-fs (loop0): 1 truncate cleaned up [ 192.081138][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.589236][ T9401] Invalid ELF header magic: != ELF [ 192.603444][ T3316] EXT4-fs unmount: 14 callbacks suppressed [ 192.603459][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.623621][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.656771][ T9403] loop5: detected capacity change from 0 to 2048 [ 192.680020][ T9403] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.718744][ T9403] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 192.734377][ T9403] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 192.747348][ T9403] EXT4-fs (loop5): This should not happen!! Data will be lost [ 192.747348][ T9403] [ 192.757048][ T9403] EXT4-fs (loop5): Total free blocks count 0 [ 192.763048][ T9403] EXT4-fs (loop5): Free/Dirty block details [ 192.768940][ T9403] EXT4-fs (loop5): free_blocks=4096 [ 192.774239][ T9403] EXT4-fs (loop5): dirty_blocks=512 [ 192.779437][ T9403] EXT4-fs (loop5): Block reservation details [ 192.785473][ T9403] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 192.864307][ T9409] loop6: detected capacity change from 0 to 1024 [ 192.879838][ T3325] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 192.901712][ T9409] EXT4-fs: Ignoring removed nobh option [ 192.907316][ T9409] EXT4-fs: Ignoring removed nobh option [ 192.932429][ T9409] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 192.952472][ T9409] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.2133: inode #4294967295: comm syz.6.2133: iget: illegal inode # [ 193.000682][ T9409] EXT4-fs (loop6): no journal found [ 193.005985][ T9409] EXT4-fs (loop6): can't get journal size [ 193.021559][ T9411] __nla_validate_parse: 5 callbacks suppressed [ 193.021575][ T9411] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2129'. [ 193.055634][ T9413] loop2: detected capacity change from 0 to 2048 [ 193.131143][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.233532][ T9409] EXT4-fs (loop6): failed to initialize system zone (-22) [ 193.250986][ T9409] EXT4-fs (loop6): mount failed [ 193.325317][ T9420] lo speed is unknown, defaulting to 1000 [ 193.599874][ T9425] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2136'. [ 193.614101][ T9425] 0ªX¹¦D: renamed from gretap0 [ 193.619486][ T9413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.633562][ T9425] 0ªX¹¦D: entered allmulticast mode [ 193.643364][ T9425] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 193.669924][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 193.669940][ T29] audit: type=1400 audit(2000000026.820:9951): avc: denied { setopt } for pid=9421 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.676678][ T9413] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 193.695610][ T29] audit: type=1400 audit(2000000026.820:9952): avc: denied { write } for pid=9421 comm="syz.1.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 193.717002][ T9425] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 193.723341][ T9413] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 193.739844][ T9413] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 193.752698][ T9413] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.752698][ T9413] [ 193.762351][ T9413] EXT4-fs (loop2): Total free blocks count 0 [ 193.768345][ T9413] EXT4-fs (loop2): Free/Dirty block details [ 193.774293][ T9413] EXT4-fs (loop2): free_blocks=4096 [ 193.779551][ T9413] EXT4-fs (loop2): dirty_blocks=512 [ 193.784869][ T9413] EXT4-fs (loop2): Block reservation details [ 193.790923][ T9413] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 193.826195][ T9434] loop0: detected capacity change from 0 to 1024 [ 193.833952][ T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 193.859365][ T9434] EXT4-fs: Ignoring removed nobh option [ 193.865161][ T9434] EXT4-fs: Ignoring removed nobh option [ 193.872226][ T9434] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 193.892198][ T9434] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.2137: inode #4294967295: comm syz.0.2137: iget: illegal inode # [ 193.935947][ T9434] EXT4-fs (loop0): no journal found [ 193.941264][ T9434] EXT4-fs (loop0): can't get journal size [ 193.972676][ T9434] EXT4-fs (loop0): failed to initialize system zone (-22) [ 193.982174][ T9434] EXT4-fs (loop0): mount failed [ 194.128061][ T9447] loop5: detected capacity change from 0 to 512 [ 194.135551][ T9447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.161139][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.203512][ T9447] EXT4-fs (loop5): 1 truncate cleaned up [ 194.209726][ T9447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.231290][ T29] audit: type=1400 audit(2000000027.380:9953): avc: denied { mount } for pid=9430 comm="syz.0.2137" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.332346][ T9434] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 194.342333][ T9451] netlink: 'syz.6.2142': attribute type 10 has an invalid length. [ 194.350173][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2142'. [ 194.367582][ T29] audit: type=1400 audit(2000000027.430:9954): avc: denied { sqpoll } for pid=9430 comm="syz.0.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 194.387015][ T29] audit: type=1400 audit(2000000027.490:9955): avc: denied { watch } for pid=9430 comm="syz.0.2137" path="/460/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 194.409426][ T29] audit: type=1400 audit(2000000027.490:9956): avc: denied { mac_admin } for pid=9430 comm="syz.0.2137" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.430518][ T29] audit: type=1400 audit(2000000027.500:9957): avc: denied { relabelto } for pid=9430 comm="syz.0.2137" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 194.456544][ T29] audit: type=1400 audit(2000000027.500:9958): avc: denied { associate } for pid=9430 comm="syz.0.2137" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 194.786939][ T9462] smc: net device bond0 applied user defined pnetid SYZ2 [ 194.834349][ T9462] smc: net device bond0 erased user defined pnetid SYZ2 [ 194.869024][ T9446] loop2: detected capacity change from 0 to 8192 [ 194.888451][ T9470] loop6: detected capacity change from 0 to 512 [ 194.912705][ T9470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.945139][ T9470] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.022040][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2144'. [ 195.031031][ T9470] netlink: 'syz.6.2144': attribute type 5 has an invalid length. [ 195.038830][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2144'. [ 195.137065][ T29] audit: type=1400 audit(2000000028.230:9959): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.177128][ T9470] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 195.185322][ T9470] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 195.193475][ T9470] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 195.201666][ T9470] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 195.210683][ T9470] geneve0: entered promiscuous mode [ 195.211144][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.215904][ T9470] geneve0: entered allmulticast mode [ 195.266201][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.346155][ T9528] loop0: detected capacity change from 0 to 1024 [ 195.368959][ T9528] EXT4-fs: Ignoring removed nobh option [ 195.374600][ T9528] EXT4-fs: Ignoring removed nobh option [ 195.403653][ T9528] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 195.441267][ T9528] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.2146: inode #4294967295: comm syz.0.2146: iget: illegal inode # [ 195.459402][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.508101][ T29] audit: type=1400 audit(2000000028.660:9960): avc: denied { watch watch_reads } for pid=9536 comm="syz.2.2152" path="/463" dev="tmpfs" ino=2495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 195.535252][ T9528] EXT4-fs (loop0): no journal found [ 195.540524][ T9528] EXT4-fs (loop0): can't get journal size [ 195.566104][ T9528] EXT4-fs (loop0): failed to initialize system zone (-22) [ 195.574512][ T9528] EXT4-fs (loop0): mount failed [ 195.583841][ T9546] loop2: detected capacity change from 0 to 512 [ 195.590486][ T9546] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.598468][ T9546] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.613260][ T9546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.627106][ T9546] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.639581][ T9546] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 195.679508][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.930520][ T9557] lo speed is unknown, defaulting to 1000 [ 196.241207][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.254417][ T9525] syz.0.2146 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 196.268636][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.0.2146 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 196.268667][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.268680][ T9525] Call Trace: [ 196.268688][ T9525] [ 196.268695][ T9525] __dump_stack+0x1d/0x30 [ 196.268740][ T9525] dump_stack_lvl+0xe8/0x140 [ 196.268814][ T9525] dump_stack+0x15/0x1b [ 196.268831][ T9525] dump_header+0x81/0x220 [ 196.268900][ T9525] oom_kill_process+0x334/0x3f0 [ 196.268999][ T9525] out_of_memory+0x979/0xb80 [ 196.269091][ T9525] try_charge_memcg+0x5e6/0x9e0 [ 196.269115][ T9525] obj_cgroup_charge_pages+0xa6/0x150 [ 196.269146][ T9525] __memcg_kmem_charge_page+0x9f/0x170 [ 196.269205][ T9525] __alloc_frozen_pages_noprof+0x188/0x360 [ 196.269238][ T9525] alloc_pages_mpol+0xb3/0x250 [ 196.269280][ T9525] alloc_pages_noprof+0x90/0x130 [ 196.269348][ T9525] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 196.269391][ T9525] __kvmalloc_node_noprof+0x30f/0x4e0 [ 196.269490][ T9525] ? ip_set_alloc+0x1f/0x30 [ 196.269617][ T9525] ? ip_set_alloc+0x1f/0x30 [ 196.269644][ T9525] ip_set_alloc+0x1f/0x30 [ 196.269669][ T9525] hash_netiface_create+0x282/0x740 [ 196.269748][ T9525] ? __pfx_hash_netiface_create+0x10/0x10 [ 196.269775][ T9525] ip_set_create+0x3c9/0x960 [ 196.269846][ T9525] ? __nla_parse+0x40/0x60 [ 196.269864][ T9525] nfnetlink_rcv_msg+0x4c3/0x590 [ 196.269912][ T9525] ? selinux_capable+0x1f9/0x270 [ 196.269947][ T9525] netlink_rcv_skb+0x120/0x220 [ 196.269980][ T9525] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.270022][ T9525] nfnetlink_rcv+0x16b/0x1690 [ 196.270049][ T9525] ? __kfree_skb+0x109/0x150 [ 196.270079][ T9525] ? nlmon_xmit+0x4f/0x60 [ 196.270100][ T9525] ? consume_skb+0x49/0x150 [ 196.270187][ T9525] ? nlmon_xmit+0x4f/0x60 [ 196.270232][ T9525] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 196.270318][ T9525] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 196.270400][ T9525] ? __dev_queue_xmit+0x182/0x1fb0 [ 196.270428][ T9525] ? ref_tracker_free+0x37d/0x3e0 [ 196.270524][ T9525] ? __netlink_deliver_tap+0x4dc/0x500 [ 196.270634][ T9525] netlink_unicast+0x59e/0x670 [ 196.270676][ T9525] netlink_sendmsg+0x58b/0x6b0 [ 196.270698][ T9525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.270717][ T9525] __sock_sendmsg+0x142/0x180 [ 196.270739][ T9525] ____sys_sendmsg+0x31e/0x4e0 [ 196.270826][ T9525] ___sys_sendmsg+0x17b/0x1d0 [ 196.270870][ T9525] __x64_sys_sendmsg+0xd4/0x160 [ 196.270905][ T9525] x64_sys_call+0x2999/0x2fb0 [ 196.270924][ T9525] do_syscall_64+0xd2/0x200 [ 196.270946][ T9525] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 196.270975][ T9525] ? clear_bhb_loop+0x40/0x90 [ 196.270993][ T9525] ? clear_bhb_loop+0x40/0x90 [ 196.271034][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.271056][ T9525] RIP: 0033:0x7f718cade929 [ 196.271077][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.271095][ T9525] RSP: 002b:00007f718b147038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.271113][ T9525] RAX: ffffffffffffffda RBX: 00007f718cd05fa0 RCX: 00007f718cade929 [ 196.271191][ T9525] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 196.271205][ T9525] RBP: 00007f718cb60b39 R08: 0000000000000000 R09: 0000000000000000 [ 196.271218][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.271231][ T9525] R13: 0000000000000000 R14: 00007f718cd05fa0 R15: 00007ffef05212e8 [ 196.271248][ T9525] [ 196.609773][ T9525] memory: usage 307200kB, limit 307200kB, failcnt 2529 [ 196.616895][ T9525] memory+swap: usage 307688kB, limit 9007199254740988kB, failcnt 0 [ 196.624923][ T9525] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 196.632257][ T9525] Memory cgroup stats for /syz0: [ 196.643962][ T9525] cache 0 [ 196.651937][ T9525] rss 0 [ 196.654778][ T9525] shmem 0 [ 196.657711][ T9525] mapped_file 0 [ 196.661244][ T9525] dirty 0 [ 196.664246][ T9525] writeback 0 [ 196.667526][ T9525] workingset_refault_anon 603 [ 196.672213][ T9525] workingset_refault_file 1691 [ 196.676990][ T9525] swap 503808 [ 196.680269][ T9525] swapcached 4096 [ 196.683928][ T9525] pgpgin 164728 [ 196.687375][ T9525] pgpgout 164726 [ 196.691001][ T9525] pgfault 176656 [ 196.694583][ T9525] pgmajfault 431 [ 196.698279][ T9525] inactive_anon 0 [ 196.701938][ T9525] active_anon 0 [ 196.705445][ T9525] inactive_file 0 [ 196.709130][ T9525] active_file 4096 [ 196.712875][ T9525] unevictable 0 [ 196.716427][ T9525] hierarchical_memory_limit 314572800 [ 196.721898][ T9525] hierarchical_memsw_limit 9223372036854771712 [ 196.728064][ T9525] total_cache 0 [ 196.731764][ T9525] total_rss 0 [ 196.735068][ T9525] total_shmem 0 [ 196.738610][ T9525] total_mapped_file 0 [ 196.742644][ T9525] total_dirty 0 [ 196.746165][ T9525] total_writeback 0 [ 196.750036][ T9525] total_workingset_refault_anon 603 [ 196.755255][ T9525] total_workingset_refault_file 1691 [ 196.760538][ T9525] total_swap 503808 [ 196.764391][ T9525] total_swapcached 4096 [ 196.768550][ T9525] total_pgpgin 164728 [ 196.772586][ T9525] total_pgpgout 164726 [ 196.776744][ T9525] total_pgfault 176656 [ 196.780821][ T9525] total_pgmajfault 431 [ 196.784934][ T9525] total_inactive_anon 0 [ 196.789165][ T9525] total_active_anon 0 [ 196.793153][ T9525] total_inactive_file 0 [ 196.797348][ T9525] total_active_file 4096 [ 196.801747][ T9525] total_unevictable 0 [ 196.805738][ T9525] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2146,pid=9524,uid=0 [ 196.820423][ T9525] Memory cgroup out of memory: Killed process 9524 (syz.0.2146) total-vm:95800kB, anon-rss:1064kB, file-rss:22456kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 197.000758][ T9573] loop5: detected capacity change from 0 to 1024 [ 197.022319][ T9573] EXT4-fs: Ignoring removed nobh option [ 197.027917][ T9573] EXT4-fs: Ignoring removed nobh option [ 197.049742][ T9573] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 197.079248][ T9573] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.2161: inode #4294967295: comm syz.5.2161: iget: illegal inode # [ 197.102135][ T9573] EXT4-fs (loop5): no journal found [ 197.107370][ T9573] EXT4-fs (loop5): can't get journal size [ 197.131939][ T9573] EXT4-fs (loop5): failed to initialize system zone (-22) [ 197.139127][ T9573] EXT4-fs (loop5): mount failed [ 197.150152][ T9582] loop6: detected capacity change from 0 to 512 [ 197.157556][ T9582] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.222677][ T9582] EXT4-fs (loop6): 1 truncate cleaned up [ 197.229018][ T9582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.291165][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.321208][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.351781][ T9600] lo speed is unknown, defaulting to 1000 [ 198.578548][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2172'. [ 198.674411][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.686051][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 198.686066][ T29] audit: type=1400 audit(2000000031.840:9986): avc: denied { write } for pid=9610 comm="syz.0.2173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.717578][ T9615] loop6: detected capacity change from 0 to 1024 [ 198.726575][ T9617] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2175'. [ 198.742463][ T9615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.754828][ T9615] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.768780][ T9615] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 198.785486][ T9615] EXT4-fs (loop6): Remounting filesystem read-only [ 198.792922][ T29] audit: type=1400 audit(2000000031.950:9987): avc: denied { read } for pid=9610 comm="syz.0.2173" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.817309][ T29] audit: type=1400 audit(2000000031.950:9988): avc: denied { open } for pid=9610 comm="syz.0.2173" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 198.860001][ T5740] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.966159][ T9628] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2178'. [ 198.967699][ T9632] loop0: detected capacity change from 0 to 1024 [ 198.975354][ T9628] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2178'. [ 198.990755][ T9628] netlink: 38 bytes leftover after parsing attributes in process `syz.6.2178'. [ 199.020572][ T9632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.033575][ T9632] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.038689][ T29] audit: type=1326 audit(2000000032.190:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.6.2182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31db64e929 code=0x0 [ 199.049617][ T9632] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 199.083111][ T9632] EXT4-fs (loop0): Remounting filesystem read-only [ 199.084101][ T29] audit: type=1400 audit(2000000032.240:9990): avc: denied { ioctl } for pid=9636 comm="syz.1.2181" path="socket:[26116]" dev="sockfs" ino=26116 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 199.126995][ T9645] vlan2: entered allmulticast mode [ 199.151043][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.168296][ T29] audit: type=1326 audit(2000000032.320:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.6.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31db64e929 code=0x7ffc0000 [ 199.199675][ T29] audit: type=1326 audit(2000000032.320:9992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.6.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f31db64e929 code=0x7ffc0000 [ 199.223366][ T29] audit: type=1326 audit(2000000032.320:9993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.6.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31db64e929 code=0x7ffc0000 [ 199.246811][ T29] audit: type=1326 audit(2000000032.320:9994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9638 comm="syz.6.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31db64e929 code=0x7ffc0000 [ 199.361172][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.386530][ T9653] loop0: detected capacity change from 0 to 512 [ 199.394764][ T9653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.431567][ T9656] loop2: detected capacity change from 0 to 1024 [ 199.440247][ T9653] EXT4-fs (loop0): 1 truncate cleaned up [ 199.446559][ T9653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.468881][ T9656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.482914][ T9656] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.503309][ T9656] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 199.518879][ T9656] EXT4-fs (loop2): Remounting filesystem read-only [ 199.549442][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.975342][ T9660] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 200.324092][ T9672] lo speed is unknown, defaulting to 1000 [ 200.401138][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.704432][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 200.915711][ T9683] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.2195'. [ 200.929003][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.939449][ T9681] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2194'. [ 201.010980][ T9669] Set syz1 is full, maxelem 65536 reached [ 201.024342][ T9680] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2194'. [ 201.032247][ T9691] loop0: detected capacity change from 0 to 1024 [ 201.040186][ T9691] EXT4-fs: Ignoring removed nobh option [ 201.045846][ T9691] EXT4-fs: Ignoring removed nobh option [ 201.051833][ T9691] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 201.065060][ T9691] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: comm syz.0.2196: inode #4294967295: comm syz.0.2196: iget: illegal inode # [ 201.080445][ T9681] loop2: detected capacity change from 0 to 180 [ 201.089503][ T9691] EXT4-fs (loop0): no journal found [ 201.092592][ T9681] isofs_fill_super: bread failed, dev=loop2, iso_blknum=45, block=90 [ 201.094777][ T9691] EXT4-fs (loop0): can't get journal size [ 201.116520][ T9691] EXT4-fs (loop0): failed to initialize system zone (-22) [ 201.124368][ T9691] EXT4-fs (loop0): mount failed [ 201.182816][ T9708] loop6: detected capacity change from 0 to 2048 [ 201.193133][ T9708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.228670][ T9708] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 201.243467][ T9708] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 561 with error 28 [ 201.256260][ T9708] EXT4-fs (loop6): This should not happen!! Data will be lost [ 201.256260][ T9708] [ 201.266139][ T9708] EXT4-fs (loop6): Total free blocks count 0 [ 201.272196][ T9708] EXT4-fs (loop6): Free/Dirty block details [ 201.278192][ T9708] EXT4-fs (loop6): free_blocks=4096 [ 201.283591][ T9708] EXT4-fs (loop6): dirty_blocks=592 [ 201.288877][ T9708] EXT4-fs (loop6): Block reservation details [ 201.294886][ T9708] EXT4-fs (loop6): i_reserved_data_blocks=37 [ 201.331622][ T6056] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 201.414395][ T9723] loop6: detected capacity change from 0 to 1024 [ 201.422447][ T9723] EXT4-fs: Ignoring removed nobh option [ 201.428140][ T9723] EXT4-fs: Ignoring removed nobh option [ 201.441140][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.525875][ T9723] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 201.536050][ T9723] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: comm syz.6.2204: inode #4294967295: comm syz.6.2204: iget: illegal inode # [ 201.550228][ T9723] EXT4-fs (loop6): no journal found [ 201.555472][ T9723] EXT4-fs (loop6): can't get journal size [ 201.565916][ T9723] EXT4-fs (loop6): failed to initialize system zone (-22) [ 201.585610][ T9723] EXT4-fs (loop6): mount failed [ 201.650153][ T9729] lo speed is unknown, defaulting to 1000 [ 202.329123][ T9744] x_tables: duplicate underflow at hook 2 [ 202.347126][ T9739] loop5: detected capacity change from 0 to 512 [ 202.348390][ T9740] lo speed is unknown, defaulting to 1000 [ 202.363018][ T3409] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 202.370395][ T9739] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 202.370514][ T3409] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 202.386059][ T3409] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 202.403423][ T9739] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.2209: iget: bad i_size value: 12154757448730 [ 202.408235][ T3409] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 202.433775][ T9739] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2209: couldn't read orphan inode 13 (err -117) [ 202.459133][ T9739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.481166][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.484414][ T9739] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 202.510927][ T9755] netlink: 'syz.1.2216': attribute type 21 has an invalid length. [ 202.525462][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2216'. [ 202.535895][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.553366][ T9757] loop5: detected capacity change from 0 to 1024 [ 202.562660][ T9757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.574782][ T9757] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.590984][ T9760] syzkaller1: entered promiscuous mode [ 202.596588][ T9760] syzkaller1: entered allmulticast mode [ 202.610467][ T9757] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 202.625675][ T9757] EXT4-fs (loop5): Remounting filesystem read-only [ 202.639646][ T3849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.876264][ T9780] lo speed is unknown, defaulting to 1000 [ 203.107619][ T9790] loop2: detected capacity change from 0 to 1024 [ 203.144659][ T9790] EXT4-fs: Ignoring removed nobh option [ 203.150286][ T9790] EXT4-fs: Ignoring removed nobh option [ 203.198221][ T9790] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 203.212441][ T9790] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.2226: inode #4294967295: comm syz.2.2226: iget: illegal inode # [ 203.226810][ T9790] EXT4-fs (loop2): no journal found [ 203.232126][ T9790] EXT4-fs (loop2): can't get journal size [ 203.243356][ T9790] EXT4-fs (loop2): failed to initialize system zone (-22) [ 203.257103][ T9790] EXT4-fs (loop2): mount failed [ 203.521168][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.604869][ T9811] __nla_validate_parse: 3 callbacks suppressed [ 203.604884][ T9811] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2232'. [ 203.629289][ T9812] loop6: detected capacity change from 0 to 2048 [ 203.639647][ T9811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.648291][ T9811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.662551][ T9812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.702623][ T9811] netlink: 'syz.5.2232': attribute type 4 has an invalid length. [ 203.718820][ T9789] syz.2.2226 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 203.726975][ T9812] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, [ 203.733003][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.2.2226 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 203.733018][ T9812] block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 203.733178][ T9789] ================================================================== [ 203.733211][ T9789] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 203.733250][ T9789] [ 203.733255][ T9789] write to 0xffffffff88e3b26a of 45 bytes by task 9812 on cpu 1: [ 203.733271][ T9789] vsnprintf+0x2ce/0x890 [ 203.733292][ T9789] pointer+0x833/0xcf0 [ 203.733311][ T9789] vsnprintf+0x491/0x890 [ 203.733332][ T9789] vscnprintf+0x41/0x90 [ 203.733352][ T9789] printk_sprint+0x30/0x2d0 [ 203.733369][ T9789] vprintk_store+0x599/0x860 [ 203.733385][ T9789] vprintk_emit+0x178/0x650 [ 203.733401][ T9789] vprintk_default+0x26/0x30 [ 203.733419][ T9789] vprintk+0x1d/0x30 [ 203.733441][ T9789] _printk+0x79/0xa0 [ 203.733467][ T9789] __ext4_grp_locked_error+0x599/0x780 [ 203.733492][ T9789] ext4_mb_generate_buddy+0x243/0x2c0 [ 203.733513][ T9789] ext4_mb_init_cache+0x82b/0xb70 [ 203.733532][ T9789] ext4_mb_init_group+0x25b/0x3f0 [ 203.733562][ T9789] ext4_mb_regular_allocator+0xb1a/0x2300 [ 203.733581][ T9789] ext4_mb_new_blocks+0x800/0x2050 [ 203.733599][ T9789] ext4_ext_map_blocks+0xff5/0x38a0 [ 203.733628][ T9789] ext4_map_blocks+0x61c/0xd70 [ 203.733644][ T9789] ext4_do_writepages+0x12d5/0x21c0 [ 203.733661][ T9789] ext4_writepages+0x176/0x300 [ 203.733682][ T9789] do_writepages+0x1c3/0x310 [ 203.733703][ T9789] file_write_and_wait_range+0x156/0x2c0 [ 203.733730][ T9789] generic_buffers_fsync_noflush+0x45/0x120 [ 203.733760][ T9789] ext4_sync_file+0x1ab/0x690 [ 203.733782][ T9789] vfs_fsync_range+0x10a/0x130 [ 203.733811][ T9789] ext4_buffered_write_iter+0x34f/0x3c0 [ 203.733833][ T9789] ext4_file_write_iter+0x383/0xf00 [ 203.733853][ T9789] vfs_write+0x49d/0x8e0 [ 203.733882][ T9789] __x64_sys_pwrite64+0xfd/0x150 [ 203.733899][ T9789] x64_sys_call+0xe45/0x2fb0 [ 203.733919][ T9789] do_syscall_64+0xd2/0x200 [ 203.733934][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.733955][ T9789] [ 203.733959][ T9789] read to 0xffffffff88e3b288 of 8 bytes by task 9789 on cpu 0: [ 203.733974][ T9789] data_push_tail+0xfd/0x420 [ 203.734003][ T9789] data_alloc+0xbf/0x2b0 [ 203.734029][ T9789] prb_reserve+0x808/0xaf0 [ 203.734055][ T9789] vprintk_store+0x56d/0x860 [ 203.734071][ T9789] vprintk_emit+0x178/0x650 [ 203.734093][ T9789] vprintk_default+0x26/0x30 [ 203.734110][ T9789] vprintk+0x1d/0x30 [ 203.734131][ T9789] _printk+0x79/0xa0 [ 203.734156][ T9789] dump_stack_print_info+0xee/0x1b0 [ 203.734173][ T9789] __dump_stack+0x11/0x30 [ 203.734189][ T9789] dump_stack_lvl+0xe8/0x140 [ 203.734204][ T9789] dump_stack+0x15/0x1b [ 203.734220][ T9789] dump_header+0x81/0x220 [ 203.734247][ T9789] oom_kill_process+0x334/0x3f0 [ 203.734274][ T9789] out_of_memory+0x979/0xb80 [ 203.734299][ T9789] try_charge_memcg+0x5e6/0x9e0 [ 203.734317][ T9789] obj_cgroup_charge_pages+0xa6/0x150 [ 203.734344][ T9789] __memcg_kmem_charge_page+0x9f/0x170 [ 203.734372][ T9789] __alloc_frozen_pages_noprof+0x188/0x360 [ 203.734403][ T9789] alloc_pages_mpol+0xb3/0x250 [ 203.734431][ T9789] alloc_pages_noprof+0x90/0x130 [ 203.734459][ T9789] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 203.734488][ T9789] __kvmalloc_node_noprof+0x30f/0x4e0 [ 203.734514][ T9789] ip_set_alloc+0x1f/0x30 [ 203.734541][ T9789] hash_netiface_create+0x282/0x740 [ 203.734570][ T9789] ip_set_create+0x3c9/0x960 [ 203.734598][ T9789] nfnetlink_rcv_msg+0x4c3/0x590 [ 203.734622][ T9789] netlink_rcv_skb+0x120/0x220 [ 203.734653][ T9789] nfnetlink_rcv+0x16b/0x1690 [ 203.734674][ T9789] netlink_unicast+0x59e/0x670 [ 203.734700][ T9789] netlink_sendmsg+0x58b/0x6b0 [ 203.734716][ T9789] __sock_sendmsg+0x142/0x180 [ 203.734738][ T9789] ____sys_sendmsg+0x31e/0x4e0 [ 203.734767][ T9789] ___sys_sendmsg+0x17b/0x1d0 [ 203.734796][ T9789] __x64_sys_sendmsg+0xd4/0x160 [ 203.734824][ T9789] x64_sys_call+0x2999/0x2fb0 [ 203.734844][ T9789] do_syscall_64+0xd2/0x200 [ 203.734860][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.734879][ T9789] [ 203.734882][ T9789] value changed: 0x00000000fffff10d -> 0x747369736e6f636e [ 203.734893][ T9789] [ 203.734896][ T9789] Reported by Kernel Concurrency Sanitizer on: [ 203.734905][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.2.2226 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 203.734931][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.734944][ T9789] ================================================================== [ 203.734984][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.734997][ T9789] Call Trace: [ 203.735003][ T9789] [ 203.735031][ T9789] __dump_stack+0x1d/0x30 [ 203.735049][ T9789] dump_stack_lvl+0xe8/0x140 [ 203.735068][ T9789] dump_stack+0x15/0x1b [ 203.735118][ T9789] dump_header+0x81/0x220 [ 203.735149][ T9789] oom_kill_process+0x334/0x3f0 [ 203.735179][ T9789] out_of_memory+0x979/0xb80 [ 203.735217][ T9789] try_charge_memcg+0x5e6/0x9e0 [ 203.735244][ T9789] obj_cgroup_charge_pages+0xa6/0x150 [ 203.735274][ T9789] __memcg_kmem_charge_page+0x9f/0x170 [ 203.735417][ T9789] __alloc_frozen_pages_noprof+0x188/0x360 [ 203.735452][ T9789] alloc_pages_mpol+0xb3/0x250 [ 203.735544][ T9789] alloc_pages_noprof+0x90/0x130 [ 203.735574][ T9789] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 203.735648][ T9789] __kvmalloc_node_noprof+0x30f/0x4e0 [ 203.735681][ T9789] ? ip_set_alloc+0x1f/0x30 [ 203.735708][ T9789] ? ip_set_alloc+0x1f/0x30 [ 203.735781][ T9789] ip_set_alloc+0x1f/0x30 [ 203.735808][ T9789] hash_netiface_create+0x282/0x740 [ 203.735879][ T9789] ? __pfx_hash_netiface_create+0x10/0x10 [ 203.735910][ T9789] ip_set_create+0x3c9/0x960 [ 203.735941][ T9789] ? save_fpregs_to_fpstate+0x100/0x160 [ 203.736046][ T9789] nfnetlink_rcv_msg+0x4c3/0x590 [ 203.736091][ T9789] ? selinux_capable+0x1f9/0x270 [ 203.736166][ T9789] netlink_rcv_skb+0x120/0x220 [ 203.736227][ T9789] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 203.736258][ T9789] nfnetlink_rcv+0x16b/0x1690 [ 203.736283][ T9789] ? __kfree_skb+0x109/0x150 [ 203.736366][ T9789] ? nlmon_xmit+0x4f/0x60 [ 203.736387][ T9789] ? consume_skb+0x49/0x150 [ 203.736415][ T9789] ? nlmon_xmit+0x4f/0x60 [ 203.736435][ T9789] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 203.736497][ T9789] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 203.736578][ T9789] ? __dev_queue_xmit+0x182/0x1fb0 [ 203.736611][ T9789] ? ref_tracker_free+0x37d/0x3e0 [ 203.736670][ T9789] ? __netlink_deliver_tap+0x4dc/0x500 [ 203.736783][ T9789] netlink_unicast+0x59e/0x670 [ 203.736815][ T9789] netlink_sendmsg+0x58b/0x6b0 [ 203.736836][ T9789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.736856][ T9789] __sock_sendmsg+0x142/0x180 [ 203.736880][ T9789] ____sys_sendmsg+0x31e/0x4e0 [ 203.736965][ T9789] ___sys_sendmsg+0x17b/0x1d0 [ 203.737035][ T9789] __x64_sys_sendmsg+0xd4/0x160 [ 203.737071][ T9789] x64_sys_call+0x2999/0x2fb0 [ 203.737097][ T9789] do_syscall_64+0xd2/0x200 [ 203.737113][ T9789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.737219][ T9789] ? clear_bhb_loop+0x40/0x90 [ 203.737239][ T9789] ? clear_bhb_loop+0x40/0x90 [ 203.737261][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.737283][ T9789] RIP: 0033:0x7fb0b88ce929 [ 203.737353][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.737371][ T9789] RSP: 002b:00007fb0b6f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.737391][ T9789] RAX: ffffffffffffffda RBX: 00007fb0b8af5fa0 RCX: 00007fb0b88ce929 [ 203.737405][ T9789] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 203.737417][ T9789] RBP: 00007fb0b8950b39 R08: 0000000000000000 R09: 0000000000000000 [ 203.737430][ T9789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.737441][ T9789] R13: 0000000000000000 R14: 00007fb0b8af5fa0 R15: 00007fffa6342948 [ 203.737520][ T9789] [ 203.737526][ T9789] memory: usage 307200kB, limit 307200kB, failcnt 596 [ 203.770424][ T9818] loop5: detected capacity change from 0 to 128 [ 203.777112][ T9789] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 203.777131][ T9789] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 203.777152][ T9789] Memory cgroup stats for /syz2: [ 204.538075][ T9789] cache 4096 [ 204.538815][ T9812] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 204.543051][ T9789] rss 16384 [ 204.546312][ T9812] EXT4-fs (loop6): This should not happen!! Data will be lost [ 204.546312][ T9812] [ 204.559009][ T9789] shmem 0 [ 204.562146][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.571772][ T9789] mapped_file 0 [ 204.574723][ T9812] EXT4-fs (loop6): Total free blocks count 0 [ 204.581645][ T9789] dirty 0 [ 204.585061][ T9812] EXT4-fs (loop6): Free/Dirty block details [ 204.585074][ T9812] EXT4-fs (loop6): free_blocks=4096 [ 204.585134][ T9812] EXT4-fs (loop6): dirty_blocks=512 [ 204.591068][ T9789] writeback 0 [ 204.591113][ T9789] workingset_refault_anon 519 [ 204.591120][ T9789] workingset_refault_file 505 [ 204.594036][ T9812] EXT4-fs (loop6): Block reservation details [ 204.599927][ T9789] swap 200704 [ 204.605192][ T9812] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 204.638706][ T9789] swapcached 12288 [ 204.642456][ T9789] pgpgin 171325 [ 204.645914][ T9789] pgpgout 171319 [ 204.649554][ T9789] pgfault 190351 [ 204.653133][ T9789] pgmajfault 189 [ 204.656729][ T9789] inactive_anon 8192 [ 204.660628][ T9789] active_anon 8192 [ 204.664381][ T9789] inactive_file 0 [ 204.668110][ T9789] active_file 8192 [ 204.671871][ T9789] unevictable 0 [ 204.675348][ T9789] hierarchical_memory_limit 314572800 [ 204.680728][ T9789] hierarchical_memsw_limit 9223372036854771712 [ 204.687023][ T9789] total_cache 4096 [ 204.690865][ T9789] total_rss 16384 [ 204.694521][ T9789] total_shmem 0 [ 204.698093][ T9789] total_mapped_file 0 [ 204.702173][ T9789] total_dirty 0 [ 204.705677][ T9789] total_writeback 0 [ 204.709516][ T9789] total_workingset_refault_anon 519 [ 204.714738][ T9789] total_workingset_refault_file 505 [ 204.719993][ T9789] total_swap 200704 [ 204.724109][ T9789] total_swapcached 12288 [ 204.728361][ T9789] total_pgpgin 171325 [ 204.732474][ T9789] total_pgpgout 171319 [ 204.736544][ T9789] total_pgfault 190351 [ 204.736906][ T9811] lo: entered promiscuous mode [ 204.740602][ T9789] total_pgmajfault 189 [ 204.740611][ T9789] total_inactive_anon 8192 [ 204.740619][ T9789] total_active_anon 8192 [ 204.740626][ T9789] total_inactive_file 0 [ 204.745420][ T9811] lo: entered allmulticast mode [ 204.767417][ T9789] total_active_file 8192 [ 204.771681][ T9789] total_unevictable 0 [ 204.775708][ T9789] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2226,pid=9788,uid=0 [ 204.790415][ T9789] Memory cgroup out of memory: Killed process 9788 (syz.2.2226) total-vm:93752kB, anon-rss:1056kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 204.808804][ T9517] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 204.821173][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 204.821185][ T29] audit: type=1400 audit(2000000037.830:10096): avc: denied { mount } for pid=9810 comm="syz.5.2232" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 204.869580][ T29] audit: type=1400 audit(2000000038.010:10097): avc: denied { write } for pid=9810 comm="syz.5.2232" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 205.405113][ T29] audit: type=1400 audit(2000000038.560:10098): avc: denied { unmount } for pid=3849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 205.611213][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.641194][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.681266][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.731146][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.771172][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 210.811141][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 211.841188][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.891163][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available