last executing test programs: 2m22.329084722s ago: executing program 2 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xa6, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 2m22.096156056s ago: executing program 2 (id=662): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07447900000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000006, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 2m21.80573758s ago: executing program 2 (id=666): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 2m21.679457782s ago: executing program 2 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodiscard}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r1 = open(0x0, 0x14927e, 0x0) fallocate(r1, 0x1, 0x0, 0x1001f0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)=' ', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000005904e440d3b821d18b04fdb031a5e17243b984674fc5302acd9607000000000000619e3a2027c1e48c3c12e30d122eaa58e2145eb16a65604f4a2f1f4b66d46fa0380c40e5c124a6436df1bf09f7f6657c709abf657aeab47c"], 0x18, 0x20000080}}], 0x1, 0xc001) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a00000000000000080005008183af398ee67a462837385de5a60aab4e9f", @ANYRES32, @ANYBLOB, @ANYRES64, @ANYRES16], 0x20}}, 0x0) ioperm(0x1, 0x9, 0xfffffffffffffff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='sched_process_fork\x00', r6, 0x0, 0x6}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) mkdirat(r2, &(0x7f00000003c0)='./file0\x00', 0x120) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) fcntl$setpipe(r7, 0x407, 0x80000000000) fallocate(r8, 0x0, 0x0, 0x8000c62) 2m21.317355958s ago: executing program 2 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8704, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x1}, 0xcec0, 0x2, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x0, 0x0}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) setrlimit(0x8, &(0x7f0000000080)) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) (async) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000003c0)=0xfff, 0x4) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) (async) sendto$inet6(r3, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) (async) mlockall(0x3) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) 2m20.699455587s ago: executing program 2 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206405000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(0x0, 0x30, &(0x7f0000000200)={0x18, 0x0, 0x7}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x400000}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) 2m20.654436558s ago: executing program 32 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a50000001801000020206405000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigqueueinfo(0x0, 0x30, &(0x7f0000000200)={0x18, 0x0, 0x7}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0xfd, 0x0, 0xfffff010}, {0x20, 0x7, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x400000}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x0) 2m0.586663802s ago: executing program 4 (id=1028): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2040400) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812000087a51293bfa06de5f30a2a7aa5f15a028a9d6e24a363c3c7f58a648d112bf1d922625003670d2e4910bf7567148b5dd230c586f6bafc8cfda58a2b543a3998d7a4393d0cc3600c1be4d1ee98affa8a03a6cb2506b74dbe73e388abead9ce9f1c659cbb3fd7490ce4b3e9625e0324fd6f9ec66821e4ea8b29c22e0fa157888474b939614e5d27e5f7789c3e835e2ce5b899", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES8=r2, @ANYRESHEX=r2], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x10000}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getpriority(0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @mcast2, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r6], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x9, 0x4, 0x5, 0x1}, {0x9, 0x6, 0x2, 0x10001}, {0x0, 0x3, 0xc0, 0x6}, {0x8, 0x5, 0x6, 0x10001}, {0xfff8, 0x9, 0x8, 0x180}]}) r7 = socket(0x10, 0x80003, 0x0) write(r7, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18a0000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="a80000006c502fa9a42d6c007c3fd2373baaab9449328f5952e23013f496e7308e1e0043fb2918cc2a5067d1c499b31294e3a59667155f1586b78a9e9f9d31ec9e860518c06e7db8afdc7d44be333e0f507082815d", @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250200000008006900060000000400d100080026003c140000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc081) r9 = syz_pidfd_open(r1, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x0, 0x4, 0x0, 'queue1\x00', 0xfffffffe}) openat2(r2, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x75f5755cfbd25d33, 0x2}, 0x18) close_range(r9, 0xffffffffffffffff, 0x0) 2m0.142958359s ago: executing program 4 (id=1031): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 2m0.141719868s ago: executing program 4 (id=1033): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) sigaltstack(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001580)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x4000080) 2m0.08496734s ago: executing program 4 (id=1035): r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001700)='./control\x00', 0x80002, &(0x7f00000016c0)=ANY=[@ANYRES16=r1, @ANYRES64, @ANYRESOCT=r1], 0xfd, 0x28a, &(0x7f0000001c40)="$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") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) getpriority(0x1, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) futimesat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 1m59.831543413s ago: executing program 4 (id=1042): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)="b37e156fe425578b1dd235fdf21b00c6a133", 0x12}], 0x1, 0x1) close(r2) r3 = socket(0x15, 0x5, 0x0) connect$can_j1939(r3, &(0x7f0000000040)={0xa, 0x0, 0xffffffffffffffff, {0x1}}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r5 = syz_io_uring_setup(0x2, &(0x7f0000000380)={0x0, 0xe456, 0x400, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f00000005c0), 0x0) 1m59.158503913s ago: executing program 4 (id=1049): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1m59.058457295s ago: executing program 33 (id=1049): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 7.066587193s ago: executing program 3 (id=3113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x181808, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 7.042919353s ago: executing program 3 (id=3115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.017357543s ago: executing program 3 (id=3116): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c237c531"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff}}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_clone3(&(0x7f00000008c0)={0xa0000000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000480), {0x7}, &(0x7f0000000800)=""/149, 0x95, &(0x7f0000000580)=""/126, &(0x7f0000000640)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r2}}, 0x58) syz_pidfd_open(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000890000000000000000000400b7080000000000007b8a000000007b8af0ff00000000390702309506205207010000f8ffffffbfa4000000000000070400000000000000000000000000000000000043c243e1f63c8012af62f72f29578b945d8838", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x181808, 0x0, 0x4000000, 0xffffffff, 0x1, 0x0, 0x0, 0x5, 0x4}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1c, r8, 0xf4f8e13c176fa214, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x4010) r9 = timerfd_create(0x0, 0x0) timerfd_settime(r9, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) timerfd_settime(r9, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 6.926214345s ago: executing program 3 (id=3118): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r2, 0x0, 0x0) 2.692011799s ago: executing program 5 (id=3160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000009000000000000000104000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000e00000085000000060000001862000005000000000000000800000005490500cc9461933d85100000ffffffff3a46fcff010000008500000074000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000ed74db3a4e865d586f6e8eed0abaa5577d4cfa17397b876a3386f6ca0dd8ece4daa58d1efd3ab86efb28a7f23013322bd132443dda9a8e451910496be2254b9d5c15ce1d24ee2a1122040063456e381e3408e5c99d1a2d13c1df"], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @remote}, 0x10) sendmmsg(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002880)="13d0dc432d3d3391fafe26160c215d30a476f4ac80d634079b6b579bb04ade2653f8c0f6b1a55451ddad18f6d9a81e8bc2121377f7a87a5e076ea2c1e4b0094d472684241faf30ebff5e58a61ba1c2ce470b99036209", 0x56}], 0x1}}], 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.656289034s ago: executing program 6 (id=3165): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0xd13, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.582219775s ago: executing program 5 (id=3166): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 1.468908237s ago: executing program 5 (id=3168): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.431204118s ago: executing program 5 (id=3169): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f0000000c80)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) statfs(&(0x7f0000000040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() 1.326136119s ago: executing program 1 (id=3170): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r1, r0}, 0xc) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000380)=0x6e, 0x800) recvmmsg$unix(r2, &(0x7f00000003c0), 0x0, 0x100, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r6 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES64], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @cgroup_sysctl=0x12, r3, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) fcntl$dupfd(r6, 0x406, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sigaltstack(&(0x7f0000000100)={&(0x7f00000000c0)=""/51, 0x0, 0xfffffffffffffe55}, &(0x7f0000000140)={&(0x7f0000000080)=""/49, 0x0, 0x3e}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0xe501, 0x3, 0x538, 0x3a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x4a0, 0x230, 0x230, 0x4a0, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x358, 0x3a0, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x1}, {0x0, 0x6}, {0x0, 0xff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {0x0, 0x0, 0x0, 0x338}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x7, 0x0, 0x6}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0xa1}]}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@empty, [0xffffff, 0x1000100, 0xffffffff, 0xff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff000000, 0xffffffff, 0xff], @ipv6=@mcast1, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@broadcast, [0xff, 0xffffffff, 0xff0000ff], 0x75, 0x10, 0x2f, 0x4e23, 0x4e20, 0x4e24, 0x4e20}, 0xc1, 0xd2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xffffffff, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x598) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x178}, 0x18) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2053c, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x210000, 0xfffffffc, 0x3, 0x9, 0x1c, 0xb, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x3, 0x300) 1.32454803s ago: executing program 6 (id=3171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 1.258913771s ago: executing program 6 (id=3172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.005846284s ago: executing program 3 (id=3119): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000340)={0x17, {{0x2, 0x4e24, @broadcast}}}, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r1, 0x0, 0x1000}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffc}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x63d}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 939.266176ms ago: executing program 0 (id=3174): mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="e0925693cfc74c05f726838916c65667ca8b6efbe77c08e9bff00761630f0668d51021f66d12e3024023ac2c45706ef4102b1535beaac5a266968823086aa472b3e1303724ee45028c1d6964818fe804d4cdd70712723e1806c7f492c62838e32011acb720d91b3f6633e406b7f0ef52eb0bec073c602cad0c632e63d1c93ed9e247da40c75a6b1b2c2559dda43922f85c767fce9b623de8585dd95dc197ab983df5bb6ae369cc4a701a49ee462f0d5f7fe52d524718be2116", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xc8, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xfc04, 0xc01, 0x8000, 0x40024e}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r1, 0x627, 0x4c1, 0x9, 0x0, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) lsetxattr$system_posix_acl(&(0x7f0000000680)='./file0\x00', &(0x7f0000000700)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES32=r1], 0x24, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4172, 0x0, &(0x7f0000000100), &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='io_uring_link\x00'}, 0x18) io_cancel(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x7e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00"], 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="480000000906010200000000000000000700ffff200007800c00018008000140e000000208000a400000000105000300020010000900020073797a31000000000500010007000000b752ed6fdce36883cfc7b83b0e654e9886550cc57b10fb4674e73115a7ad2d2950f12a5d4bebe4ac306529df0b3ff99f56b0f847be12faa6a626"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10020, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, 0x0, 0x8) 876.384386ms ago: executing program 1 (id=3175): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$eJzs3E1oXNUeAPD/nXz26zXvvb6+176+Z2oVg8WkTavNQpCKggsFsYK6DElaatNGmhRsqTIFqUspuBeXbl24VTdFXAlu61KQQpFu2griyJ25dzIzmUmaSTJjmt8Pbuace2fuOeeee+6ce07mBrBlDad/kkr4VkTsjohC4xuGKy/3716denD36lQUS6VTvyblj91L45lsN7Eji4wUIgofJYsbasxfvnJucnZ25mIWH1s4/97Y/OUrz5wdzNZMTCS9bRaqSXppue7t/3DuwL5X3rnx2lR1z3lqteVYL8Mx3CwrZU+ud2Jdtqsm3Ha90XHp+Z9WV1+5/e+Onliu8oodzBmw0UqlUmmg9eZiqdG1JWuATSsGu50DoDvyL/r0/jdfmnUE+jem+9F1d05WboDSct/PlojHyivzcZC+hvvb9TQcEW8Xf/ssXWKDxiEAAGp9czLvCTb0/4YqMyO/X7r5Qvr6t2wOZSgi/h4R/4iIf0bEnoj4V0TsjYh/R8R/GvbfExGlZdIfbohX069OQhVur1NRm0r7f89nc1vpsjj3VQ0N9WSxXRF5h3nmSHZMRqJv4PTZ2Zmjy6Tx7Us/ftJqW23/L13SPOR9wSwft3sbBuimJxcm2yvtUneuRezvXSx/pf+b9EYk1ZmAJCL2RcT+Vex3qCZ89ukvDlQjffXvW7n8ZaWm82jrMM9U+jziqUr9F6Na/qibREzq5ifPT56ZOTNzYXxi4vixoyeeG392bDBmZ46MpWfBkaZpfP/D9ddbpb9i+b/6ufEjL5/4+lTWstYurf/tNed/5PO3i+UfSiKS6nzt/OrTuP7Txy3vado9//uTN8vh/L70/cmFhYtHI/qTV5euH1/8bB5PX6NYKf/Iocbzv5xu+RqXH4n/RkR6Ev8vIv4flTvENO8HI+LxiDi0TPm/e/GJd9sv/8ZKyz8d9eWv1Hxd/S/O17cKJNncYN2m/kgDPecO3nrQ4uLxcPV/vBwaydY0v/4ldZeIVjnNv+3SNX+s+egBAADA5lCIiJ01Y0k7o1AYHa2MAe2J7YXZufmFw6fnLl2YTrdFDEVfIR/pqowH9yX5+OdQTXy8IX4sGzf+tGdbOT46NTc73dWSAzvKbT4pjEa81VPT/lO/rM8QM/BX5vdasHUt1/7TTvzeGx3MDNBRD//9f/ODDc0I0HE17b/VL/yLbfzfF7AJPPT3f9LyeTbAI2PlB/0YM4TNr6Qtw5a2qvZ/2EMA4VHSG29Uw4Wu5gToNP1/2JJW/F3/mgKlgeabBmPpm2Nw+R32RHvZ2NYkra4E0p5VV1Lf1s6n8omelu+Jwup2OBD1a/rbrNPTazwaxYvzZ/Yunvz5s0XWeJxL2f/Kr3cNftmRdtos0PFLEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIb4MwAA///GJdfC") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) alarm(0x8) membarrier(0x10, 0x0) 837.498847ms ago: executing program 3 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$binfmt_aout(r6, 0x0, 0x20) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x20008040) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x4) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 814.583207ms ago: executing program 0 (id=3177): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) 747.496878ms ago: executing program 0 (id=3178): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}, 0xc104}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 510.689352ms ago: executing program 1 (id=3179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 500.595322ms ago: executing program 5 (id=3180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c0700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 498.220472ms ago: executing program 0 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 458.153733ms ago: executing program 0 (id=3182): r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fbdbdf25080000004400028005000d0000000000080005000104000008df04000300000006000e004e21000008000800fcffffff08000300010000000600000800050037176a6800"/90], 0x60}}, 0x811) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030300000000000000002a0000000e0001006e657464657673696d0000000f0002006e657464657673696d9ed137870f256e899c193fa2a9300000"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0xee01, 0xee00) keyctl$chown(0x4, r6, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)=ANY=[], 0x20) r7 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c40)='./file1\x00', 0xffffffffffffffff, 0x1000}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {0x10}, {}, @queue={0x0, {0x7a11f}}}], 0x1c) io_uring_enter(r7, 0x3516, 0x8000000, 0x0, 0x0, 0x0) r11 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r11, &(0x7f0000000400)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev, 0xa}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000040)="80005b020eaa4da2e5d6c51263887f5078f903b4d2dbf9d06fa0536082dc2bec16c75e059f2dc4e1b00e613868bc67d257218b000000000000", 0x39}, {&(0x7f0000000f40)="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", 0x120}, {&(0x7f0000001780)="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", 0x428}], 0x3, 0x0, 0x0, 0x900}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000080)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}]}, 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") 454.607013ms ago: executing program 1 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 390.445724ms ago: executing program 1 (id=3184): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x80000) sendmsg$inet6(r1, &(0x7f00000041c0)={&(0x7f0000000540)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000000580)="0381a70f7a14ab5060d29f74d67e3fbcdd78b4e4fce1a4ab7d0e3f5391d003663f6c84f8a20b8f43db9ca61cfc220b1ce719c430c47f748e92f965", 0x3b}, {&(0x7f00000006c0)="1546182ee05c9c190f04b0fa8070ce2bc43e3ad0d4bcda5f7a13e105af9ebc0384dfca0eefb018e0e345d1908fc02ea8adfc2518ff295893523ae39f533b687de1820d5cf4cac5081f700ad5cb7a8b73a931b4fdbd9f9022b0242481fbe07fe183c589f38ce27ad86dce25a3fa04d34e2b8786c09251875dc2761b44bf28a8ddae4028d3693932b1c90b2f3570392feba02cdb2e45e7f088f6ec468a436d8841847854aeac6e4e73658408ea18447671d9805bb0367a1db660acfd925ff25d321a3f404ab2334597be1d5572467adbed7bcfd1bb09e3ebd19fa07dee88f527179639d9c661295d1429150ab3752d12b377e88891ab", 0xf5}, {&(0x7f00000005c0)}, {&(0x7f00000007c0)="5caf865b45a5aa4bfa82ce00cd7f352a5293fc8bd48024d5c8ffb7e4a754d163", 0x20}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="79d0dc1522dc954c739ce414e25abd86ed55767b6789c08d51afbea540b06caf6372bb552dce7056cc538ee82c5b6f99f00409f40174fd1089ab60a12805a01b58902d369bc156f316f02646efdf31640b61fe787f08c8f913ab44e0d03d6bf8f3ebfa63c4cd452fe990fd49851a0ef224727c199097fb1b0de4dc2e9acc01524dc22aa678877fc16d43c1e853e7e2f2f5832176c4110c184d94d58c1783d0da0006ee71456ea241d098fa04ddf43d374b3f164ad6b88bc58523a546eb7c0bb32bf4bc92ca982b6030f156efac2cbc4805815aeaa784", 0xd6}, {&(0x7f0000000800)="eac07e493b5cc7047d75c3550d42ed91cada0cb8c9be4eb87d", 0x19}, {&(0x7f0000002c40)="a9ed8bc2011a1a250f4feccc8e2b1b199361", 0x12}, {&(0x7f0000002c80)="12631006e05a9b008af2416630a6cd7d60f283be25e214dc36340858e55167a39aeba2b498442cdb61ab0ad27f6510b1a43307197ea87c2c86346d33d6298c1409e8876767498b9e8f8f4fac60f3dd74b4ad641978d17fae1d7980ef5199d98e4974d386a756199e16303016d23c58bfeac9da8aef1664d69ed469688d438a040f412eab4446392bc4b53c0849a00f861070a69f9dee58cdeb43d36fca905efd", 0xa0}, {&(0x7f0000002d40)="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", 0x1000}], 0xa, &(0x7f0000003e00)=ANY=[@ANYBLOB="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"], 0x308}, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000001880)=ANY=[@ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet(0x2, 0xa, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) socket$nl_route(0x10, 0x3, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 390.021764ms ago: executing program 6 (id=3185): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="09052cbd7000fbdbdf25030000003000018014000400fe8000000000000000000000000000aa060005004e230000060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x80c0) 353.500274ms ago: executing program 6 (id=3186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x600, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 335.280055ms ago: executing program 6 (id=3187): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 243.770316ms ago: executing program 1 (id=3188): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) keyctl$read(0xb, 0x0, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x6000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2ffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$nvram(0xffffffffffffff9c, 0x0, 0x103000, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 174.774287ms ago: executing program 0 (id=3189): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440)=0x1c, 0x80000) sendmsg$inet6(r1, &(0x7f00000041c0)={&(0x7f0000000540)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000003d40)=[{&(0x7f0000000580)="0381a70f7a14ab5060d29f74d67e3fbcdd78b4e4fce1a4ab7d0e3f5391d003663f6c84f8a20b8f43db9ca61cfc220b1ce719c430c47f748e92f965", 0x3b}, {&(0x7f00000006c0)="1546182ee05c9c190f04b0fa8070ce2bc43e3ad0d4bcda5f7a13e105af9ebc0384dfca0eefb018e0e345d1908fc02ea8adfc2518ff295893523ae39f533b687de1820d5cf4cac5081f700ad5cb7a8b73a931b4fdbd9f9022b0242481fbe07fe183c589f38ce27ad86dce25a3fa04d34e2b8786c09251875dc2761b44bf28a8ddae4028d3693932b1c90b2f3570392feba02cdb2e45e7f088f6ec468a436d8841847854aeac6e4e73658408ea18447671d9805bb0367a1db660acfd925ff25d321a3f404ab2334597be1d5572467adbed7bcfd1bb09e3ebd19fa07dee88f527179639d9c661295d1429150ab3752d12b377e88891ab", 0xf5}, {&(0x7f00000005c0)}, {&(0x7f00000007c0)="5caf865b45a5aa4bfa82ce00cd7f352a5293fc8bd48024d5c8ffb7e4a754d163", 0x20}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="79d0dc1522dc954c739ce414e25abd86ed55767b6789c08d51afbea540b06caf6372bb552dce7056cc538ee82c5b6f99f00409f40174fd1089ab60a12805a01b58902d369bc156f316f02646efdf31640b61fe787f08c8f913ab44e0d03d6bf8f3ebfa63c4cd452fe990fd49851a0ef224727c199097fb1b0de4dc2e9acc01524dc22aa678877fc16d43c1e853e7e2f2f5832176c4110c184d94d58c1783d0da0006ee71456ea241d098fa04ddf43d374b3f164ad6b88bc58523a546eb7c0bb32bf4bc92ca982b6030f156efac2cbc4805815aeaa784", 0xd6}, {&(0x7f0000000800)="eac07e493b5cc7047d75c3550d42ed91cada0cb8c9be4eb87d", 0x19}, {&(0x7f0000002c40)="a9ed8bc2011a1a250f4feccc8e2b1b199361", 0x12}, {&(0x7f0000002c80)="12631006e05a9b008af2416630a6cd7d60f283be25e214dc36340858e55167a39aeba2b498442cdb61ab0ad27f6510b1a43307197ea87c2c86346d33d6298c1409e8876767498b9e8f8f4fac60f3dd74b4ad641978d17fae1d7980ef5199d98e4974d386a756199e16303016d23c58bfeac9da8aef1664d69ed469688d438a040f412eab4446392bc4b53c0849a00f861070a69f9dee58cdeb43d36fca905efd", 0xa0}, {&(0x7f0000002d40)="54cfbcdb18a6b17c4ab034b504a037dae0c608c46c8d159891277e174b14bf2b3033b69f616d4e4aaf70c8e2945ce0a19e19209392ed8f835e87503de1ff0438cd1c4719815783e2eb67aeb3ea45c1c63246a9525d8c62fc73be00d42df181dd7123ca48287ac48042c7013de74a5059b79b7c8d777fe7b6db404531a14f69bb6978e469d53e7dd6513e24b94bca872aff6cd341cd89d73ece19f78acd7f6e467cc08a571094fdb49fb9fd1d9f0259a9053de11967b4b16be4f9d48fc2899607219f6526f52a8402407ca34997348a253f350bc9d5f344ffa16c9f8fe7a716244a24df1b6ecaa048667916eeeba53746cec79dd766625f7792fb5f9036cd0050d703a94f57466b4c9b69dd3ba3dd99446d4dc2a7d57b6b7ec17a99c4b24e2552e9d2ea7a41861eac94ac3463f379af8b2c828078ca08e5d5c971dd0ca47cb0c784900fa4b409b2a08f77d4e4136e168708a71d4d08f29df1852d3846aeee23b5046991e868a7621b873944247a73ddfde9244fbf04bb445daba3f8f293d7f77d1600a0fee762276b69cd592ff11f98a518317c61df984e99183fd0ee93578350e94d25503a709c812c59dcf9a4e8a57d95688c18832cae9116cc919e3002125f8960d9e2a35af5189c8ac751efb40c552c03b4425d2932dde791e447e483d63ebe8461e62b80fd177f067c51341aaf30a3f2a00ba2a238d31f90052bf8d32d9fae17523c67f5b10cd786d8d444e33219c8a982586cd0c65a9e35436c8518b01fecc46660be06ac8151fed358ae7b29b0410037c01915ef863ad737397235a75ad073bcac3d7f44ee1e6a80641c15234f6572e9dc90f8dc226a20d6d1ad1a706b57c58235f4b96fe8a2b9e23de7e5c9037c0c2efe767d40f44206508f39399f0d319fc4b02c5205f4cd74868c4f74789596379333ec77e586f2b90a3b2ef55865c25f4bfeb9637b3901c7f3ba34551eb596929f82dd9d6c0f402c2e09ea26c616a160b0b59248adf159170978e9805cc9fb06ed51628b10d158e1bc68a1587076cd116d8981da00831c0b4b2f116badd6ab91c62f7003becc3076914ad0a2612bf02d4ab1a09f57d78d1cada42d517c33dc9031baf019619606ab159a5ddbea54b92ecf7782f1d306d7417fdba00f3df055f78d3b5402054dedf08eba00c5a073d4201ba58bba5e55ff50c622dfaa7c76226d4b230e9cf6d7e97efab6321c65fa530fc24122fc44788c475b79af465fddb81a6d58b15f3831623b7d948b0c37b2d666866f84942ad4a177694408e8c5cb90b2188eb81228cf65ab802a09ff3cfc26a5db473c9e1874fec79d1ea9457d610ddfad53f056550166390ea1a9570a221e287a072a40b8f4488451a87dc824af3bf01fb570d7a55994510a9c4fe0fd72c99c04d5b38af7799eb111ae883afe89a74a724c22d07419c3ecfadf8694bc9723d1e2009f0c84ea250d6f3532751ff6947d45cedd4e316da31ebadea73fb10693b672d514e531fe20cdfd054f693017576d712da1b4cfbb98bb88635f774efc74b7deb8bc511984546a41c2d5aff54365742cbd48c38e7de6057bbef60d492b8d74a9b219c0a8cd5dc2523f9a64362ea4d5672f11e956e2adcfb4e1915f664ca11f7b2b5e5de18a2f36942b0fb4bc79b20e27a085731a64abd8b0db79b043953f4c5e550dfd004639e6109d3f2c4fa16e10826b4018c08395d4994b391ab1d5278f14a20d603ff7ba4976f587725b872f4c27f0856a34fafa99138ae21cd5554effa14b0775cb73cd1add5a10c77694a95ccff04d9810e932a9ed40a4e1a0c0e9f3482baf9e0975e0b6a62e34a54a5229c254c09d0b1cc4175416595bf88cc0574432d8168b3f8a85ac96a35e0308ac0c8107d46024b789e0dd369e5dc0e0fd28c5f7f208a238ebc7e3ea9ace0d4dfa8e3ae64ebb7b1e4afbe5b4126436dbe671b026cd5d9f9a1b9a94a9a80f734026bbbf2f9acc7b56ae79735caf1a84b8ef5d744de921e5f02e242cab54f0cf50bb442f5bcf2e64abce7abef094f1b027919aceb3b35ae3c919b471fa8f86f62665038a706df204d5e9c5339c42baa527a2b13151a56784904dcbf14e489198f769ef94e7c5014591a23238dd0201bf2532edb5bcab85af3ed57163dd1c72a7e86608678e595e3044301f4e44e75a4dc49d3a85a40c8f650d0fb1d0c797862242ad9f96463982049f70afee584f863fc7687ba4ca7e0056ff654968fd93227fa7c7b176f9a2afbce4d3db9049e6845c76d2481157bb5f579e553bf28bbfd95c4987479b111ac27cbbfcd8c1c2712e8aa470cb713b855a406643576a1be788842d6f64b67e031c8e0d3e3a547251e8c079d3dc2e944380fd79777c7678ac194b9c105dcea1ef9ef0a088eaac8f0acb3fccc57222e8182148e9ff39bc80c644e6f38d06c68bfc76e860b01e302ff09ccf21b4d9ad3d892e9bd232ab177237a7f0d4cb781860638fbe673e1c7fd2e0a8f8e599896bbf4623e2cfc0d8c764edb7be38d8401556411f9f14e9ad223f57cdb53d27b366bd9b575e767d162feb8413a9ee33adbdf1e42550e8a2e34a1b00b137f7693cb3385399c1fb5ab925e4e0c2e1c6f6b5a29550e93451fafe5cf3dfb0f8d5f6c752c201187b30b2eeb9ea5aadfaf11f2f1802a4547041d0ff283230a0791c327b90c6c1b8ccf29cb27ef0f71678ddcd332031d99177057e986ec477df144584b3968e958e5b1893ead1f8d154f06d8554e403f56837875954b215d56cf948c4d554c1a991d7dc676cd4475e1718395a005870a4933f92e4e5eecfe5fc1fcd643e2c94e99c1104fa44c8d93f63dcf5dc7309470904844a4ba508c78dbc5fdf313fc50281487fed8b6bc7d3c3aff8b329c9e43aedaacfb14a7fc85b559ddf4fd2a6f4c8b025e9b9c95ba8b1c64df31a40b123d4afa02c483bb1b372a52a3a4ca064ff635869b59db3933293ad99a9a1e7fe24793a992a632e939728e69fe713b4ac724e1a00270ac35edc786587985edd5e55ac20315dab4f0032a044a772972ba4d324910a617ff2a0c6c0b952e326bbc9c1c949c6583da18b0bce7636dee15971fd9f312f91dc4ee79502e6f787dcf7fbad393e52732ff42334b77d2dcac3b597ab9f624c068dc24be072ee31b681905fe76f84254cd3b4282f4676e8bb8805cb3bdecbe4fa83ea4f00d5576a2a8e311bbd2fb078a94f3e4fb719c100dcafd10b084cc7077dfbc6c11db5e1d858703c00e1b4a172e908d738fad29e027bbe264bb1fc5c3694cfea07008f9f3c916d559932f03f998699d8f98b984d956ea8f4edefac024b725ff45324ea1996ff06c4b8c463f217d0f4ba3266123ba57e422a52bd6a9d1d69eb3bf5f784e0a4d8c054c903b46eb91411b8e59e33451bc4c011441bf1037fa8dbc27fecb7b4ee96a545e995b749e1f204633dbbc771f04a4d636f0215620ac1b3f7c76feb9158fcd597fb064e8866818bdbabda75b2decc7ea349bdaf51b982251ead0e8e65771feaf2ce994ff3d28ed68ceb7e1112674ee9fc2026a8275017e9863319265deec588bb25fc146f42ea781c581378b56cb0ae42c7a952be0c903d3a0f48886eb26d6204b60efdb4fe8ed65079d7f321db211d4591c18a46784e5174ac7f59e9b63bd6be7fbc55909cc879b4d9d6e68cbf09f5ab822d1b8c509d81dea1d3cafc2a8a4b1cfd34f8b08795bd05fc1bb1a7787531468aba46ac72055c5f820629c13459a70b0f8dab156dceb36b04514d22bff4aa664892b3d95773dd6c60966480393605723419cb9130c7e48c76f192e2ee3a3609444cee20ff7fa69895d068601a92314b87e93daf8d6ef0468eef558b796bb182094a204eaf7044e9b7243ffc4b3daaddf9f5dee1ae64d225504d5335d70e4b8fc5f22b5a5551807752ac3763f58e09b2bee9706e808db97492018f5d3cd01efab9c42e44011e395fb15bfa6f3d48a7aaf001e7a4313c84616ec6c6b6397523faaf55704abb8b512231ebc525d85db27d2d0045b0934c0279a3f3f541a43f40a1f95d873a8a20b3c8b5ae2e50b64e3a1068b1de9336a0dbd195ba94cbd9d95c56244afc002d835b7f23b2fc8affe9b231273f5cb8957adc955a54a42b3df27ff3bd0ce9e1a93cb9bb6b94f189b32d4a449938d24d60f14bd7f8f9e4f9efe22af361e11c170390bb38b0610a28e1f5ffeecea73f06f1f439d9fea70b0edf5dbc8309f1865a1879aae63e13d0fa6339bf7a85bdb8da62c1282988ea6a5bc10b4eeff9eaf95d8989275112080241cc7c5334257d3c0c4d59b5be321a1d28ad43f178b5d44c7a30348580e37d93e75a11671a01074d94c58cf9e439270dd93cbbecf167a053a026575a326ffd2c3dd52368f193ff4942d891173da042fe2d73c15ad2a3d62896c87cd33593ca50e4072dfb669e0ecdc924023c0cdc2d649b01659102babb70eb2473daeb1a1d2946383cdd126422fffa8e04d3d55616d3d7ac1c2e43f3b185d506e6ee8814b33d5b6613b0feaf129d86aa23f192925120b093a8d9cc71b5c422eae1cfecaac3f50e843aff28285a91a3acc095b8536208839e123b8aa91453b10b4d53bbdf276940678769cc11b407f329cce4af378c3590ee0ea0080d3997104d402e89bfec6aa391c77d8308c47b2a256e169e42a4eaf07c02859881149e3c8bf3f14a8e9b7b38badf8e7962f284dae9217b137038080c530b9371652156fd050976b00879245816e699e5e746810205f87dab80c233034c20b32de4be599e9459096ae9d8a6f3bb7d7418bc1345a92481f0653722278cb52627b52bcc52cee85d62ee67d79da1e3a90f8204a25fa227a9d449b2e0d363bc5b368d68d56cba86e02705c01c3cac355e9a5c44386219210860927b0af5e19ba7b5a95c374c27a65eeba641c0a2d6ffceb9427e5049fac3c6b265a73e8ecfe8e0912473245abf260740b86a50ed086c504362c905cde82be8e2ae0f8452a732e77b26d8fb96b030e28750432916e8bd39523a40df86f70198172682a3e55a86bcbade6524db7ebae1a6c7ff4dcdcbe67cf1543fc01a8f30c5cdeff29aaa5b957762976be84c9c549408b92640326c461386192f1efcb8be2e32fe9b72d4e56465d692d0e1a40b8b2d4a8fb38204ff80a055d8ab20cba6f749173c8506005336adf629ed098e76dda902d4e3ca09829e1d4128bd7861185be1429b1575b1d95dd09a7622574386f982db4447de1da987244dca8db118444c9e1dc747be49b06d8f303d326dcf2a95f53ef35dcceffc0e960e54b82a00702ae36ac8d4a55ca33b90d174fdef3b6e6e9db2cc83d085c60bc6f3f646721fe8c4fadd97cf3e2899249b9436144fdad3cf1a70f7614ddfb9bbe2e52a39758141d3217519a163d9aa919605c4ef040271d8d185c1e978b26a9485e4e239f7c7883f509afa2a08d06cdd21069a68937226dc8381ad165cda11e2ff44744c72dc7568394340465cd1217ae61b9352c62e4af8edb7f2eb061665ade1e9de574b0bca79a2cb8c349e7381010638d6ed495d579ae994a6d7003fbb33c527581c71e3789758bc730decd75d8d328ea64a13766622d2924a1439cec8c0f6b681bda359497f772d5c077ae26ac93a523189e64fad9d5508069fedb2042ee2a7ed517716f3ac865b75158559a423364c39210af8e8ce8dd1d29f7146404d4a12d5175d91631742e764ad5734422242535bccb22da5c8ebff9db30beb5df8bef7d96f7668fcdc30acec02562f7b60718c4261859d289fbfc8b6da433ad9784bd8841438ffc5378b372c0077479a4a26a958", 0x1000}], 0xa, &(0x7f0000003e00)=ANY=[@ANYBLOB="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"], 0x308}, 0x8000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000001880)=ANY=[@ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0x9}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1}}], 0x48}, 0x0) 0s ago: executing program 5 (id=3190): r0 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f8, &(0x7f0000001900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="184504006800000000000000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x64, 0x6, 0x548, 0x0, 0x0, 0x2a8, 0x2a8, 0x1b8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x5, 0x703}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7, 0x6, @ipv4=@local, 0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000280)=""/5, 0x0, 0x0, 0x10004, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x80ad}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) alarm(0x8) membarrier(0x10, 0x0) kernel console output (not intermixed with test programs): async page read [ 175.798787][T10233] lo speed is unknown, defaulting to 1000 [ 176.090528][T10259] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 176.098828][T10259] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 176.141542][T10264] loop3: detected capacity change from 0 to 128 [ 176.162287][T10267] validate_nla: 4 callbacks suppressed [ 176.162300][T10267] netlink: 'syz.6.2318': attribute type 10 has an invalid length. [ 176.175822][T10267] netlink: 'syz.6.2318': attribute type 19 has an invalid length. [ 176.235120][T10276] netlink: 'syz.0.2323': attribute type 10 has an invalid length. [ 176.243033][T10276] netlink: 'syz.0.2323': attribute type 19 has an invalid length. [ 176.305077][T10287] loop1: detected capacity change from 0 to 256 [ 176.312886][ T29] audit: type=1326 audit(1750045800.661:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09e929 code=0x7ffc0000 [ 176.336508][ T29] audit: type=1326 audit(1750045800.661:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f234b09e929 code=0x7ffc0000 [ 176.360101][ T29] audit: type=1326 audit(1750045800.661:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f234b09e929 code=0x7ffc0000 [ 176.380206][T10293] netlink: 'syz.0.2330': attribute type 10 has an invalid length. [ 176.384174][ T29] audit: type=1326 audit(1750045800.661:9425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f234b09e929 code=0x7ffc0000 [ 176.391550][T10293] netlink: 'syz.0.2330': attribute type 19 has an invalid length. [ 176.415117][ T29] audit: type=1326 audit(1750045800.661:9426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f234b09e963 code=0x7ffc0000 [ 176.442018][T10295] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 176.446043][ T29] audit: type=1326 audit(1750045800.661:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f234b09d3df code=0x7ffc0000 [ 176.454206][T10295] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 176.477557][ T29] audit: type=1326 audit(1750045800.661:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f234b09e9b7 code=0x7ffc0000 [ 176.509817][ T29] audit: type=1326 audit(1750045800.661:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10285 comm="syz.1.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f234b09d290 code=0x7ffc0000 [ 176.540050][T10287] loop1: detected capacity change from 0 to 256 [ 176.653029][T10280] lo speed is unknown, defaulting to 1000 [ 176.667366][T10304] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 176.840817][T10329] loop5: detected capacity change from 0 to 512 [ 176.998018][T10329] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2344: iget: bad i_size value: 38620345925642 [ 177.036212][T10329] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2344: couldn't read orphan inode 15 (err -117) [ 177.063575][T10329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.074231][T10344] loop6: detected capacity change from 0 to 256 [ 177.086991][T10344] loop6: detected capacity change from 0 to 256 [ 177.094699][ T1037] hid-generic 0000:0000:0000.0079: unknown main item tag 0x0 [ 177.102490][ T1037] hid-generic 0000:0000:0000.0079: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.298760][T10348] lo speed is unknown, defaulting to 1000 [ 177.758410][ T5442] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 177.805751][ T5442] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 177.818500][ T5442] EXT4-fs (loop5): This should not happen!! Data will be lost [ 177.818500][ T5442] [ 177.828390][ T5442] EXT4-fs (loop5): Total free blocks count 0 [ 177.834551][ T5442] EXT4-fs (loop5): Free/Dirty block details [ 177.840598][ T5442] EXT4-fs (loop5): free_blocks=0 [ 177.845599][ T5442] EXT4-fs (loop5): dirty_blocks=5480 [ 177.850900][ T5442] EXT4-fs (loop5): Block reservation details [ 177.856944][ T5442] EXT4-fs (loop5): i_reserved_data_blocks=5480 [ 177.887177][ T3384] hid-generic 0000:0000:0000.007A: unknown main item tag 0x0 [ 177.919584][ T3384] hid-generic 0000:0000:0000.007A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.944897][T10378] loop1: detected capacity change from 0 to 128 [ 177.986773][ T5468] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 178.226211][T10400] lo speed is unknown, defaulting to 1000 [ 178.390147][T10404] loop5: detected capacity change from 0 to 128 [ 178.429391][T10409] __nla_validate_parse: 10 callbacks suppressed [ 178.429407][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 178.566646][T10404] lo speed is unknown, defaulting to 1000 [ 178.575448][ T3368] hid-generic 0000:0000:0000.007B: unknown main item tag 0x0 [ 178.587883][T10419] loop3: detected capacity change from 0 to 1024 [ 178.594825][ T3368] hid-generic 0000:0000:0000.007B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 178.607823][T10419] EXT4-fs: dax option not supported [ 178.858182][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2373'. [ 178.883394][T10442] loop5: detected capacity change from 0 to 128 [ 178.933448][T10442] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.037433][T10447] lo speed is unknown, defaulting to 1000 [ 179.268149][T10442] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.463169][ T5442] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.529616][T10462] loop5: detected capacity change from 0 to 1024 [ 179.537324][ T3384] hid-generic 0000:0000:0000.007C: unknown main item tag 0x0 [ 179.545580][T10462] EXT4-fs: dax option not supported [ 179.554299][ T3384] hid-generic 0000:0000:0000.007C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 179.640960][T10472] loop3: detected capacity change from 0 to 512 [ 179.662993][T10472] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2392: iget: bad i_size value: 38620345925642 [ 179.701920][T10472] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2392: couldn't read orphan inode 15 (err -117) [ 179.729790][T10472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.854251][T10492] loop6: detected capacity change from 0 to 1024 [ 179.861957][T10492] EXT4-fs: dax option not supported [ 179.868040][ T3384] hid-generic 0000:0000:0000.007D: unknown main item tag 0x0 [ 179.887430][ T3384] hid-generic 0000:0000:0000.007D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.021756][T10483] lo speed is unknown, defaulting to 1000 [ 180.521232][T10523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2409'. [ 180.585146][T10521] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2411'. [ 180.622468][T10526] loop6: detected capacity change from 0 to 1024 [ 180.630008][ T3384] hid-generic 0000:0000:0000.007E: unknown main item tag 0x0 [ 180.638563][ T3384] hid-generic 0000:0000:0000.007E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.648867][T10521] gretap0: entered promiscuous mode [ 180.651269][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2413'. [ 180.670246][T10521] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2411'. [ 180.674610][T10526] EXT4-fs: dax option not supported [ 180.712476][T10521] 0ªX¹¦D: renamed from gretap0 [ 180.722322][T10521] 0ªX¹¦D: left promiscuous mode [ 180.725616][ T5442] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 180.727283][T10521] 0ªX¹¦D: entered allmulticast mode [ 180.750819][T10521] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 180.766779][ T5442] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 180.779405][ T5442] EXT4-fs (loop3): This should not happen!! Data will be lost [ 180.779405][ T5442] [ 180.789136][ T5442] EXT4-fs (loop3): Total free blocks count 0 [ 180.795196][ T5442] EXT4-fs (loop3): Free/Dirty block details [ 180.801209][ T5442] EXT4-fs (loop3): free_blocks=0 [ 180.806272][ T5442] EXT4-fs (loop3): dirty_blocks=11928 [ 180.811685][ T5442] EXT4-fs (loop3): Block reservation details [ 180.817780][ T5442] EXT4-fs (loop3): i_reserved_data_blocks=11928 [ 180.909674][ T5442] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 181.067931][T10545] loop3: detected capacity change from 0 to 512 [ 181.078832][T10545] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2415: iget: bad i_size value: 38620345925642 [ 181.101870][T10545] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2415: couldn't read orphan inode 15 (err -117) [ 181.115125][T10545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.218875][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 181.218902][ T29] audit: type=1326 audit(1750045805.581:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.219012][ T29] audit: type=1326 audit(1750045805.581:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.221132][ T29] audit: type=1326 audit(1750045805.581:9734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.298103][ T29] audit: type=1326 audit(1750045805.581:9735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.321731][ T29] audit: type=1326 audit(1750045805.581:9736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.345415][ T29] audit: type=1326 audit(1750045805.581:9737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.368965][ T29] audit: type=1326 audit(1750045805.581:9738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.392497][ T29] audit: type=1326 audit(1750045805.581:9739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.392535][ T29] audit: type=1326 audit(1750045805.581:9740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.392573][ T29] audit: type=1326 audit(1750045805.581:9741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10550 comm="syz.5.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 181.463166][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2424'. [ 181.481952][T10551] loop5: detected capacity change from 0 to 128 [ 181.482772][T10551] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.511490][T10551] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.531795][T10563] loop1: detected capacity change from 0 to 128 [ 181.553845][ T5472] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.576395][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.585220][T10563] bio_check_eod: 182 callbacks suppressed [ 181.585240][T10563] syz.1.2425: attempt to access beyond end of device [ 181.585240][T10563] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 181.604372][T10563] buffer_io_error: 182 callbacks suppressed [ 181.604388][T10563] Buffer I/O error on dev loop1, logical block 2065, async page read [ 181.618636][T10563] syz.1.2425: attempt to access beyond end of device [ 181.618636][T10563] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 181.631968][T10563] Buffer I/O error on dev loop1, logical block 2066, async page read [ 181.705747][T10575] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 181.714035][T10575] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 181.723327][T10563] syz.1.2425: attempt to access beyond end of device [ 181.723327][T10563] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 181.726802][ T10] hid-generic 0000:0000:0000.007F: unknown main item tag 0x0 [ 181.736668][T10563] Buffer I/O error on dev loop1, logical block 2067, async page read [ 181.745263][ T10] hid-generic 0000:0000:0000.007F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.762592][T10563] syz.1.2425: attempt to access beyond end of device [ 181.762592][T10563] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 181.776028][T10563] Buffer I/O error on dev loop1, logical block 2068, async page read [ 181.834498][T10563] syz.1.2425: attempt to access beyond end of device [ 181.834498][T10563] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 181.848037][T10563] Buffer I/O error on dev loop1, logical block 2069, async page read [ 181.856653][T10563] syz.1.2425: attempt to access beyond end of device [ 181.856653][T10563] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 181.870067][T10563] Buffer I/O error on dev loop1, logical block 2070, async page read [ 181.937471][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2431'. [ 181.950590][T10563] syz.1.2425: attempt to access beyond end of device [ 181.950590][T10563] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 181.963991][T10563] Buffer I/O error on dev loop1, logical block 2071, async page read [ 181.982604][T10563] syz.1.2425: attempt to access beyond end of device [ 181.982604][T10563] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 181.995899][T10563] Buffer I/O error on dev loop1, logical block 2072, async page read [ 182.005085][T10563] syz.1.2425: attempt to access beyond end of device [ 182.005085][T10563] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 182.018447][T10563] Buffer I/O error on dev loop1, logical block 2065, async page read [ 182.027144][T10563] syz.1.2425: attempt to access beyond end of device [ 182.027144][T10563] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 182.040488][T10563] Buffer I/O error on dev loop1, logical block 2066, async page read [ 182.084436][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2437'. [ 182.113411][T10602] loop6: detected capacity change from 0 to 128 [ 182.134868][T10602] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.178987][T10602] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.246417][T10585] lo speed is unknown, defaulting to 1000 [ 182.274252][ T5472] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.449549][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2443'. [ 182.497928][T10633] loop5: detected capacity change from 0 to 128 [ 182.916488][ T3368] hid-generic 0000:0000:0000.0080: unknown main item tag 0x0 [ 182.938791][T10660] loop5: detected capacity change from 0 to 1024 [ 182.946122][ T3368] hid-generic 0000:0000:0000.0080: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.961627][T10660] EXT4-fs: dax option not supported [ 183.134321][T10677] gretap0: entered promiscuous mode [ 183.160522][T10677] 0ªX¹¦D: renamed from gretap0 [ 183.163615][ T1037] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 183.176839][T10677] 0ªX¹¦D: left promiscuous mode [ 183.177769][T10692] loop3: detected capacity change from 0 to 1024 [ 183.181858][T10677] 0ªX¹¦D: entered allmulticast mode [ 183.189577][ T1037] hid-generic 0000:0000:0000.0081: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.203518][T10692] EXT4-fs: dax option not supported [ 183.212395][T10677] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 183.311051][T10706] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 183.319460][T10706] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 183.366593][T10710] loop3: detected capacity change from 0 to 512 [ 183.380781][T10710] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2482: iget: bad i_size value: 38620345925642 [ 183.413775][T10710] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2482: couldn't read orphan inode 15 (err -117) [ 183.449100][T10710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.502407][ T1037] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 183.510116][ T1037] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 183.521089][T10725] __nla_validate_parse: 6 callbacks suppressed [ 183.521106][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2478'. [ 183.524070][T10724] loop1: detected capacity change from 0 to 1024 [ 183.524518][T10724] EXT4-fs: dax option not supported [ 183.741945][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2490'. [ 183.782672][T10727] lo speed is unknown, defaulting to 1000 [ 183.851289][T10748] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 183.859598][T10748] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 184.264178][ T6503] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 184.271819][ T6503] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 184.277037][ T5468] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:37: bg 0: block 5: invalid block bitmap [ 184.277404][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 184.277428][ T5468] EXT4-fs (loop3): This should not happen!! Data will be lost [ 184.277428][ T5468] [ 184.277443][ T5468] EXT4-fs (loop3): Total free blocks count 0 [ 184.277493][ T5468] EXT4-fs (loop3): Free/Dirty block details [ 184.277507][ T5468] EXT4-fs (loop3): free_blocks=0 [ 184.277522][ T5468] EXT4-fs (loop3): dirty_blocks=14732 [ 184.277537][ T5468] EXT4-fs (loop3): Block reservation details [ 184.277566][ T5468] EXT4-fs (loop3): i_reserved_data_blocks=14732 [ 184.302732][T10758] loop5: detected capacity change from 0 to 1024 [ 184.303239][T10758] EXT4-fs: dax option not supported [ 184.306641][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 184.643379][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2503'. [ 184.662582][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2498'. [ 184.919702][ T1037] hid-generic 0000:0000:0000.0084: unknown main item tag 0x0 [ 184.927659][ T1037] hid-generic 0000:0000:0000.0084: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.059021][T10810] loop6: detected capacity change from 0 to 512 [ 185.094276][T10810] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.2516: iget: bad i_size value: 38620345925642 [ 185.114589][T10810] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2516: couldn't read orphan inode 15 (err -117) [ 185.115262][T10810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.399240][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2522'. [ 185.489479][T10848] loop5: detected capacity change from 0 to 128 [ 185.761089][T10836] lo speed is unknown, defaulting to 1000 [ 185.776486][T10855] Process accounting resumed [ 186.222448][ T5449] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 186.243132][ T5449] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 186.243171][ T5449] EXT4-fs (loop6): This should not happen!! Data will be lost [ 186.243171][ T5449] [ 186.243186][ T5449] EXT4-fs (loop6): Total free blocks count 0 [ 186.243199][ T5449] EXT4-fs (loop6): Free/Dirty block details [ 186.243241][ T5449] EXT4-fs (loop6): free_blocks=0 [ 186.243251][ T5449] EXT4-fs (loop6): dirty_blocks=10304 [ 186.243281][ T5449] EXT4-fs (loop6): Block reservation details [ 186.243291][ T5449] EXT4-fs (loop6): i_reserved_data_blocks=10304 [ 186.288153][ T5449] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 186.336263][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 186.336277][ T29] audit: type=1326 audit(1750045810.701:9982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.385906][ T29] audit: type=1326 audit(1750045810.721:9983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.409522][ T29] audit: type=1326 audit(1750045810.731:9984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.433099][ T29] audit: type=1326 audit(1750045810.731:9985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.456591][ T29] audit: type=1326 audit(1750045810.731:9986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.480140][ T29] audit: type=1326 audit(1750045810.731:9987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.503702][ T29] audit: type=1326 audit(1750045810.731:9988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.527273][ T29] audit: type=1326 audit(1750045810.731:9989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.537716][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2539'. [ 186.550751][ T29] audit: type=1326 audit(1750045810.741:9990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.550790][ T29] audit: type=1326 audit(1750045810.741:9991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10867 comm="syz.0.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 186.584787][T10875] loop0: detected capacity change from 0 to 128 [ 186.635621][T10875] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.648320][T10875] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.720076][T10885] loop5: detected capacity change from 0 to 256 [ 186.743416][ T10] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 186.752445][ T10] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 186.767927][T10891] loop6: detected capacity change from 0 to 1024 [ 186.775113][T10885] loop5: detected capacity change from 0 to 256 [ 186.784161][ T3368] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 186.787002][T10894] loop0: detected capacity change from 0 to 128 [ 186.798503][ T3368] hid-generic 0000:0000:0000.0086: hidraw1: HID v0.00 Device [syz1] on syz0 [ 186.799635][T10891] EXT4-fs: dax option not supported [ 186.820312][T10894] bio_check_eod: 118 callbacks suppressed [ 186.820418][T10894] syz.0.2547: attempt to access beyond end of device [ 186.820418][T10894] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 186.839511][T10894] buffer_io_error: 118 callbacks suppressed [ 186.839527][T10894] Buffer I/O error on dev loop0, logical block 2065, async page read [ 186.855598][T10894] syz.0.2547: attempt to access beyond end of device [ 186.855598][T10894] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 186.868927][T10894] Buffer I/O error on dev loop0, logical block 2066, async page read [ 186.883128][T10894] syz.0.2547: attempt to access beyond end of device [ 186.883128][T10894] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 186.896498][T10894] Buffer I/O error on dev loop0, logical block 2067, async page read [ 186.905538][T10894] syz.0.2547: attempt to access beyond end of device [ 186.905538][T10894] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 186.918817][T10894] Buffer I/O error on dev loop0, logical block 2068, async page read [ 186.929374][T10894] syz.0.2547: attempt to access beyond end of device [ 186.929374][T10894] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 186.942690][T10894] Buffer I/O error on dev loop0, logical block 2069, async page read [ 186.955852][T10894] syz.0.2547: attempt to access beyond end of device [ 186.955852][T10894] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 186.969237][T10894] Buffer I/O error on dev loop0, logical block 2070, async page read [ 186.995198][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2549'. [ 187.042206][T10894] syz.0.2547: attempt to access beyond end of device [ 187.042206][T10894] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 187.055636][T10894] Buffer I/O error on dev loop0, logical block 2071, async page read [ 187.065968][T10894] syz.0.2547: attempt to access beyond end of device [ 187.065968][T10894] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 187.079248][T10894] Buffer I/O error on dev loop0, logical block 2072, async page read [ 187.095032][T10897] syz.0.2547: attempt to access beyond end of device [ 187.095032][T10897] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 187.108354][T10897] Buffer I/O error on dev loop0, logical block 2065, async page read [ 187.125253][T10897] syz.0.2547: attempt to access beyond end of device [ 187.125253][T10897] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 187.138603][T10897] Buffer I/O error on dev loop0, logical block 2066, async page read [ 187.251522][T10925] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2552'. [ 187.266274][T10924] netlink: 'syz.0.2558': attribute type 29 has an invalid length. [ 187.296072][ T6503] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 187.296418][ T6503] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.310014][T10927] loop5: detected capacity change from 0 to 1024 [ 187.310537][T10927] EXT4-fs: dax option not supported [ 187.717691][T10948] loop5: detected capacity change from 0 to 128 [ 187.827072][T10956] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 187.827159][T10956] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 187.897345][ T6503] hid-generic 0000:0000:0000.0088: unknown main item tag 0x0 [ 187.903468][T10963] loop5: detected capacity change from 0 to 1024 [ 187.911687][ T6503] hid-generic 0000:0000:0000.0088: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.912519][T10963] EXT4-fs: dax option not supported [ 187.938860][T10964] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2576'. [ 187.949333][T10964] 0ªX¹¦D: entered promiscuous mode [ 187.949357][T10964] 0ªX¹¦D: left allmulticast mode [ 187.975999][T10964] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2576'. [ 187.976123][T10964] 1ªX¹¦D: renamed from 30ªX¹¦D [ 187.977640][T10964] 1ªX¹¦D: left promiscuous mode [ 187.977658][T10964] 1ªX¹¦D: entered allmulticast mode [ 187.979465][T10964] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 188.154556][T10979] loop3: detected capacity change from 0 to 8192 [ 188.485458][ T6503] hid-generic 0000:0000:0000.0089: unknown main item tag 0x0 [ 188.494385][ T6503] hid-generic 0000:0000:0000.0089: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.513198][T11004] loop5: detected capacity change from 0 to 1024 [ 188.521160][T11004] EXT4-fs: dax option not supported [ 188.607655][T10997] lo speed is unknown, defaulting to 1000 [ 188.750619][T11017] __nla_validate_parse: 2 callbacks suppressed [ 188.750634][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2589'. [ 189.224143][ T10] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 189.257631][ T10] hid-generic 0000:0000:0000.008A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.288219][T11026] loop3: detected capacity change from 0 to 256 [ 189.308208][T11026] loop3: detected capacity change from 0 to 256 [ 189.405564][T11037] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2600'. [ 189.425193][T11037] 1ªX¹¦D: entered promiscuous mode [ 189.430489][T11037] 1ªX¹¦D: left allmulticast mode [ 189.456594][T11037] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2600'. [ 189.475100][T11037] 0ªX¹¦D: renamed from 31ªX¹¦D [ 189.482537][T11037] 0ªX¹¦D: left promiscuous mode [ 189.487482][T11037] 0ªX¹¦D: entered allmulticast mode [ 189.497043][T11037] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 189.518383][ T6503] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 189.532323][T11043] loop3: detected capacity change from 0 to 1024 [ 189.549228][ T6503] hid-generic 0000:0000:0000.008B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 189.565564][T11043] EXT4-fs: dax option not supported [ 189.868120][T11064] loop3: detected capacity change from 0 to 128 [ 189.895397][T11045] lo speed is unknown, defaulting to 1000 [ 190.063673][T11072] loop3: detected capacity change from 0 to 256 [ 190.131499][T11076] netlink: 'syz.1.2615': attribute type 10 has an invalid length. [ 190.139482][T11076] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2615'. [ 190.186483][T11072] loop3: detected capacity change from 0 to 256 [ 190.336106][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2616'. [ 190.421315][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2619'. [ 190.623346][T11096] lo speed is unknown, defaulting to 1000 [ 190.663733][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2621'. [ 190.722438][T11104] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2622'. [ 190.731541][T11104] 0ªX¹¦D: entered promiscuous mode [ 190.731561][T11104] 0ªX¹¦D: left allmulticast mode [ 190.756400][T11108] loop3: detected capacity change from 0 to 128 [ 191.251604][T11132] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2629'. [ 191.262550][T11134] loop5: detected capacity change from 0 to 256 [ 191.273086][T11134] loop5: detected capacity change from 0 to 256 [ 191.336775][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2631'. [ 191.361361][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 191.361376][ T29] audit: type=1326 audit(1750045815.721:10654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.411335][ T29] audit: type=1326 audit(1750045815.721:10655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.435113][ T29] audit: type=1326 audit(1750045815.771:10656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.459001][ T29] audit: type=1326 audit(1750045815.771:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.482858][ T29] audit: type=1326 audit(1750045815.771:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.507272][ T29] audit: type=1326 audit(1750045815.771:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.530995][ T29] audit: type=1326 audit(1750045815.771:10660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.554866][ T29] audit: type=1326 audit(1750045815.771:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.590908][T11157] loop5: detected capacity change from 0 to 1024 [ 191.610242][T11157] EXT4-fs: dax option not supported [ 191.634531][ T29] audit: type=1326 audit(1750045815.871:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.658299][ T29] audit: type=1326 audit(1750045815.961:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11147 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4cf4ae929 code=0x7ffc0000 [ 191.986060][T11197] loop5: detected capacity change from 0 to 128 [ 192.003393][T11196] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.011452][T11196] FAT-fs (loop5): Filesystem has been set read-only [ 192.018355][T11196] bio_check_eod: 134 callbacks suppressed [ 192.018370][T11196] syz.5.2659: attempt to access beyond end of device [ 192.018370][T11196] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 192.038195][T11196] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.046160][T11196] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.055565][T11197] syz.5.2659: attempt to access beyond end of device [ 192.055565][T11197] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 192.087196][T11199] loop0: detected capacity change from 0 to 1024 [ 192.094096][T11199] EXT4-fs: dax option not supported [ 192.134132][T11197] syz.5.2659: attempt to access beyond end of device [ 192.134132][T11197] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 192.165578][T11202] lo speed is unknown, defaulting to 1000 [ 192.548492][ T10] hid-generic 0000:0000:0000.008C: unknown main item tag 0x0 [ 192.556372][ T10] hid-generic 0000:0000:0000.008C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.725096][T11237] loop3: detected capacity change from 0 to 1024 [ 192.738949][T11237] EXT4-fs: dax option not supported [ 192.834319][T11242] loop5: detected capacity change from 0 to 128 [ 192.847000][T11241] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.854863][T11241] FAT-fs (loop5): Filesystem has been set read-only [ 192.861622][T11241] syz.5.2676: attempt to access beyond end of device [ 192.861622][T11241] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 192.886359][T11241] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.894262][T11241] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 192.905945][T11242] syz.5.2676: attempt to access beyond end of device [ 192.905945][T11242] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 192.933905][T11242] syz.5.2676: attempt to access beyond end of device [ 192.933905][T11242] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 193.025715][T11252] loop1: detected capacity change from 0 to 128 [ 193.064618][T11252] syz.1.2679: attempt to access beyond end of device [ 193.064618][T11252] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 193.077978][T11252] buffer_io_error: 134 callbacks suppressed [ 193.077995][T11252] Buffer I/O error on dev loop1, logical block 2065, async page read [ 193.103878][T11252] syz.1.2679: attempt to access beyond end of device [ 193.103878][T11252] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 193.104154][T11262] loop5: detected capacity change from 0 to 1024 [ 193.117378][T11252] Buffer I/O error on dev loop1, logical block 2066, async page read [ 193.148481][T11252] syz.1.2679: attempt to access beyond end of device [ 193.148481][T11252] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 193.155668][T11262] EXT4-fs: dax option not supported [ 193.161759][T11252] Buffer I/O error on dev loop1, logical block 2067, async page read [ 193.175810][T11252] syz.1.2679: attempt to access beyond end of device [ 193.175810][T11252] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 193.189125][T11252] Buffer I/O error on dev loop1, logical block 2068, async page read [ 193.199566][T11252] Buffer I/O error on dev loop1, logical block 2069, async page read [ 193.208881][T11252] Buffer I/O error on dev loop1, logical block 2070, async page read [ 193.221827][T11252] Buffer I/O error on dev loop1, logical block 2071, async page read [ 193.230970][T11252] Buffer I/O error on dev loop1, logical block 2072, async page read [ 193.240727][T11264] Buffer I/O error on dev loop1, logical block 2065, async page read [ 193.261424][T11268] loop0: detected capacity change from 0 to 256 [ 193.281929][T11268] loop0: detected capacity change from 0 to 256 [ 193.283571][T11264] Buffer I/O error on dev loop1, logical block 2066, async page read [ 193.354014][T11280] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 193.354514][T11279] loop3: detected capacity change from 0 to 128 [ 193.362304][T11280] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 193.371886][T11277] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 193.385027][T11277] FAT-fs (loop3): Filesystem has been set read-only [ 193.393095][T11277] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 193.401096][T11277] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 193.542403][T11297] loop3: detected capacity change from 0 to 1024 [ 193.550170][T11297] EXT4-fs: dax option not supported [ 193.595975][ T10] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 193.614766][ T10] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.711615][T11305] kernel read not supported for file /policy (pid: 11305 comm: syz.6.2701) [ 193.923880][T11326] __nla_validate_parse: 4 callbacks suppressed [ 193.923898][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 194.133877][T11351] loop0: detected capacity change from 0 to 512 [ 194.185765][T11351] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2722: iget: bad i_size value: 38620345925642 [ 194.211649][T11351] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2722: couldn't read orphan inode 15 (err -117) [ 194.247314][T11351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.406293][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2729'. [ 194.431777][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2723'. [ 194.457594][T11375] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2729'. [ 194.496278][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2728'. [ 194.682664][ T10] hid-generic 0000:0000:0000.008E: unknown main item tag 0x0 [ 194.690441][ T10] hid-generic 0000:0000:0000.008E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.831736][T11403] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2736'. [ 194.951765][ T5442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 195.028294][ T5442] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 195.040982][ T5442] EXT4-fs (loop0): This should not happen!! Data will be lost [ 195.040982][ T5442] [ 195.050681][ T5442] EXT4-fs (loop0): Total free blocks count 0 [ 195.056717][ T5442] EXT4-fs (loop0): Free/Dirty block details [ 195.062635][ T5442] EXT4-fs (loop0): free_blocks=0 [ 195.067635][ T5442] EXT4-fs (loop0): dirty_blocks=16032 [ 195.073033][ T5442] EXT4-fs (loop0): Block reservation details [ 195.079110][ T5442] EXT4-fs (loop0): i_reserved_data_blocks=16032 [ 195.109406][ T5449] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 195.200021][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2742'. [ 195.337912][T11430] loop3: detected capacity change from 0 to 512 [ 195.393236][T11440] bridge_slave_0: left allmulticast mode [ 195.399235][T11440] bridge_slave_0: left promiscuous mode [ 195.405039][T11440] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.413568][T11430] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2747: iget: bad i_size value: 38620345925642 [ 195.449727][T11430] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2747: couldn't read orphan inode 15 (err -117) [ 195.469730][T11444] netlink: 'syz.5.2753': attribute type 21 has an invalid length. [ 195.477710][T11444] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.488052][T11430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.488857][T11440] bridge_slave_1: left allmulticast mode [ 195.506407][T11440] bridge_slave_1: left promiscuous mode [ 195.512196][T11440] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.518655][T11444] FAULT_INJECTION: forcing a failure. [ 195.518655][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 195.531998][T11444] CPU: 1 UID: 0 PID: 11444 Comm: syz.5.2753 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 195.532031][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 195.532044][T11444] Call Trace: [ 195.532051][T11444] [ 195.532057][T11444] __dump_stack+0x1d/0x30 [ 195.532076][T11444] dump_stack_lvl+0xe8/0x140 [ 195.532153][T11444] dump_stack+0x15/0x1b [ 195.532213][T11444] should_fail_ex+0x265/0x280 [ 195.532253][T11444] should_failslab+0x8c/0xb0 [ 195.532281][T11444] __kmalloc_noprof+0xa5/0x3e0 [ 195.532310][T11444] ? fib6_info_alloc+0x2e/0x90 [ 195.532401][T11444] fib6_info_alloc+0x2e/0x90 [ 195.532434][T11444] ip6_route_info_create+0xe7/0x390 [ 195.532462][T11444] ip6_route_add+0x49/0x170 [ 195.532485][T11444] inet6_rtm_newroute+0x112/0x1020 [ 195.532514][T11444] ? strlen+0x19/0x40 [ 195.532551][T11444] ? __memcg_slab_free_hook+0x135/0x230 [ 195.532652][T11444] ? security_capable+0x83/0x90 [ 195.532680][T11444] ? ns_capable+0x7d/0xb0 [ 195.532700][T11444] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 195.532812][T11444] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 195.532839][T11444] netlink_rcv_skb+0x123/0x220 [ 195.532894][T11444] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.532935][T11444] rtnetlink_rcv+0x1c/0x30 [ 195.532957][T11444] netlink_unicast+0x59e/0x670 [ 195.532993][T11444] netlink_sendmsg+0x58b/0x6b0 [ 195.533088][T11444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.533108][T11444] __sock_sendmsg+0x142/0x180 [ 195.533145][T11444] ____sys_sendmsg+0x31e/0x4e0 [ 195.533221][T11444] ___sys_sendmsg+0x17b/0x1d0 [ 195.533252][T11444] __x64_sys_sendmsg+0xd4/0x160 [ 195.533276][T11444] x64_sys_call+0x2999/0x2fb0 [ 195.533301][T11444] do_syscall_64+0xd2/0x200 [ 195.533322][T11444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 195.533363][T11444] ? clear_bhb_loop+0x40/0x90 [ 195.533388][T11444] ? clear_bhb_loop+0x40/0x90 [ 195.533449][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.533475][T11444] RIP: 0033:0x7fdda8cae929 [ 195.533494][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.533640][T11444] RSP: 002b:00007fdda72f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.533664][T11444] RAX: ffffffffffffffda RBX: 00007fdda8ed6080 RCX: 00007fdda8cae929 [ 195.533680][T11444] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 195.533770][T11444] RBP: 00007fdda72f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.533782][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.533793][T11444] R13: 0000000000000000 R14: 00007fdda8ed6080 R15: 00007fff06a8cfc8 [ 195.533813][T11444] [ 195.573832][T11449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2754'. [ 195.574320][T11440] bond0: (slave bond_slave_0): Releasing backup interface [ 195.691838][ T3384] hid-generic 0000:0000:0000.008F: unknown main item tag 0x0 [ 195.754249][T11456] loop0: detected capacity change from 0 to 256 [ 195.785444][ T3384] hid-generic 0000:0000:0000.008F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.790273][T11456] FAT-fs (loop0): bogus number of FAT sectors [ 195.805383][T11440] bond0: (slave bond_slave_1): Releasing backup interface [ 195.805883][T11456] FAT-fs (loop0): Can't find a valid FAT filesystem [ 195.878315][T11440] team0: Port device team_slave_0 removed [ 195.881111][T11440] team0: Port device team_slave_1 removed [ 196.292203][ T5439] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 196.306431][ T5439] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 196.319130][ T5439] EXT4-fs (loop3): This should not happen!! Data will be lost [ 196.319130][ T5439] [ 196.328890][ T5439] EXT4-fs (loop3): Total free blocks count 0 [ 196.335042][ T5439] EXT4-fs (loop3): Free/Dirty block details [ 196.341030][ T5439] EXT4-fs (loop3): free_blocks=0 [ 196.346098][ T5439] EXT4-fs (loop3): dirty_blocks=11304 [ 196.351500][ T5439] EXT4-fs (loop3): Block reservation details [ 196.357524][ T5439] EXT4-fs (loop3): i_reserved_data_blocks=11304 [ 196.369864][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2758'. [ 196.391601][ T5439] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 196.690650][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2770'. [ 196.755200][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 196.755217][ T29] audit: type=1326 audit(1750045821.121:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 196.787652][T11507] loop5: detected capacity change from 0 to 256 [ 196.810623][T11507] loop5: detected capacity change from 0 to 256 [ 196.819619][T11513] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 196.827957][T11513] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 196.836604][ T29] audit: type=1326 audit(1750045821.151:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 196.860349][ T29] audit: type=1326 audit(1750045821.151:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 196.884020][ T29] audit: type=1326 audit(1750045821.151:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdda8cae929 code=0x7ffc0000 [ 196.907654][ T29] audit: type=1326 audit(1750045821.151:11041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdda8cae963 code=0x7ffc0000 [ 196.931186][ T29] audit: type=1326 audit(1750045821.151:11042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdda8cad3df code=0x7ffc0000 [ 196.954924][ T29] audit: type=1326 audit(1750045821.151:11043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdda8cae9b7 code=0x7ffc0000 [ 196.978528][ T29] audit: type=1326 audit(1750045821.151:11044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdda8cad290 code=0x7ffc0000 [ 197.002676][ T29] audit: type=1326 audit(1750045821.151:11045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdda8cae52b code=0x7ffc0000 [ 197.026329][ T29] audit: type=1326 audit(1750045821.151:11046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11506 comm="syz.5.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdda8cad58a code=0x7ffc0000 [ 197.406410][T11554] loop5: detected capacity change from 0 to 128 [ 197.525868][T11557] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 197.603782][T11561] lo speed is unknown, defaulting to 1000 [ 197.669561][T11557] SELinux: failed to load policy [ 197.880585][T11569] lo speed is unknown, defaulting to 1000 [ 197.928733][T11574] loop1: detected capacity change from 0 to 256 [ 197.972984][T11574] loop1: detected capacity change from 0 to 256 [ 198.032470][ T5472] bio_check_eod: 47 callbacks suppressed [ 198.032489][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.032489][ T5472] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 198.066767][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.066767][ T5472] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 198.081015][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.081015][ T5472] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 198.094665][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.094665][ T5472] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 198.153740][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.153740][ T5472] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 198.181572][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.181572][ T5472] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 198.230432][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.230432][ T5472] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 198.250125][T11581] loop1: detected capacity change from 0 to 256 [ 198.265835][T11581] FAT-fs (loop1): bogus number of FAT sectors [ 198.271946][T11581] FAT-fs (loop1): Can't find a valid FAT filesystem [ 198.294904][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.294904][ T5472] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 198.335165][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.335165][ T5472] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 198.376302][ T5472] kworker/u8:41: attempt to access beyond end of device [ 198.376302][ T5472] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 198.499813][T11596] loop5: detected capacity change from 0 to 1024 [ 198.512348][T11596] EXT4-fs: dax option not supported [ 198.614142][T11605] loop3: detected capacity change from 0 to 512 [ 198.623610][T11605] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2807: iget: bad i_size value: 38620345925642 [ 198.637183][T11605] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2807: couldn't read orphan inode 15 (err -117) [ 198.651222][T11605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.962797][T11624] lo speed is unknown, defaulting to 1000 [ 199.377987][ T5487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:54: bg 0: block 5: invalid block bitmap [ 199.408841][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 199.421523][ T5487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 199.421523][ T5487] [ 199.431432][ T5487] EXT4-fs (loop3): Total free blocks count 0 [ 199.437675][ T5487] EXT4-fs (loop3): Free/Dirty block details [ 199.443602][ T5487] EXT4-fs (loop3): free_blocks=0 [ 199.448580][ T5487] EXT4-fs (loop3): dirty_blocks=16012 [ 199.454047][ T5487] EXT4-fs (loop3): Block reservation details [ 199.460109][ T5487] EXT4-fs (loop3): i_reserved_data_blocks=16012 [ 199.477915][T11639] loop6: detected capacity change from 0 to 256 [ 199.487573][T11639] FAT-fs (loop6): bogus number of FAT sectors [ 199.493705][T11639] FAT-fs (loop6): Can't find a valid FAT filesystem [ 199.512773][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 199.600235][T11650] __nla_validate_parse: 4 callbacks suppressed [ 199.600255][T11650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2819'. [ 199.906069][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2832'. [ 199.942871][T11684] loop6: detected capacity change from 0 to 1024 [ 199.949635][T11684] EXT4-fs: dax option not supported [ 200.034424][T11686] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 200.042702][T11686] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 200.150767][T11675] lo speed is unknown, defaulting to 1000 [ 200.497505][T11707] loop0: detected capacity change from 0 to 128 [ 200.655062][T11710] SELinux: policydb magic number 0x6d656d6b does not match expected magic number 0xf97cff8c [ 200.715860][T11710] SELinux: failed to load policy [ 200.896056][T11702] lo speed is unknown, defaulting to 1000 [ 201.032996][T11723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2846'. [ 201.124936][T11727] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 201.133324][T11727] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 201.176868][T11729] loop0: detected capacity change from 0 to 1024 [ 201.190909][T11731] loop3: detected capacity change from 0 to 256 [ 201.200239][T11731] loop3: detected capacity change from 0 to 256 [ 201.202415][T11729] EXT4-fs: dax option not supported [ 201.487570][T11747] loop3: detected capacity change from 0 to 1024 [ 201.494335][T11747] EXT4-fs: dax option not supported [ 201.506638][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2852'. [ 201.658347][T11761] loop6: detected capacity change from 0 to 128 [ 201.705170][T11761] buffer_io_error: 38 callbacks suppressed [ 201.705184][T11761] Buffer I/O error on dev loop6, logical block 2065, async page read [ 201.722082][T11768] loop1: detected capacity change from 0 to 256 [ 201.727212][T11761] Buffer I/O error on dev loop6, logical block 2066, async page read [ 201.731977][T11768] loop1: detected capacity change from 0 to 256 [ 201.745114][T11761] Buffer I/O error on dev loop6, logical block 2067, async page read [ 201.763087][T11761] Buffer I/O error on dev loop6, logical block 2068, async page read [ 201.774246][T11761] Buffer I/O error on dev loop6, logical block 2069, async page read [ 201.793822][T11761] Buffer I/O error on dev loop6, logical block 2070, async page read [ 201.811012][T11761] Buffer I/O error on dev loop6, logical block 2071, async page read [ 201.819205][T11761] Buffer I/O error on dev loop6, logical block 2072, async page read [ 201.827446][T11771] Buffer I/O error on dev loop6, logical block 2065, async page read [ 201.836530][T11771] Buffer I/O error on dev loop6, logical block 2066, async page read [ 201.894043][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 201.894057][ T29] audit: type=1326 audit(1750045826.251:11274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 201.927831][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2867'. [ 201.989639][ T29] audit: type=1326 audit(1750045826.281:11275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.013339][ T29] audit: type=1326 audit(1750045826.281:11276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.036975][ T29] audit: type=1326 audit(1750045826.291:11277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.042171][T11793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2870'. [ 202.060626][ T29] audit: type=1326 audit(1750045826.291:11278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.060659][ T29] audit: type=1326 audit(1750045826.291:11279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.060691][ T29] audit: type=1326 audit(1750045826.291:11280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.060718][ T29] audit: type=1326 audit(1750045826.291:11281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.164473][ T29] audit: type=1326 audit(1750045826.291:11282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.188117][ T29] audit: type=1326 audit(1750045826.291:11283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.6.2869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f7680e8e929 code=0x7ffc0000 [ 202.669919][T11804] lo speed is unknown, defaulting to 1000 [ 202.789434][T11816] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 202.797751][T11816] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 202.937742][T11818] loop5: detected capacity change from 0 to 256 [ 202.960669][T11818] loop5: detected capacity change from 0 to 256 [ 203.010520][T11824] loop3: detected capacity change from 0 to 256 [ 203.018818][T11824] FAT-fs (loop3): bogus number of FAT sectors [ 203.025281][T11824] FAT-fs (loop3): Can't find a valid FAT filesystem [ 203.054555][T11827] loop6: detected capacity change from 0 to 128 [ 203.076371][T11827] bio_check_eod: 264 callbacks suppressed [ 203.076388][T11827] syz.6.2886: attempt to access beyond end of device [ 203.076388][T11827] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 203.097987][T11827] syz.6.2886: attempt to access beyond end of device [ 203.097987][T11827] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 203.122276][T11827] syz.6.2886: attempt to access beyond end of device [ 203.122276][T11827] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 203.137237][T11827] syz.6.2886: attempt to access beyond end of device [ 203.137237][T11827] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 203.180947][T11827] syz.6.2886: attempt to access beyond end of device [ 203.180947][T11827] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 203.194424][T11827] syz.6.2886: attempt to access beyond end of device [ 203.194424][T11827] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 203.208745][T11827] syz.6.2886: attempt to access beyond end of device [ 203.208745][T11827] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 203.224826][T11844] loop3: detected capacity change from 0 to 512 [ 203.233174][T11827] syz.6.2886: attempt to access beyond end of device [ 203.233174][T11827] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 203.246631][T11834] syz.6.2886: attempt to access beyond end of device [ 203.246631][T11834] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 203.255466][T11844] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2895: iget: bad i_size value: 38620345925642 [ 203.260042][T11834] syz.6.2886: attempt to access beyond end of device [ 203.260042][T11834] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 203.298543][T11844] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2895: couldn't read orphan inode 15 (err -117) [ 203.311410][T11844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.467191][T11858] loop1: detected capacity change from 0 to 256 [ 203.482970][T11860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2898'. [ 203.505049][T11848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 203.516442][T11858] FAT-fs (loop1): bogus number of FAT sectors [ 203.523664][T11858] FAT-fs (loop1): Can't find a valid FAT filesystem [ 203.529530][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 203.542855][ T5487] EXT4-fs (loop3): This should not happen!! Data will be lost [ 203.542855][ T5487] [ 203.552531][ T5487] EXT4-fs (loop3): Total free blocks count 0 [ 203.558630][ T5487] EXT4-fs (loop3): Free/Dirty block details [ 203.564535][ T5487] EXT4-fs (loop3): free_blocks=0 [ 203.569549][ T5487] EXT4-fs (loop3): dirty_blocks=3092 [ 203.574853][ T5487] EXT4-fs (loop3): Block reservation details [ 203.580922][ T5487] EXT4-fs (loop3): i_reserved_data_blocks=3092 [ 203.626984][ T5487] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 1040 with error 28 [ 203.717150][T11871] loop0: detected capacity change from 0 to 256 [ 203.729150][T11871] loop0: detected capacity change from 0 to 256 [ 204.327664][ T3384] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 204.335509][ T3384] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz1] on syz0 [ 204.787639][ T5487] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.943389][T11926] lo speed is unknown, defaulting to 1000 [ 204.967609][ T5487] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.342629][T11954] lo speed is unknown, defaulting to 1000 [ 205.407984][ T5487] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.439159][T11963] loop6: detected capacity change from 0 to 128 [ 205.448875][ T5487] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.469009][T11926] chnl_net:caif_netlink_parms(): no params data found [ 205.510622][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 205.524583][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.531819][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.539549][T11926] bridge_slave_0: entered allmulticast mode [ 205.546620][T11926] bridge_slave_0: entered promiscuous mode [ 205.559257][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.566585][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.574482][T11926] bridge_slave_1: entered allmulticast mode [ 205.585749][T11926] bridge_slave_1: entered promiscuous mode [ 205.736799][ T5487]  (unregistering): Released all slaves [ 205.753022][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.765775][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.789916][ T5487] tipc: Left network mode [ 205.795348][T11926] team0: Port device team_slave_0 added [ 205.803123][T11926] team0: Port device team_slave_1 added [ 205.813051][ T5487] hsr_slave_0: left promiscuous mode [ 205.822716][ T5487] veth1_macvtap: left promiscuous mode [ 205.828360][ T5487] veth0_macvtap: left promiscuous mode [ 205.835767][ T5487] veth1_vlan: left promiscuous mode [ 205.841131][ T5487] veth0_vlan: left promiscuous mode [ 205.847209][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2939'. [ 205.887757][T11991] loop6: detected capacity change from 0 to 1024 [ 205.894676][T11991] EXT4-fs: dax option not supported [ 205.991096][ T1037] lo speed is unknown, defaulting to 1000 [ 205.997006][ T1037] infiniband syz0: ib_query_port failed (-19) [ 205.997667][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.010150][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.036173][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.047612][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.054836][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.061501][T11996] loop6: detected capacity change from 0 to 128 [ 206.080921][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.122143][T11926] hsr_slave_0: entered promiscuous mode [ 206.129125][T11926] hsr_slave_1: entered promiscuous mode [ 206.134997][T11926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.142866][T11926] Cannot create hsr debugfs directory [ 206.168515][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2946'. [ 206.309499][ T5487] IPVS: stop unused estimator thread 0... [ 206.402372][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2952'. [ 206.485997][T12029] loop5: detected capacity change from 0 to 128 [ 206.569591][T11926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.607623][T11926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.631276][T11926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.656804][T11926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.800394][T11926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.823162][T11926] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.847957][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.855137][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.913695][T11926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.924218][T11926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.941635][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.948806][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.091809][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2964'. [ 207.169890][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.188383][T12076] loop5: detected capacity change from 0 to 128 [ 207.207747][T12076] buffer_io_error: 230 callbacks suppressed [ 207.207762][T12076] Buffer I/O error on dev loop5, logical block 2065, async page read [ 207.227279][T12076] Buffer I/O error on dev loop5, logical block 2066, async page read [ 207.242724][T12076] Buffer I/O error on dev loop5, logical block 2067, async page read [ 207.266666][T12076] Buffer I/O error on dev loop5, logical block 2068, async page read [ 207.275541][T12076] Buffer I/O error on dev loop5, logical block 2069, async page read [ 207.295152][T12076] Buffer I/O error on dev loop5, logical block 2070, async page read [ 207.303520][T12076] Buffer I/O error on dev loop5, logical block 2071, async page read [ 207.312043][T12076] Buffer I/O error on dev loop5, logical block 2072, async page read [ 207.325064][T12081] Buffer I/O error on dev loop5, logical block 2065, async page read [ 207.333174][T12081] Buffer I/O error on dev loop5, logical block 2066, async page read [ 207.521398][T11926] veth0_vlan: entered promiscuous mode [ 207.540492][T11926] veth1_vlan: entered promiscuous mode [ 207.565212][T11926] veth0_macvtap: entered promiscuous mode [ 207.588168][T11926] veth1_macvtap: entered promiscuous mode [ 207.611964][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.639899][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.661990][T11926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.670880][T11926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.679699][T11926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.688530][T11926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.887669][T12119] loop3: detected capacity change from 0 to 1024 [ 207.904661][T12119] EXT4-fs: dax option not supported [ 207.937686][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'. [ 208.227599][T12123] chnl_net:caif_netlink_parms(): no params data found [ 208.593558][T12123] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.600875][T12123] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.613872][T12123] bridge_slave_0: entered allmulticast mode [ 208.637312][T12123] bridge_slave_0: entered promiscuous mode [ 208.668375][T12123] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.675630][T12123] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.687894][T12123] bridge_slave_1: entered allmulticast mode [ 208.696200][T12150] FAULT_INJECTION: forcing a failure. [ 208.696200][T12150] name failslab, interval 1, probability 0, space 0, times 0 [ 208.709071][T12150] CPU: 0 UID: 0 PID: 12150 Comm: syz.3.2986 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 208.709103][T12150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.709115][T12150] Call Trace: [ 208.709154][T12150] [ 208.709160][T12150] __dump_stack+0x1d/0x30 [ 208.709179][T12150] dump_stack_lvl+0xe8/0x140 [ 208.709200][T12150] dump_stack+0x15/0x1b [ 208.709292][T12150] should_fail_ex+0x265/0x280 [ 208.709321][T12150] should_failslab+0x8c/0xb0 [ 208.709349][T12150] __kvmalloc_node_noprof+0x123/0x4e0 [ 208.709382][T12150] ? xt_alloc_entry_offsets+0x48/0x50 [ 208.709495][T12150] ? refill_obj_stock+0x254/0x2e0 [ 208.709531][T12150] xt_alloc_entry_offsets+0x48/0x50 [ 208.709706][T12150] translate_table+0xa9/0x1070 [ 208.709735][T12150] ? __rcu_read_unlock+0x4f/0x70 [ 208.709765][T12123] bridge_slave_1: entered promiscuous mode [ 208.709760][T12150] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 208.709798][T12150] ? should_fail_ex+0xdb/0x280 [ 208.709900][T12150] ? _copy_from_user+0x89/0xb0 [ 208.709927][T12150] do_ip6t_set_ctl+0x678/0x840 [ 208.710011][T12150] nf_setsockopt+0x199/0x1b0 [ 208.710040][T12150] ipv6_setsockopt+0x11a/0x130 [ 208.710132][T12150] udpv6_setsockopt+0x99/0xb0 [ 208.710157][T12150] sock_common_setsockopt+0x66/0x80 [ 208.710266][T12150] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 208.710365][T12150] __sys_setsockopt+0x181/0x200 [ 208.710407][T12150] __x64_sys_setsockopt+0x64/0x80 [ 208.710478][T12150] x64_sys_call+0x2bd5/0x2fb0 [ 208.710504][T12150] do_syscall_64+0xd2/0x200 [ 208.710527][T12150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.710581][T12150] ? clear_bhb_loop+0x40/0x90 [ 208.710608][T12150] ? clear_bhb_loop+0x40/0x90 [ 208.710635][T12150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.710736][T12150] RIP: 0033:0x7ff3620fe929 [ 208.710754][T12150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.710777][T12150] RSP: 002b:00007ff360767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.710801][T12150] RAX: ffffffffffffffda RBX: 00007ff362325fa0 RCX: 00007ff3620fe929 [ 208.710818][T12150] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 208.710839][T12150] RBP: 00007ff360767090 R08: 0000000000000368 R09: 0000000000000000 [ 208.710854][T12150] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 208.710870][T12150] R13: 0000000000000000 R14: 00007ff362325fa0 R15: 00007fff6f9463b8 [ 208.710894][T12150] [ 209.001117][T12123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.020189][ T5439] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.056475][T12123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.071481][T12169] loop5: detected capacity change from 0 to 1024 [ 209.085819][T12169] EXT4-fs: dax option not supported [ 209.116779][T12123] team0: Port device team_slave_0 added [ 209.134220][ T5439] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.153193][T12178] loop3: detected capacity change from 0 to 512 [ 209.157953][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 209.157971][ T29] audit: type=1400 audit(1750045833.511:11438): avc: denied { bind } for pid=12181 comm="syz.6.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.186076][ T29] audit: type=1400 audit(1750045833.551:11439): avc: denied { ioctl } for pid=12181 comm="syz.6.2999" path="socket:[35255]" dev="sockfs" ino=35255 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 209.220610][T12123] team0: Port device team_slave_1 added [ 209.227676][T12178] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2996: iget: bad i_size value: 38620345925642 [ 209.244088][T12178] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2996: couldn't read orphan inode 15 (err -117) [ 209.258660][T12178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.279123][ T5439] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.306104][T12123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.313329][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.339415][T12123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.396267][ T5439] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.432006][T12123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.439066][T12123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.465159][T12123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.515925][T12123] hsr_slave_0: entered promiscuous mode [ 209.523537][T12198] loop5: detected capacity change from 0 to 128 [ 209.534119][T12198] bio_check_eod: 230 callbacks suppressed [ 209.534136][T12198] syz.5.3004: attempt to access beyond end of device [ 209.534136][T12198] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 209.553390][T12198] syz.5.3004: attempt to access beyond end of device [ 209.553390][T12198] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 209.567248][T12123] hsr_slave_1: entered promiscuous mode [ 209.573140][T12123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.575046][T12198] syz.5.3004: attempt to access beyond end of device [ 209.575046][T12198] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 209.580936][T12123] Cannot create hsr debugfs directory [ 209.602028][T12198] syz.5.3004: attempt to access beyond end of device [ 209.602028][T12198] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 209.620022][T12198] syz.5.3004: attempt to access beyond end of device [ 209.620022][T12198] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 209.675132][T12198] syz.5.3004: attempt to access beyond end of device [ 209.675132][T12198] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 209.688513][T12198] syz.5.3004: attempt to access beyond end of device [ 209.688513][T12198] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 209.714469][T12198] syz.5.3004: attempt to access beyond end of device [ 209.714469][T12198] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 209.732652][T12198] syz.5.3004: attempt to access beyond end of device [ 209.732652][T12198] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 209.747580][T12198] syz.5.3004: attempt to access beyond end of device [ 209.747580][T12198] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 209.806515][ T5439] bridge0: port 3(team0) entered disabled state [ 209.828458][ T5439] bridge_slave_1: left allmulticast mode [ 209.834213][ T5439] bridge_slave_1: left promiscuous mode [ 209.840012][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.891259][ T5439] bridge_slave_0: left allmulticast mode [ 209.897086][ T5439] bridge_slave_0: left promiscuous mode [ 209.902826][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.941614][T12185] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 209.963081][ T5442] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:13: bg 0: block 5: invalid block bitmap [ 209.986833][ T5442] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 209.999511][ T5442] EXT4-fs (loop3): This should not happen!! Data will be lost [ 209.999511][ T5442] [ 210.043510][ T5468] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 210.056297][ T5468] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.056297][ T5468] [ 210.066014][ T5468] EXT4-fs (loop3): Total free blocks count 0 [ 210.072019][ T5468] EXT4-fs (loop3): Free/Dirty block details [ 210.077991][ T5468] EXT4-fs (loop3): free_blocks=0 [ 210.082951][ T5468] EXT4-fs (loop3): dirty_blocks=13967 [ 210.088372][ T5468] EXT4-fs (loop3): Block reservation details [ 210.130328][ T5439] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 210.257867][ T5439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.271379][ T5439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.292418][ T5439] bond0 (unregistering): Released all slaves [ 210.391294][ T29] audit: type=1326 audit(1750045834.751:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.415019][ T29] audit: type=1326 audit(1750045834.751:11441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.445483][ T29] audit: type=1326 audit(1750045834.801:11442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.469071][ T29] audit: type=1326 audit(1750045834.801:11443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.492747][ T29] audit: type=1326 audit(1750045834.801:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.516444][ T29] audit: type=1326 audit(1750045834.801:11445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.539943][ T29] audit: type=1326 audit(1750045834.811:11446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.563661][ T29] audit: type=1326 audit(1750045834.811:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12226 comm="syz.3.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3620fe929 code=0x7ffc0000 [ 210.606306][ T5439] hsr_slave_0: left promiscuous mode [ 210.612142][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.619611][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.627583][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.635035][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.650338][ T5439] veth1_macvtap: left promiscuous mode [ 210.656416][ T5439] veth0_macvtap: left promiscuous mode [ 210.699046][T12241] loop5: detected capacity change from 0 to 512 [ 210.710467][T12239] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3017'. [ 210.735299][T12241] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3018: iget: bad i_size value: 38620345925642 [ 210.748994][ T5439] team_slave_1 (unregistering): left promiscuous mode [ 210.755425][T12241] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3018: couldn't read orphan inode 15 (err -117) [ 210.756070][ T5439] team_slave_1 (unregistering): left allmulticast mode [ 210.784941][T12241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.798016][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 210.806825][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3017'. [ 210.828491][ T5439] team_slave_0 (unregistering): left promiscuous mode [ 210.835407][ T5439] team_slave_0 (unregistering): left allmulticast mode [ 210.871593][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 210.981661][T12252] loop6: detected capacity change from 0 to 256 [ 210.989958][T12252] FAT-fs (loop6): bogus number of FAT sectors [ 210.996157][T12252] FAT-fs (loop6): Can't find a valid FAT filesystem [ 211.008611][T12254] loop0: detected capacity change from 0 to 128 [ 211.061466][T12248] infiniband syz!: set active [ 211.066311][T12248] infiniband syz!: added team_slave_0 [ 211.079507][T12248] RDS/IB: syz!: added [ 211.083593][T12248] smc: adding ib device syz! with port count 1 [ 211.089947][T12248] smc: ib device syz! port 1 has pnetid [ 211.330675][T12263] loop6: detected capacity change from 0 to 1024 [ 211.337080][T12123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.344338][T12263] EXT4-fs: dax option not supported [ 211.351659][T12123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.378615][T12123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.397913][T12123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.455844][T12279] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3028'. [ 211.491552][T12123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.512146][T12123] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.530243][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3028'. [ 211.560471][ T5468] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.567586][ T5468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.588772][ T5468] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.595901][ T5468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.609407][ T5449] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 211.623424][ T5449] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 211.636035][ T5449] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.636035][ T5449] [ 211.645910][ T5449] EXT4-fs (loop5): Total free blocks count 0 [ 211.651971][ T5449] EXT4-fs (loop5): Free/Dirty block details [ 211.657930][ T5449] EXT4-fs (loop5): free_blocks=0 [ 211.662888][ T5449] EXT4-fs (loop5): dirty_blocks=14004 [ 211.668333][ T5449] EXT4-fs (loop5): Block reservation details [ 211.674331][ T5449] EXT4-fs (loop5): i_reserved_data_blocks=14004 [ 211.708398][ T5449] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 211.722326][T12123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.868047][T12305] FAULT_INJECTION: forcing a failure. [ 211.868047][T12305] name failslab, interval 1, probability 0, space 0, times 0 [ 211.880875][T12305] CPU: 1 UID: 0 PID: 12305 Comm: syz.6.3036 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 211.880984][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.880996][T12305] Call Trace: [ 211.881002][T12305] [ 211.881009][T12305] __dump_stack+0x1d/0x30 [ 211.881052][T12305] dump_stack_lvl+0xe8/0x140 [ 211.881079][T12305] dump_stack+0x15/0x1b [ 211.881101][T12305] should_fail_ex+0x265/0x280 [ 211.881140][T12305] should_failslab+0x8c/0xb0 [ 211.881165][T12305] kmem_cache_alloc_noprof+0x50/0x310 [ 211.881248][T12305] ? audit_log_start+0x365/0x6c0 [ 211.881280][T12305] audit_log_start+0x365/0x6c0 [ 211.881315][T12305] ? copy_from_user_nofault+0xd5/0x120 [ 211.881345][T12305] audit_seccomp+0x48/0x100 [ 211.881428][T12305] ? __seccomp_filter+0x68c/0x10d0 [ 211.881500][T12305] __seccomp_filter+0x69d/0x10d0 [ 211.881530][T12305] ? getname_flags+0x2be/0x3b0 [ 211.881556][T12305] ? kmem_cache_free+0xdf/0x300 [ 211.881618][T12305] __secure_computing+0x82/0x150 [ 211.881655][T12305] syscall_trace_enter+0xcf/0x1e0 [ 211.881720][T12305] do_syscall_64+0xac/0x200 [ 211.881743][T12305] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.881788][T12305] ? clear_bhb_loop+0x40/0x90 [ 211.881816][T12305] ? clear_bhb_loop+0x40/0x90 [ 211.881901][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.881928][T12305] RIP: 0033:0x7f7680e8d33c [ 211.881948][T12305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.881972][T12305] RSP: 002b:00007f767f4f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.882033][T12305] RAX: ffffffffffffffda RBX: 00007f76810b5fa0 RCX: 00007f7680e8d33c [ 211.882051][T12305] RDX: 000000000000000f RSI: 00007f767f4f70a0 RDI: 0000000000000005 [ 211.882066][T12305] RBP: 00007f767f4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.882085][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.882096][T12305] R13: 0000000000000000 R14: 00007f76810b5fa0 R15: 00007ffda346a1b8 [ 211.882114][T12305] [ 211.889169][T12123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.093127][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3031'. [ 212.187274][T12123] veth0_vlan: entered promiscuous mode [ 212.212252][T12123] veth1_vlan: entered promiscuous mode [ 212.267227][T12123] veth0_macvtap: entered promiscuous mode [ 212.283842][T12123] veth1_macvtap: entered promiscuous mode [ 212.299456][T12123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.312403][T12123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.322843][T12123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.331619][T12123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.337198][ T6503] hid-generic 0000:0000:0000.0091: unknown main item tag 0x0 [ 212.340691][T12123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.356900][T12123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.368131][ T6503] hid-generic 0000:0000:0000.0091: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.487336][T12351] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3046'. [ 212.595331][T12364] FAULT_INJECTION: forcing a failure. [ 212.595331][T12364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.608518][T12364] CPU: 0 UID: 0 PID: 12364 Comm: syz.0.3054 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 212.608595][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.608610][T12364] Call Trace: [ 212.608616][T12364] [ 212.608623][T12364] __dump_stack+0x1d/0x30 [ 212.608649][T12364] dump_stack_lvl+0xe8/0x140 [ 212.608715][T12364] dump_stack+0x15/0x1b [ 212.608737][T12364] should_fail_ex+0x265/0x280 [ 212.608783][T12364] should_fail+0xb/0x20 [ 212.608812][T12364] should_fail_usercopy+0x1a/0x20 [ 212.608853][T12364] _copy_from_user+0x1c/0xb0 [ 212.608932][T12364] __se_sys_mount+0x10d/0x2e0 [ 212.608956][T12364] ? fput+0x8f/0xc0 [ 212.609005][T12364] ? ksys_write+0x192/0x1a0 [ 212.609036][T12364] __x64_sys_mount+0x67/0x80 [ 212.609060][T12364] x64_sys_call+0xd36/0x2fb0 [ 212.609136][T12364] do_syscall_64+0xd2/0x200 [ 212.609155][T12364] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.609259][T12364] ? clear_bhb_loop+0x40/0x90 [ 212.609286][T12364] ? clear_bhb_loop+0x40/0x90 [ 212.609313][T12364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.609363][T12364] RIP: 0033:0x7f549371e929 [ 212.609377][T12364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.609398][T12364] RSP: 002b:00007f5491d87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 212.609422][T12364] RAX: ffffffffffffffda RBX: 00007f5493945fa0 RCX: 00007f549371e929 [ 212.609438][T12364] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 212.609454][T12364] RBP: 00007f5491d87090 R08: 0000200000000340 R09: 0000000000000000 [ 212.609528][T12364] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 212.609541][T12364] R13: 0000000000000000 R14: 00007f5493945fa0 R15: 00007ffe329d5b38 [ 212.609563][T12364] [ 212.626744][ T6503] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0 [ 212.715283][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3051'. [ 212.817959][ T6503] hid-generic 0000:0000:0000.0092: hidraw1: HID v0.00 Device [syz1] on syz0 [ 213.575195][T12390] loop3: detected capacity change from 0 to 512 [ 213.642139][T12390] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 213.651358][T12390] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 213.699690][T12390] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended [ 213.712138][T12390] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.3062: inode #15: comm syz.3.3062: iget: illegal inode # [ 213.835404][T12390] EXT4-fs (loop3): Remounting filesystem read-only [ 213.886877][T12390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.973447][T12399] FAULT_INJECTION: forcing a failure. [ 213.973447][T12399] name failslab, interval 1, probability 0, space 0, times 0 [ 213.986192][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.5.3063 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 213.986224][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.986240][T12399] Call Trace: [ 213.986247][T12399] [ 213.986254][T12399] __dump_stack+0x1d/0x30 [ 213.986274][T12399] dump_stack_lvl+0xe8/0x140 [ 213.986297][T12399] dump_stack+0x15/0x1b [ 213.986318][T12399] should_fail_ex+0x265/0x280 [ 213.986354][T12399] should_failslab+0x8c/0xb0 [ 213.986380][T12399] kmem_cache_alloc_noprof+0x50/0x310 [ 213.986413][T12399] ? vm_area_dup+0x33/0x2c0 [ 213.986451][T12399] vm_area_dup+0x33/0x2c0 [ 213.986485][T12399] __split_vma+0xe9/0x650 [ 213.986512][T12399] ? __account_obj_stock+0x211/0x350 [ 213.986540][T12399] vms_gather_munmap_vmas+0x172/0x7a0 [ 213.986573][T12399] ? mas_find+0x515/0x610 [ 213.986598][T12399] mmap_region+0x4ce/0x1580 [ 213.986630][T12399] ? bpf_get_stackid+0xee/0x120 [ 213.986652][T12399] ? bpf_prog_e95a4a16f042d2d7+0x2a/0x32 [ 213.986669][T12399] ? __rcu_read_unlock+0x4f/0x70 [ 213.986696][T12399] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 213.986757][T12399] do_mmap+0x9b3/0xbe0 [ 213.986798][T12399] __se_sys_remap_file_pages+0x55e/0x600 [ 213.986828][T12399] ? fput+0x8f/0xc0 [ 213.986857][T12399] __x64_sys_remap_file_pages+0x67/0x80 [ 213.986885][T12399] x64_sys_call+0x2c64/0x2fb0 [ 213.986913][T12399] do_syscall_64+0xd2/0x200 [ 213.986933][T12399] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.986975][T12399] ? clear_bhb_loop+0x40/0x90 [ 213.987000][T12399] ? clear_bhb_loop+0x40/0x90 [ 213.987027][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.987064][T12399] RIP: 0033:0x7fdda8cae929 [ 213.987080][T12399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.987096][T12399] RSP: 002b:00007fdda72f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 213.987113][T12399] RAX: ffffffffffffffda RBX: 00007fdda8ed6080 RCX: 00007fdda8cae929 [ 213.987124][T12399] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 213.987134][T12399] RBP: 00007fdda72f6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.987145][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.987155][T12399] R13: 0000000000000000 R14: 00007fdda8ed6080 R15: 00007fff06a8cfc8 [ 213.987177][T12399] [ 214.266036][T12390] EXT4-fs (loop3): shut down requested (2) [ 214.341254][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.380412][T12379] Set syz1 is full, maxelem 65536 reached [ 214.559015][T12421] loop5: detected capacity change from 0 to 256 [ 214.592938][T12421] FAT-fs (loop5): Directory bread(block 64) failed [ 214.629662][T12421] FAT-fs (loop5): Directory bread(block 65) failed [ 214.641240][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 214.641257][ T29] audit: type=1400 audit(1750045839.001:11554): avc: denied { bind } for pid=12426 comm="syz.3.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.647650][T12421] FAT-fs (loop5): Directory bread(block 66) failed [ 214.675493][T12421] FAT-fs (loop5): Directory bread(block 67) failed [ 214.682064][T12421] FAT-fs (loop5): Directory bread(block 68) failed [ 214.688765][T12421] FAT-fs (loop5): Directory bread(block 69) failed [ 214.882382][T12431] loop3: detected capacity change from 0 to 512 [ 214.943570][T12421] FAT-fs (loop5): Directory bread(block 70) failed [ 214.954876][T12431] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.981393][T12437] FAULT_INJECTION: forcing a failure. [ 214.981393][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 214.994171][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.6.3077 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 214.994206][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.994223][T12437] Call Trace: [ 214.994232][T12437] [ 214.994242][T12437] __dump_stack+0x1d/0x30 [ 214.994349][T12437] dump_stack_lvl+0xe8/0x140 [ 214.994371][T12437] dump_stack+0x15/0x1b [ 214.994387][T12437] should_fail_ex+0x265/0x280 [ 214.994417][T12437] should_failslab+0x8c/0xb0 [ 214.994497][T12437] kmem_cache_alloc_noprof+0x50/0x310 [ 214.994564][T12437] ? getname_flags+0x80/0x3b0 [ 214.994599][T12437] ? fput+0x8f/0xc0 [ 214.994686][T12437] getname_flags+0x80/0x3b0 [ 214.994711][T12437] __x64_sys_execve+0x42/0x70 [ 214.994756][T12437] x64_sys_call+0x13ab/0x2fb0 [ 214.994787][T12437] do_syscall_64+0xd2/0x200 [ 214.994810][T12437] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.994922][T12437] ? clear_bhb_loop+0x40/0x90 [ 214.994993][T12437] ? clear_bhb_loop+0x40/0x90 [ 214.995019][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.995040][T12437] RIP: 0033:0x7f7680e8e929 [ 214.995125][T12437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.995149][T12437] RSP: 002b:00007f767f4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 214.995172][T12437] RAX: ffffffffffffffda RBX: 00007f76810b5fa0 RCX: 00007f7680e8e929 [ 214.995189][T12437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 214.995205][T12437] RBP: 00007f767f4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 214.995220][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.995311][T12437] R13: 0000000000000000 R14: 00007f76810b5fa0 R15: 00007ffda346a1b8 [ 214.995349][T12437] [ 215.182514][T12421] FAT-fs (loop5): Directory bread(block 71) failed [ 215.191043][T12421] FAT-fs (loop5): Directory bread(block 72) failed [ 215.197741][T12421] FAT-fs (loop5): Directory bread(block 73) failed [ 215.213575][T12431] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3075: bg 0: block 131: padding at end of block bitmap is not set [ 215.263780][T12431] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 215.285786][T12431] EXT4-fs (loop3): 1 truncate cleaned up [ 215.297512][T12431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 215.512359][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.901668][ T29] audit: type=1326 audit(1750045840.241:11555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 215.925471][ T29] audit: type=1326 audit(1750045840.241:11556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 215.949242][ T29] audit: type=1326 audit(1750045840.241:11557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 215.972905][ T29] audit: type=1326 audit(1750045840.241:11558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 215.996557][ T29] audit: type=1326 audit(1750045840.241:11559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 216.020321][ T29] audit: type=1326 audit(1750045840.241:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 216.044090][ T29] audit: type=1326 audit(1750045840.241:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 216.067717][ T29] audit: type=1326 audit(1750045840.241:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 216.091528][ T29] audit: type=1326 audit(1750045840.241:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12466 comm="syz.0.3089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 216.218110][T12475] Cannot find del_set index 2 as target [ 216.232467][T12441] Set syz1 is full, maxelem 65536 reached [ 216.302893][T12481] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3094'. [ 216.333229][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3094'. [ 216.339037][T12453] Process accounting paused [ 216.474827][T12503] program syz.1.3103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.562124][T12507] loop1: detected capacity change from 0 to 512 [ 216.566370][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3100'. [ 216.570751][T12507] EXT4-fs: Ignoring removed nobh option [ 216.602417][T12507] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 216.611286][T12507] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3104: attempt to clear invalid blocks 2 len 1 [ 216.624742][T12507] EXT4-fs (loop1): Remounting filesystem read-only [ 216.631826][T12507] EXT4-fs (loop1): 1 truncate cleaned up [ 216.638577][T12507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.683591][T12520] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3108'. [ 216.708211][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3108'. [ 216.804358][T12529] FAULT_INJECTION: forcing a failure. [ 216.804358][T12529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.817561][T12529] CPU: 1 UID: 0 PID: 12529 Comm: syz.3.3111 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 216.817610][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.817669][T12529] Call Trace: [ 216.817676][T12529] [ 216.817684][T12529] __dump_stack+0x1d/0x30 [ 216.817734][T12529] dump_stack_lvl+0xe8/0x140 [ 216.817759][T12529] dump_stack+0x15/0x1b [ 216.817780][T12529] should_fail_ex+0x265/0x280 [ 216.817810][T12529] should_fail+0xb/0x20 [ 216.817899][T12529] should_fail_usercopy+0x1a/0x20 [ 216.817949][T12529] _copy_from_user+0x1c/0xb0 [ 216.817975][T12529] snd_seq_ioctl+0x127/0x2e0 [ 216.818099][T12529] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 216.818128][T12529] __se_sys_ioctl+0xcb/0x140 [ 216.818217][T12529] __x64_sys_ioctl+0x43/0x50 [ 216.818251][T12529] x64_sys_call+0x19a8/0x2fb0 [ 216.818277][T12529] do_syscall_64+0xd2/0x200 [ 216.818332][T12529] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.818455][T12529] ? clear_bhb_loop+0x40/0x90 [ 216.818494][T12529] ? clear_bhb_loop+0x40/0x90 [ 216.818545][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.818571][T12529] RIP: 0033:0x7ff3620fe929 [ 216.818589][T12529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.818609][T12529] RSP: 002b:00007ff360767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.818631][T12529] RAX: ffffffffffffffda RBX: 00007ff362325fa0 RCX: 00007ff3620fe929 [ 216.818644][T12529] RDX: 00002000000004c0 RSI: 0000000040a85321 RDI: 0000000000000006 [ 216.818667][T12529] RBP: 00007ff360767090 R08: 0000000000000000 R09: 0000000000000000 [ 216.818682][T12529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.818696][T12529] R13: 0000000000000000 R14: 00007ff362325fa0 R15: 00007fff6f9463b8 [ 216.818720][T12529] [ 217.033435][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3109'. [ 217.066594][T12537] @ÿ: renamed from bond_slave_0 [ 217.074103][T12537] rdma_op ffff88815e8a5d80 conn xmit_rdma 0000000000000000 [ 217.361850][T12123] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.851790][T12582] loop0: detected capacity change from 0 to 128 [ 217.886929][T12582] bio_check_eod: 86 callbacks suppressed [ 217.886948][T12582] syz.0.3125: attempt to access beyond end of device [ 217.886948][T12582] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 217.905969][T12582] buffer_io_error: 134 callbacks suppressed [ 217.905985][T12582] Buffer I/O error on dev loop0, logical block 2065, async page read [ 217.937068][T12582] syz.0.3125: attempt to access beyond end of device [ 217.937068][T12582] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 217.937338][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3129'. [ 217.950391][T12582] Buffer I/O error on dev loop0, logical block 2066, async page read [ 217.972032][T12582] syz.0.3125: attempt to access beyond end of device [ 217.972032][T12582] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 217.985383][T12582] Buffer I/O error on dev loop0, logical block 2067, async page read [ 217.998739][T12582] syz.0.3125: attempt to access beyond end of device [ 217.998739][T12582] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 218.012110][T12582] Buffer I/O error on dev loop0, logical block 2068, async page read [ 218.035966][T12582] syz.0.3125: attempt to access beyond end of device [ 218.035966][T12582] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 218.049454][T12582] Buffer I/O error on dev loop0, logical block 2069, async page read [ 218.054274][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3129'. [ 218.083684][T12582] syz.0.3125: attempt to access beyond end of device [ 218.083684][T12582] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 218.097122][T12582] Buffer I/O error on dev loop0, logical block 2070, async page read [ 218.139184][T12555] chnl_net:caif_netlink_parms(): no params data found [ 218.159672][T12582] syz.0.3125: attempt to access beyond end of device [ 218.159672][T12582] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 218.173063][T12582] Buffer I/O error on dev loop0, logical block 2071, async page read [ 218.181409][T12582] syz.0.3125: attempt to access beyond end of device [ 218.181409][T12582] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 218.194765][T12582] Buffer I/O error on dev loop0, logical block 2072, async page read [ 218.206281][T12582] syz.0.3125: attempt to access beyond end of device [ 218.206281][T12582] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 218.219701][T12582] Buffer I/O error on dev loop0, logical block 2065, async page read [ 218.237950][T12582] syz.0.3125: attempt to access beyond end of device [ 218.237950][T12582] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 218.251342][T12582] Buffer I/O error on dev loop0, logical block 2066, async page read [ 218.266607][T12555] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.273748][T12555] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.280974][T12555] bridge_slave_0: entered allmulticast mode [ 218.306991][T12555] bridge_slave_0: entered promiscuous mode [ 218.327799][T12555] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.334990][T12555] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.355181][T12555] bridge_slave_1: entered allmulticast mode [ 218.361805][T12555] bridge_slave_1: entered promiscuous mode [ 218.389050][T12555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.400113][T12555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.502452][T12555] team0: Port device team_slave_0 added [ 218.513882][T12555] team0: Port device team_slave_1 added [ 218.551352][T12555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.558456][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.584490][T12555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.606531][T12555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.613595][T12555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.639651][T12555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.764785][T12624] loop8: detected capacity change from 0 to 16384 [ 218.919988][T12555] hsr_slave_0: entered promiscuous mode [ 218.945156][T12628] loop0: detected capacity change from 0 to 512 [ 218.978803][T12555] hsr_slave_1: entered promiscuous mode [ 219.031249][T12555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.045002][T12555] Cannot create hsr debugfs directory [ 219.047321][T12628] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 219.068371][T12628] EXT4-fs (loop0): mount failed [ 219.123581][T12637] loop6: detected capacity change from 0 to 256 [ 219.130842][T12637] FAT-fs (loop6): bogus number of FAT sectors [ 219.137047][T12637] FAT-fs (loop6): Can't find a valid FAT filesystem [ 219.235094][T12624] loop8: detected capacity change from 16384 to 16298 [ 219.322465][T12555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.396404][T12555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.556581][T12555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.365339][T12669] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 220.416761][T12671] loop0: detected capacity change from 0 to 256 [ 220.466483][T12671] FAT-fs (loop0): bogus number of FAT sectors [ 220.472642][T12671] FAT-fs (loop0): Can't find a valid FAT filesystem [ 220.606094][T12555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.033887][T12684] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3152'. [ 221.122391][T12555] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.131448][T12555] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.143894][T12555] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.152756][T12555] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.162697][T12690] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 221.162697][T12690] program syz.5.3155 not setting count and/or reply_len properly [ 221.284055][ T1037] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 221.296974][T12705] loop5: detected capacity change from 0 to 1024 [ 221.303896][ T1037] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz1] on syz0 [ 221.314218][T12705] EXT4-fs: dax option not supported [ 221.374119][T12555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.388970][T12713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3156'. [ 221.466265][T12555] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.495696][T12715] loop5: detected capacity change from 0 to 256 [ 221.525579][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.532721][ T5487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.554245][T12715] FAT-fs (loop5): bogus number of FAT sectors [ 221.560918][T12715] FAT-fs (loop5): Can't find a valid FAT filesystem [ 221.713196][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 221.713210][ T29] audit: type=1400 audit(1750045847.074:11581): avc: denied { mount } for pid=12699 comm="syz.1.3157" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 221.744795][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.752132][ T5487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.141917][ T29] audit: type=1326 audit(1750045847.504:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.195241][ T29] audit: type=1326 audit(1750045847.534:11583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.219238][ T29] audit: type=1326 audit(1750045847.534:11584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.242922][ T29] audit: type=1326 audit(1750045847.534:11585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.266601][ T29] audit: type=1326 audit(1750045847.534:11586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.290264][ T29] audit: type=1326 audit(1750045847.544:11587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.313912][ T29] audit: type=1326 audit(1750045847.544:11588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.337794][ T29] audit: type=1326 audit(1750045847.554:11589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.338844][ T5027] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 222.361398][ T29] audit: type=1326 audit(1750045847.554:11590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12730 comm="syz.0.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f549371e929 code=0x7ffc0000 [ 222.484615][ T5027] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz1] on syz0 [ 222.534460][T12555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.655013][T12745] loop1: detected capacity change from 0 to 512 [ 222.678453][T12745] EXT4-fs: Invalid want_extra_isize 512 [ 222.698033][T12751] loop5: detected capacity change from 0 to 512 [ 222.724747][T12751] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3169: iget: bad i_size value: 38620345925642 [ 222.747007][T12751] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3169: couldn't read orphan inode 15 (err -117) [ 222.767000][T12751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.823730][T12555] veth0_vlan: entered promiscuous mode [ 222.879928][T12555] veth1_vlan: entered promiscuous mode [ 222.909989][T12555] veth0_macvtap: entered promiscuous mode [ 222.927992][T12555] veth1_macvtap: entered promiscuous mode [ 222.945391][T12766] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.953552][T12555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.983775][T12555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.008098][T12555] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.017071][T12555] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.026021][T12555] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.034754][T12555] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.248537][T12777] loop1: detected capacity change from 0 to 512 [ 223.260582][T12777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.282341][T12777] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.3175: invalid block [ 223.298122][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 223.311404][T12777] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3175: invalid indirect mapped block 4294967295 (level 1) [ 223.326759][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 223.348268][T12779] hsr_slave_1 (unregistering): left promiscuous mode [ 223.367739][T12777] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3175: invalid indirect mapped block 4294967295 (level 1) [ 223.431319][T12777] EXT4-fs (loop1): 2 truncates cleaned up [ 223.445006][T12777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.503346][T12777] ALSA: seq fatal error: cannot create timer (-19) [ 223.513162][ T5487] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:54: bg 0: block 5: invalid block bitmap [ 223.530600][ T5487] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 223.543109][ T5487] EXT4-fs (loop5): This should not happen!! Data will be lost [ 223.543109][ T5487] [ 223.552934][ T5487] EXT4-fs (loop5): Total free blocks count 0 [ 223.559041][ T5487] EXT4-fs (loop5): Free/Dirty block details [ 223.565001][ T5487] EXT4-fs (loop5): free_blocks=0 [ 223.569997][ T5487] EXT4-fs (loop5): dirty_blocks=16008 [ 223.575427][ T5487] EXT4-fs (loop5): Block reservation details [ 223.581460][ T5487] EXT4-fs (loop5): i_reserved_data_blocks=16008 [ 223.600041][T12123] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.620965][ T5439] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 223.714412][T12797] loop0: detected capacity change from 0 to 512 [ 223.727803][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3185'. [ 223.736733][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3185'. [ 223.786151][T12797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3182: bg 0: block 248: padding at end of block bitmap is not set [ 223.807392][T12805] loop6: detected capacity change from 0 to 128 [ 223.831681][T12797] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3182: Failed to acquire dquot type 1 [ 223.845635][T12797] EXT4-fs (loop0): 1 truncate cleaned up [ 223.851674][T12797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.860097][T12805] bio_check_eod: 38 callbacks suppressed [ 223.860115][T12805] syz.6.3187: attempt to access beyond end of device [ 223.860115][T12805] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 223.870002][T12797] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.893868][T12805] buffer_io_error: 38 callbacks suppressed [ 223.893882][T12805] Buffer I/O error on dev loop6, logical block 2065, async page read [ 223.915942][T12809] loop1: detected capacity change from 0 to 128 [ 223.923134][T12805] syz.6.3187: attempt to access beyond end of device [ 223.923134][T12805] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 223.936588][T12805] Buffer I/O error on dev loop6, logical block 2066, async page read [ 223.947193][T12805] syz.6.3187: attempt to access beyond end of device [ 223.947193][T12805] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 223.949140][T11926] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.960464][T12805] Buffer I/O error on dev loop6, logical block 2067, async page read [ 223.960758][T12805] syz.6.3187: attempt to access beyond end of device [ 223.960758][T12805] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 223.969839][T12809] syz.1.3188: attempt to access beyond end of device [ 223.969839][T12809] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 223.977608][T12805] Buffer I/O error on dev loop6, logical block 2068, async page read [ 223.990813][T12809] Buffer I/O error on dev loop1, logical block 2065, async page read [ 224.014356][T12805] syz.6.3187: attempt to access beyond end of device [ 224.014356][T12805] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 224.022070][T12809] syz.1.3188: attempt to access beyond end of device [ 224.022070][T12809] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 224.033748][T12805] Buffer I/O error on dev loop6, logical block 2069, async page read [ 224.039385][T12805] syz.6.3187: attempt to access beyond end of device [ 224.039385][T12805] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 224.047080][T12809] Buffer I/O error on dev loop1, logical block 2066, async page read [ 224.076713][T12805] Buffer I/O error on dev loop6, logical block 2070, async page read [ 224.082574][T12809] syz.1.3188: attempt to access beyond end of device [ 224.082574][T12809] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 224.086220][T12805] syz.6.3187: attempt to access beyond end of device [ 224.086220][T12805] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 224.098159][T12809] Buffer I/O error on dev loop1, logical block 2067, async page read [ 224.119548][T12805] Buffer I/O error on dev loop6, logical block 2071, async page read [ 224.132448][T12810] ================================================================== [ 224.134024][T12818] loop5: detected capacity change from 0 to 512 [ 224.140553][T12810] BUG: KCSAN: data-race in filemap_read_folio / filemap_read_folio [ 224.140581][T12810] [ 224.140589][T12810] read-write to 0xffff888103646520 of 4 bytes by task 12813 on cpu 0: [ 224.165244][T12810] filemap_read_folio+0xea/0x110 [ 224.170204][T12810] filemap_fault+0x568/0xb40 [ 224.174824][T12810] __do_fault+0xbc/0x200 [ 224.179085][T12810] handle_mm_fault+0xf78/0x2be0 [ 224.183963][T12810] do_user_addr_fault+0x3fe/0x1090 [ 224.189120][T12810] exc_page_fault+0x62/0xa0 [ 224.193665][T12810] asm_exc_page_fault+0x26/0x30 [ 224.198540][T12810] rep_movs_alternative+0x4a/0x90 [ 224.203587][T12810] _copy_from_user+0x6f/0xb0 [ 224.208195][T12810] sel_write_load+0x192/0x380 [ 224.212910][T12810] vfs_write+0x269/0x8e0 [ 224.217181][T12810] ksys_write+0xda/0x1a0 [ 224.221440][T12810] __x64_sys_write+0x40/0x50 [ 224.226047][T12810] x64_sys_call+0x2cdd/0x2fb0 [ 224.230743][T12810] do_syscall_64+0xd2/0x200 [ 224.235265][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.241179][T12810] [ 224.243522][T12810] read-write to 0xffff888103646520 of 4 bytes by task 12810 on cpu 1: [ 224.251713][T12810] filemap_read_folio+0xea/0x110 [ 224.256683][T12810] filemap_fault+0x568/0xb40 [ 224.261311][T12810] __do_fault+0xbc/0x200 [ 224.265577][T12810] handle_mm_fault+0xf78/0x2be0 [ 224.270494][T12810] do_user_addr_fault+0x793/0x1090 [ 224.275656][T12810] exc_page_fault+0x62/0xa0 [ 224.280181][T12810] asm_exc_page_fault+0x26/0x30 [ 224.285046][T12810] fault_in_readable+0xad/0x170 [ 224.289915][T12810] fault_in_iov_iter_readable+0x129/0x210 [ 224.295676][T12810] generic_perform_write+0x3cf/0x490 [ 224.300972][T12810] __generic_file_write_iter+0x9e/0x120 [ 224.306529][T12810] generic_file_write_iter+0x8d/0x2f0 [ 224.311927][T12810] vfs_write+0x4a0/0x8e0 [ 224.316197][T12810] ksys_write+0xda/0x1a0 [ 224.320453][T12810] __x64_sys_write+0x40/0x50 [ 224.325057][T12810] x64_sys_call+0x2cdd/0x2fb0 [ 224.329752][T12810] do_syscall_64+0xd2/0x200 [ 224.334277][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.340277][T12810] [ 224.342613][T12810] value changed: 0x00000002 -> 0x00000000 [ 224.348424][T12810] [ 224.350753][T12810] Reported by Kernel Concurrency Sanitizer on: [ 224.356946][T12810] CPU: 1 UID: 0 PID: 12810 Comm: syz.6.3187 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(voluntary) [ 224.369466][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.379540][T12810] ================================================================== [ 224.393613][T12818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 224.414032][T12818] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3190: invalid block [ 224.426496][T12818] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3190: invalid indirect mapped block 4294967295 (level 1) [ 224.451728][T12818] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3190: invalid indirect mapped block 4294967295 (level 1) [ 224.466602][T12818] EXT4-fs (loop5): 2 truncates cleaned up [ 224.472917][T12818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.504912][T12818] ALSA: seq fatal error: cannot create timer (-19) [ 224.530043][ T5552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.