last executing test programs: 45.590788989s ago: executing program 2 (id=2469): epoll_create(0x200000) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xa3f, @loopback, 0x8001}, @in6={0xa, 0x4e20, 0x0, @local, 0x8000}], 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000080)="73df303796c26e7ddf770949f6a245fe3495e0490c8a8082534940a52a3cdab8a15f45da0f22aaf38c3308d818c7146529693b1d763ec493eabea182829a1ad1e683fbc026fd8219516eabbdb70ba68c6c42c033ea2693e7d24d8b0cf54ee8bcdef161689f269586fd158357c6054284cd721dce9f6eb1100f476086e39b28c0c5e3ed0963c051a11d10000269b93722bdf26f2ad315a1484850b5e69f894d", &(0x7f0000000140)=""/238, &(0x7f0000000240)="5f467043ed99296606f5d5fb3fe512c4c96cd827e769b831bd8fb417b147db7908b5767f7225a8002a06307151345c4d9333027cd5560f9409451060790946a6f6158b29ba48d45450e57a6efb3e9930343a869fcd828f4cde980c5e58c22b3fa20c", &(0x7f00000002c0)="75dc48dbc990d41f124d3f732e8c854293c1794da85fe631b1eca905c721dc2ad364e71d1c5fb1416db4f8f00e92721aee9810e11ceaf95ba5a803d954a6fe24e3e5b6c9a69bed0308ada476b0f8df8118d403f3cf7848d0a76fc673a8aaca396fd565ca7bdcb5b148c73afb2c1dfc92", 0x1, r0, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000080)="73df303796c26e7ddf770949f6a245fe3495e0490c8a8082534940a52a3cdab8a15f45da0f22aaf38c3308d818c7146529693b1d763ec493eabea182829a1ad1e683fbc026fd8219516eabbdb70ba68c6c42c033ea2693e7d24d8b0cf54ee8bcdef161689f269586fd158357c6054284cd721dce9f6eb1100f476086e39b28c0c5e3ed0963c051a11d10000269b93722bdf26f2ad315a1484850b5e69f894d", &(0x7f0000000140)=""/238, &(0x7f0000000240)="5f467043ed99296606f5d5fb3fe512c4c96cd827e769b831bd8fb417b147db7908b5767f7225a8002a06307151345c4d9333027cd5560f9409451060790946a6f6158b29ba48d45450e57a6efb3e9930343a869fcd828f4cde980c5e58c22b3fa20c", &(0x7f00000002c0)="75dc48dbc990d41f124d3f732e8c854293c1794da85fe631b1eca905c721dc2ad364e71d1c5fb1416db4f8f00e92721aee9810e11ceaf95ba5a803d954a6fe24e3e5b6c9a69bed0308ada476b0f8df8118d403f3cf7848d0a76fc673a8aaca396fd565ca7bdcb5b148c73afb2c1dfc92", 0x1, r0, 0x4}, 0x38) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x3068}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={r2, 0xffff}, 0x8) write$char_usb(r0, &(0x7f0000000440)="52b3168353e48bec273831dde0e2ec70db3dbef77c64aef28631d8400048a22caaaf060f97936935b56b283558ec3dbf6293fb4832ff39f1c463d6d9f25c8f80521293713e19964991e36ba35593f30555e47496d7a9ae619adeba47d65aba6455b8ecff95c65efcd127d3206b802d68f96969aca0d6a022769c53d1f2e13f4a4fb167bde85a37a3a67a024ba088ce50068b62eacc2da201e19b698fb4c1ff0d2d4940db0440dbdaabf469197a1d3b9e7013f49070e8cb0f7749f203", 0xbc) write$selinux_validatetrans(r0, &(0x7f0000000500)={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'system_u:object_r:passwd_exec_t:s0', 0x20, 0x9, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x84) (async) write$selinux_validatetrans(r0, &(0x7f0000000500)={'system_u:object_r:traceroute_exec_t:s0', 0x20, 'system_u:object_r:passwd_exec_t:s0', 0x20, 0x9, 0x20, '/usr/lib/telepathy/mission-control-5\x00'}, 0x84) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000005c0)='net/packet\x00') fchmod(r1, 0x115) openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x6, &(0x7f0000000640)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x5, 0x3, 0x0, 0x8, 0x4}], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2c, '\x00', r6, @lirc_mode2=0x10, r0, 0x8, &(0x7f0000000740)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x1, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x6, &(0x7f0000000640)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x5, 0x3, 0x0, 0x8, 0x4}], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x2c, '\x00', r6, @lirc_mode2=0x10, r0, 0x8, &(0x7f0000000740)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x1, 0x7, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='mm_compaction_begin\x00', r7}, 0x18) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7a) syz_io_uring_setup(0x77a5, &(0x7f0000000900)={0x0, 0xf775, 0x800, 0x2, 0x115, 0x0, r0}, &(0x7f0000000980)=0x0, &(0x7f00000009c0)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000002, 0x10, r5, 0x10000000) syz_io_uring_submit(r8, r9, &(0x7f0000000a00)=@IORING_OP_NOP={0x0, 0x44}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000ac0)={0x0, 0x0}) ppoll(&(0x7f0000000a80), 0x0, &(0x7f0000000b00)={r11, r12+10000000}, &(0x7f0000000b40)={[0x4]}, 0x8) (async) ppoll(&(0x7f0000000a80), 0x0, &(0x7f0000000b00)={r11, r12+10000000}, &(0x7f0000000b40)={[0x4]}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f80)={r4, 0x20, &(0x7f0000000f40)={&(0x7f0000000e00)=""/7, 0x7, 0x0, &(0x7f0000000e40)=""/198, 0xc6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x24, &(0x7f0000000b80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x3, 0x7, 0x6, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0x8, 0x8, 0xf, 0x8, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x7, 0x1, 0xa, 0x8, 0x6, 0xca5a0d3e978faa60, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000cc0)='GPL\x00', 0x8, 0x72, &(0x7f0000000d00)=""/114, 0x41100, 0x36, '\x00', r10, @netfilter, r5, 0x8, &(0x7f0000000d80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0xf, 0x500, 0x4}, 0x10, r13, r4, 0x0, &(0x7f0000000fc0), 0x0, 0x10, 0x3, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x20, 0x24, &(0x7f0000000b80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0x8, 0x3, 0x7, 0x6, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @alu={0x4, 0x1, 0x8, 0x8, 0xf, 0x8, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @alu={0x7, 0x1, 0xa, 0x8, 0x6, 0xca5a0d3e978faa60, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000cc0)='GPL\x00', 0x8, 0x72, &(0x7f0000000d00)=""/114, 0x41100, 0x36, '\x00', r10, @netfilter, r5, 0x8, &(0x7f0000000d80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0xf, 0x500, 0x4}, 0x10, r13, r4, 0x0, &(0x7f0000000fc0), 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000012c0)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x114, 0x114, 0x6, [@struct={0x5, 0x4, 0x0, 0x4, 0x0, 0x7, [{0x10, 0x0, 0x6}, {0xf, 0x5, 0x200}, {0x0, 0x0, 0x10000}, {0x3, 0x1, 0x100}]}, @struct={0x7, 0x1, 0x0, 0x4, 0x1, 0x6, [{0xf, 0x2, 0x7}]}, @enum={0xc, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x4}, {0xe, 0x3}, {0x7, 0x9}, {0x8, 0x2}]}, @union={0x0, 0x9, 0x0, 0x5, 0x0, 0x8, [{0xa, 0x4, 0x9}, {0x1, 0x2, 0xfffffffe}, {0xc, 0x2, 0xd}, {0x4, 0x2, 0x8}, {0xb, 0x3, 0xe0000000}, {0x3, 0x4, 0x1}, {0xa, 0x0, 0xab66}, {0xa, 0x3, 0x80}, {0x5, 0x4, 0x7fff}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x10}]}]}, {0x0, [0x2e, 0x0, 0x2e, 0x0]}}, &(0x7f0000001200)=""/140, 0x132, 0x8c, 0x0, 0x2, 0x0, @void, @value}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000001340)) dup(r14) (async) dup(r14) 45.48416223s ago: executing program 2 (id=2475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}]}, 0x2c}}, 0x20000090) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x39, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) dup2(r0, r1) 45.46950573s ago: executing program 2 (id=2478): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 44.451437504s ago: executing program 2 (id=2489): r0 = socket$packet(0x11, 0x2, 0x300) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000000040)={[{@auto_da_alloc}]}, 0x3, 0x4d4, &(0x7f0000000340)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x120) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/208, 0xd0}], &(0x7f0000000280)=[0xe6c]}, 0x20) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x8]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x29) 43.665279154s ago: executing program 2 (id=2503): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x10000006, 0x0, {[0x7fffffff]}}, 0x0, 0x8, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000005, 0x1600000, 0x80000) r4 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r4, &(0x7f0000000000)="2000000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4000400200000b10dcae04f00000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000440)=r5, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300"/20, @ANYRES32=0x0, @ANYBLOB="adffa888f00306001c0012800e00010069703667726574617000000008000280040012"], 0x3c}}, 0x40050) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_pwait2(r3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0)={[0x1]}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) fcntl$lock(r3, 0x25, &(0x7f0000000180)={0x1, 0x2, 0x6, 0x80000000}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x401, @local, 0x8}]}, &(0x7f0000000400)=0x10) 41.151041438s ago: executing program 2 (id=2528): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x7, 0xa, 0x0, 0x0, 0x1004, 0x31c29, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x3, @perf_config_ext={0x8, 0x2}, 0x0, 0x80000000cc, 0x7fe, 0x2, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x0, 0x110, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000640), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0xffffffff, 0xe, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x0, 0x6, 0xf555, 0x9, 0x1, 'wg2\x00', 'wg0\x00', {}, {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @broadcast, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1000}, 0x18) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'bond0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='host1x_cdma_push\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x14) write$cgroup_int(r6, &(0x7f0000000000)=0x921, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r8) close(r8) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x280) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp860,errors=continue,iocharset=macge=0,codepage=949,utf8=1,rodir,shortname=mixed,nonumtail=0,shortname=winnt,nonumtail=0,shortname=lower,\x00'], 0x26, 0x350, &(0x7f00000001c0)="$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") 41.150548558s ago: executing program 32 (id=2528): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x7, 0xa, 0x0, 0x0, 0x1004, 0x31c29, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x3, @perf_config_ext={0x8, 0x2}, 0x0, 0x80000000cc, 0x7fe, 0x2, 0x2, 0x1, 0x5, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x4f0, 0x2f8, 0x0, 0x110, 0x408, 0x408, 0x408, 0x4, &(0x7f0000000640), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, 0x8, 0x1}}}, {{@arp={@loopback, @empty, 0x0, 0xffffffff, 0xe, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x9, 0x0, 0x6, 0xf555, 0x9, 0x1, 'wg2\x00', 'wg0\x00', {}, {0xff}}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x40, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac, @broadcast, @broadcast, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x540) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r2}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x40000000, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x1000}, 0x18) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'bond0\x00', 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='host1x_cdma_push\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x14) write$cgroup_int(r6, &(0x7f0000000000)=0x921, 0x12) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000028c0), 0x20a40, 0x0) r8 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r8) close(r8) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x280) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=cp860,errors=continue,iocharset=macge=0,codepage=949,utf8=1,rodir,shortname=mixed,nonumtail=0,shortname=winnt,nonumtail=0,shortname=lower,\x00'], 0x26, 0x350, &(0x7f00000001c0)="$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") 14.174761483s ago: executing program 3 (id=2965): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001710000000000000000000000000000b650000ffd1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r3}, 0x10) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000013000000000095ffffffee000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES8=r5], 0x34}}, 0x20000000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0008f14dda2f2e4b60fba17d23c3e2fb1f00"/36, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x23da, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) 13.870016807s ago: executing program 3 (id=2972): syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 13.752498379s ago: executing program 3 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000003980)={'sit0\x00', &(0x7f0000003940)={'tunl0\x00', 0x0, 0x40, 0x20, 0x2, 0x6, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x3, 0x1e0cb8e44c35bee1, 0x0, @rand_addr=0x64010100, @remote}}}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) 13.733079769s ago: executing program 3 (id=2980): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000944ef3f2a444e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100000, 0x0, 0x0, 0x4, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 13.597925031s ago: executing program 3 (id=2987): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close(r0) 11.987126282s ago: executing program 3 (id=3028): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x507344, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0402}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) llistxattr(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$rds(r2, &(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$netlink(r2, &(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'user.', '\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 11.986814372s ago: executing program 33 (id=3028): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x507344, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0402}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) llistxattr(&(0x7f00000006c0)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) bind$rds(r2, &(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$netlink(r2, &(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000380)) lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'user.', '\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 2.697145675s ago: executing program 5 (id=3152): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000f80)={0x101c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x268, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcb4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xee3}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'fib_table_lookup\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'fib_table_lookup\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x1c, 0x5, "dd71dbb3c010269daacbb1c73802f44fa030e944dae5bbf4"}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ']+\\-[^$-%\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_VALUE={0x61, 0x4, "8522a8e7d2b004d488eb3b1e7b52a6ad22e2639a67688ae635e58b8c817fad89e097d9d8a1eb46f10fdbe096b8245f421ff8294263807cba2b2975cdc2abe32af59705010342f60260b8808357123eb8c37a16e64efb63c536552427e8"}]}, @ETHTOOL_A_EEE_MODES_OURS={0xd50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "6c68033587dab745fe18a6cfdb815d504107e1f4df448b2e745a15e446fb3d5b74dee5c3dedcc7240acadeea519d25c19ed32c3be9cdfd078e58810ce0647247879487f6acc0b4453774a1e1f3106027f3fe05387dbfe12308d6bccca24f0d924db533b9efb14f4924d65a60498001834e94c3df4d545f1219ffeabdf0b8f4f92acb067d81efaf59310383d571a6742e855015f87b6b42532687b274ece120c4adb2"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x5a, 0x5, "c66f0af679481b053f235c9bcdf3937412e48f05b521db16d6b2d96882271848ceb98f58cb36f13e5564477ddda72285316aa7606885a95f7981fd2e5004c8383ff569c838218c72dccb31f701f858c37e0ef95435d4"}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "d67be82e42f38b8acfbcf15de5a576d58a58b3c533a3968fd668170069dd001b728048a124ff2bdf1f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_MASK={0xc04, 0x5, "2fcba3fdc876e6606606b8761aaeef060d8e2fdb353dd60f729a8a4a10d0f79075042dccb40f6e3396cc8da779bb19f68a4df9e749d5445f24f8a12c918cf24cfa9745bc8b292f97e45f2b091c238e20c42ca0cce0fa394154bd5e70aae4972174fcd0f739e7452a596fbbd464aa3f1eae2daa7154b9565387782cc0464a931c733ed8bf58deae628356583e59b857f816981e26c353e46b610bc3f37ad9ab523ea8d82eb93b86683b2d452d193c58643d0e949a97fc4fd4fd27aa9cd95cd2521f5771fd694db0a58bd9f09c56afe49a26e3ac34ca592a88199ae05884570b068ae81ad3b26821b9b44d4bca35a7d986d9c9cf80ec35125a2b44c2b80b4d2742e49dfd5ca4edb87abd27a159840f92fa619b34a73250509da6651e5e46f52f4c574e9511cf1581623de7f5a02e56cb35ebe9e3139093ec3558a0976c91ca593eb72821252333a24166b250233971f16593812ccdb337eae3dd1bd3cdea1034ee48b72ba5045db91a655d931a3d4d33a5b4c2b103b0289994737d461535ad2a41a1fdc26e51a20eb566a177167d360387169d09df3cd9cd5dbcb559dc13cb5ecc269be8331e3fbf26bf8893766766bbcc17ec5b309659915c5f30317e6ec6022d474e71cee21980e7c453ed1aa7d0d61b6d2597945a041aa338ffebd42c5c6506763dba5f0d32dc52a0626999e8dd2241f8c93d7e1a3046c9db397fb57296105e303842507e1b8517226383b722d38649ce577ac88d9befb0d381a5af52d84466cbb4cfd6ad5b27cc85d5a711e9d0c5ec3eb4333b87a59fda16021b9837be2c334ceb52c013ac056c7df9c5969871eac0e6eea526c3b508ff94d608c88b2d302030377ef443999850e99692ed7cda16417c789360e3db6c2bb5f0a7a3eb34dda8aae18e66131e5c2f610125bfd04ea3b58f9be40b43950132ae07cd08a37082fd1e5b5a94086b71b1bce8be76ffa2eb22f8c767c82d578014e31df83d5aff882fc8e8e39418db84eacb1b049529aee4b15bf1c0c688386c075ff01333653aec495946e4ef7308679ef9913e448c83547b9e94637eb3f29e3e5d6455e373932f61ead1f8f7baa19981f6216799f2cbfa4d6dc5d3d94dcef0833fcd005d14f426a5a04055e3153d417a89c31dfc5e37736b4a78e89930d7e44067662d2c68f5d750d45887e6a3a95e542861cd503f104506fd1c6c3ff6260630b040b2d0e4c0b3cf5de44a4a147b2fc627352f8dd81d2891bb65deb14594373eb508f4d8e3ac276d9011896376643eaa12aa90d6f9b669c8928df41ff9ff54b5d0f86eb78a2a8d5bdeb0c1073fe6d768e4fe2b067a94d5167f4b290dccf24e4fcd90b5a986349034da236c6c26e771e5717738358a8ea53cf17aec94bdb170f8681230394354ef86ae1d60116896eed3a8d707916a68c202e6622520c940652354536d520fea4f7b1786c882bd72195dc6f1dabd4a2e5f474d45028e514bfdf8b128a0d660f4f8419bde94b6f2cdb5b4d62ce7a72eea1094ca38d5afe730e17a7a75984a59c43de9a804d7f6cb0c2985a3d000150a8b37cf1912d7a217e9723a8ea71740e64f6e753f3f6dea5b7c3e299434f7d4a46a098126d8add8e5042c0247cce582651c83f4468a3c8c0d6c60bd145d1adea9a8986522c44c1108153e55ad2e43c89526eab6b4e54e08cbfe6cd1af958f062875ea744983d785bd47e66b3fedc7b634abb4064dfe3f6ca7644338e5607e31839d760cac6d844f48931227d5181b236a68374f1d80e0ffb21ae1d1f98dd10187e6097e229329a4a76ac89cda76e0aa01ec65e05e40f72d8c3af2220b13c96df4fb0d48427f4ff6da3e86fd7abf2e35bdd25e282f30da1a6ad535c914b5bec98445a554335ca51cee5fd515a5ea604ce21a3369daaf2748b84fcfdb0bb8ba24cdad3fdc7e0c828ae8694a87eaf8b473a83aec21a011099243b06a695cf641090be19ddb3a1318bbb84bff7df795920cc9cb0faac17bbbc215277eb6c665c943b9d987cd6c2f246c63f1acc723418a83d380f86dbdaaabf0ba676a66b67a7e83d8da2de7d32025442ed12f1d11616673c6db44485894cdec00ec0e0da16f7a9fd45d3d706c2caf8400dfa3f941da3861ddaa0a061e36d0fab4873d25d166ef14dad330c9dd129fdaff06cfb1ca68445b2b1541e72fe39a688b7ed3ad9b067d5b3ed602e52c874ec320db8abfb3c0bc50a2842fe76cafeb76dd4c23f774b2f5b9c3620e50a21bc497ccdbce9ddb44ef011d74cb5471946e0eb3dd327eedad7bcab5a41d1accffcff0881e72232e790bca0f1d295663468f3ffd01c71178c5b6fea208813966a3a05bdd41a91c91fccca1fe042338bacfc90b896e00d5aade3dc0f6d95fdae2962ba3f3f7a1f82b5eaf2207f7c330d14425ef788c774f972356950e0b50127f954cc3da2da2f80ecebb65d2474f6c27410b80c06cfbc35209350addcf5d6b20056db3f02def56da86f1e0bc585183faa8b8bcf1619cb7575bb8e20a750f2dcb6b48d910f2dcea53142e843bc48ae5af2c1a6bd86cd87e46596e6dd0168a8b6b076857af71ea139a62bdb106f3dc50e36bf4f5286413702031f240ed1891dc55f0ff340af073f9108fd66021fab22bd1821b77b2adacc82bac4677e727f3ede79a3815797c790df4cd577db71a857b5bc32d5b2b7a407d36f8e6ffc51d666cd5b23c697d83fe41d1a7fa73d00130b06940bd0b30130abdd24fc651e6a359569560ebb86a5f83a5c00a2b1fdb2a42398909dfe3f2c3d2acb1e5827dd047d3413d54cf0e59c31461484b97ffcffa2cf124892790744496feee50d7c74770238a8040fcc4cbc0e9f259e515fed5ed7a1fe7dcc883da6fe3b5bba3caabba4426bdb21e141cae9e28c0f9e2de8c6302e3cdd7765b03417b599365d297075e69ac5e06d471493d088ae9dfaccd3549155fe22039f46944bd7e8b821502910e4463497d92f0f5d4cc5e554a5892cfebf81eb01326ebb3bb48164460ffa4b03452c48f3e715c1a7e815e77307008728c290e23d18202c3934c2a151371289653b900b103a9874e37b63af33ef3488884f505d21cc1291ab5a17b73f4c760bed5de51d2cc2ed88ae6feb1e502c150e4c6b2f8caeb036e9f959ddd71523cd5e0c3f9440f3859fa670165e60125bcaf929afa9d3688cc93cc1020d58c27ff4a3a0750339394c5e405d11d6128fbbbf1d5cc6aa8dd59494b8632cc9694d196a50cd735c75cb61280bc7a7c670f146bc6d2a27d74f801d80e8da925edc0e44f77ec97b315626324393530e373686120386a4eadd5d39f125431b538ccddf315b7aa05a78180e88dece4973413581273f5bfea60c75ef1364fe2567184b5b0023b9c45fb25e91b5b00fca697336a588f83e074be3773bb59dc35875600a5d19fded98916b4792a3adab2347e5fc478d0232f8a300ae31df79eb0b24b265a24313335a015d25ac31bf5340a289b8c02ca2782b9880a2355e7a68a3893c6dc924938380bb9a0df652318e71c0faad13eaab98cfb49759fd266b426e142e21df90cbb75af016673e9c435114f0f62a63321731a3b38019dd452d01518dbdb3377c20cd87925c13e3e4501b6e5b671569efcb581361a6e506695f6727f4c2819f597e8961976bfb24cd0e66850bd87360c7c4f46e7c3a539eb8ab4ad7ac7e262b838e87fda713855139cd620f29f2b25c208148d987fc6685cb110c7537beacffcdd1eaf03101d7a7c0552fd807f317d988f8e9e9f28c8fc60775e4277002a983df096e249211c3e472ca2193d1140e0529ed427efe8f9d5b21ea41e70b30ae1da7a623273ed7987760eec737d10a070b3b7001f2dbfc5e581aecfb17c206dfb8ba77b5bd47d174994b202240c970bf74d9bbcc46119dc726168e7ac344624be4367410d46fbfa78495ab4ecdc1c3621104295406bb5d3823413dfebb2cb82576d94e048f98d0bcdccacdcb713cac1def4c8a6d38b71efac41ace49753c227c49374dc797a7b29a7a961fdf8d8664e4ed5a5298390b7ad477ee09df7892649ae3656b657971b5639fed09085cbdcefde1eaa0eb4ea834f919f5f2209ec8833fcbb6715ebc25fdc7d7bdc6d8b43bb8afe3bc2afc12d78091f528b93fb226d3f16cd0f7c2551b48b2c209aad8e26eb688cb9755ae4901ef4bb509c5e58520aee33f50949d9ce7068e1639f033b53840c1c55cf394c923b4b6abdc5f043e501c65073ee54461a53a9e14081ab7649af8bc68a0f87f0190cf0d3a271e7897b0d3cdc962b7545db169307ac3b1b1c2a940b9c8f6697cb3d50de1770e80b673703765b52447736563d0f969e2a47e9134e578522941699d103b160"}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x101c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 2.475290538s ago: executing program 4 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 2.399107669s ago: executing program 6 (id=3156): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) 2.398533069s ago: executing program 4 (id=3157): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) setgroups(0x0, 0x0) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setregid(0x0, 0xee01) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12, [{0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb48}, {0x5}, {0x7, 0x0, 0x1}, {0x1ff}, {0x1}, {0x1, 0x0, 0x1}, {0x80}, {0xff836, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x76c2}, {0x3, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xa67b, 0x0, 0x1}, {0x6}, {0x4}, {0x2, 0x0, 0x1}, {0x83, 0x0, 0x1}, {0x19, 0x0, 0x1}, {0x6}, {0x5}, {0x100, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0xf14d, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}]}]}, 0xa0}}, 0x0) io_setup(0x2, &(0x7f0000002400)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18030000000000000000d9a532da32fa96912883b7de832730e5cd9b000c75e444d337c6869946758fa4c561de29f0249d8808eed7f94d514b6b65089d24823d93dd778c9e21e2e7b8dc3fd767eef9f7225f54e47d0cf022194ee31f443cad15fd7df29545884cc258721972e38e7fe8e853e4", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010300000095000000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) (async) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000800)=[{0x10, 0x0, [0x3, 0x9, 0x5, 0xf5, 0x9, 0x2, 0x101, 0x3, 0x50, 0x7, 0x8, 0x4, 0xa, 0x1, 0x5, 0x8]}, {0x10, 0x0, [0xf29b, 0xf7, 0x6, 0x2110, 0xe, 0x1, 0xff, 0x93, 0x3, 0x1, 0x6, 0x8000, 0x9, 0x4378, 0xdb5, 0x7]}, {0x4, 0x0, [0x4, 0x3, 0x9, 0x9, 0x6b3b, 0xfffffffb, 0x7, 0x200, 0x2, 0x81, 0x0, 0x9, 0x80, 0x5, 0x401, 0x7fffffff]}, {0x18, 0x0, [0x9, 0xb33c, 0x81, 0x2, 0x8000, 0x3, 0x6, 0x6, 0x39e, 0x630, 0xb, 0x8, 0x200, 0x8000, 0x0, 0x4]}, {0x8, 0x0, [0x6, 0x8, 0x2, 0xb, 0x401, 0xffff8df9, 0x9, 0x0, 0x1, 0x2, 0x2, 0x0, 0x401, 0x8, 0x6, 0x5]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) (async) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x5a3a41, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000b1ea000023000000000000200010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) 2.237978571s ago: executing program 4 (id=3160): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) setregid(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_load(0xffffffffffffffff, 0x0, 0x205c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000b80)={{{@in, @in=@multicast2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, r6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast2}, 0x0, @in6=@dev}}, 0xe8) sendto$llc(r5, &(0x7f0000000200)="3131bb9ccb87c66e38afda8b8e76f85a4e4d639a98158ee679b49365eccfbb73640154a0739cd087669ed027c13fc966852a65c8119222a08dc4625b8c1bdc2e1fc8e03acfa0f524010d0c767099efa3717174983292b115f778dade2ec6fa2413c2e72c94bbf276b210ff1d53b98a685680bcce3769e7a3da83cee5222bd5f37fd6f34a58e7b83defec3b3bc5c308ad0994b1a08bfd30db4d93de3be3b3af03d56a56cadcae93c07145a018fe96a54751b789f5031dbb62b7466815f7ecf992a86c4816d86ed1c9f2a8161da3d5366530d0989488041749", 0xd8, 0x20044081, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x5, 0x10}, {0xd, 0x9}, {0x9}}}, 0x24}}, 0x40080ca) connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r8, 0x2, {0x2, 0xf0, 0x1}, 0x1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 2.211574011s ago: executing program 6 (id=3162): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10069, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2c1}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40012020, 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r5, 0x29, 0x1, 0x8, 0x4, 0x35, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x8000, 0x1, 0x0, 0x9}}) lseek(r4, 0x401, 0x3) write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) 2.093586613s ago: executing program 0 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x88000cc, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x22020400) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x8992, &(0x7f0000001040)={'gre0\x00', 0x0}) 1.662032688s ago: executing program 5 (id=3165): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) 1.435729151s ago: executing program 4 (id=3166): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000944ef3f2a444e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 1.385447202s ago: executing program 5 (id=3167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 1.302398903s ago: executing program 5 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x52, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@dstopts={0x32}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.253361463s ago: executing program 4 (id=3169): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0xaebb, 0x5, 0x6, 0x101, 0x6, 0x8, 0x2}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{&(0x7f0000001780), 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)=""/53, 0x35}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000200)=""/240, 0xf0}], 0x4}}, {{0x0, 0x0, &(0x7f0000002bc0)}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.237898484s ago: executing program 0 (id=3170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.148286705s ago: executing program 0 (id=3172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0xb) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x800803fc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xff10}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) 1.118863535s ago: executing program 5 (id=3174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000804160850000000f0000009500"/33], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r4, r5, 0xfffffffffffffc01, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000440)={'gretap0\x00', 0x0, 0x10, 0x10, 0x0, 0x0, {{0x41, 0x4, 0x3, 0x2f, 0x104, 0x66, 0x0, 0x10, 0x2f, 0x0, @private=0xa010100, @private=0xa010100, {[@cipso={0x86, 0x13, 0x1, [{0x6, 0xd, "a66fd234c2ea9233534463"}]}, @cipso={0x86, 0x1f, 0x3, [{0x3, 0x8, "b2642649a54e"}, {0x0, 0xf, "319d43332b0aa0c70d86f4c01c"}, {0x0, 0x2}]}, @cipso={0x86, 0x46, 0x0, [{0x7, 0x12, "1681acfefd50b6f5750008edc8d7c42e"}, {0x6, 0xb, "0bd57b69e8e59f3c48"}, {0x1, 0xf, "d317f96ea00fa29d9a245e64ef"}, {0x0, 0x8, "01d887f01aec"}, {0x1, 0xc, "da56b1b455e1e3c565e6"}]}, @ssrr={0x89, 0x23, 0xdc, [@empty, @empty, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @rand_addr=0x64010100, @empty]}, @noop, @end, @ssrr={0x89, 0x17, 0xb5, [@private=0xa010102, @multicast2, @rand_addr=0x64010100, @local, @multicast2]}, @end, @generic={0x83, 0xf, "e9c960f66f0e0f7371b19b3ee3"}, @lsrr={0x83, 0x2b, 0x7f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010102, @rand_addr=0x64010101, @loopback, @private=0xa010101, @local, @rand_addr=0x64010102]}]}}}}}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000200)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1506000000000200000001000000300001"], 0x44}, 0x5}, 0x0) 1.043244776s ago: executing program 0 (id=3175): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x20}}, 0x40) 879.186359ms ago: executing program 1 (id=3178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 878.750709ms ago: executing program 1 (id=3179): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000600)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) lseek(0xffffffffffffffff, 0x6000000e510, 0x4) (fail_nth: 5) 553.660033ms ago: executing program 1 (id=3180): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000944ef3f2a444e5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd231, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) 521.576953ms ago: executing program 4 (id=3181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0xfc39]) 480.904574ms ago: executing program 34 (id=3181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x7fff, 0xfc39]) 439.181175ms ago: executing program 6 (id=3183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 394.541665ms ago: executing program 6 (id=3184): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'team_slave_1\x00', 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') exit(0x0) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000680)={0x17, 0x17, &(0x7f0000000640)="ebee7a0a4e1ff1278ecfae98bd78d26643249ec435e64e"}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x40, 0xeb, 0x9, 0x2, r1, 0x7, '\x00', r2, r1, 0x1, 0x2, 0x1, 0x3, @void, @value, @void, @value}, 0x50) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)="569e65", 0x3}], 0x1) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c646f733178666c6f7070792c646973636172642c636865636b3d7374726963742c646f74732c756d61736b3d30303030303030303030303030303030303030303030302c005cfc62f4d02467f358b5994840ea56b0221d013e71e44b8219d56c01000100d5bfd1b1537d0559da1ee418effe196657db344d30f27f6c0609979d6c93505e2d63e489bba6c6ee52f58754c60dfcc1d4"], 0x1, 0x274, &(0x7f0000000040)="$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") (async) r4 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000002, 0x810, r4, 0x7cede000) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) exit(0x6) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000280)={0x8, 0x7fff, 0x3, 0x81, 0x4, 0x0, 0x40}, 0xc) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbb, 0xbb, 0x9, [@const={0xf, 0x0, 0x0, 0xa, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @enum={0xe, 0x5, 0x0, 0x6, 0x4, [{0x3, 0x7}, {0x8, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0xb, 0x101}]}, @datasec={0x8, 0x7, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x9}, {0x3, 0x97, 0x1e}, {0x1, 0x401, 0x2}, {0x3, 0xfff, 0x5}, {0x5, 0x5, 0xfffffffd}, {0x2, 0x9, 0x2}, {0x4, 0x3, 0x9}], "a98122"}, @func={0x8, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x30, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/18, 0xdd, 0x12, 0x0, 0x2, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="140000000800000001000000b803000000800000", @ANYRES32=r1, @ANYBLOB="48000000000000000000000000000000000079dd", @ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="04000000030000000500"/20, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x50) 369.935335ms ago: executing program 1 (id=3185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0xb) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x5, 0x0) listen(r2, 0x800803fc) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0xff10}], 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) 281.380746ms ago: executing program 1 (id=3186): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc"], 0x50) 281.202177ms ago: executing program 6 (id=3187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f873918cf87310300", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r0) 260.847517ms ago: executing program 5 (id=3188): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x101002) writev(r2, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107", 0x4}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0xf5}]}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000380)={&(0x7f0000000240)=""/233, 0xe9, 0x0, &(0x7f00000010c0)=""/4096, 0x1000}}, 0x10) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x4}, 0x1843, 0x0, 0x0, 0x9, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r8, 0x80047437, 0x10000000000006) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r9, 0x4b3a, 0x30b1693cc8029e2a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x416d, 0x0) 201.627798ms ago: executing program 6 (id=3189): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c099}, 0x80005) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400800000000003}, 0x105190, 0x5dd8, 0x0, 0x5, 0x0, 0xc, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000001480)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x2, 0xa, {{0x30, 0x4, 0x1, 0x7, 0xc0, 0x66, 0x0, 0x1, 0x4, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@private=0xa010101, 0xe3}]}, @end, @rr={0x7, 0xb, 0x7d, [@remote, @multicast2]}, @cipso={0x86, 0x13, 0x0, [{0xff2573769afd7c37, 0xd, "a08174d7563acd7a5c5dfa"}]}, @timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x2, 0x7fff]}, @cipso={0x86, 0x2a, 0x0, [{0x6, 0x12, "c5b8be00ba50bff7d0752147588b5544"}, {0x2, 0xf, "399ebf2a35bc9777257f6bea0e"}, {0x2, 0x3, "c8"}]}, @timestamp_prespec={0x44, 0x3c, 0xc6, 0x3, 0x8, [{@private=0xa010100, 0x1ff}, {@remote, 0xfffffdab}, {@remote, 0xfda}, {@dev={0xac, 0x14, 0x14, 0xc}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x8}, {@empty, 0x4}]}, @ra={0x94, 0x4}]}}}}}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0xa, @vifc_lcl_ifindex=r4, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x9440) unshare(0x400) ioctl$EVIOCGKEYCODE(r5, 0x80084504, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r6 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4010, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 169.529548ms ago: executing program 0 (id=3190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x20, r11, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 168.865668ms ago: executing program 1 (id=3191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$eJzs3U9rI2UcB/DfpMkkKpgcPInggB48Ldu9ekmRXRB7cslBPWhxtyBNEFoo+AdjT169ePDgKxAEX4gX34HgVfBmhcLITGaapI1pIk3rls/n0l+feb4zv5k+tNNDn370yujgSRb7J1/+Fp1OEo1+9OM0iV40ovZ1zOl/GwDAs+w0z+PPfGKdXBIRnc21BQBs0Io//188r36+kbYAgA16/N777+zs7j58N8s68Wj0zfGg+M2++Dg5vrMfn8Qwnsb96MZZRPmi0IrybaEoH+V5Pm5mhV68PhofD4rk6MNfqvPv/BFR5rejG71y6Pxto8y/vftwO5uYyY+LPp6vrt8v8g+iGy+dh+fyDxbkY5DGG6/N9H8vuvHrx/FpDONJ2cQ0/9V2lr2Vf/fXFx8U7RX5ZHw8aJfzpvKtG/7SAAAAAAAAAAAAAAAAAAAAAABwh92r9s5pR7l/TzFU7b+zdVZ80oqs1pvfn2eST+oTze4PlOf5OI8f6v117mdZllcTp/lmvNyM5u3cNQAAAAAAAAAAAAAAAAAAAPy/HH32+cHecPj08FqKejeAZkT8/Tjiv56nPzPyaiyf3K6uuTccNqpyfk5zdiS26jlJxNI2ipu4psdyVfHcpZ6r4sef1j1h5+o5rcXXus6iXl0He8niZ9iOeqRTLZLv04jpnDRWvFb6b4fyWGf5pQsPdde+9/SFshgvmRPJssbe/H3y5KqR5OJdpOVTXRhvVcVM/MLaWGk9R2cSv/y9IrFbBwAAAAAAAAAAAAAAAAAAbNT0r38XHDxZGm3k7Y21BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avr//9coxlV4hclpHB41bvkeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuPv+CQAA///WoVye") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$vcs(0xffffffffffffff9c, 0x0, 0x401, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2, {0x1}}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x7, '\x00', r7, r3, 0x3, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000180)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@dstopts={0x32}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 0s ago: executing program 0 (id=3192): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) kernel console output (not intermixed with test programs): ] loop4: detected capacity change from 0 to 1024 [ 225.879269][T10826] EXT4-fs: inline encryption not supported [ 225.885313][T10826] EXT4-fs: Ignoring removed i_version option [ 225.892776][T10826] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.907978][T10826] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.2681: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.922275][T10826] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.2681: lblock 0 mapped to illegal pblock 48 (length 1) [ 225.950090][T10826] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2681: Failed to acquire dquot type 0 [ 225.963000][T10826] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 225.971649][T10829] loop0: detected capacity change from 0 to 164 [ 225.975223][T10826] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.2681: mark_inode_dirty error [ 225.991773][T10826] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 226.003885][T10826] EXT4-fs (loop4): 1 orphan inode deleted [ 226.013867][T10826] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm syz.4.2681: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.029743][T10826] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2681: Failed to acquire dquot type 0 [ 226.041414][ T9848] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.061420][ T9848] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:29: Failed to release dquot type 0 [ 226.077562][T10829] syz.0.2682: attempt to access beyond end of device [ 226.077562][T10829] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 226.096708][T10829] syz.0.2682: attempt to access beyond end of device [ 226.096708][T10829] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.114168][T10838] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 16: comm syz.4.2681: lblock 0 mapped to illegal pblock 16 (length 1) [ 226.159199][T10829] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 226.241374][T10846] loop0: detected capacity change from 0 to 164 [ 226.252142][T10846] syz.0.2688: attempt to access beyond end of device [ 226.252142][T10846] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 226.268411][T10846] syz.0.2688: attempt to access beyond end of device [ 226.268411][T10846] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.290717][T10846] xt_hashlimit: max too large, truncated to 1048576 [ 226.406430][T10851] loop3: detected capacity change from 0 to 512 [ 226.432126][T10853] loop5: detected capacity change from 0 to 1024 [ 226.445932][T10851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.482109][T10851] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 226.500269][T10851] EXT4-fs (loop3): mount failed [ 226.583030][T10870] lo speed is unknown, defaulting to 1000 [ 226.641075][T10854] lo speed is unknown, defaulting to 1000 [ 226.722022][T10882] loop3: detected capacity change from 0 to 1024 [ 226.761454][T10882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 226.770832][T10880] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.770903][ T3318] EXT4-fs unmount: 19 callbacks suppressed [ 226.770920][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.797632][ T3318] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 226.810799][T10882] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.811287][ T3318] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 226.842013][T10882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 226.857536][ T3318] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 226.863656][T10882] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2696: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.909604][T10882] EXT4-fs (loop3): Remounting filesystem read-only [ 226.932219][T10882] EXT4-fs (loop3): 1 orphan inode deleted [ 226.940830][T10880] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.952302][T10882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.974244][T10882] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.984177][T10886] loop4: detected capacity change from 0 to 164 [ 227.018668][T10886] syz.4.2697: attempt to access beyond end of device [ 227.018668][T10886] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 227.035459][T10886] syz.4.2697: attempt to access beyond end of device [ 227.035459][T10886] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 227.064746][T10880] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.191005][T10854] chnl_net:caif_netlink_parms(): no params data found [ 227.213165][T10889] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 227.282826][T10880] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.524406][T10880] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.582177][T10854] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.589376][T10854] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.605694][T10854] bridge_slave_0: entered allmulticast mode [ 227.613066][T10854] bridge_slave_0: entered promiscuous mode [ 227.629303][T10880] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.650588][T10880] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.661603][T10854] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.669509][T10854] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.679598][T10854] bridge_slave_1: entered allmulticast mode [ 227.686959][T10854] bridge_slave_1: entered promiscuous mode [ 227.700196][T10880] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.794620][T10854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.826541][T10854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.869560][T10854] team0: Port device team_slave_0 added [ 227.877169][T10854] team0: Port device team_slave_1 added [ 227.906790][T10854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.913896][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.940176][T10854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.954234][T10854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.961403][T10854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.987961][T10854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.068809][T10854] hsr_slave_0: entered promiscuous mode [ 228.076951][T10854] hsr_slave_1: entered promiscuous mode [ 228.082881][T10854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.104985][T10916] openvswitch: netlink: Message has 6 unknown bytes. [ 228.112263][T10919] loop3: detected capacity change from 0 to 1024 [ 228.112268][T10854] Cannot create hsr debugfs directory [ 228.114032][T10919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.133546][T10919] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.146744][T10919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 228.156069][T10919] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2708: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.172080][T10919] EXT4-fs (loop3): Remounting filesystem read-only [ 228.181021][T10919] EXT4-fs (loop3): 1 orphan inode deleted [ 228.188160][T10919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.204506][T10919] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.219376][T10925] loop4: detected capacity change from 0 to 1024 [ 228.228118][T10925] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 228.239801][T10925] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 228.252916][T10925] JBD2: no valid journal superblock found [ 228.259411][T10925] EXT4-fs (loop4): Could not load journal inode [ 228.309068][T10929] openvswitch: netlink: Message has 6 unknown bytes. [ 228.332189][T10927] loop5: detected capacity change from 0 to 164 [ 228.344233][T10854] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.371521][T10927] syz.5.2711: attempt to access beyond end of device [ 228.371521][T10927] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 228.394571][T10854] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.406372][T10927] syz.5.2711: attempt to access beyond end of device [ 228.406372][T10927] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 228.474248][T10927] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 228.500597][T10939] loop4: detected capacity change from 0 to 164 [ 228.507870][T10854] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.545427][T10854] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.625494][T10947] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 228.644315][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.683323][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.691372][T10854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.705495][T10946] program syz.5.2718 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.718514][T10854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.738759][T10854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.753455][T10854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.809142][T10950] loop1: detected capacity change from 0 to 1024 [ 228.838143][T10854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.845204][T10950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 228.859171][T10952] loop4: detected capacity change from 0 to 512 [ 228.862538][T10854] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.873075][T10950] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.886420][T10950] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 228.897722][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.905197][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.906393][T10952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 228.915398][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.928583][ T9849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.931102][T10950] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.2720: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.948310][T10854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.961463][T10854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.975298][T10950] EXT4-fs (loop1): Remounting filesystem read-only [ 228.981876][T10950] __quota_error: 210 callbacks suppressed [ 228.981889][T10950] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 228.999664][ T2215] bridge_slave_1: left allmulticast mode [ 229.005566][ T2215] bridge_slave_1: left promiscuous mode [ 229.011884][ T2215] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.026284][T10952] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=3 [ 229.036092][T10950] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 229.047416][T10952] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 229.063701][T10952] EXT4-fs (loop4): mount failed [ 229.069179][ T2215] bridge_slave_0: left promiscuous mode [ 229.074894][ T2215] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.075108][T10950] EXT4-fs (loop1): 1 orphan inode deleted [ 229.097120][T10950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.120815][T10950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.169041][ T2215] gretap0 (unregistering): left promiscuous mode [ 229.170174][T10959] loop4: detected capacity change from 0 to 512 [ 229.209847][T10959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.223279][T10959] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.236773][T10959] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.2723: corrupted inode contents [ 229.251277][T10959] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.2723: mark_inode_dirty error [ 229.306038][ T2215] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.350901][T10969] loop5: detected capacity change from 0 to 1024 [ 229.359293][ T2215] bond_slave_0: left promiscuous mode [ 229.371772][ T2215] $Hÿ (unregistering): Released all slaves [ 229.391013][T10959] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.2723: corrupted inode contents [ 229.413179][T10969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.427419][ T29] audit: type=1326 audit(1747356264.406:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 229.452522][ T29] audit: type=1326 audit(1747356264.416:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 229.474135][T10959] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.2723: mark_inode_dirty error [ 229.529100][T10351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.552382][T10854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.572827][ T2215] dummy0: left promiscuous mode [ 229.578906][ T2215] team0: left promiscuous mode [ 229.583774][ T2215] team_slave_0: left promiscuous mode [ 229.589459][ T2215] team_slave_1: left promiscuous mode [ 229.621662][ T2215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.629460][ T2215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.639130][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.652224][ T2215] veth0_macvtap: left promiscuous mode [ 229.690570][ T29] audit: type=1326 audit(1747356264.646:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.5.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 229.714771][ T29] audit: type=1326 audit(1747356264.646:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.5.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 229.738788][ T29] audit: type=1326 audit(1747356264.646:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.5.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 229.763241][ T29] audit: type=1326 audit(1747356264.646:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.5.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 229.787301][ T29] audit: type=1326 audit(1747356264.646:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10983 comm="syz.5.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 229.789264][T10982] loop4: detected capacity change from 0 to 512 [ 229.820459][T10982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 229.838561][T10982] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 229.854909][T10982] EXT4-fs (loop4): mount failed [ 229.855458][ T2215] team0 (unregistering): Port device team_slave_1 removed [ 229.872755][ T2215] team0 (unregistering): Port device team_slave_0 removed [ 229.926671][T10962] lo speed is unknown, defaulting to 1000 [ 229.941543][T10993] loop3: detected capacity change from 0 to 1024 [ 229.950041][T10993] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.958711][T10993] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.998908][T10993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 230.052393][T11002] loop4: detected capacity change from 0 to 1024 [ 230.061860][T10993] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2733: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.080675][T10993] EXT4-fs (loop3): Remounting filesystem read-only [ 230.089455][T10993] EXT4-fs (loop3): 1 orphan inode deleted [ 230.098457][T11002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.117322][T10854] veth0_vlan: entered promiscuous mode [ 230.123369][T10993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.125091][T10854] veth1_vlan: entered promiscuous mode [ 230.149730][T10854] veth0_macvtap: entered promiscuous mode [ 230.163755][T10854] veth1_macvtap: entered promiscuous mode [ 230.186721][T10993] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.190238][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.214619][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.225346][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.237139][T10854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.298518][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.309235][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.319343][T10854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.329935][T10854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.372757][T10854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.398428][T10854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.407904][T10854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.416916][T10854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.425821][T10854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.442705][T11025] loop4: detected capacity change from 0 to 1024 [ 230.450735][T11025] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 230.462009][T11025] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 230.475996][T11025] JBD2: no valid journal superblock found [ 230.481819][T11025] EXT4-fs (loop4): Could not load journal inode [ 230.619529][T11043] loop4: detected capacity change from 0 to 1024 [ 230.639108][T11041] loop1: detected capacity change from 0 to 1024 [ 230.648833][T11043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.668213][T11041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.703929][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.724131][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.766499][T11051] lo speed is unknown, defaulting to 1000 [ 230.972097][T11060] loop4: detected capacity change from 0 to 2048 [ 231.006308][T11060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.088812][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.157139][T11066] loop5: detected capacity change from 0 to 164 [ 231.211634][T11066] bio_check_eod: 2 callbacks suppressed [ 231.211675][T11066] syz.5.2757: attempt to access beyond end of device [ 231.211675][T11066] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 231.243849][T11066] syz.5.2757: attempt to access beyond end of device [ 231.243849][T11066] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 231.332925][T11066] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 231.445657][T11085] loop0: detected capacity change from 0 to 512 [ 231.456632][T11085] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.460780][T11087] lo speed is unknown, defaulting to 1000 [ 231.487207][T11085] EXT4-fs (loop0): 1 truncate cleaned up [ 231.499998][T11085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.727544][T10854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.906189][T11101] loop1: detected capacity change from 0 to 512 [ 231.915768][T11101] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.922375][T11101] EXT4-fs: Ignoring removed bh option [ 231.928361][T11101] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.942860][T11101] EXT4-fs (loop1): 1 truncate cleaned up [ 231.949385][T11101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.070987][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.340507][T11129] loop4: detected capacity change from 0 to 164 [ 232.862973][T11129] syz.4.2777: attempt to access beyond end of device [ 232.862973][T11129] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 232.887884][T11129] syz.4.2777: attempt to access beyond end of device [ 232.887884][T11129] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 232.911980][T11143] lo speed is unknown, defaulting to 1000 [ 233.032093][T11129] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 233.207363][T11154] loop4: detected capacity change from 0 to 512 [ 233.247142][T11149] loop3: detected capacity change from 0 to 164 [ 233.335525][T11154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 233.365152][T11149] syz.3.2786: attempt to access beyond end of device [ 233.365152][T11149] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 233.409658][T11154] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 233.440882][T11149] syz.3.2786: attempt to access beyond end of device [ 233.440882][T11149] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 233.480274][T11154] EXT4-fs (loop4): mount failed [ 233.826556][T11149] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 234.040326][T11179] loop5: detected capacity change from 0 to 764 [ 234.064554][T11179] Symlink component flag not implemented [ 234.071061][T11179] Symlink component flag not implemented (7) [ 234.078044][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 234.078063][ T29] audit: type=1326 audit(1747356269.056:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.111455][ T29] audit: type=1326 audit(1747356269.056:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.135890][ T29] audit: type=1326 audit(1747356269.076:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.159748][ T29] audit: type=1326 audit(1747356269.076:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.183616][ T29] audit: type=1326 audit(1747356269.076:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.232288][ T29] audit: type=1326 audit(1747356269.186:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.256544][ T29] audit: type=1326 audit(1747356269.186:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.280438][ T29] audit: type=1326 audit(1747356269.186:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.290984][T11185] loop3: detected capacity change from 0 to 1024 [ 234.304894][ T29] audit: type=1326 audit(1747356269.186:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.335145][ T29] audit: type=1326 audit(1747356269.186:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.3.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0fa5e969 code=0x7ffc0000 [ 234.360083][T11185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 234.369563][T11185] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 234.384702][T11185] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 234.394854][T11185] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2799: lblock 2 mapped to illegal pblock 2 (length 1) [ 234.412708][T11185] EXT4-fs (loop3): Remounting filesystem read-only [ 234.420190][T11185] EXT4-fs (loop3): 1 orphan inode deleted [ 234.426195][T11188] lo speed is unknown, defaulting to 1000 [ 234.428268][T11185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.446584][T11185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.574948][T11195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2802'. [ 234.601638][T11195] loop3: detected capacity change from 0 to 512 [ 234.643239][T11197] loop1: detected capacity change from 0 to 512 [ 234.657158][T11195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.680551][T11197] EXT4-fs (loop1): 1 orphan inode deleted [ 234.695110][ T9843] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 234.707216][T11195] ext4 filesystem being mounted at /543/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.719337][T11197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.733393][T11197] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.757821][T11195] wireguard0: entered promiscuous mode [ 234.763540][T11195] wireguard0: entered allmulticast mode [ 234.837353][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.939559][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.989273][T11218] loop5: detected capacity change from 0 to 512 [ 235.006618][T11220] loop1: detected capacity change from 0 to 2048 [ 235.014622][T11218] EXT4-fs (loop5): 1 orphan inode deleted [ 235.021887][T11218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.040774][ T9843] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 235.044339][T11218] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.073728][T11220] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.108335][T11232] loop0: detected capacity change from 0 to 1024 [ 235.122922][T11220] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.126927][T11232] EXT4-fs: Ignoring removed orlov option [ 235.140444][T11232] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 235.141018][T10351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.172526][T11220] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2812: bg 0: block 345: padding at end of block bitmap is not set [ 235.192221][T11234] lo speed is unknown, defaulting to 1000 [ 235.213872][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.281068][T11242] x_tables: duplicate underflow at hook 1 [ 235.361550][T11236] netlink: 'syz.5.2817': attribute type 12 has an invalid length. [ 235.424007][T11250] loop4: detected capacity change from 0 to 8192 [ 235.433370][T11250] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.446167][T11250] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 235.454879][T11250] FAT-fs (loop4): Filesystem has been set read-only [ 235.460487][T11251] syz.1.2825 (11251): /proc/11249/oom_adj is deprecated, please use /proc/11249/oom_score_adj instead. [ 235.594485][T11263] loop0: detected capacity change from 0 to 2048 [ 235.605434][T11266] FAULT_INJECTION: forcing a failure. [ 235.605434][T11266] name failslab, interval 1, probability 0, space 0, times 0 [ 235.618282][T11266] CPU: 0 UID: 0 PID: 11266 Comm: syz.5.2828 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 235.618422][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 235.618440][T11266] Call Trace: [ 235.618449][T11266] [ 235.618460][T11266] __dump_stack+0x1d/0x30 [ 235.618487][T11266] dump_stack_lvl+0xe8/0x140 [ 235.618513][T11266] dump_stack+0x15/0x1b [ 235.618533][T11266] should_fail_ex+0x265/0x280 [ 235.618594][T11266] ? __se_sys_mount+0xef/0x2e0 [ 235.618625][T11266] should_failslab+0x8c/0xb0 [ 235.618660][T11266] __kmalloc_cache_noprof+0x4c/0x320 [ 235.618684][T11266] ? memdup_user+0x99/0xd0 [ 235.618710][T11266] __se_sys_mount+0xef/0x2e0 [ 235.618806][T11266] ? fput+0x8f/0xc0 [ 235.618829][T11266] ? ksys_write+0x16e/0x1a0 [ 235.618858][T11266] __x64_sys_mount+0x67/0x80 [ 235.618918][T11266] x64_sys_call+0xd36/0x2fb0 [ 235.618953][T11266] do_syscall_64+0xd0/0x1a0 [ 235.619057][T11266] ? clear_bhb_loop+0x40/0x90 [ 235.619081][T11266] ? clear_bhb_loop+0x40/0x90 [ 235.619104][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.619140][T11266] RIP: 0033:0x7fa89a9ce969 [ 235.619166][T11266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.619185][T11266] RSP: 002b:00007fa899016038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 235.619207][T11266] RAX: ffffffffffffffda RBX: 00007fa89abf6080 RCX: 00007fa89a9ce969 [ 235.619290][T11266] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 235.619325][T11266] RBP: 00007fa899016090 R08: 0000200000000280 R09: 0000000000000000 [ 235.619341][T11266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.619355][T11266] R13: 0000000000000000 R14: 00007fa89abf6080 R15: 00007ffc957aa508 [ 235.619379][T11266] [ 235.620398][T11263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.638205][T11262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.650025][T11263] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.658478][T11262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.862867][T11263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2830: bg 0: block 345: padding at end of block bitmap is not set [ 235.907173][T11277] loop3: detected capacity change from 0 to 256 [ 235.930203][T10854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.942467][T11280] loop1: detected capacity change from 0 to 256 [ 235.952269][T11279] loop4: detected capacity change from 0 to 128 [ 235.955102][T11277] syz.3.2834: attempt to access beyond end of device [ 235.955102][T11277] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 235.993970][T11279] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 235.996254][T11277] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.015233][T11279] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.029164][T11283] loop0: detected capacity change from 0 to 128 [ 236.381937][T11296] lo speed is unknown, defaulting to 1000 [ 236.678030][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2844'. [ 236.704599][T11306] loop5: detected capacity change from 0 to 512 [ 236.711395][T11306] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 236.721550][T11306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.734661][T11306] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.766852][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2846'. [ 236.767312][ T3318] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.776999][T11309] netlink: 'syz.5.2846': attribute type 2 has an invalid length. [ 236.856461][T11315] loop4: detected capacity change from 0 to 1024 [ 236.865481][T11315] EXT4-fs: Ignoring removed bh option [ 236.875550][T11315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.897593][T11315] FAULT_INJECTION: forcing a failure. [ 236.897593][T11315] name failslab, interval 1, probability 0, space 0, times 0 [ 236.910450][T11315] CPU: 1 UID: 0 PID: 11315 Comm: syz.4.2849 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 236.910558][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 236.910595][T11315] Call Trace: [ 236.910605][T11315] [ 236.910615][T11315] __dump_stack+0x1d/0x30 [ 236.910676][T11315] dump_stack_lvl+0xe8/0x140 [ 236.910702][T11315] dump_stack+0x15/0x1b [ 236.910803][T11315] should_fail_ex+0x265/0x280 [ 236.910848][T11315] should_failslab+0x8c/0xb0 [ 236.910886][T11315] kmem_cache_alloc_node_noprof+0x57/0x320 [ 236.910992][T11315] ? __alloc_skb+0x101/0x320 [ 236.911028][T11315] __alloc_skb+0x101/0x320 [ 236.911139][T11315] netlink_alloc_large_skb+0xba/0xf0 [ 236.911178][T11315] netlink_sendmsg+0x3cf/0x6b0 [ 236.911205][T11315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.911226][T11315] __sock_sendmsg+0x142/0x180 [ 236.911269][T11315] ____sys_sendmsg+0x31e/0x4e0 [ 236.911300][T11315] ___sys_sendmsg+0x17b/0x1d0 [ 236.911335][T11315] __x64_sys_sendmsg+0xd4/0x160 [ 236.911415][T11315] x64_sys_call+0x2999/0x2fb0 [ 236.911438][T11315] do_syscall_64+0xd0/0x1a0 [ 236.911466][T11315] ? clear_bhb_loop+0x40/0x90 [ 236.911498][T11315] ? clear_bhb_loop+0x40/0x90 [ 236.911526][T11315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.911553][T11315] RIP: 0033:0x7fedd840e969 [ 236.911573][T11315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.911597][T11315] RSP: 002b:00007fedd6a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.911622][T11315] RAX: ffffffffffffffda RBX: 00007fedd8635fa0 RCX: 00007fedd840e969 [ 236.911641][T11315] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 236.911658][T11315] RBP: 00007fedd6a77090 R08: 0000000000000000 R09: 0000000000000000 [ 236.911671][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.911749][T11315] R13: 0000000000000000 R14: 00007fedd8635fa0 R15: 00007ffe732f0858 [ 236.911776][T11315] [ 237.141390][T11324] lo speed is unknown, defaulting to 1000 [ 237.178608][T11325] loop3: detected capacity change from 0 to 1024 [ 237.214044][T11325] EXT4-fs: Ignoring removed bh option [ 237.225969][T11325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.312607][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.362223][T11331] loop0: detected capacity change from 0 to 1024 [ 237.393858][T11331] EXT4-fs: Ignoring removed bh option [ 237.402735][T11335] lo speed is unknown, defaulting to 1000 [ 237.422174][T11331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.509228][T11340] FAULT_INJECTION: forcing a failure. [ 237.509228][T11340] name failslab, interval 1, probability 0, space 0, times 0 [ 237.522032][T11340] CPU: 0 UID: 0 PID: 11340 Comm: syz.5.2856 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 237.522061][T11340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.522077][T11340] Call Trace: [ 237.522086][T11340] [ 237.522096][T11340] __dump_stack+0x1d/0x30 [ 237.522122][T11340] dump_stack_lvl+0xe8/0x140 [ 237.522205][T11340] dump_stack+0x15/0x1b [ 237.522222][T11340] should_fail_ex+0x265/0x280 [ 237.522258][T11340] ? tipc_topsrv_queue_evt+0x1c3/0x300 [ 237.522291][T11340] should_failslab+0x8c/0xb0 [ 237.522385][T11340] __kmalloc_cache_noprof+0x4c/0x320 [ 237.522409][T11340] tipc_topsrv_queue_evt+0x1c3/0x300 [ 237.522444][T11340] tipc_sub_report_overlap+0x2ef/0x310 [ 237.522468][T11340] tipc_nametbl_insert_publ+0x86c/0x930 [ 237.522559][T11340] tipc_nametbl_publish+0x112/0x1c0 [ 237.522604][T11340] tipc_sk_publish+0x121/0x200 [ 237.522630][T11340] tipc_sk_join+0x24b/0x2e0 [ 237.522662][T11340] tipc_setsockopt+0x598/0x620 [ 237.522716][T11340] ? __pfx_tipc_setsockopt+0x10/0x10 [ 237.522744][T11340] __sys_setsockopt+0x181/0x200 [ 237.522813][T11340] __x64_sys_setsockopt+0x64/0x80 [ 237.522833][T11340] x64_sys_call+0x2bd5/0x2fb0 [ 237.522855][T11340] do_syscall_64+0xd0/0x1a0 [ 237.522879][T11340] ? clear_bhb_loop+0x40/0x90 [ 237.522901][T11340] ? clear_bhb_loop+0x40/0x90 [ 237.522976][T11340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.523079][T11340] RIP: 0033:0x7fa89a9ce969 [ 237.523094][T11340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.523113][T11340] RSP: 002b:00007fa899037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.523133][T11340] RAX: ffffffffffffffda RBX: 00007fa89abf5fa0 RCX: 00007fa89a9ce969 [ 237.523151][T11340] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 237.523163][T11340] RBP: 00007fa899037090 R08: 0000000000000010 R09: 0000000000000000 [ 237.523176][T11340] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 237.523188][T11340] R13: 0000000000000000 R14: 00007fa89abf5fa0 R15: 00007ffc957aa508 [ 237.523209][T11340] [ 237.740135][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 238.109583][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.148102][T11360] loop3: detected capacity change from 0 to 2048 [ 238.167470][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.180257][T11360] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.206381][T11360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2863: bg 0: block 345: padding at end of block bitmap is not set [ 238.235967][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.500916][T11370] loop3: detected capacity change from 0 to 512 [ 238.507950][T10854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.544133][T11370] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 238.556913][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2868'. [ 238.607467][T11377] lo speed is unknown, defaulting to 1000 [ 238.624930][T11381] netlink: 'syz.3.2870': attribute type 10 has an invalid length. [ 238.632820][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2870'. [ 238.741034][T11388] lo speed is unknown, defaulting to 1000 [ 238.777764][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2873'. [ 238.781348][T11392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2872'. [ 238.794764][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.864908][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 238.906610][T11407] lo speed is unknown, defaulting to 1000 [ 239.094457][ T29] kauditd_printk_skb: 390 callbacks suppressed [ 239.094487][ T29] audit: type=1326 audit(1747356274.046:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 239.125178][ T29] audit: type=1326 audit(1747356274.046:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 239.150645][T11416] loop0: detected capacity change from 0 to 2048 [ 239.165027][ T29] audit: type=1326 audit(1747356274.126:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 239.189775][ T29] audit: type=1400 audit(1747356274.146:6809): avc: denied { getopt } for pid=11406 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 239.218935][T11416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.239871][T11414] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.2883: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 239.260575][T11414] EXT4-fs (loop0): Remounting filesystem read-only [ 239.282612][T10854] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.316874][T11423] FAULT_INJECTION: forcing a failure. [ 239.316874][T11423] name failslab, interval 1, probability 0, space 0, times 0 [ 239.329895][T11423] CPU: 1 UID: 0 PID: 11423 Comm: syz.0.2884 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 239.329931][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.329995][T11423] Call Trace: [ 239.330004][T11423] [ 239.330014][T11423] __dump_stack+0x1d/0x30 [ 239.330042][T11423] dump_stack_lvl+0xe8/0x140 [ 239.330067][T11423] dump_stack+0x15/0x1b [ 239.330088][T11423] should_fail_ex+0x265/0x280 [ 239.330187][T11423] should_failslab+0x8c/0xb0 [ 239.330250][T11423] kmem_cache_alloc_noprof+0x50/0x310 [ 239.330275][T11423] ? skb_clone+0x151/0x1f0 [ 239.330298][T11423] skb_clone+0x151/0x1f0 [ 239.330320][T11423] __netlink_deliver_tap+0x2c9/0x500 [ 239.330378][T11423] netlink_unicast+0x64c/0x670 [ 239.330419][T11423] netlink_sendmsg+0x58b/0x6b0 [ 239.330440][T11423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.330464][T11423] __sock_sendmsg+0x142/0x180 [ 239.330540][T11423] ____sys_sendmsg+0x31e/0x4e0 [ 239.330601][T11423] ___sys_sendmsg+0x17b/0x1d0 [ 239.330636][T11423] __x64_sys_sendmsg+0xd4/0x160 [ 239.330660][T11423] x64_sys_call+0x2999/0x2fb0 [ 239.330682][T11423] do_syscall_64+0xd0/0x1a0 [ 239.330749][T11423] ? clear_bhb_loop+0x40/0x90 [ 239.330776][T11423] ? clear_bhb_loop+0x40/0x90 [ 239.330804][T11423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.330878][T11423] RIP: 0033:0x7efefefee969 [ 239.330894][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.330914][T11423] RSP: 002b:00007efefd657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.330937][T11423] RAX: ffffffffffffffda RBX: 00007efeff215fa0 RCX: 00007efefefee969 [ 239.330984][T11423] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 239.331000][T11423] RBP: 00007efefd657090 R08: 0000000000000000 R09: 0000000000000000 [ 239.331015][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.331032][T11423] R13: 0000000000000000 R14: 00007efeff215fa0 R15: 00007ffcf7e30c88 [ 239.331065][T11423] [ 239.385328][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.652983][ T29] audit: type=1326 audit(1747356274.616:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 239.677101][ T29] audit: type=1326 audit(1747356274.616:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11408 comm="syz.5.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa89a9ce969 code=0x7ffc0000 [ 239.709488][ T29] audit: type=1400 audit(1747356274.676:6812): avc: denied { bind } for pid=11435 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 239.792574][T11434] loop3: detected capacity change from 0 to 512 [ 239.845189][T11434] EXT4-fs (loop3): 1 orphan inode deleted [ 239.860205][T11434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.874494][ T9852] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.884395][ T9852] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:33: Failed to release dquot type 1 [ 239.900807][T11434] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.973116][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.014259][T11456] lo speed is unknown, defaulting to 1000 [ 240.079566][T11458] lo speed is unknown, defaulting to 1000 [ 240.161725][T11462] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.226210][T11462] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.278877][T11468] loop5: detected capacity change from 0 to 1024 [ 240.287920][T11468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.298030][T11468] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.309874][T11462] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.310823][T11468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 240.330919][T11468] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 2: comm syz.5.2900: lblock 2 mapped to illegal pblock 2 (length 1) [ 240.347032][T11468] EXT4-fs (loop5): Remounting filesystem read-only [ 240.353739][T11468] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 240.362596][T11468] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 240.373074][T11468] EXT4-fs (loop5): 1 orphan inode deleted [ 240.380397][T11468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.394798][T11468] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.404709][T11462] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.482350][T11476] FAULT_INJECTION: forcing a failure. [ 240.482350][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 240.495226][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.5.2903 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 240.495262][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.495327][T11476] Call Trace: [ 240.495334][T11476] [ 240.495383][T11476] __dump_stack+0x1d/0x30 [ 240.495484][T11476] dump_stack_lvl+0xe8/0x140 [ 240.495509][T11476] dump_stack+0x15/0x1b [ 240.495531][T11476] should_fail_ex+0x265/0x280 [ 240.495655][T11476] should_failslab+0x8c/0xb0 [ 240.495693][T11476] kmem_cache_alloc_noprof+0x50/0x310 [ 240.495717][T11476] ? skb_clone+0x151/0x1f0 [ 240.495746][T11476] skb_clone+0x151/0x1f0 [ 240.495772][T11476] __netlink_deliver_tap+0x2c9/0x500 [ 240.495823][T11476] netlink_unicast+0x64c/0x670 [ 240.495864][T11476] netlink_sendmsg+0x58b/0x6b0 [ 240.495891][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.495947][T11476] __sock_sendmsg+0x142/0x180 [ 240.496001][T11476] ____sys_sendmsg+0x31e/0x4e0 [ 240.496032][T11476] ___sys_sendmsg+0x17b/0x1d0 [ 240.496078][T11476] __x64_sys_sendmsg+0xd4/0x160 [ 240.496171][T11476] x64_sys_call+0x2999/0x2fb0 [ 240.496215][T11476] do_syscall_64+0xd0/0x1a0 [ 240.496245][T11476] ? clear_bhb_loop+0x40/0x90 [ 240.496335][T11476] ? clear_bhb_loop+0x40/0x90 [ 240.496400][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.496427][T11476] RIP: 0033:0x7fa89a9ce969 [ 240.496446][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.496512][T11476] RSP: 002b:00007fa899037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.496536][T11476] RAX: ffffffffffffffda RBX: 00007fa89abf5fa0 RCX: 00007fa89a9ce969 [ 240.496552][T11476] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 0000000000000005 [ 240.496584][T11476] RBP: 00007fa899037090 R08: 0000000000000000 R09: 0000000000000000 [ 240.496599][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.496614][T11476] R13: 0000000000000000 R14: 00007fa89abf5fa0 R15: 00007ffc957aa508 [ 240.496640][T11476] [ 240.512390][T11462] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.584975][T11478] loop5: detected capacity change from 0 to 256 [ 240.608504][T11462] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.674552][T11481] loop1: detected capacity change from 0 to 1024 [ 240.696344][T11462] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.748313][T11481] EXT4-fs: Ignoring removed bh option [ 240.755262][T11462] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.764770][T11481] EXT4-fs: inline encryption not supported [ 240.782857][T11481] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.828568][T11487] FAULT_INJECTION: forcing a failure. [ 240.828568][T11487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.841964][T11487] CPU: 0 UID: 0 PID: 11487 Comm: syz.0.2907 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 240.842000][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.842073][T11487] Call Trace: [ 240.842082][T11487] [ 240.842091][T11487] __dump_stack+0x1d/0x30 [ 240.842144][T11487] dump_stack_lvl+0xe8/0x140 [ 240.842167][T11487] dump_stack+0x15/0x1b [ 240.842183][T11487] should_fail_ex+0x265/0x280 [ 240.842217][T11487] should_fail+0xb/0x20 [ 240.842267][T11487] should_fail_usercopy+0x1a/0x20 [ 240.842288][T11487] _copy_to_user+0x20/0xa0 [ 240.842393][T11487] put_itimerspec64+0xcd/0x110 [ 240.842534][T11487] __x64_sys_timer_gettime+0x9f/0xf0 [ 240.842564][T11487] x64_sys_call+0xf89/0x2fb0 [ 240.842590][T11487] do_syscall_64+0xd0/0x1a0 [ 240.842686][T11487] ? clear_bhb_loop+0x40/0x90 [ 240.842707][T11487] ? clear_bhb_loop+0x40/0x90 [ 240.842727][T11487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.842747][T11487] RIP: 0033:0x7efefefee969 [ 240.842761][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.842840][T11487] RSP: 002b:00007efefd657038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 240.842878][T11487] RAX: ffffffffffffffda RBX: 00007efeff215fa0 RCX: 00007efefefee969 [ 240.842892][T11487] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000000 [ 240.842904][T11487] RBP: 00007efefd657090 R08: 0000000000000000 R09: 0000000000000000 [ 240.842915][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.842927][T11487] R13: 0000000000000000 R14: 00007efeff215fa0 R15: 00007ffcf7e30c88 [ 240.842945][T11487] [ 241.031398][T11481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 241.045922][T11481] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 2: comm syz.1.2905: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.061296][T11481] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 48: comm syz.1.2905: lblock 0 mapped to illegal pblock 48 (length 1) [ 241.077012][T11481] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2905: Failed to acquire dquot type 0 [ 241.088780][T11481] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 241.100287][T11481] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.2905: mark_inode_dirty error [ 241.112038][T11481] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 241.124221][T11481] EXT4-fs (loop1): 1 orphan inode deleted [ 241.130540][T11481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.154884][ T2215] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.170722][T11495] FAULT_INJECTION: forcing a failure. [ 241.170722][T11495] name failslab, interval 1, probability 0, space 0, times 0 [ 241.183457][T11495] CPU: 1 UID: 0 PID: 11495 Comm: syz.0.2910 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 241.183485][T11495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.183500][T11495] Call Trace: [ 241.183508][T11495] [ 241.183518][T11495] __dump_stack+0x1d/0x30 [ 241.183615][T11495] dump_stack_lvl+0xe8/0x140 [ 241.183649][T11495] dump_stack+0x15/0x1b [ 241.183664][T11495] should_fail_ex+0x265/0x280 [ 241.183764][T11495] should_failslab+0x8c/0xb0 [ 241.183805][T11495] kmem_cache_alloc_noprof+0x50/0x310 [ 241.183828][T11495] ? skb_clone+0x151/0x1f0 [ 241.183851][T11495] skb_clone+0x151/0x1f0 [ 241.183923][T11495] __netlink_deliver_tap+0x2c9/0x500 [ 241.183951][T11495] netlink_unicast+0x64c/0x670 [ 241.183989][T11495] netlink_sendmsg+0x58b/0x6b0 [ 241.184014][T11495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.184092][T11495] __sock_sendmsg+0x142/0x180 [ 241.184232][T11495] ____sys_sendmsg+0x31e/0x4e0 [ 241.184256][T11495] ___sys_sendmsg+0x17b/0x1d0 [ 241.184300][T11495] __x64_sys_sendmsg+0xd4/0x160 [ 241.184332][T11495] x64_sys_call+0x2999/0x2fb0 [ 241.184359][T11495] do_syscall_64+0xd0/0x1a0 [ 241.184396][T11495] ? clear_bhb_loop+0x40/0x90 [ 241.184419][T11495] ? clear_bhb_loop+0x40/0x90 [ 241.184439][T11495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.184476][T11495] RIP: 0033:0x7efefefee969 [ 241.184495][T11495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.184517][T11495] RSP: 002b:00007efefd657038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.184540][T11495] RAX: ffffffffffffffda RBX: 00007efeff215fa0 RCX: 00007efefefee969 [ 241.184555][T11495] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 241.184578][T11495] RBP: 00007efefd657090 R08: 0000000000000000 R09: 0000000000000000 [ 241.184629][T11495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.184641][T11495] R13: 0000000000000000 R14: 00007efeff215fa0 R15: 00007ffcf7e30c88 [ 241.184659][T11495] [ 241.401211][ T2215] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 241.403036][T11499] loop3: detected capacity change from 0 to 1024 [ 241.420235][T11499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.429335][T11499] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.441436][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.451026][T11499] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 241.459759][ T3322] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 241.474950][ T3322] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 241.485736][ T3322] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 241.522408][T11499] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.2912: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.542425][T11499] EXT4-fs (loop3): Remounting filesystem read-only [ 241.550682][T11499] EXT4-fs (loop3): 1 orphan inode deleted [ 241.557171][T11499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.572235][T11499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.623093][T11513] loop5: detected capacity change from 0 to 164 [ 241.709484][T11513] syz.5.2918: attempt to access beyond end of device [ 241.709484][T11513] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 241.727385][T11513] syz.5.2918: attempt to access beyond end of device [ 241.727385][T11513] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 241.751651][T11529] loop0: detected capacity change from 0 to 164 [ 241.809006][T11529] syz.0.2926: attempt to access beyond end of device [ 241.809006][T11529] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 241.844198][T11529] syz.0.2926: attempt to access beyond end of device [ 241.844198][T11529] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 241.861379][T11532] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 241.902571][T11529] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 242.020906][T11549] loop5: detected capacity change from 0 to 2048 [ 242.049185][T11549] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.066572][T11549] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.094071][T11559] lo speed is unknown, defaulting to 1000 [ 242.104629][T11549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2935: bg 0: block 345: padding at end of block bitmap is not set [ 242.133375][T10351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.185020][T11569] openvswitch: netlink: Message has 6 unknown bytes. [ 242.527064][T11601] openvswitch: netlink: Message has 6 unknown bytes. [ 242.537795][T11596] lo speed is unknown, defaulting to 1000 [ 242.858697][T11623] bridge_slave_0: entered promiscuous mode [ 242.883427][T11622] lo speed is unknown, defaulting to 1000 [ 242.921024][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2965'. [ 243.066946][T11634] lo speed is unknown, defaulting to 1000 [ 243.222363][T11642] loop3: detected capacity change from 0 to 2048 [ 243.361005][T11658] loop3: detected capacity change from 0 to 2048 [ 243.385689][T11658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.410975][T11658] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.434446][T11658] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2980: bg 0: block 345: padding at end of block bitmap is not set [ 243.460247][ T3327] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /571/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 243.471799][T11668] lo speed is unknown, defaulting to 1000 [ 243.525511][ T3327] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 243.593779][ T3327] EXT4-fs error (device loop3): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 243.624176][T11683] loop5: detected capacity change from 0 to 1024 [ 243.653337][T11683] EXT4-fs: Ignoring removed orlov option [ 243.682067][T11683] ext4: Unknown parameter 'smackfshat' [ 243.709493][T11683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.717039][T11683] IPv6: NLM_F_CREATE should be set when creating new route [ 243.822774][T11697] loop1: detected capacity change from 0 to 8192 [ 243.830469][T11697] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.845541][T11697] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 243.854203][T11697] FAT-fs (loop1): Filesystem has been set read-only [ 244.015786][T11715] loop4: detected capacity change from 0 to 1024 [ 244.029458][T11715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.047644][T11715] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.058851][T11715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 244.069648][T11715] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.3003: lblock 2 mapped to illegal pblock 2 (length 1) [ 244.093817][T11715] EXT4-fs (loop4): Remounting filesystem read-only [ 244.106802][T11715] __quota_error: 379 callbacks suppressed [ 244.106822][T11715] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 244.139969][T11715] EXT4-fs (loop4): 1 orphan inode deleted [ 244.146543][T11715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.159677][T11715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.227154][T11726] loop4: detected capacity change from 0 to 8192 [ 244.235000][T11726] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.248783][T11726] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 244.257859][T11726] FAT-fs (loop4): Filesystem has been set read-only [ 244.295334][ T29] audit: type=1326 audit(1747356279.266:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.321682][ T29] audit: type=1326 audit(1747356279.266:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.345832][ T29] audit: type=1326 audit(1747356279.286:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedd840d2d0 code=0x7ffc0000 [ 244.369815][ T29] audit: type=1326 audit(1747356279.286:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.394096][ T29] audit: type=1326 audit(1747356279.286:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.418070][ T29] audit: type=1326 audit(1747356279.286:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.438907][T11734] lo speed is unknown, defaulting to 1000 [ 244.441898][ T29] audit: type=1326 audit(1747356279.286:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.471678][ T29] audit: type=1326 audit(1747356279.286:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.495754][ T29] audit: type=1326 audit(1747356279.286:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11731 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedd840e969 code=0x7ffc0000 [ 244.735271][T11750] loop4: detected capacity change from 0 to 1024 [ 244.742273][T11750] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.751096][T11750] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 244.762625][T11750] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 244.771909][T11750] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.3019: lblock 2 mapped to illegal pblock 2 (length 1) [ 244.786391][T11750] EXT4-fs (loop4): Remounting filesystem read-only [ 244.793021][T11750] EXT4-fs (loop4): 1 orphan inode deleted [ 244.913839][T11755] loop4: detected capacity change from 0 to 8192 [ 244.925605][T11755] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.937746][T11755] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 244.946433][T11755] FAT-fs (loop4): Filesystem has been set read-only [ 244.986707][T11765] loop5: detected capacity change from 0 to 512 [ 244.996133][T11765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 245.012166][T11769] netlink: 'syz.4.3027': attribute type 5 has an invalid length. [ 245.049181][T11765] EXT4-fs (loop5): 1 truncate cleaned up [ 245.136112][T11805] lo speed is unknown, defaulting to 1000 [ 245.527995][T11802] lo speed is unknown, defaulting to 1000 [ 245.837838][T11802] chnl_net:caif_netlink_parms(): no params data found [ 245.932735][T11830] FAULT_INJECTION: forcing a failure. [ 245.932735][T11830] name failslab, interval 1, probability 0, space 0, times 0 [ 245.945655][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.1.3035 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 245.945728][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 245.945741][T11830] Call Trace: [ 245.945748][T11830] [ 245.945756][T11830] __dump_stack+0x1d/0x30 [ 245.945779][T11830] dump_stack_lvl+0xe8/0x140 [ 245.945797][T11830] dump_stack+0x15/0x1b [ 245.945826][T11830] should_fail_ex+0x265/0x280 [ 245.945863][T11830] should_failslab+0x8c/0xb0 [ 245.945900][T11830] kmem_cache_alloc_node_noprof+0x57/0x320 [ 245.945920][T11830] ? __alloc_skb+0x101/0x320 [ 245.945992][T11830] __alloc_skb+0x101/0x320 [ 245.946021][T11830] ? audit_log_start+0x365/0x6c0 [ 245.946056][T11830] audit_log_start+0x380/0x6c0 [ 245.946105][T11830] audit_seccomp+0x48/0x100 [ 245.946134][T11830] ? __seccomp_filter+0x68c/0x10d0 [ 245.946172][T11830] __seccomp_filter+0x69d/0x10d0 [ 245.946195][T11830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 245.946225][T11830] ? vfs_write+0x75e/0x8d0 [ 245.946316][T11830] ? __rcu_read_unlock+0x4f/0x70 [ 245.946355][T11830] ? __fget_files+0x184/0x1c0 [ 245.946400][T11830] __secure_computing+0x82/0x150 [ 245.946482][T11830] syscall_trace_enter+0xcf/0x1e0 [ 245.946542][T11830] do_syscall_64+0xaa/0x1a0 [ 245.946591][T11830] ? clear_bhb_loop+0x40/0x90 [ 245.946645][T11830] ? clear_bhb_loop+0x40/0x90 [ 245.946668][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.946695][T11830] RIP: 0033:0x7f0a6b41e969 [ 245.946709][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.946731][T11830] RSP: 002b:00007f0a69a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000025 [ 245.946754][T11830] RAX: ffffffffffffffda RBX: 00007f0a6b645fa0 RCX: 00007f0a6b41e969 [ 245.946780][T11830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 245.946860][T11830] RBP: 00007f0a69a87090 R08: 0000000000000000 R09: 0000000000000000 [ 245.946875][T11830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.946890][T11830] R13: 0000000000000000 R14: 00007f0a6b645fa0 R15: 00007ffcb144c378 [ 245.946908][T11830] [ 246.193387][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.200677][T11802] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.209441][T11802] bridge_slave_0: entered allmulticast mode [ 246.216188][T11802] bridge_slave_0: entered promiscuous mode [ 246.223416][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.230779][T11802] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.239831][T11802] bridge_slave_1: entered allmulticast mode [ 246.246664][T11802] bridge_slave_1: entered promiscuous mode [ 246.271891][T11802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.301786][T11802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.337101][T11802] team0: Port device team_slave_0 added [ 246.364461][T11802] team0: Port device team_slave_1 added [ 246.394939][T11802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.402260][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.428967][T11802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.514934][T11856] 9pnet_fd: Insufficient options for proto=fd [ 246.527913][T11802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.527926][T11802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.528011][T11802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.549760][T11802] hsr_slave_0: entered promiscuous mode [ 246.550363][T11802] hsr_slave_1: entered promiscuous mode [ 246.550695][T11802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.550713][T11802] Cannot create hsr debugfs directory [ 246.752622][T11861] loop4: detected capacity change from 0 to 512 [ 246.770237][T11861] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.787258][T11802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 246.798198][T11802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 246.808329][T11861] EXT4-fs (loop4): 1 truncate cleaned up [ 246.816583][T11802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 246.827976][T11802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 246.922160][T11802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.949915][T11802] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.964818][ T9845] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.972255][ T9845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.997864][ T9845] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.005160][ T9845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.024468][T11802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.035247][T11802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.123610][T11802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.205857][T11877] loop1: detected capacity change from 0 to 1024 [ 247.210905][T11882] lo speed is unknown, defaulting to 1000 [ 247.248149][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3051'. [ 247.350700][T11896] loop1: detected capacity change from 0 to 512 [ 247.379432][T11896] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.416604][T11896] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.460395][T11896] loop1: detected capacity change from 0 to 1024 [ 247.482536][T11912] loop5: detected capacity change from 0 to 1024 [ 247.497320][T11802] veth0_vlan: entered promiscuous mode [ 247.506783][T11896] FAULT_INJECTION: forcing a failure. [ 247.506783][T11896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.519916][T11896] CPU: 1 UID: 0 PID: 11896 Comm: syz.1.3054 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 247.520009][T11896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.520025][T11896] Call Trace: [ 247.520034][T11896] [ 247.520043][T11896] __dump_stack+0x1d/0x30 [ 247.520069][T11896] dump_stack_lvl+0xe8/0x140 [ 247.520093][T11896] dump_stack+0x15/0x1b [ 247.520113][T11896] should_fail_ex+0x265/0x280 [ 247.520222][T11896] should_fail+0xb/0x20 [ 247.520260][T11896] should_fail_usercopy+0x1a/0x20 [ 247.520285][T11896] strncpy_from_user+0x25/0x230 [ 247.520314][T11896] ? kmem_cache_alloc_noprof+0x186/0x310 [ 247.520395][T11896] ? getname_flags+0x80/0x3b0 [ 247.520467][T11896] getname_flags+0xae/0x3b0 [ 247.520526][T11896] path_setxattrat+0x223/0x310 [ 247.520576][T11896] __x64_sys_setxattr+0x6e/0x90 [ 247.520670][T11896] x64_sys_call+0x28a7/0x2fb0 [ 247.520698][T11896] do_syscall_64+0xd0/0x1a0 [ 247.520808][T11896] ? clear_bhb_loop+0x40/0x90 [ 247.520834][T11896] ? clear_bhb_loop+0x40/0x90 [ 247.520858][T11896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.520955][T11896] RIP: 0033:0x7f0a6b41e969 [ 247.520975][T11896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.521060][T11896] RSP: 002b:00007f0a69a87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 247.521135][T11896] RAX: ffffffffffffffda RBX: 00007f0a6b645fa0 RCX: 00007f0a6b41e969 [ 247.521152][T11896] RDX: 0000200000000580 RSI: 0000200000000540 RDI: 0000200000000000 [ 247.521168][T11896] RBP: 00007f0a69a87090 R08: 0000000000000001 R09: 0000000000000000 [ 247.521182][T11896] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000001 [ 247.521196][T11896] R13: 0000000000000000 R14: 00007f0a6b645fa0 R15: 00007ffcb144c378 [ 247.521239][T11896] [ 247.718346][T11912] FAULT_INJECTION: forcing a failure. [ 247.718346][T11912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.731696][T11912] CPU: 0 UID: 0 PID: 11912 Comm: syz.5.3058 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 247.731790][T11912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.731806][T11912] Call Trace: [ 247.731813][T11912] [ 247.731858][T11912] __dump_stack+0x1d/0x30 [ 247.731882][T11912] dump_stack_lvl+0xe8/0x140 [ 247.731904][T11912] dump_stack+0x15/0x1b [ 247.731922][T11912] should_fail_ex+0x265/0x280 [ 247.731984][T11912] should_fail+0xb/0x20 [ 247.732016][T11912] should_fail_usercopy+0x1a/0x20 [ 247.732069][T11912] strncpy_from_user+0x25/0x230 [ 247.732111][T11912] path_setxattrat+0xeb/0x310 [ 247.732198][T11912] __x64_sys_fsetxattr+0x6b/0x80 [ 247.732228][T11912] x64_sys_call+0x2f7c/0x2fb0 [ 247.732251][T11912] do_syscall_64+0xd0/0x1a0 [ 247.732276][T11912] ? clear_bhb_loop+0x40/0x90 [ 247.732310][T11912] ? clear_bhb_loop+0x40/0x90 [ 247.732332][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.732358][T11912] RIP: 0033:0x7fa89a9ce969 [ 247.732426][T11912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.732448][T11912] RSP: 002b:00007fa899037038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 247.732470][T11912] RAX: ffffffffffffffda RBX: 00007fa89abf5fa0 RCX: 00007fa89a9ce969 [ 247.732486][T11912] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 247.732540][T11912] RBP: 00007fa899037090 R08: 0000000000000000 R09: 0000000000000000 [ 247.732555][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.732570][T11912] R13: 0000000000000000 R14: 00007fa89abf5fa0 R15: 00007ffc957aa508 [ 247.732671][T11912] [ 247.910404][T11802] veth1_vlan: entered promiscuous mode [ 247.954565][T11926] FAULT_INJECTION: forcing a failure. [ 247.954565][T11926] name failslab, interval 1, probability 0, space 0, times 0 [ 247.967564][T11926] CPU: 1 UID: 0 PID: 11926 Comm: syz.4.3062 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 247.967670][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.967686][T11926] Call Trace: [ 247.967694][T11926] [ 247.967704][T11926] __dump_stack+0x1d/0x30 [ 247.967730][T11926] dump_stack_lvl+0xe8/0x140 [ 247.967756][T11926] dump_stack+0x15/0x1b [ 247.967777][T11926] should_fail_ex+0x265/0x280 [ 247.967908][T11926] should_failslab+0x8c/0xb0 [ 247.967946][T11926] kmem_cache_alloc_noprof+0x50/0x310 [ 247.967971][T11926] ? audit_log_start+0x365/0x6c0 [ 247.968011][T11926] audit_log_start+0x365/0x6c0 [ 247.968061][T11926] audit_seccomp+0x48/0x100 [ 247.968088][T11926] ? __seccomp_filter+0x68c/0x10d0 [ 247.968111][T11926] __seccomp_filter+0x69d/0x10d0 [ 247.968137][T11926] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.968200][T11926] ? vfs_write+0x75e/0x8d0 [ 247.968232][T11926] ? __rcu_read_unlock+0x4f/0x70 [ 247.968279][T11926] ? __fget_files+0x184/0x1c0 [ 247.968413][T11926] __secure_computing+0x82/0x150 [ 247.968435][T11926] syscall_trace_enter+0xcf/0x1e0 [ 247.968459][T11926] do_syscall_64+0xaa/0x1a0 [ 247.968500][T11926] ? clear_bhb_loop+0x40/0x90 [ 247.968527][T11926] ? clear_bhb_loop+0x40/0x90 [ 247.968554][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.968618][T11926] RIP: 0033:0x7fedd840e969 [ 247.968649][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.968671][T11926] RSP: 002b:00007fedd6a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 247.968712][T11926] RAX: ffffffffffffffda RBX: 00007fedd8635fa0 RCX: 00007fedd840e969 [ 247.968728][T11926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 247.968744][T11926] RBP: 00007fedd6a77090 R08: 0000000000001000 R09: 0000000000000000 [ 247.968760][T11926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.968775][T11926] R13: 0000000000000000 R14: 00007fedd8635fa0 R15: 00007ffe732f0858 [ 247.968824][T11926] [ 248.201965][T11802] veth0_macvtap: entered promiscuous mode [ 248.214807][T11802] veth1_macvtap: entered promiscuous mode [ 248.244042][T11802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.256019][T11802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.267640][T11802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.278329][T11802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.291914][T11802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.301306][T11802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.312352][T11802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.322370][T11802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.333019][T11802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.343612][T11802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.347466][T11928] loop4: detected capacity change from 0 to 164 [ 248.354450][T11802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.355976][T11802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.405602][T11802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.414581][T11802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.423555][T11802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.432443][T11802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.521008][T11928] syz.4.3065: attempt to access beyond end of device [ 248.521008][T11928] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 248.539201][T11928] syz.4.3065: attempt to access beyond end of device [ 248.539201][T11928] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 248.634980][T11928] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 248.685594][T11941] No such timeout policy "syz0" [ 248.703308][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3029'. [ 248.758496][T11949] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 248.774050][T11949] team0: Port device batadv1 added [ 248.802132][T11954] random: crng reseeded on system resumption [ 248.809179][T11952] loop5: detected capacity change from 0 to 2048 [ 248.896564][T11952] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.930271][T11952] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3071: bg 0: block 345: padding at end of block bitmap is not set [ 249.056915][ T9849] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 249.067480][ T9849] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.166914][ T9849] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 249.177039][ T9849] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.217947][T11955] lo speed is unknown, defaulting to 1000 [ 249.247522][ T9849] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 249.258609][ T9849] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.327598][ T9849] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 249.338657][ T9849] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.376518][T11980] loop5: detected capacity change from 0 to 512 [ 249.383592][T11980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.407896][T11955] chnl_net:caif_netlink_parms(): no params data found [ 249.418547][T11980] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.465204][T11980] loop5: detected capacity change from 0 to 1024 [ 249.500558][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 249.500575][ T29] audit: type=1400 audit(1747356284.466:7551): avc: denied { setattr } for pid=11979 comm="syz.5.3075" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 249.536924][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.537117][T11980] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.3075: inode #2846570127: comm syz.5.3075: iget: illegal inode # [ 249.544212][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.548459][T11991] unsupported nla_type 27426 [ 249.553737][ T29] audit: type=1400 audit(1747356284.516:7552): avc: denied { create } for pid=11990 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.581422][T11955] bridge_slave_0: entered allmulticast mode [ 249.595938][ T29] audit: type=1400 audit(1747356284.516:7553): avc: denied { write } for pid=11990 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.595970][ T29] audit: type=1400 audit(1747356284.516:7554): avc: denied { nlmsg_write } for pid=11990 comm="syz.1.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.629688][T11980] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.3075: error while reading EA inode 2846570127 err=-117 [ 249.644581][T11955] bridge_slave_0: entered promiscuous mode [ 249.667820][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.674975][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.682290][T11955] bridge_slave_1: entered allmulticast mode [ 249.700991][T11955] bridge_slave_1: entered promiscuous mode [ 249.768433][ T9849] $Hÿ (unregistering): Released all slaves [ 249.783831][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.795479][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.818200][ T9849] tipc: Left network mode [ 249.819278][T11955] team0: Port device team_slave_0 added [ 249.829689][T11955] team0: Port device team_slave_1 added [ 249.861598][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.868689][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.895187][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.909961][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.917011][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.943921][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.962572][ T9849] veth0_macvtap: left promiscuous mode [ 249.968491][ T9849] veth1_vlan: left promiscuous mode [ 250.052754][ T9852] smc: removing ib device syz! [ 250.065672][T12013] loop6: detected capacity change from 0 to 164 [ 250.087391][T12013] syz.6.3088: attempt to access beyond end of device [ 250.087391][T12013] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 250.103017][T12013] syz.6.3088: attempt to access beyond end of device [ 250.103017][T12013] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 250.157041][T11955] hsr_slave_0: entered promiscuous mode [ 250.172996][T11955] hsr_slave_1: entered promiscuous mode [ 250.191295][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.200451][T12014] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 250.208513][T11955] Cannot create hsr debugfs directory [ 250.404962][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3091'. [ 250.462519][ T29] audit: type=1400 audit(1747356285.426:7555): avc: denied { accept } for pid=12025 comm="syz.6.3093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 250.557368][ T29] audit: type=1400 audit(1747356285.526:7556): avc: denied { read write } for pid=12033 comm="syz.6.3097" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.581369][ T29] audit: type=1400 audit(1747356285.526:7557): avc: denied { open } for pid=12033 comm="syz.6.3097" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.583106][T12034] loop6: detected capacity change from 0 to 512 [ 250.604942][ T29] audit: type=1400 audit(1747356285.526:7558): avc: denied { ioctl } for pid=12033 comm="syz.6.3097" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 250.666110][ T29] audit: type=1326 audit(1747356285.636:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12035 comm="syz.0.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefefee969 code=0x7ffc0000 [ 250.689926][ T29] audit: type=1326 audit(1747356285.636:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12035 comm="syz.0.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefefee969 code=0x7ffc0000 [ 250.750369][T11955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.776251][T11955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.796387][T11955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.807362][T11955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.819242][T12046] FAULT_INJECTION: forcing a failure. [ 250.819242][T12046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 250.832984][T12046] CPU: 0 UID: 0 PID: 12046 Comm: syz.6.3103 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 250.833018][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 250.833034][T12046] Call Trace: [ 250.833042][T12046] [ 250.833052][T12046] __dump_stack+0x1d/0x30 [ 250.833077][T12046] dump_stack_lvl+0xe8/0x140 [ 250.833180][T12046] dump_stack+0x15/0x1b [ 250.833197][T12046] should_fail_ex+0x265/0x280 [ 250.833301][T12046] should_fail_alloc_page+0xf2/0x100 [ 250.833335][T12046] __alloc_frozen_pages_noprof+0xff/0x360 [ 250.833421][T12046] alloc_pages_mpol+0xb3/0x250 [ 250.833445][T12046] vma_alloc_folio_noprof+0x1aa/0x300 [ 250.833519][T12046] handle_mm_fault+0x1056/0x2ae0 [ 250.833564][T12046] ? __rcu_read_lock+0x37/0x50 [ 250.833601][T12046] __get_user_pages+0xde2/0x1d20 [ 250.833726][T12046] faultin_page_range+0x10f/0x5b0 [ 250.833768][T12046] madvise_do_behavior+0x113/0x24a0 [ 250.833791][T12046] ? __rcu_read_unlock+0x4f/0x70 [ 250.833878][T12046] ? perf_trace_mmap_lock_acquire_returned+0x225/0x270 [ 250.833911][T12046] ? __mmap_lock_do_trace_acquire_returned+0xcd/0xf0 [ 250.833996][T12046] __x64_sys_madvise+0xc9/0x100 [ 250.834087][T12046] x64_sys_call+0x2455/0x2fb0 [ 250.834125][T12046] do_syscall_64+0xd0/0x1a0 [ 250.834149][T12046] ? clear_bhb_loop+0x40/0x90 [ 250.834171][T12046] ? clear_bhb_loop+0x40/0x90 [ 250.834193][T12046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.834229][T12046] RIP: 0033:0x7f3edc19e969 [ 250.834244][T12046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.834262][T12046] RSP: 002b:00007f3eda807038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 250.834280][T12046] RAX: ffffffffffffffda RBX: 00007f3edc3c5fa0 RCX: 00007f3edc19e969 [ 250.834293][T12046] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 250.834374][T12046] RBP: 00007f3eda807090 R08: 0000000000000000 R09: 0000000000000000 [ 250.834386][T12046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.834399][T12046] R13: 0000000000000000 R14: 00007f3edc3c5fa0 R15: 00007fff7f7d8348 [ 250.834418][T12046] [ 251.059729][T12038] loop1: detected capacity change from 0 to 8192 [ 251.069758][T12038] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.091369][T12038] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 251.091988][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.100359][T12038] FAT-fs (loop1): Filesystem has been set read-only [ 251.122303][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.147848][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.155382][ T9849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.167755][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.175019][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.218983][T12054] FAULT_INJECTION: forcing a failure. [ 251.218983][T12054] name failslab, interval 1, probability 0, space 0, times 0 [ 251.231929][T12054] CPU: 0 UID: 0 PID: 12054 Comm: syz.5.3105 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 251.231962][T12054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 251.231975][T12054] Call Trace: [ 251.231981][T12054] [ 251.232020][T12054] __dump_stack+0x1d/0x30 [ 251.232112][T12054] dump_stack_lvl+0xe8/0x140 [ 251.232147][T12054] dump_stack+0x15/0x1b [ 251.232166][T12054] should_fail_ex+0x265/0x280 [ 251.232207][T12054] should_failslab+0x8c/0xb0 [ 251.232306][T12054] kmem_cache_alloc_noprof+0x50/0x310 [ 251.232331][T12054] ? audit_log_start+0x365/0x6c0 [ 251.232367][T12054] audit_log_start+0x365/0x6c0 [ 251.232402][T12054] ? perf_event_attach_bpf_prog+0x199/0x1d0 [ 251.232479][T12054] audit_seccomp+0x48/0x100 [ 251.232511][T12054] ? __seccomp_filter+0x68c/0x10d0 [ 251.232540][T12054] __seccomp_filter+0x69d/0x10d0 [ 251.232588][T12054] ? do_vfs_ioctl+0x993/0x15b0 [ 251.232615][T12054] ? selinux_file_ioctl+0x2e3/0x370 [ 251.232655][T12054] __secure_computing+0x82/0x150 [ 251.232683][T12054] syscall_trace_enter+0xcf/0x1e0 [ 251.232778][T12054] do_syscall_64+0xaa/0x1a0 [ 251.232908][T12054] ? clear_bhb_loop+0x40/0x90 [ 251.232940][T12054] ? clear_bhb_loop+0x40/0x90 [ 251.232968][T12054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.232995][T12054] RIP: 0033:0x7fa89a9cd37c [ 251.233014][T12054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 251.233107][T12054] RSP: 002b:00007fa899037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 251.233128][T12054] RAX: ffffffffffffffda RBX: 00007fa89abf5fa0 RCX: 00007fa89a9cd37c [ 251.233142][T12054] RDX: 000000000000000f RSI: 00007fa8990370a0 RDI: 000000000000000a [ 251.233158][T12054] RBP: 00007fa899037090 R08: 0000000000000000 R09: 0000000000000000 [ 251.233174][T12054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.233221][T12054] R13: 0000000000000000 R14: 00007fa89abf5fa0 R15: 00007ffc957aa508 [ 251.233246][T12054] [ 251.451653][T12054] loop5: detected capacity change from 0 to 512 [ 251.485718][T12062] loop1: detected capacity change from 0 to 1024 [ 251.497631][T12054] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.497750][T12067] tipc: Started in network mode [ 251.534822][T12067] tipc: Node identity ac14140f, cluster identity 4711 [ 251.542463][T12062] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.544261][T12067] tipc: New replicast peer: 255.255.255.255 [ 251.559266][T12067] tipc: Enabled bearer , priority 10 [ 251.567964][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.577395][T12062] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 251.587466][T12062] EXT4-fs (loop1): orphan cleanup on readonly fs [ 251.596919][T12062] EXT4-fs error (device loop1): __ext4_get_inode_loc:4450: comm syz.1.3106: Invalid inode table block 0 in block_group 0 [ 251.610271][T12062] EXT4-fs (loop1): Remounting filesystem read-only [ 251.612770][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3108'. [ 251.621645][T12062] EXT4-fs (loop1): 1 truncate cleaned up [ 251.726790][T12078] netlink: 12 bytes leftover after parsing attributes in process `'. [ 251.800676][T12078] loop5: detected capacity change from 0 to 1024 [ 251.807973][T12078] EXT4-fs: Ignoring removed nobh option [ 251.813770][T12078] EXT4-fs: Ignoring removed bh option [ 251.852555][T12091] loop1: detected capacity change from 0 to 2048 [ 251.887564][T12095] lo speed is unknown, defaulting to 1000 [ 252.042446][T12098] openvswitch: netlink: Message has 6 unknown bytes. [ 252.073007][T12098] block device autoloading is deprecated and will be removed. [ 252.265608][T12091] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.313878][T12091] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3114: bg 0: block 345: padding at end of block bitmap is not set [ 252.381186][T12110] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 252.385057][T11955] veth0_vlan: entered promiscuous mode [ 252.389812][T12110] selinuxfs: Unknown parameter '^' [ 252.421818][T11955] veth1_vlan: entered promiscuous mode [ 252.447228][T11955] veth0_macvtap: entered promiscuous mode [ 252.468928][T11955] veth1_macvtap: entered promiscuous mode [ 252.491554][T12117] syz_tun: entered promiscuous mode [ 252.497679][T12117] batadv_slave_0: entered promiscuous mode [ 252.504249][T12117] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 252.514471][T12117] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.525325][T12117] hsr1: entered allmulticast mode [ 252.530425][T12117] syz_tun: entered allmulticast mode [ 252.536180][T12117] batadv_slave_0: entered allmulticast mode [ 252.550004][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.560663][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.570566][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.581184][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.591034][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.601582][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.616616][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.640793][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.651472][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.661686][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.672505][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.682589][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.693067][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.702974][ T10] tipc: Node number set to 2886997007 [ 252.708554][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.719140][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.732542][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.742169][T11955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.751057][T11955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.759995][T11955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.768920][T11955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.785833][T12125] loop1: detected capacity change from 0 to 8192 [ 252.793238][T12122] FAULT_INJECTION: forcing a failure. [ 252.793238][T12122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.798530][T12125] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.806381][T12122] CPU: 1 UID: 0 PID: 12122 Comm: syz.5.3121 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 252.806430][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 252.806447][T12122] Call Trace: [ 252.806456][T12122] [ 252.806467][T12122] __dump_stack+0x1d/0x30 [ 252.806496][T12122] dump_stack_lvl+0xe8/0x140 [ 252.806545][T12122] dump_stack+0x15/0x1b [ 252.806567][T12122] should_fail_ex+0x265/0x280 [ 252.806631][T12122] should_fail+0xb/0x20 [ 252.806670][T12122] should_fail_usercopy+0x1a/0x20 [ 252.806721][T12122] _copy_from_user+0x1c/0xb0 [ 252.806751][T12122] kstrtouint_from_user+0x69/0xf0 [ 252.806822][T12122] ? avc_policy_seqno+0x15/0x30 [ 252.806855][T12122] proc_fail_nth_write+0x50/0x160 [ 252.806964][T12122] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 252.807014][T12122] vfs_write+0x266/0x8d0 [ 252.807046][T12122] ? vfs_read+0x47f/0x6f0 [ 252.807083][T12122] ? __rcu_read_unlock+0x4f/0x70 [ 252.807187][T12122] ? __fget_files+0x184/0x1c0 [ 252.807228][T12122] ksys_write+0xda/0x1a0 [ 252.807265][T12122] __x64_sys_write+0x40/0x50 [ 252.807300][T12122] x64_sys_call+0x2cdd/0x2fb0 [ 252.807346][T12122] do_syscall_64+0xd0/0x1a0 [ 252.807378][T12122] ? clear_bhb_loop+0x40/0x90 [ 252.807406][T12122] ? clear_bhb_loop+0x40/0x90 [ 252.807434][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.807485][T12122] RIP: 0033:0x7fa89a9cd41f [ 252.807507][T12122] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 252.807531][T12122] RSP: 002b:00007fa899037030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 252.807556][T12122] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa89a9cd41f [ 252.807574][T12122] RDX: 0000000000000001 RSI: 00007fa8990370a0 RDI: 0000000000000006 [ 252.807636][T12122] RBP: 00007fa899037090 R08: 0000000000000000 R09: 0000000000000000 [ 252.807652][T12122] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 252.807669][T12122] R13: 0000000000000000 R14: 00007fa89abf5fa0 R15: 00007ffc957aa508 [ 252.807695][T12122] [ 253.101662][T12137] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3130'. [ 253.111303][T12137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3130'. [ 253.121843][T12131] bond1 (unregistering): Released all slaves [ 253.128653][T12141] netlink: 136 bytes leftover after parsing attributes in process `syz.6.3129'. [ 253.138168][T12141] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3129'. [ 253.160237][T12140] lo speed is unknown, defaulting to 1000 [ 253.197449][T12151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 253.208958][T12131] lo speed is unknown, defaulting to 1000 [ 253.239277][T12153] FAULT_INJECTION: forcing a failure. [ 253.239277][T12153] name failslab, interval 1, probability 0, space 0, times 0 [ 253.252330][T12153] CPU: 0 UID: 0 PID: 12153 Comm: syz.6.3133 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 253.252386][T12153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 253.252402][T12153] Call Trace: [ 253.252412][T12153] [ 253.252421][T12153] __dump_stack+0x1d/0x30 [ 253.252448][T12153] dump_stack_lvl+0xe8/0x140 [ 253.252472][T12153] dump_stack+0x15/0x1b [ 253.252492][T12153] should_fail_ex+0x265/0x280 [ 253.252604][T12153] should_failslab+0x8c/0xb0 [ 253.252640][T12153] kmem_cache_alloc_noprof+0x50/0x310 [ 253.252664][T12153] ? skb_clone+0x151/0x1f0 [ 253.252691][T12153] skb_clone+0x151/0x1f0 [ 253.252796][T12153] __netlink_deliver_tap+0x2c9/0x500 [ 253.252892][T12153] netlink_unicast+0x64c/0x670 [ 253.252960][T12153] netlink_sendmsg+0x58b/0x6b0 [ 253.252986][T12153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.253011][T12153] __sock_sendmsg+0x142/0x180 [ 253.253153][T12153] ____sys_sendmsg+0x31e/0x4e0 [ 253.253210][T12153] ___sys_sendmsg+0x17b/0x1d0 [ 253.253254][T12153] __x64_sys_sendmsg+0xd4/0x160 [ 253.253285][T12153] x64_sys_call+0x2999/0x2fb0 [ 253.253331][T12153] do_syscall_64+0xd0/0x1a0 [ 253.253361][T12153] ? clear_bhb_loop+0x40/0x90 [ 253.253387][T12153] ? clear_bhb_loop+0x40/0x90 [ 253.253414][T12153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.253525][T12153] RIP: 0033:0x7f3edc19e969 [ 253.253548][T12153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.253627][T12153] RSP: 002b:00007f3eda807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.253652][T12153] RAX: ffffffffffffffda RBX: 00007f3edc3c5fa0 RCX: 00007f3edc19e969 [ 253.253746][T12153] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 253.253763][T12153] RBP: 00007f3eda807090 R08: 0000000000000000 R09: 0000000000000000 [ 253.253979][T12153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.253996][T12153] R13: 0000000000000000 R14: 00007f3edc3c5fa0 R15: 00007fff7f7d8348 [ 253.254022][T12153] [ 253.332700][T12156] loop1: detected capacity change from 0 to 8192 [ 253.350612][T12153] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3133'. [ 253.493378][T12156] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.530601][T12156] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 253.539351][T12156] FAT-fs (loop1): Filesystem has been set read-only [ 253.575386][T12166] loop0: detected capacity change from 0 to 8192 [ 253.583004][T12166] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.646838][T12169] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 253.745238][T12173] lo speed is unknown, defaulting to 1000 [ 253.847974][T12181] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.877680][T12184] loop1: detected capacity change from 0 to 128 [ 253.903039][T12184] EXT4-fs: Ignoring removed nobh option [ 253.922304][T12187] lo speed is unknown, defaulting to 1000 [ 253.939477][T12184] ext4 filesystem being mounted at /546/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 253.963126][T12181] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.976675][T12191] __nla_validate_parse: 1 callbacks suppressed [ 253.976693][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3147'. [ 254.042011][T12193] loop5: detected capacity change from 0 to 164 [ 254.135053][T12193] syz.5.3149: attempt to access beyond end of device [ 254.135053][T12193] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 254.165789][T12181] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.176876][T12193] syz.5.3149: attempt to access beyond end of device [ 254.176876][T12193] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 254.221977][T12195] loop1: detected capacity change from 0 to 164 [ 254.253451][T12181] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.296973][T12195] syz.1.3150: attempt to access beyond end of device [ 254.296973][T12195] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 254.315152][T12195] syz.1.3150: attempt to access beyond end of device [ 254.315152][T12195] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 254.337683][T12193] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 254.426940][T12181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.465650][T12181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.517055][T12181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.551122][T12204] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 254.563466][T12181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.575503][T12201] loop6: detected capacity change from 0 to 2048 [ 254.752177][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.759752][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.767372][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.791743][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.799387][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.806876][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.814307][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.821718][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.829252][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.836878][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.844319][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.851806][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.859417][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.866929][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.874360][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.885491][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 254.885506][ T29] audit: type=1326 audit(1747356289.856:7761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 254.885722][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.891731][ T29] audit: type=1326 audit(1747356289.856:7762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 254.915473][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.954393][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.961830][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.969370][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.977024][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.984750][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.992261][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 254.999923][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.007542][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.015250][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.022823][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.030279][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.037730][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.045355][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.053519][ T29] audit: type=1326 audit(1747356290.016:7763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.077439][ T29] audit: type=1326 audit(1747356290.016:7764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.102000][ T29] audit: type=1326 audit(1747356290.016:7765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.130591][ T29] audit: type=1326 audit(1747356290.016:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.154623][ T29] audit: type=1326 audit(1747356290.016:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.178498][ T29] audit: type=1326 audit(1747356290.026:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.202386][ T29] audit: type=1326 audit(1747356290.076:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.226269][ T29] audit: type=1326 audit(1747356290.076:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12221 comm="syz.4.3160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcab1be969 code=0x7ffc0000 [ 255.256103][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 255.286021][T12218] FAULT_INJECTION: forcing a failure. [ 255.286021][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 255.298980][T12218] CPU: 0 UID: 0 PID: 12218 Comm: +}[@ Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 255.299070][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 255.299085][T12218] Call Trace: [ 255.299094][T12218] [ 255.299104][T12218] __dump_stack+0x1d/0x30 [ 255.299126][T12218] dump_stack_lvl+0xe8/0x140 [ 255.299145][T12218] dump_stack+0x15/0x1b [ 255.299176][T12218] should_fail_ex+0x265/0x280 [ 255.299279][T12218] ? kobject_uevent_env+0x1c0/0x570 [ 255.299430][T12218] should_failslab+0x8c/0xb0 [ 255.299464][T12218] __kmalloc_cache_noprof+0x4c/0x320 [ 255.299494][T12218] kobject_uevent_env+0x1c0/0x570 [ 255.299584][T12218] ? device_pm_check_callbacks+0x683/0x6a0 [ 255.299665][T12218] kobject_uevent+0x1d/0x30 [ 255.299701][T12218] device_del+0x710/0x790 [ 255.299728][T12218] device_destroy+0x66/0xa0 [ 255.299783][T12218] drop_ref+0xbf/0x1a0 [ 255.299810][T12218] hidraw_disconnect+0x39/0x50 [ 255.299889][T12218] hid_device_remove+0x158/0x210 [ 255.299929][T12218] ? __pfx_hid_device_remove+0x10/0x10 [ 255.299971][T12218] device_release_driver_internal+0x2bb/0x4c0 [ 255.300052][T12218] device_release_driver+0x19/0x20 [ 255.300079][T12218] bus_remove_device+0x26d/0x290 [ 255.300099][T12218] device_del+0x36a/0x790 [ 255.300182][T12218] hid_destroy_device+0x54/0x120 [ 255.300216][T12218] uhid_dev_destroy+0x6a/0xb0 [ 255.300250][T12218] uhid_char_write+0x3aa/0x650 [ 255.300285][T12218] ? __pfx_uhid_char_write+0x10/0x10 [ 255.300373][T12218] vfs_write+0x266/0x8d0 [ 255.300404][T12218] ? __rcu_read_unlock+0x4f/0x70 [ 255.300482][T12218] ? __fget_files+0x184/0x1c0 [ 255.300521][T12218] ksys_write+0xda/0x1a0 [ 255.300548][T12218] __x64_sys_write+0x40/0x50 [ 255.300575][T12218] x64_sys_call+0x2cdd/0x2fb0 [ 255.300671][T12218] do_syscall_64+0xd0/0x1a0 [ 255.300701][T12218] ? clear_bhb_loop+0x40/0x90 [ 255.300723][T12218] ? clear_bhb_loop+0x40/0x90 [ 255.300828][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.300923][T12218] RIP: 0033:0x7f0a6b41e969 [ 255.300942][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.300964][T12218] RSP: 002b:00007f0a69a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.301041][T12218] RAX: ffffffffffffffda RBX: 00007f0a6b645fa0 RCX: 00007f0a6b41e969 [ 255.301055][T12218] RDX: 0000000000000004 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.301070][T12218] RBP: 00007f0a69a87090 R08: 0000000000000000 R09: 0000000000000000 [ 255.301085][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.301117][T12218] R13: 0000000000000000 R14: 00007f0a6b645fa0 R15: 00007ffcb144c378 [ 255.301141][T12218] [ 255.308067][T12227] loop6: detected capacity change from 0 to 164 [ 255.448499][T12233] lo speed is unknown, defaulting to 1000 [ 255.472823][T12227] syz.6.3162: attempt to access beyond end of device [ 255.472823][T12227] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 255.499292][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3164'. [ 255.527888][T12227] syz.6.3162: attempt to access beyond end of device [ 255.527888][T12227] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 255.664339][T12238] loop4: detected capacity change from 0 to 2048 [ 255.718911][T12238] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.745146][T12238] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3166: bg 0: block 345: padding at end of block bitmap is not set [ 255.753742][T12245] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 255.786247][T11955] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /7/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 255.888362][T11955] EXT4-fs error (device loop4): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 255.956001][T11955] EXT4-fs error (device loop4): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 256.086759][T12258] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3174'. [ 256.096523][T12258] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3174'. [ 256.191628][T12272] FAULT_INJECTION: forcing a failure. [ 256.191628][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 256.204354][T12272] CPU: 0 UID: 0 PID: 12272 Comm: syz.1.3179 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 256.204383][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 256.204395][T12272] Call Trace: [ 256.204402][T12272] [ 256.204471][T12272] __dump_stack+0x1d/0x30 [ 256.204570][T12272] dump_stack_lvl+0xe8/0x140 [ 256.204604][T12272] dump_stack+0x15/0x1b [ 256.204625][T12272] should_fail_ex+0x265/0x280 [ 256.204714][T12272] ? audit_log_d_path+0x8d/0x150 [ 256.204750][T12272] should_failslab+0x8c/0xb0 [ 256.204788][T12272] __kmalloc_cache_noprof+0x4c/0x320 [ 256.204954][T12272] audit_log_d_path+0x8d/0x150 [ 256.204993][T12272] audit_log_d_path_exe+0x42/0x70 [ 256.205031][T12272] audit_log_task+0x1e9/0x250 [ 256.205063][T12272] audit_seccomp+0x61/0x100 [ 256.205171][T12272] ? __seccomp_filter+0x68c/0x10d0 [ 256.205192][T12272] __seccomp_filter+0x69d/0x10d0 [ 256.205280][T12272] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.205313][T12272] ? vfs_write+0x75e/0x8d0 [ 256.205345][T12272] ? __rcu_read_unlock+0x4f/0x70 [ 256.205386][T12272] ? __fget_files+0x184/0x1c0 [ 256.205424][T12272] __secure_computing+0x82/0x150 [ 256.205445][T12272] syscall_trace_enter+0xcf/0x1e0 [ 256.205471][T12272] do_syscall_64+0xaa/0x1a0 [ 256.205511][T12272] ? clear_bhb_loop+0x40/0x90 [ 256.205579][T12272] ? clear_bhb_loop+0x40/0x90 [ 256.205657][T12272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.205677][T12272] RIP: 0033:0x7f0a6b41e969 [ 256.205696][T12272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.205805][T12272] RSP: 002b:00007f0a69a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 256.205857][T12272] RAX: ffffffffffffffda RBX: 00007f0a6b645fa0 RCX: 00007f0a6b41e969 [ 256.205874][T12272] RDX: 0000000000000004 RSI: 000006000000e510 RDI: ffffffffffffffff [ 256.205888][T12272] RBP: 00007f0a69a87090 R08: 0000000000000000 R09: 0000000000000000 [ 256.205899][T12272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.205911][T12272] R13: 0000000000000000 R14: 00007f0a6b645fa0 R15: 00007ffcb144c378 [ 256.205937][T12272] [ 256.518035][ T9852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.546905][T12274] loop1: detected capacity change from 0 to 2048 [ 256.566593][ T9852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.591018][T12274] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.617708][ T9852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.645654][T12274] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3180: bg 0: block 345: padding at end of block bitmap is not set [ 256.676687][ T9852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.768839][ T9852] bridge_slave_1: left allmulticast mode [ 256.774869][ T9852] bridge_slave_1: left promiscuous mode [ 256.780892][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.834206][ T9852] bridge_slave_0: left allmulticast mode [ 256.840031][ T9852] bridge_slave_0: left promiscuous mode [ 256.845830][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.912153][T12303] loop1: detected capacity change from 0 to 256 [ 256.986661][ T9852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.999648][ T9852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.017386][ T9852] bond0 (unregistering): Released all slaves [ 257.091322][ T9852] hsr_slave_0: left promiscuous mode [ 257.105499][ T9852] hsr_slave_1: left promiscuous mode [ 257.114942][ T9852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.122510][ T9852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.195300][ T9852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.202917][ T9852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.219081][ T9852] veth1_macvtap: left promiscuous mode [ 257.224901][ T9852] veth0_macvtap: left promiscuous mode [ 257.230488][ T9852] veth1_vlan: left promiscuous mode [ 257.236203][ T9852] veth0_vlan: left promiscuous mode [ 257.323496][T12311] ================================================================== [ 257.331750][T12311] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 257.339880][T12311] [ 257.342247][T12311] write to 0xffff88811c051928 of 4 bytes by task 12303 on cpu 1: [ 257.350177][T12311] __mark_inode_dirty+0x240/0x760 [ 257.355348][T12311] fat_update_time+0x1ec/0x200 [ 257.360339][T12311] touch_atime+0x145/0x330 [ 257.364807][T12311] filemap_splice_read+0x629/0x6b0 [ 257.370064][T12311] splice_direct_to_actor+0x26c/0x680 [ 257.375610][T12311] do_splice_direct+0xda/0x150 [ 257.380603][T12311] do_sendfile+0x380/0x640 [ 257.385333][T12311] __x64_sys_sendfile64+0x105/0x150 [ 257.390764][T12311] x64_sys_call+0xb39/0x2fb0 [ 257.395591][T12311] do_syscall_64+0xd0/0x1a0 [ 257.400207][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.406316][T12311] [ 257.408931][T12311] read to 0xffff88811c051928 of 4 bytes by task 12311 on cpu 0: [ 257.416866][T12311] __mark_inode_dirty+0x18e/0x760 [ 257.421936][T12311] fat_update_time+0x1ec/0x200 [ 257.426745][T12311] touch_atime+0x145/0x330 [ 257.431287][T12311] filemap_splice_read+0x629/0x6b0 [ 257.436447][T12311] splice_direct_to_actor+0x26c/0x680 [ 257.441952][T12311] do_splice_direct+0xda/0x150 [ 257.446855][T12311] do_sendfile+0x380/0x640 [ 257.451300][T12311] __x64_sys_sendfile64+0x105/0x150 [ 257.456587][T12311] x64_sys_call+0xb39/0x2fb0 [ 257.461229][T12311] do_syscall_64+0xd0/0x1a0 [ 257.466197][T12311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.472215][T12311] [ 257.474563][T12311] value changed: 0x00000000 -> 0x00000038 [ 257.480296][T12311] [ 257.482638][T12311] Reported by Kernel Concurrency Sanitizer on: [ 257.488895][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.1.3191 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 257.501521][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.511686][T12311] ================================================================== [ 257.550587][ T9852] team0 (unregistering): Port device team_slave_1 removed [ 257.572577][ T9852] team0 (unregistering): Port device team_slave_0 removed [ 257.662464][T12307] lo speed is unknown, defaulting to 1000 [ 257.682608][T12282] lo speed is unknown, defaulting to 1000 [ 257.855814][T12282] chnl_net:caif_netlink_parms(): no params data found [ 257.909857][T12282] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.917119][T12282] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.924457][T12282] bridge_slave_0: entered allmulticast mode [ 257.931046][T12282] bridge_slave_0: entered promiscuous mode [ 257.938139][T12282] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.945435][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.952892][T12282] bridge_slave_1: entered allmulticast mode [ 257.959755][T12282] bridge_slave_1: entered promiscuous mode [ 257.977999][T12282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.988885][T12282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.010845][T12282] team0: Port device team_slave_0 added [ 258.021100][T12282] team0: Port device team_slave_1 added [ 258.039357][T12282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.046905][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.075023][T12282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.087293][T12282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.095573][T12282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.122338][T12282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.158878][T12282] hsr_slave_0: entered promiscuous mode [ 258.165180][T12282] hsr_slave_1: entered promiscuous mode [ 258.171417][T12282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.179305][T12282] Cannot create hsr debugfs directory [ 258.249303][T12282] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.258427][T12282] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.267854][T12282] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.277685][T12282] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.313333][T12282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.327461][T12282] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.337291][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.344470][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.356007][T11787] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.363375][T11787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.428260][T12282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.535610][T12282] veth0_vlan: entered promiscuous mode [ 258.543426][T12282] veth1_vlan: entered promiscuous mode [ 258.558539][T12282] veth0_macvtap: entered promiscuous mode [ 258.565981][T12282] veth1_macvtap: entered promiscuous mode [ 258.576443][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.586969][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.596911][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.607477][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.617455][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.627927][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.639024][T12282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.648060][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.658703][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.668725][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.679215][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.689814][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.700848][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.710996][T12282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.721616][T12282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.732435][T12282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.745508][T12282] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.754622][T12282] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.763890][T12282] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.772805][T12282] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0