last executing test programs: 29.412846149s ago: executing program 4 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/5565], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 29.32318893s ago: executing program 4 (id=548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="25032abd7000fcdbdf2513"], 0x18}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) 29.276977741s ago: executing program 4 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000540)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x134, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x94, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x8, 0xc, 0x7}, 0xff21}}]}, {0x45, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 29.129188313s ago: executing program 4 (id=554): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000980)=[{{&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, 0x0}}], 0x1, 0x100440d0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() kcmp(r3, r2, 0x1, r0, r1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) r4 = gettid() r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1}, 0x57}], 0x1, 0x2101, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x1, 0x1, 0x69, 0x100, @void}, "357fb5bb69"}}}}}}}, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000040)=0x1959, &(0x7f0000000080)=0x4) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(r8, &(0x7f0000001100)=""/204, 0xcc, 0x6) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 28.269276936s ago: executing program 4 (id=572): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) setresuid(0xee00, 0xee00, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000000)="580000001400192340834b80040d8c160a117436c379000000000000000048000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000040000224e0000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='cq_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) rmdir(&(0x7f0000000400)='./file0\x00') sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042dbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000030001280080001007369740024000280080014002f00000008000300"], 0x50}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@deltclass={0x3c, 0x29, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x10, 0x5}, {0xfff3, 0x4}, {0x5, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_RATE={0x6, 0x5, {0x5, 0x40}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0064610abc561ee2222045f07200000000000001c80903d224a188007b8af8ff1ecf00000000bfa200000000000007020000f8ffffffb703000047f50000b7040000000000008500000040950000007e6c83199a2bf35b731186cb1e3776c119fb1fd299efed8d8e8f13"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r6, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) unshare(0x46060480) 28.169629537s ago: executing program 4 (id=576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0xfffffffffffffdcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$binfmt_aout(r0, &(0x7f0000001240)={{0x107, 0x55, 0x6, 0x20e, 0x33a, 0x8000, 0x3f}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 28.121389888s ago: executing program 32 (id=576): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0xfffffffffffffdcc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/freeze_filesystems', 0x4ae82, 0x12c) write$binfmt_aout(r0, &(0x7f0000001240)={{0x107, 0x55, 0x6, 0x20e, 0x33a, 0x8000, 0x3f}}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 2.922242428s ago: executing program 2 (id=972): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00'}, 0x10) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000340)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '-%'}}, {@subj_type={'subj_type', 0x3d, '/dev/snd/timer\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@flag='nolazytime'}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0xfc, 0x53e, &(0x7f0000000940)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x3dc06331d0ffc133}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1100000004621b2500000000000000000000000000000b55d1912df59b611acf45e26ff8413b630dad4cd236fcfb233315283cac8682adad2825cd7ae1f0f5d3ed17ea08c799f292bd526517da5027fc91606079fbd6a7bffc7279cbc86a015987638bf86f3500b3c9eed71557cc093b22f4feada866de12a3e56fc7b3db7eb12f2b11606664f5ae1c3b26bb19ead7050131f0bd0779f4d3e0605961cedd13783b2e9a6c353b07185ab8e92ee818d16892a70bda3f5535e78d00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d00)={{r4}, &(0x7f0000000780), &(0x7f0000001cc0)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) 2.72634023s ago: executing program 2 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 2.584319462s ago: executing program 0 (id=978): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x3800, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) 2.538838863s ago: executing program 0 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}, {@jqfmt_vfsv0}, {@noload}, {@errors_continue}, {@nojournal_checksum}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") (fail_nth: 8) 2.253380887s ago: executing program 0 (id=981): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x11, 0x0, 0x2, "0a08cf30c194"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (fail_nth: 7) 2.228608007s ago: executing program 3 (id=983): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c", @ANYRESDEC, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r3, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file1\x00'}) stat(&(0x7f0000000580)='./file1\x00', &(0x7f0000000600)) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', &(0x7f00000006c0), 0x400) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 2.06051315s ago: executing program 0 (id=984): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x88, 0x1403, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x68, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x3, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) close(r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 1.921476682s ago: executing program 3 (id=986): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) 1.883412192s ago: executing program 5 (id=987): r0 = socket$packet(0x11, 0xa, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x8, 0xfffffffd, 0x0, 'queue0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) timer_create(0xfffffffffffffffc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x80}, 0x18) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf62, 0x200040ffffffff}, 0x1180, 0x5, 0x3a65, 0x5, 0x1, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) 1.870584013s ago: executing program 2 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000540)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002640)=@delchain={0x134, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xc8, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x94, 0x15, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x8, 0xc, 0x7}, 0xff21}}]}, {0x45, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded7fbb0c799f243d3827c1ff7060f9d56b77b6373212745232c734d9b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.805799364s ago: executing program 0 (id=989): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) write$nci(0xffffffffffffffff, 0x0, 0xfffffeea) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x3800, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0xffff, 0x5dd073cf) 1.729400665s ago: executing program 2 (id=990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 1.683522096s ago: executing program 2 (id=991): r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001a000100000000000000000080000200138870b6ba2135dfebde3e4a5ae981aece892b82ba92aa90bd0274f28a485bda4a0ed948091fa180eaee335da21e8b4614dd47d81d561a3f634f6627e627789a5cf7d6d4b6a2324aad7be9c6c37c189a137352831f8898837a6be14460b92f138a29779483"], 0x14}}, 0x0) dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) r2 = socket(0x10, 0x3, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000200b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041800f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x28}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x95, 0x0, 0x0, 0x3, 0x54d06, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={&(0x7f00000002c0), 0x2}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r8, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f00000002c0)}, 0x10) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) 1.667379006s ago: executing program 5 (id=992): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) umount2(&(0x7f0000000080)='./cgroup\x00', 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.439159269s ago: executing program 3 (id=996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x22, 0x10, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x67b9, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = getegid() r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000500)=""/106, 0x6a}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2000000000000283, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.302869471s ago: executing program 3 (id=998): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20001, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x7809, 0xf, 0x101, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x65, 0x0, 0x9, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, {[@ssrr={0x89, 0xb, 0x60, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000040)={{0xff, 0x46}, 0x1, 0x7, 0x9, {0x6f, 0x5}, 0x2, 0x5}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.248818132s ago: executing program 5 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x8, 0xfffffffd, 0x0, 'queue0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) timer_create(0xfffffffffffffffc, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000740)={0x77359400}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r6, 0x0, 0x80}, 0x18) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf62, 0x200040ffffffff}, 0x1180, 0x5, 0x3a65, 0x5, 0x1, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) 1.059785885s ago: executing program 3 (id=1004): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) getrusage(0x0, &(0x7f00000004c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=Cd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k']) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x400e, &(0x7f0000000680)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x4, 0x458, &(0x7f0000000940)="$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") 1.009311756s ago: executing program 1 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r0 = memfd_create(0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 994.141635ms ago: executing program 1 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) 915.015547ms ago: executing program 1 (id=1007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 837.161098ms ago: executing program 0 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/16, &(0x7f0000000240)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) close(r2) fadvise64(r1, 0x12fff, 0x4101, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r3, 0xffffffffffffffff, 0x0) 836.973198ms ago: executing program 33 (id=1008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/16, &(0x7f0000000240)=0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) close(r2) fadvise64(r1, 0x12fff, 0x4101, 0x3) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r3, 0xffffffffffffffff, 0x0) 644.104161ms ago: executing program 1 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) 522.312443ms ago: executing program 5 (id=1011): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20001, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x7800, 0x7809, 0xf, 0x101, {{0x8, 0x4, 0x3, 0x7, 0x20, 0x65, 0x0, 0x9, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, {[@ssrr={0x89, 0xb, 0x60, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000005c00)={0x68, r8, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4848}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000040)={{0xff, 0x46}, 0x1, 0x7, 0x9, {0x6f, 0x5}, 0x2, 0x5}) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}, {&(0x7f00000001c0)=']', 0x1}], 0x2}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 413.104634ms ago: executing program 2 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mq_unlink(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sync_file_range(0xffffffffffffffff, 0x10, 0x6, 0x7) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000016c0), &(0x7f0000001700)=0x4) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 147.374958ms ago: executing program 3 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x22}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mq_unlink(0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)={0x24, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sync_file_range(0xffffffffffffffff, 0x10, 0x6, 0x7) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f00000016c0), &(0x7f0000001700)=0x4) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 141.523789ms ago: executing program 5 (id=1014): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000200), &(0x7f0000000280)='%pK \x00'}, 0x20) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c04a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2db, &(0x7f0000000580)="$eJzs3T+LHGUYAPBn7mb/+Ad2CysRHNDCKuTS2mwICYhXGbZQCz1MAnK7CAkcKOKYSuz8An4CQfA72NrYWQp+AMsIgZGZndnZzc5uLuKemPv9mjyZ933e95mdl7u54p77+LX56Z0s7j388vcYDpM4mMQkHiUxjoNofB1rJt8FAPB/9qgo4s9ioWP4t2+35CURMdxzbQDAfjzl+38tbcOfLqQsAGCPbr//wbvXj49vvpdlw7g1/+ZsWv5kX/67GL9+Lz6NWdyNqzGKxxHVi0IvqreFMrxVFEWeZqVxvDnPz6Zl5vyjX+r1f365Do5iFOMqWr5tVPnvHN88yhZW8vOyjhfr/Sfl/tdiFK8sk9fyr3Xkx7Qfb72xUv+VGMWvn8RnMYs7VRFt/ldHWXajfMX5sCyvzE/ys+mgmtcqDpvN8wt8PgAAAAAAAAAAAAAAAAAAAAAAPJ+u1L1zBlH17ykv1f13Dh+X/+lF1hiv9+dZ5CfNQqv9gYqiyIv4vumvczXLsqKe2Oan8Wq62lgQAAAAAAAAAAAAAAAAAAAALq8Hn39xejKb3b3fGRSjrUOdQdMNII2Iv25HnC9rM5isXHk9dk8e1HuezGYHdbg+J129EofNnCRiZxmRLpsZ/MO7OHfwwkbNdfDDj11Z/fUHl8bKnOHTN+117/VvBs3pOj1JonPOYFnzcHFIqkYQ7Zx+dK58o163vdLfVkYRz3L8+p1Do11Z5VnfXOelKsi3fPJlEMmuwt7+Y3GH9ZXkybvoV59qZ3qvDqKrsOpsdD+LJ4IYLtI3v1YkunUAAAAAAAAAAAAAAAAAAMBetb/92zH4cGfqQTHYW1kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKHav///DEFeJ59jcj/uP/iPbxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBL4O8AAAD//3uLXSI=") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419891400"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capget(&(0x7f0000000140)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000200)={0xf, 0x55, 0x0, 0x9, 0x200, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x271) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1}, 0x4) perf_event_open(&(0x7f0000002100)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000300)=@generic={0x2c, "cab23e2ecf851f851fbaf7b9d0c07a5744afbdb6007aabf01b49d9cd48d6ad9bcb2f4081b0596e8d343ee20c6bcb1127058326321dd9d7b4b17aefcb226dd5563910904f1ea08d10729c596c716445210c2c64c3f008baae9619f4f30984f43a52071b9c783374e559c9e6fa42f6aab0f2551d873e58b3528eed7a08dbf1"}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000440)="47dbc96ba82a8750d440545e1b3b9a1fd6fcdb67944235a59b0d011ec71009d72c87fe560138d5e4eb84c090aaa015e072266d99ef8876e6a2892aabca4ec4a580be6a8c840d9aaa8b4c3d682026679195b3ea8b595cd5c55455902ba47f2f05bed0099a34135cf7760dbcf673094387a8ea4c89ee10752c25e3f97c40f1d855e3e39515a1ce2acb18ddd50ee9d5b77bfbd0e95db22bfbbb923fa2f877160707a0fbb1838ea3342cc2105c735975ee79e794290024696c36ebed6f619bddf45451483d84b89ed55cd1ae41f5d196c6457cb17859f28022cd5e7bb7a52002e6cc6be00a8c170d3867a68916c069264ae6170ee384be", 0xf5}], 0x1, &(0x7f0000000540)=[{0x98, 0x1, 0xe, "071c87c47f0c7f262db0fc8506f1488399a9b886f29ac4a4486459c575afeb7941af68f02ccc781328fa0be15837f13a7ab09ea5b41a042c20d2632736f244f2f91ae79787d02be1c42fdcdacc548d3b365df5f0ad1b44e727c7e854ced656b54fb9b25c747df5f21c402a63c75568656d7bbbee8d351d1052e415bc97577a89d56339d0"}], 0x98}}, {{&(0x7f0000000600)=@ieee802154, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000680)="5a0c1f77571c7f75018d7a24c592a91f018e76bca8b138aa29ccde5bdc589e2d68d05cbb10f003937300a99813e66a7ce46e54056dad3eaacdc2c238105dc8180e001aea", 0x44}, {&(0x7f0000000700)="f41401d1fd78ad77db9e1ef60fe9d0c09dcde58cfba760e705b07d37b28c9967cc97707d70b8fda0be3ca3572237149ea01f13afb835820c53e7ede2d6603e414ba3a67e58f5350225f757e0e6b175c91cb67e6a9a105ba45bfab0c1b2653015a8598cabd694439699e8aac5b41e76efeb658fa59680e695ef7378148a28782424b696c03566beadc93002796023c2e7be51aa3deaf8845f4d6a759bbc02261756eac6ab699e425fa6724dc5c8b067c487e304f06a114b49dc5a13354c151272d2c561e768c558ee549097743f9dbfad1429ec19", 0xd4}, {&(0x7f0000000800)="58fe7591ba1a3cd7b7f77b3366136e384f143b24c7d0c55477ab7ec08a98a889128f5fddea95f64502228e63d764063a28e1f5e40e03bf76ffcfc4fd5f842974680a1a40166e25f1d761997e681b9edb8ca9160cf090287a124e60c170a2da24348bacab04f2002c69f0e95c9867570bdedd0228e2b36c2683bdfd1b0071d9180361a0affc01e9974134fdc00a81a748c24be511712ad9b0172db6", 0x9b}, {&(0x7f00000008c0)="9446146edee3dc562c8c782ac36914adb308aa15fbf39f423b24fd2a16fe1959de1e45a064f5a7c2c47c885c6e3c247e9a60758b1ae289c3b70d07708ddb0125193de713c1777ae69a138ffb7927f6e985f8e3d1ac85f5f97bf1ed3e26529c1ec6bb489b70d57f9c07", 0x69}, {&(0x7f0000000940)="eb7fa1688d32f8cd7b6b83d75b663a7f4ce398d38e2927dd4958351ab4da100f02f94a5ffbe259fb19e1a43861484cf97d721c96a8cf7f83ed145b66203feb015d3f212417d393699991fdbf205e9c012d77da44733d09f57a72c701802b0d864e0959848844a018fa00b172a03fd737b2ab95a9c42023edde1c12a1", 0x7c}], 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="f800000000000000840000007bffffffd1a9340f198abcb1e18f4e72c81cc3fdc4407dae9d34aec867340451123506146bcb2c973d73224a30bf5c9202d195570f8ee1433df745dc58378d993edad8d634d93ebc6f3bdb95eff4cdb561fc38b19569b0d6cfbe862b995c8afef48b1fbe77d01ae8574ac10f1d729f16a3d4e78702dc7385799eea35a25eee446527286a99edec806243162886fe73bc2445f74c3615eed09a2b0f21e5827962f413f3635baa44bfb30e4f2db94bd41b115b65dbe2ee96240f1b6254f825ce5314ed7612a2c06fd109fb54ac3996d7561734948b487cc351441941438d55f8d68b46d8000000000000000000"], 0xf8}}, {{&(0x7f0000000b80)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, 0x2, 0x2, 0x2}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000c00)="8edd6f0ed688ec9bbfb0fc17280641d4bb16f4d6da79550f9d5ebae4923625043a6dbcd10630279242e4ecf446c5ef79c196ffe45a7e7c9c8aa181ad066e9f0bfa6c9e0da245db7d1eb4b29adc5825d4b4c25d9fcd71807b2fe44ae9034b426fc92ca1ee4066212114ea6f45acf91fe64bb2a24ba704fa62779b45ccdae09406e34900471d6673fc019211a5f5bcf91174dc1c0adde9548e156c390449a9ab38134163f783a19d373295e49bfe5b7e394b3f948edfa0d4b93d4c757f2b079fd057a2facc671972a4a09b9d4f5bf7686607d98490389de4", 0xd7}], 0x1, &(0x7f0000000d00)=[{0xc8, 0x29, 0x3ff, "6b6270ef2d2d53411103386e1eb7436a1580f0f49fdf55264374a9384568c619989663b2d646ba2d17865ddde7c8925fcd8db4bab1ae89c845180b6ec1897f9f9979fc7b7bcd86c977409cfa3cd54a24811b33c27caadb176f2488db20bb953c0dca0e52be44abcaae1cb998a04dd5097adfce31e9b8af4723526cf2357fe9fd31dc0d32c214e984c7b2109bc1f9fdcf48655e0c2f4b9de387b824258b797f8143b7d2b376dbbbceae4a67e082b2dc861649ccc0183c3e51"}, {0x40, 0x118, 0xffff8001, "4921bb48c1dbe829ebfa601522b0d07f1a3d5c4ac29f7268fe28cc8c551c80639e05297a5cf59c9a47037d0843"}, {0x30, 0x1, 0x6, "cde8ece3e1a31ba53d0f5369cc0c15f744b3980f4e90728c528226"}, {0xf0, 0x3a, 0x1, "e78aeb484b18ebfd998bdeccd0b143dce9db7df41ad40f26ee12a3b589caa0faa28daa9f4756406ba77da5f9d125638c9b92cf689ca09e01871f32188f1736abdc2a1658828eb4c07af2175dc61622ab462e8d0b6b3023a13dfa29a777d6c2a53990cb4812bef01cdf6861c810f93f0cce3bc717544b0f89021fcc6cc72a24618b494b0076108d5c484f240ae6f7fc1ecd5853617c4a5bd9a9b606ed25f8b70435fe7e5af5946326fbba639fc94c0328332130493194632b12ee7cd669521b81290c1f152b135d43957541be0f02232f04f0614c3d7e992f5ea6"}], 0x228}}], 0x3, 0x40000) 0s ago: executing program 1 (id=1015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='start_task_reaping\x00', r2, 0x0, 0x921}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000e5ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@sysvgroups}, {@quota}, {@acl}, {@init_itable}, {@dioread_nolock}, {@grpjquota, 0x2e}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x0, 0x4da, &(0x7f0000000140)="$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") r9 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r9, 0x7) listen(r9, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x250001, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070000000000000000000500"], 0x3c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) kernel console output (not intermixed with test programs): ll not be supported in the future; please update your userspace. [ 63.962482][ T4913] netlink: 444 bytes leftover after parsing attributes in process `syz.4.409'. [ 63.975530][ T3304] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 64.008311][ T4913] SELinux: syz.4.409 (4913) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.022443][ T3304] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 64.035405][ T3304] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 64.107999][ T4915] 8021q: VLANs not supported on ip6tnl0 [ 64.114212][ T4915] netlink: 452 bytes leftover after parsing attributes in process `syz.1.411'. [ 64.125461][ T4915] SELinux: syz.1.411 (4915) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.195293][ T4919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.413'. [ 64.210066][ T4919] loop4: detected capacity change from 0 to 512 [ 64.254507][ T4922] bridge: RTM_NEWNEIGH with invalid ether address [ 64.386131][ T4919] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.184814][ T4935] FAULT_INJECTION: forcing a failure. [ 65.184814][ T4935] name failslab, interval 1, probability 0, space 0, times 1 [ 65.197718][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: syz.1.412 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 65.197754][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.197774][ T4935] Call Trace: [ 65.197783][ T4935] [ 65.197792][ T4935] __dump_stack+0x1d/0x30 [ 65.197838][ T4935] dump_stack_lvl+0xe8/0x140 [ 65.197869][ T4935] dump_stack+0x15/0x1b [ 65.197890][ T4935] should_fail_ex+0x265/0x280 [ 65.197920][ T4935] ? __se_sys_memfd_create+0x1cc/0x590 [ 65.197977][ T4935] should_failslab+0x8c/0xb0 [ 65.198006][ T4935] __kmalloc_cache_noprof+0x4c/0x320 [ 65.198045][ T4935] __se_sys_memfd_create+0x1cc/0x590 [ 65.198117][ T4935] __x64_sys_memfd_create+0x31/0x40 [ 65.198206][ T4935] x64_sys_call+0x122f/0x2fb0 [ 65.198227][ T4935] do_syscall_64+0xd2/0x200 [ 65.198244][ T4935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.198331][ T4935] ? clear_bhb_loop+0x40/0x90 [ 65.198356][ T4935] ? clear_bhb_loop+0x40/0x90 [ 65.198378][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.198398][ T4935] RIP: 0033:0x7f0ccd54e929 [ 65.198433][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.198453][ T4935] RSP: 002b:00007f0ccbb74e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 65.198474][ T4935] RAX: ffffffffffffffda RBX: 0000000000000458 RCX: 00007f0ccd54e929 [ 65.198486][ T4935] RDX: 00007f0ccbb74ef0 RSI: 0000000000000000 RDI: 00007f0ccd5d14cc [ 65.198502][ T4935] RBP: 0000200000000940 R08: 00007f0ccbb74bb7 R09: 00007f0ccbb74e40 [ 65.198594][ T4935] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000600 [ 65.198609][ T4935] R13: 00007f0ccbb74ef0 R14: 00007f0ccbb74eb0 R15: 0000200000000680 [ 65.198633][ T4935] [ 65.473459][ T4919] EXT4-fs (loop4): mount failed [ 65.483294][ T4941] FAULT_INJECTION: forcing a failure. [ 65.483294][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 65.496072][ T4941] CPU: 0 UID: 0 PID: 4941 Comm: syz.1.420 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 65.496111][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.496126][ T4941] Call Trace: [ 65.496134][ T4941] [ 65.496144][ T4941] __dump_stack+0x1d/0x30 [ 65.496235][ T4941] dump_stack_lvl+0xe8/0x140 [ 65.496259][ T4941] dump_stack+0x15/0x1b [ 65.496279][ T4941] should_fail_ex+0x265/0x280 [ 65.496370][ T4941] should_failslab+0x8c/0xb0 [ 65.496398][ T4941] kmem_cache_alloc_noprof+0x50/0x310 [ 65.496427][ T4941] ? skb_clone+0x151/0x1f0 [ 65.496446][ T4941] skb_clone+0x151/0x1f0 [ 65.496495][ T4941] __netlink_deliver_tap+0x2c9/0x500 [ 65.496541][ T4941] netlink_sendskb+0x126/0x150 [ 65.496629][ T4941] netlink_unicast+0x28a/0x670 [ 65.496668][ T4941] netlink_ack+0x4c8/0x500 [ 65.496712][ T4941] netlink_rcv_skb+0x192/0x220 [ 65.496834][ T4941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 65.496869][ T4941] rtnetlink_rcv+0x1c/0x30 [ 65.496895][ T4941] netlink_unicast+0x59e/0x670 [ 65.496934][ T4941] netlink_sendmsg+0x58b/0x6b0 [ 65.496960][ T4941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.496987][ T4941] __sock_sendmsg+0x142/0x180 [ 65.497011][ T4941] ____sys_sendmsg+0x31e/0x4e0 [ 65.497048][ T4941] ___sys_sendmsg+0x17b/0x1d0 [ 65.497135][ T4941] __x64_sys_sendmsg+0xd4/0x160 [ 65.497267][ T4941] x64_sys_call+0x2999/0x2fb0 [ 65.497287][ T4941] do_syscall_64+0xd2/0x200 [ 65.497309][ T4941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.497342][ T4941] ? clear_bhb_loop+0x40/0x90 [ 65.497384][ T4941] ? clear_bhb_loop+0x40/0x90 [ 65.497405][ T4941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.497425][ T4941] RIP: 0033:0x7f0ccd54e929 [ 65.497439][ T4941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.497459][ T4941] RSP: 002b:00007f0ccbbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.497481][ T4941] RAX: ffffffffffffffda RBX: 00007f0ccd775fa0 RCX: 00007f0ccd54e929 [ 65.497549][ T4941] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 65.497560][ T4941] RBP: 00007f0ccbbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.497632][ T4941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.497692][ T4941] R13: 0000000000000000 R14: 00007f0ccd775fa0 R15: 00007ffe3c1b63d8 [ 65.497712][ T4941] [ 65.745169][ T4942] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 65.746936][ T4943] IPVS: stopping master sync thread 4942 ... [ 65.834881][ T4951] loop2: detected capacity change from 0 to 164 [ 65.845860][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 65.845876][ T29] audit: type=1326 audit(1750534387.771:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff34536d290 code=0x7ffc0000 [ 65.851361][ T4953] loop0: detected capacity change from 0 to 512 [ 65.852260][ T29] audit: type=1326 audit(1750534387.771:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff34536e52b code=0x7ffc0000 [ 65.905615][ T29] audit: type=1326 audit(1750534387.771:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff34536d58a code=0x7ffc0000 [ 65.928992][ T29] audit: type=1326 audit(1750534387.771:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4918 comm="syz.4.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff34536e929 code=0x7ffc0000 [ 65.953057][ T29] audit: type=1326 audit(1750534387.771:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 65.976450][ T29] audit: type=1326 audit(1750534387.771:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 65.987418][ T4951] syz.2.423: attempt to access beyond end of device [ 65.987418][ T4951] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 65.999986][ T29] audit: type=1326 audit(1750534387.771:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 66.034505][ T4953] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 66.037248][ T29] audit: type=1326 audit(1750534387.771:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 66.050944][ T4953] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.070622][ T29] audit: type=1326 audit(1750534387.771:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 66.089876][ T4951] syz.2.423: attempt to access beyond end of device [ 66.089876][ T4951] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 66.110589][ T4953] EXT4-fs (loop0): mount failed [ 66.282544][ T4975] bond0: entered promiscuous mode [ 66.287743][ T4975] bond_slave_0: entered promiscuous mode [ 66.293499][ T4975] bond_slave_1: entered promiscuous mode [ 66.305368][ T4966] loop4: detected capacity change from 0 to 8192 [ 66.320319][ T4975] batadv0: entered promiscuous mode [ 66.322156][ T4973] program syz.1.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.334531][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 66.354812][ T4975] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 66.361796][ T4984] loop2: detected capacity change from 0 to 1024 [ 66.411930][ T4975] bond0: left promiscuous mode [ 66.416849][ T4975] bond_slave_0: left promiscuous mode [ 66.422531][ T4975] bond_slave_1: left promiscuous mode [ 66.509914][ T4975] batadv0: left promiscuous mode [ 66.529525][ T5002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 66.555857][ T5005] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 66.568331][ T4997] IPVS: stopping master sync thread 5005 ... [ 66.621274][ T5007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.437'. [ 66.635914][ T5007] loop3: detected capacity change from 0 to 512 [ 66.685842][ T5007] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 66.729285][ T5018] loop1: detected capacity change from 0 to 1024 [ 66.736272][ T5018] EXT4-fs: Ignoring removed bh option [ 66.745978][ T5007] EXT4-fs (loop3): mount failed [ 66.781010][ T5027] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 66.784769][ T5020] vlan2: entered promiscuous mode [ 66.816431][ T5028] netlink: 444 bytes leftover after parsing attributes in process `syz.0.441'. [ 66.841882][ T5028] SELinux: syz.0.441 (5028) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 66.887943][ T5033] program syz.3.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.001682][ T5053] IPVS: stopping master sync thread 5054 ... [ 67.002275][ T5054] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 67.015134][ T5048] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 67.036282][ T5043] loop0: detected capacity change from 0 to 164 [ 67.121707][ T5048] EXT4-fs (loop1): Remounting filesystem read-only [ 67.153676][ T5067] loop0: detected capacity change from 0 to 164 [ 67.175229][ T5066] bridge_slave_0: left allmulticast mode [ 67.181120][ T5066] bridge_slave_0: left promiscuous mode [ 67.186978][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.198399][ T5067] syz.0.451: attempt to access beyond end of device [ 67.198399][ T5067] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 67.199652][ T5069] loop2: detected capacity change from 0 to 512 [ 67.220563][ T5067] syz.0.451: attempt to access beyond end of device [ 67.220563][ T5067] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 67.242447][ T5066] bridge_slave_1: left allmulticast mode [ 67.248249][ T5066] bridge_slave_1: left promiscuous mode [ 67.254067][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.268266][ T5069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.270810][ T5073] netlink: 'syz.3.452': attribute type 21 has an invalid length. [ 67.289317][ T5073] IPv6: NLM_F_CREATE should be specified when creating new route [ 67.300207][ T5066] bond0: (slave bond_slave_0): Releasing backup interface [ 67.342162][ T5066] bond0: (slave bond_slave_1): Releasing backup interface [ 67.343043][ T5069] EXT4-fs (loop2): 1 orphan inode deleted [ 67.368249][ T5083] loop0: detected capacity change from 0 to 512 [ 67.368844][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 67.385398][ T5073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 67.400586][ T5069] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.419111][ T5083] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 67.428953][ T5066] team0: Port device team_slave_0 removed [ 67.445413][ T5083] EXT4-fs (loop0): mount failed [ 67.452451][ T5066] team0: Port device team_slave_1 removed [ 67.472576][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.480149][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.497595][ T5066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.505091][ T5066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.513828][ T5069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.526794][ T5089] SELinux: syz.4.455 (5089) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.552213][ T5079] team0: Mode changed to "loadbalance" [ 67.611829][ T5091] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 67.665451][ T5097] program syz.2.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.729111][ T5087] 8021q: VLANs not supported on ip6gre0 [ 67.763160][ T5110] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 67.813899][ T5114] loop4: detected capacity change from 0 to 512 [ 67.816568][ T5116] loop1: detected capacity change from 0 to 128 [ 67.821623][ T5114] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.835544][ T5116] EXT4-fs: Ignoring removed nobh option [ 67.855193][ T5114] EXT4-fs (loop4): 1 truncate cleaned up [ 67.856075][ T5116] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.862216][ T5114] FAULT_INJECTION: forcing a failure. [ 67.862216][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 67.905373][ T5114] CPU: 1 UID: 0 PID: 5114 Comm: syz.4.465 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 67.905408][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.905424][ T5114] Call Trace: [ 67.905432][ T5114] [ 67.905440][ T5114] __dump_stack+0x1d/0x30 [ 67.905494][ T5114] dump_stack_lvl+0xe8/0x140 [ 67.905515][ T5114] dump_stack+0x15/0x1b [ 67.905536][ T5114] should_fail_ex+0x265/0x280 [ 67.905616][ T5114] should_failslab+0x8c/0xb0 [ 67.905651][ T5114] kmem_cache_alloc_noprof+0x50/0x310 [ 67.905730][ T5114] ? getname_flags+0x80/0x3b0 [ 67.905752][ T5114] ? fput+0x8f/0xc0 [ 67.905775][ T5114] getname_flags+0x80/0x3b0 [ 67.905797][ T5114] __x64_sys_symlinkat+0x40/0x70 [ 67.905906][ T5114] x64_sys_call+0x1558/0x2fb0 [ 67.905929][ T5114] do_syscall_64+0xd2/0x200 [ 67.905946][ T5114] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.905982][ T5114] ? clear_bhb_loop+0x40/0x90 [ 67.906005][ T5114] ? clear_bhb_loop+0x40/0x90 [ 67.906029][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.906053][ T5114] RIP: 0033:0x7ff34536e929 [ 67.906071][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.906106][ T5114] RSP: 002b:00007ff3439d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 67.906124][ T5114] RAX: ffffffffffffffda RBX: 00007ff345595fa0 RCX: 00007ff34536e929 [ 67.906136][ T5114] RDX: 0000200000000100 RSI: ffffffffffffffff RDI: 0000000000000000 [ 67.906147][ T5114] RBP: 00007ff3439d7090 R08: 0000000000000000 R09: 0000000000000000 [ 67.906202][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.906263][ T5114] R13: 0000000000000000 R14: 00007ff345595fa0 R15: 00007ffcc704b928 [ 67.906282][ T5114] [ 68.120528][ T5128] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.181904][ T5132] program syz.1.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.198773][ T5134] xt_hashlimit: size too large, truncated to 1048576 [ 68.328553][ T5141] 8021q: VLANs not supported on ip6gre0 [ 68.335934][ T5141] SELinux: syz.4.474 (5141) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 68.476497][ T5162] loop4: detected capacity change from 0 to 164 [ 68.509169][ T5162] syz.4.481: attempt to access beyond end of device [ 68.509169][ T5162] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 68.538467][ T5162] syz.4.481: attempt to access beyond end of device [ 68.538467][ T5162] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 68.605007][ T5174] program syz.0.484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.676900][ T5186] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 68.732501][ T5181] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 68.746559][ T5185] loop0: detected capacity change from 0 to 2048 [ 68.766635][ T5194] xt_hashlimit: size too large, truncated to 1048576 [ 68.796121][ T5185] EXT4-fs mount: 23 callbacks suppressed [ 68.796140][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.983857][ T5202] bond0: entered promiscuous mode [ 69.000968][ T5202] batadv0: entered promiscuous mode [ 69.015349][ T5202] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 69.042497][ T5202] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 69.082773][ T5202] bond0: left promiscuous mode [ 69.096419][ T5202] batadv0: left promiscuous mode [ 69.121810][ T5209] xt_hashlimit: size too large, truncated to 1048576 [ 69.125455][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.319981][ T5218] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.381824][ T5222] __nla_validate_parse: 9 callbacks suppressed [ 69.381844][ T5222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 69.471505][ T5226] loop3: detected capacity change from 0 to 2048 [ 69.484160][ T5229] loop4: detected capacity change from 0 to 164 [ 69.523299][ T5229] syz.4.500: attempt to access beyond end of device [ 69.523299][ T5229] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.537471][ T5229] syz.4.500: attempt to access beyond end of device [ 69.537471][ T5229] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.576931][ T5226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.691104][ T5247] loop1: detected capacity change from 0 to 1024 [ 69.695177][ T5226] random: crng reseeded on system resumption [ 69.743345][ T5247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.768135][ T5252] loop4: detected capacity change from 0 to 2048 [ 69.775391][ T5247] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.824479][ T5252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.872430][ T5263] loop2: detected capacity change from 0 to 164 [ 69.884722][ T5263] syz.2.506: attempt to access beyond end of device [ 69.884722][ T5263] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.902255][ T5263] syz.2.506: attempt to access beyond end of device [ 69.902255][ T5263] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.994804][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.072855][ T5278] program syz.3.509 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.085993][ T5279] loop2: detected capacity change from 0 to 512 [ 70.105731][ T5279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.117077][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.122101][ T5279] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.126539][ T5281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.510'. [ 70.141629][ T5279] EXT4-fs (loop2): 1 truncate cleaned up [ 70.154723][ T5279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.169850][ T5284] loop3: detected capacity change from 0 to 164 [ 70.187914][ T5284] syz.3.512: attempt to access beyond end of device [ 70.187914][ T5284] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 70.225631][ T5284] syz.3.512: attempt to access beyond end of device [ 70.225631][ T5284] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 70.320412][ T5289] tipc: Started in network mode [ 70.325438][ T5289] tipc: Node identity eab61129bd0f, cluster identity 4711 [ 70.332937][ T5289] tipc: Enabled bearer , priority 0 [ 70.379898][ T5285] tipc: Resetting bearer [ 70.410048][ T5285] tipc: Disabling bearer [ 70.421734][ T5293] vlan2: entered promiscuous mode [ 70.472670][ T5297] netlink: 444 bytes leftover after parsing attributes in process `syz.0.515'. [ 70.489056][ T5297] SELinux: syz.0.515 (5297) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 70.514593][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.567436][ T5305] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 70.581287][ T5305] loop0: detected capacity change from 0 to 512 [ 70.609990][ T5311] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 70.642218][ T5316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 70.650635][ T5305] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.666523][ T5305] EXT4-fs (loop0): mount failed [ 70.769900][ T5330] loop0: detected capacity change from 0 to 164 [ 70.801517][ T5333] loop3: detected capacity change from 0 to 1024 [ 70.810613][ T5333] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.821958][ T5333] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.840863][ T5333] JBD2: no valid journal superblock found [ 70.846678][ T5333] EXT4-fs (loop3): Could not load journal inode [ 70.860124][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 70.860141][ T29] audit: type=1326 audit(1750534392.791:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5323 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 70.904990][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.919070][ T5341] xt_hashlimit: size too large, truncated to 1048576 [ 71.076158][ T29] audit: type=1400 audit(1750534393.001:2568): avc: denied { execmem } for pid=5358 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.111208][ T5359] loop3: detected capacity change from 0 to 2048 [ 71.170384][ T5359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.213925][ T5359] random: crng reseeded on system resumption [ 71.214466][ T5371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.532'. [ 71.285354][ T5379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 71.349574][ T5387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.534'. [ 71.406749][ T5393] vlan2: entered promiscuous mode [ 71.423284][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.452131][ T29] audit: type=1400 audit(1750534393.381:2569): avc: denied { create } for pid=5392 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.475254][ T5393] netlink: 444 bytes leftover after parsing attributes in process `syz.0.535'. [ 71.490779][ T5398] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 71.519443][ T5393] SELinux: syz.0.535 (5393) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.523843][ T29] audit: type=1400 audit(1750534393.411:2570): avc: denied { write } for pid=5392 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.536465][ T5398] loop3: detected capacity change from 0 to 512 [ 71.553124][ T29] audit: type=1400 audit(1750534393.411:2571): avc: denied { nlmsg_write } for pid=5392 comm="syz.0.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 71.595004][ T5403] loop4: detected capacity change from 0 to 2048 [ 71.601660][ T5398] EXT4-fs: old and new quota format mixing [ 71.611597][ T5402] FAULT_INJECTION: forcing a failure. [ 71.611597][ T5402] name failslab, interval 1, probability 0, space 0, times 0 [ 71.624631][ T5402] CPU: 1 UID: 0 PID: 5402 Comm: syz.1.538 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 71.624678][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.624693][ T5402] Call Trace: [ 71.624700][ T5402] [ 71.624707][ T5402] __dump_stack+0x1d/0x30 [ 71.624737][ T5402] dump_stack_lvl+0xe8/0x140 [ 71.624759][ T5402] dump_stack+0x15/0x1b [ 71.624774][ T5402] should_fail_ex+0x265/0x280 [ 71.624804][ T5402] ? __pfx_resume_store+0x10/0x10 [ 71.624873][ T5402] should_failslab+0x8c/0xb0 [ 71.624909][ T5402] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 71.624961][ T5402] ? resume_store+0xf2/0x3d0 [ 71.624987][ T5402] ? __rcu_read_unlock+0x4f/0x70 [ 71.625015][ T5402] ? __pfx_resume_store+0x10/0x10 [ 71.625115][ T5402] kstrndup+0x80/0x130 [ 71.625144][ T5402] resume_store+0xf2/0x3d0 [ 71.625168][ T5402] ? _copy_from_iter+0x6b5/0xe40 [ 71.625186][ T5402] ? __pfx_resume_store+0x10/0x10 [ 71.625252][ T5402] kobj_attr_store+0x4a/0x70 [ 71.625275][ T5402] ? __pfx_kobj_attr_store+0x10/0x10 [ 71.625304][ T5402] sysfs_kf_write+0xfb/0x120 [ 71.625339][ T5402] ? __pfx_sysfs_kf_write+0x10/0x10 [ 71.625388][ T5402] kernfs_fop_write_iter+0x1be/0x2d0 [ 71.625537][ T5402] iter_file_splice_write+0x5f2/0x970 [ 71.625587][ T5402] ? __pfx_iter_file_splice_write+0x10/0x10 [ 71.625625][ T5402] direct_splice_actor+0x156/0x2a0 [ 71.625715][ T5402] ? shmem_mmap+0x71/0xb0 [ 71.625734][ T5402] splice_direct_to_actor+0x312/0x680 [ 71.625767][ T5402] ? __pfx_direct_splice_actor+0x10/0x10 [ 71.625812][ T5402] do_splice_direct+0xda/0x150 [ 71.625925][ T5402] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 71.625970][ T5402] do_sendfile+0x380/0x650 [ 71.626006][ T5402] __x64_sys_sendfile64+0x105/0x150 [ 71.626101][ T5402] x64_sys_call+0xb39/0x2fb0 [ 71.626127][ T5402] do_syscall_64+0xd2/0x200 [ 71.626155][ T5402] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.626188][ T5402] ? clear_bhb_loop+0x40/0x90 [ 71.626215][ T5402] ? clear_bhb_loop+0x40/0x90 [ 71.626236][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.626339][ T5402] RIP: 0033:0x7f0ccd54e929 [ 71.626358][ T5402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.626379][ T5402] RSP: 002b:00007f0ccbbb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 71.626402][ T5402] RAX: ffffffffffffffda RBX: 00007f0ccd775fa0 RCX: 00007f0ccd54e929 [ 71.626414][ T5402] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000008 [ 71.626425][ T5402] RBP: 00007f0ccbbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.626437][ T5402] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 71.626453][ T5402] R13: 0000000000000000 R14: 00007f0ccd775fa0 R15: 00007ffe3c1b63d8 [ 71.626542][ T5402] [ 71.917684][ T5398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 71.936364][ T5410] Cannot find add_set index 0 as target [ 71.940715][ T29] audit: type=1400 audit(1750534393.861:2572): avc: denied { shutdown } for pid=5408 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.961701][ T29] audit: type=1400 audit(1750534393.861:2573): avc: denied { write } for pid=5408 comm="syz.2.540" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.984940][ T29] audit: type=1400 audit(1750534393.861:2574): avc: denied { open } for pid=5408 comm="syz.2.540" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.984993][ T29] audit: type=1400 audit(1750534393.861:2575): avc: denied { ioctl } for pid=5408 comm="syz.2.540" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 72.003841][ T29] audit: type=1326 audit(1750534393.901:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5406 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 72.040896][ T5403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.149013][ T5421] xt_hashlimit: size too large, truncated to 1048576 [ 72.237587][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.422759][ T5437] loop1: detected capacity change from 0 to 2048 [ 72.459739][ T5447] loop2: detected capacity change from 0 to 512 [ 72.494647][ T5437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.537903][ T5458] loop2: detected capacity change from 0 to 164 [ 72.556280][ T5458] bio_check_eod: 2 callbacks suppressed [ 72.556298][ T5458] syz.2.555: attempt to access beyond end of device [ 72.556298][ T5458] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.612027][ T5458] syz.2.555: attempt to access beyond end of device [ 72.612027][ T5458] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.711015][ T5450] loop3: detected capacity change from 0 to 8192 [ 72.730553][ T5462] loop2: detected capacity change from 0 to 2048 [ 72.757683][ T5450] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.789930][ T5462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.920073][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.950075][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.972695][ T5475] vlan2: entered promiscuous mode [ 73.000167][ T5477] program syz.1.560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.020123][ T5475] SELinux: syz.0.562 (5475) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.047757][ T5482] xt_hashlimit: size too large, truncated to 1048576 [ 73.068944][ T5484] loop1: detected capacity change from 0 to 164 [ 73.082598][ T5484] syz.1.564: attempt to access beyond end of device [ 73.082598][ T5484] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.098217][ T5484] syz.1.564: attempt to access beyond end of device [ 73.098217][ T5484] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.209958][ T5492] loop1: detected capacity change from 0 to 512 [ 73.314474][ T5492] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.347030][ T5502] loop0: detected capacity change from 0 to 2048 [ 73.351712][ T5492] EXT4-fs (loop1): mount failed [ 73.384479][ T5502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.407939][ T5504] program syz.2.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.462376][ T5509] xt_CT: No such helper "syz0" [ 73.503425][ T123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.518722][ T5513] loop1: detected capacity change from 0 to 164 [ 73.611453][ T5511] loop3: detected capacity change from 0 to 8192 [ 73.621646][ T5513] syz.1.575: attempt to access beyond end of device [ 73.621646][ T5513] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 73.626297][ T123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.663430][ T5513] syz.1.575: attempt to access beyond end of device [ 73.663430][ T5513] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 73.711799][ T5511] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.731081][ T5521] No such timeout policy "syz0" [ 73.737527][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.761035][ T123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.840911][ T123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.858047][ T5531] FAULT_INJECTION: forcing a failure. [ 73.858047][ T5531] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 73.871501][ T5531] CPU: 1 UID: 0 PID: 5531 Comm: syz.1.580 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 73.871533][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.871547][ T5531] Call Trace: [ 73.871554][ T5531] [ 73.871561][ T5531] __dump_stack+0x1d/0x30 [ 73.871613][ T5531] dump_stack_lvl+0xe8/0x140 [ 73.871633][ T5531] dump_stack+0x15/0x1b [ 73.871649][ T5531] should_fail_ex+0x265/0x280 [ 73.871765][ T5531] should_fail+0xb/0x20 [ 73.871867][ T5531] should_fail_usercopy+0x1a/0x20 [ 73.872032][ T5531] _copy_from_iter+0xcf/0xe40 [ 73.872054][ T5531] ? __build_skb_around+0x1a0/0x200 [ 73.872091][ T5531] ? __alloc_skb+0x223/0x320 [ 73.872162][ T5531] netlink_sendmsg+0x471/0x6b0 [ 73.872183][ T5531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.872226][ T5531] __sock_sendmsg+0x142/0x180 [ 73.872332][ T5531] ____sys_sendmsg+0x31e/0x4e0 [ 73.872371][ T5531] ___sys_sendmsg+0x17b/0x1d0 [ 73.872504][ T5531] __x64_sys_sendmsg+0xd4/0x160 [ 73.872547][ T5531] x64_sys_call+0x2999/0x2fb0 [ 73.872629][ T5531] do_syscall_64+0xd2/0x200 [ 73.872651][ T5531] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.872684][ T5531] ? clear_bhb_loop+0x40/0x90 [ 73.872791][ T5531] ? clear_bhb_loop+0x40/0x90 [ 73.872828][ T5531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.872853][ T5531] RIP: 0033:0x7f0ccd54e929 [ 73.872868][ T5531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.872928][ T5531] RSP: 002b:00007f0ccbbb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.872954][ T5531] RAX: ffffffffffffffda RBX: 00007f0ccd775fa0 RCX: 00007f0ccd54e929 [ 73.872966][ T5531] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 73.872977][ T5531] RBP: 00007f0ccbbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 73.872993][ T5531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.873004][ T5531] R13: 0000000000000000 R14: 00007f0ccd775fa0 R15: 00007ffe3c1b63d8 [ 73.873026][ T5531] [ 74.214194][ T5543] program syz.2.584 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.223948][ T123] bridge_slave_1: left allmulticast mode [ 74.229838][ T123] bridge_slave_1: left promiscuous mode [ 74.235668][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.290833][ T5549] loop0: detected capacity change from 0 to 164 [ 74.305888][ T123] bridge_slave_0: left allmulticast mode [ 74.311824][ T123] bridge_slave_0: left promiscuous mode [ 74.317679][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.333274][ T5555] loop1: detected capacity change from 0 to 512 [ 74.350028][ T5549] syz.0.585: attempt to access beyond end of device [ 74.350028][ T5549] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.364723][ T5555] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.368230][ T5549] syz.0.585: attempt to access beyond end of device [ 74.368230][ T5549] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.419506][ T5552] xt_CT: No such helper "syz0" [ 74.433319][ T5555] EXT4-fs (loop1): mount failed [ 74.488742][ T5565] loop0: detected capacity change from 0 to 2048 [ 74.522988][ T5565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.596339][ T5578] loop2: detected capacity change from 0 to 512 [ 74.611896][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.623162][ T5578] ext4: Unknown parameter 'smackfstransmute' [ 74.667659][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.682639][ T123] bond0 (unregistering): Released all slaves [ 74.692061][ T5578] loop2: detected capacity change from 0 to 2048 [ 74.780638][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.796047][ T123] tipc: Left network mode [ 74.801504][ T5584] __nla_validate_parse: 14 callbacks suppressed [ 74.801595][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 74.892710][ T5590] loop3: detected capacity change from 0 to 164 [ 74.900866][ T5517] chnl_net:caif_netlink_parms(): no params data found [ 74.943368][ T5592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.594'. [ 74.962230][ T5590] syz.3.595: attempt to access beyond end of device [ 74.962230][ T5590] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.993391][ T5590] syz.3.595: attempt to access beyond end of device [ 74.993391][ T5590] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.997966][ T5595] program syz.2.596 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.025055][ T123] hsr_slave_0: left promiscuous mode [ 75.038106][ T123] hsr_slave_1: left promiscuous mode [ 75.059380][ T5588] loop1: detected capacity change from 0 to 8192 [ 75.069131][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.076643][ T123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.110514][ T5588] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.127986][ T123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.135529][ T123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.160566][ T123] veth1_macvtap: left promiscuous mode [ 75.166393][ T123] veth0_macvtap: left promiscuous mode [ 75.176784][ T123] veth1_vlan: left promiscuous mode [ 75.182772][ T123] veth0_vlan: left promiscuous mode [ 75.346390][ T123] team0 (unregistering): Port device team_slave_1 removed [ 75.359686][ T123] team0 (unregistering): Port device team_slave_0 removed [ 75.368118][ T5626] netlink: 452 bytes leftover after parsing attributes in process `syz.2.600'. [ 75.377584][ T57] smc: removing ib device syz! [ 75.397153][ T5626] SELinux: syz.2.600 (5626) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.448556][ T5517] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.455860][ T5517] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.479653][ T5517] bridge_slave_0: entered allmulticast mode [ 75.494113][ T5517] bridge_slave_0: entered promiscuous mode [ 75.513396][ T5621] 8021q: VLANs not supported on ip6gre0 [ 75.532073][ T5517] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.534192][ T5640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.602'. [ 75.539340][ T5517] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.561257][ T5517] bridge_slave_1: entered allmulticast mode [ 75.571793][ T5517] bridge_slave_1: entered promiscuous mode [ 75.590358][ T5643] loop0: detected capacity change from 0 to 512 [ 75.638656][ T5517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.653556][ T5643] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 75.678837][ T5517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.689129][ T5643] EXT4-fs (loop0): mount failed [ 75.767495][ T5656] loop1: detected capacity change from 0 to 512 [ 75.823457][ T5656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.835116][ T5664] loop0: detected capacity change from 0 to 164 [ 75.846427][ T5656] EXT4-fs (loop1): 1 truncate cleaned up [ 75.859843][ T5656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.890499][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 75.890536][ T29] audit: type=1400 audit(1750534397.821:2811): avc: denied { append } for pid=5654 comm="syz.1.604" path="/112/file2/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 75.924021][ T5647] Zero length message leads to an empty skb [ 75.925548][ T29] audit: type=1400 audit(1750534397.851:2812): avc: denied { create } for pid=5646 comm="syz.2.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 75.953769][ T5517] team0: Port device team_slave_0 added [ 75.960843][ T5517] team0: Port device team_slave_1 added [ 75.967732][ T29] audit: type=1326 audit(1750534397.881:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5657 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 76.014676][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.021783][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.048076][ T5517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.185109][ T5689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.610'. [ 76.198734][ T5690] loop3: detected capacity change from 0 to 512 [ 76.215709][ T5690] EXT4-fs: old and new quota format mixing [ 76.222404][ T5517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.229504][ T5517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.255768][ T5517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.357828][ T5685] infiniband syz!: set down [ 76.362425][ T5685] infiniband syz!: added team_slave_0 [ 76.373142][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.386517][ T5517] hsr_slave_0: entered promiscuous mode [ 76.393405][ T5517] hsr_slave_1: entered promiscuous mode [ 76.400277][ T5517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.409346][ T5690] netlink: 40 bytes leftover after parsing attributes in process `syz.3.609'. [ 76.472907][ T5685] RDS/IB: syz!: added [ 76.495017][ T5517] Cannot create hsr debugfs directory [ 76.511650][ T5685] smc: adding ib device syz! with port count 1 [ 76.521390][ T5698] loop1: detected capacity change from 0 to 164 [ 76.537697][ T5700] vlan2: entered promiscuous mode [ 76.565589][ T5685] smc: ib device syz! port 1 has pnetid [ 76.588798][ T5706] netlink: 444 bytes leftover after parsing attributes in process `syz.2.614'. [ 76.631759][ T5700] SELinux: syz.2.614 (5700) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.779032][ T5725] loop2: detected capacity change from 0 to 512 [ 76.796340][ T5725] ext4: Unknown parameter 'smackfstransmute' [ 76.854294][ T5725] loop2: detected capacity change from 0 to 2048 [ 76.890699][ T29] audit: type=1326 audit(1750534398.821:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 76.914819][ T29] audit: type=1326 audit(1750534398.821:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 76.921221][ T5517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 76.938465][ T29] audit: type=1326 audit(1750534398.821:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 76.968669][ T29] audit: type=1326 audit(1750534398.821:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c93e5d290 code=0x7ffc0000 [ 76.992318][ T29] audit: type=1326 audit(1750534398.821:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0c93e60157 code=0x7ffc0000 [ 77.015727][ T29] audit: type=1326 audit(1750534398.821:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 77.039031][ T29] audit: type=1326 audit(1750534398.821:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5692 comm="syz.0.612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0c93e60157 code=0x7ffc0000 [ 77.079406][ T5517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.116941][ T5517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.124909][ T5736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.621'. [ 77.145704][ T5517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.162421][ T5737] loop0: detected capacity change from 0 to 512 [ 77.196242][ T5737] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.248314][ T5517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.268802][ T5756] loop2: detected capacity change from 0 to 164 [ 77.285603][ T5517] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.303245][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.310385][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.320400][ T5737] EXT4-fs (loop0): mount failed [ 77.349481][ T5760] loop1: detected capacity change from 0 to 164 [ 77.362418][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.369628][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.411035][ T5767] xt_cgroup: path and classid specified [ 77.430189][ T5517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.440770][ T5517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.555982][ T5767] smc: net device bond0 applied user defined pnetid SYZ2 [ 77.674464][ T5799] loop0: detected capacity change from 0 to 1024 [ 77.694326][ T5799] EXT4-fs: Ignoring removed bh option [ 77.701789][ T5517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.713921][ T5800] loop2: detected capacity change from 0 to 164 [ 77.723354][ T5803] loop3: detected capacity change from 0 to 164 [ 77.748690][ T5803] bio_check_eod: 8 callbacks suppressed [ 77.748706][ T5803] syz.3.636: attempt to access beyond end of device [ 77.748706][ T5803] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.749231][ T5800] syz.2.635: attempt to access beyond end of device [ 77.749231][ T5800] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 77.766905][ T5803] syz.3.636: attempt to access beyond end of device [ 77.766905][ T5803] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.775995][ T5800] syz.2.635: attempt to access beyond end of device [ 77.775995][ T5800] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 77.810300][ T5799] EXT4-fs (loop0): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.902784][ T5820] team0: No ports can be present during mode change [ 78.093467][ T5849] loop1: detected capacity change from 0 to 2048 [ 78.129714][ T5517] veth0_vlan: entered promiscuous mode [ 78.139646][ T5517] veth1_vlan: entered promiscuous mode [ 78.151958][ T5849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.191186][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 78.192874][ T5517] veth0_macvtap: entered promiscuous mode [ 78.213055][ T5517] veth1_macvtap: entered promiscuous mode [ 78.228277][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.257360][ T5517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.276104][ T5517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.284551][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.285395][ T5517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.303189][ T5517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.312245][ T5517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.330481][ T5875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.649'. [ 78.356764][ T5878] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 78.462158][ T5882] loop3: detected capacity change from 0 to 2048 [ 78.496641][ T5869] loop2: detected capacity change from 0 to 8192 [ 78.534936][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.557523][ T3307] EXT4-fs (loop0): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 78.582863][ T5888] loop1: detected capacity change from 0 to 2048 [ 78.618450][ T5869] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.689000][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.707219][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.966302][ T5931] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 79.004374][ T5931] netlink: 'syz.3.660': attribute type 4 has an invalid length. [ 79.033857][ T5933] bridge_slave_0: left allmulticast mode [ 79.039797][ T5933] bridge_slave_0: left promiscuous mode [ 79.045562][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.055329][ T5933] bridge_slave_1: left allmulticast mode [ 79.061153][ T5933] bridge_slave_1: left promiscuous mode [ 79.066978][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.080778][ T5933] bond0: (slave bond_slave_0): Releasing backup interface [ 79.083727][ T5935] netlink: 'syz.5.661': attribute type 21 has an invalid length. [ 79.091694][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.096072][ T5935] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.152452][ T5933] bond0: (slave bond_slave_1): Releasing backup interface [ 79.171037][ T5939] loop1: detected capacity change from 0 to 1024 [ 79.201826][ T5933] team0: Port device team_slave_0 removed [ 79.230511][ T5933] team0: Port device team_slave_1 removed [ 79.237103][ T5939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.242028][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.257191][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.265594][ T5939] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.278119][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.285673][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.319768][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.381616][ T5941] team0: Mode changed to "loadbalance" [ 79.405129][ T5954] netlink: 'syz.1.664': attribute type 8 has an invalid length. [ 79.417223][ T5952] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 79.425045][ T5952] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.448718][ T5933] syz.5.661 (5933) used greatest stack depth: 10144 bytes left [ 79.463058][ T5956] loop1: detected capacity change from 0 to 512 [ 79.487904][ T5946] bridge_slave_0: left allmulticast mode [ 79.493730][ T5946] bridge_slave_0: left promiscuous mode [ 79.499604][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.518051][ T5956] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.536695][ T5946] bridge_slave_1: left allmulticast mode [ 79.542560][ T5946] bridge_slave_1: left promiscuous mode [ 79.548361][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.583044][ T5956] EXT4-fs (loop1): mount failed [ 79.617109][ T5946] bond0: (slave bond_slave_0): Releasing backup interface [ 79.638550][ T5946] bond0: (slave bond_slave_1): Releasing backup interface [ 79.682952][ T5946] team0: Port device team_slave_0 removed [ 79.711623][ T5946] team0: Port device team_slave_1 removed [ 79.725951][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.733717][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.779967][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.787481][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.886879][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.901655][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.913765][ T5920] syz.0.657 (5920) used greatest stack depth: 9976 bytes left [ 79.965364][ T5973] __nla_validate_parse: 1 callbacks suppressed [ 79.965383][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.668'. [ 80.075296][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 80.091523][ T5992] loop2: detected capacity change from 0 to 1024 [ 80.129785][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.150932][ T5992] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.194843][ T6000] program syz.3.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.392330][ T5997] loop1: detected capacity change from 0 to 8192 [ 80.531671][ T5997] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.558145][ T6027] loop5: detected capacity change from 0 to 164 [ 80.576471][ T6029] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 80.586125][ T6027] syz.5.682: attempt to access beyond end of device [ 80.586125][ T6027] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 80.620513][ T6027] syz.5.682: attempt to access beyond end of device [ 80.620513][ T6027] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 80.635221][ T6029] netlink: 'syz.0.681': attribute type 4 has an invalid length. [ 80.757270][ T6039] xt_hashlimit: size too large, truncated to 1048576 [ 80.816996][ T5750] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 80.893073][ T6042] syz!: rxe_newlink: already configured on team_slave_0 [ 80.941666][ T6042] loop3: detected capacity change from 0 to 512 [ 80.955068][ T6042] EXT4-fs: old and new quota format mixing [ 80.956617][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.964682][ T6042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.686'. [ 81.150841][ T6053] loop3: detected capacity change from 0 to 164 [ 81.185029][ T6053] syz.3.691: attempt to access beyond end of device [ 81.185029][ T6053] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.231122][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 81.231137][ T29] audit: type=1326 audit(1750534403.161:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.238613][ T6054] netlink: 'syz.1.692': attribute type 8 has an invalid length. [ 81.261031][ T29] audit: type=1326 audit(1750534403.161:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.261069][ T29] audit: type=1326 audit(1750534403.161:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.269799][ T6053] syz.3.691: attempt to access beyond end of device [ 81.269799][ T6053] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.292305][ T29] audit: type=1326 audit(1750534403.161:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.292336][ T29] audit: type=1326 audit(1750534403.161:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.376959][ T29] audit: type=1326 audit(1750534403.161:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.408457][ T6056] loop1: detected capacity change from 0 to 512 [ 81.431479][ T6055] xt_hashlimit: size too large, truncated to 1048576 [ 81.455773][ T29] audit: type=1326 audit(1750534403.161:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.479285][ T29] audit: type=1326 audit(1750534403.161:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.502677][ T29] audit: type=1326 audit(1750534403.161:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.526089][ T29] audit: type=1326 audit(1750534403.161:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.1.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 81.617087][ T6062] vlan2: entered promiscuous mode [ 81.623205][ T6056] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.644294][ T6056] EXT4-fs (loop1): mount failed [ 81.653827][ T6066] program syz.3.694 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.677852][ T6068] netlink: 444 bytes leftover after parsing attributes in process `syz.0.689'. [ 81.711661][ T6070] loop3: detected capacity change from 0 to 164 [ 81.728928][ T6070] syz.3.695: attempt to access beyond end of device [ 81.728928][ T6070] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 81.754640][ T6070] syz.3.695: attempt to access beyond end of device [ 81.754640][ T6070] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 81.778381][ T6068] SELinux: syz.0.689 (6068) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 81.892132][ T6076] bridge_slave_0: left allmulticast mode [ 81.897965][ T6076] bridge_slave_0: left promiscuous mode [ 81.903796][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.914241][ T6076] bridge_slave_1: left allmulticast mode [ 81.920039][ T6076] bridge_slave_1: left promiscuous mode [ 81.925811][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.935122][ T6082] netlink: 'syz.5.697': attribute type 8 has an invalid length. [ 81.943602][ T6076] bond0: (slave bond_slave_0): Releasing backup interface [ 81.955419][ T6076] bond0: (slave bond_slave_1): Releasing backup interface [ 81.973827][ T6076] team0: Port device team_slave_0 removed [ 81.980750][ T6084] netlink: 'syz.3.700': attribute type 4 has an invalid length. [ 81.999216][ T6077] loop5: detected capacity change from 0 to 512 [ 82.011577][ T6076] team0: Port device team_slave_1 removed [ 82.037919][ T6088] loop2: detected capacity change from 0 to 164 [ 82.038567][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.052602][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.062741][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.070426][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.073782][ T6077] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 82.101918][ T6077] EXT4-fs (loop5): mount failed [ 82.211660][ T6098] vlan2: entered promiscuous mode [ 82.298662][ T6104] netlink: 444 bytes leftover after parsing attributes in process `syz.1.704'. [ 82.325349][ T6098] SELinux: syz.1.704 (6098) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.358538][ T6107] loop0: detected capacity change from 0 to 164 [ 82.523813][ T6116] loop0: detected capacity change from 0 to 2048 [ 82.525726][ T6119] xt_hashlimit: size too large, truncated to 1048576 [ 82.611125][ T6127] loop3: detected capacity change from 0 to 2048 [ 82.622730][ T6124] xt_hashlimit: size too large, truncated to 1048576 [ 82.631590][ T6116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.654534][ T6114] loop5: detected capacity change from 0 to 2048 [ 82.687499][ T6116] random: crng reseeded on system resumption [ 82.790640][ T6127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.875827][ T6114] EXT4-fs: Invalid want_extra_isize 1 [ 83.043080][ T6136] loop1: detected capacity change from 0 to 164 [ 83.065801][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.093507][ T6136] bio_check_eod: 4 callbacks suppressed [ 83.093523][ T6136] syz.1.715: attempt to access beyond end of device [ 83.093523][ T6136] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 83.119311][ T6136] syz.1.715: attempt to access beyond end of device [ 83.119311][ T6136] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 83.212238][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.374986][ T6153] loop5: detected capacity change from 0 to 164 [ 83.443153][ T6156] IPv6: NLM_F_CREATE should be specified when creating new route [ 83.497839][ T6160] syz!: rxe_newlink: already configured on team_slave_0 [ 83.524833][ T6160] loop3: detected capacity change from 0 to 512 [ 83.570861][ T6160] EXT4-fs: old and new quota format mixing [ 83.601342][ T6160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 83.615919][ T6162] loop5: detected capacity change from 0 to 512 [ 83.644452][ T6162] ext4: Unknown parameter 'smackfstransmute' [ 83.704876][ T6162] loop5: detected capacity change from 0 to 2048 [ 83.732453][ T6166] loop2: detected capacity change from 0 to 2048 [ 83.750955][ T6166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.794391][ T6169] xt_hashlimit: size too large, truncated to 1048576 [ 83.858473][ T6178] loop3: detected capacity change from 0 to 512 [ 83.869084][ T6178] EXT4-fs: Ignoring removed oldalloc option [ 83.887907][ T6166] random: crng reseeded on system resumption [ 83.897866][ T6179] loop5: detected capacity change from 0 to 512 [ 83.928229][ T6178] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.728: Parent and EA inode have the same ino 15 [ 83.946656][ T6178] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.728: Parent and EA inode have the same ino 15 [ 83.978949][ T6178] EXT4-fs (loop3): 1 orphan inode deleted [ 83.985192][ T6178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.028452][ T6179] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.087121][ T6179] EXT4-fs (loop5): mount failed [ 84.109009][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.143944][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.171161][ T6187] loop0: detected capacity change from 0 to 512 [ 84.177914][ T6187] ext4: Unknown parameter 'smackfstransmute' [ 84.229549][ T6187] loop0: detected capacity change from 0 to 2048 [ 84.260089][ T6198] loop1: detected capacity change from 0 to 2048 [ 84.324139][ T6198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.340432][ T6201] xt_CT: No such helper "syz0" [ 84.431350][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.737'. [ 84.490151][ T6219] loop2: detected capacity change from 0 to 512 [ 84.501187][ T6218] validate_nla: 3 callbacks suppressed [ 84.501219][ T6218] netlink: 'syz.5.740': attribute type 8 has an invalid length. [ 84.528332][ T6219] ext4: Unknown parameter 'smackfstransmute' [ 84.575060][ T6223] loop5: detected capacity change from 0 to 512 [ 84.608219][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.636433][ T6223] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.683981][ T6230] loop2: detected capacity change from 0 to 1024 [ 84.696640][ T6223] EXT4-fs (loop5): mount failed [ 84.704856][ T6220] loop0: detected capacity change from 0 to 8192 [ 84.761509][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.791072][ T6237] xt_hashlimit: size too large, truncated to 1048576 [ 84.801360][ T6220] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.845145][ T6230] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.744: Allocating blocks 449-513 which overlap fs metadata [ 85.043564][ T6228] EXT4-fs (loop2): pa ffff888106a090e0: logic 48, phys. 177, len 21 [ 85.051692][ T6228] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 85.114088][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.192551][ T6249] netlink: 'syz.5.746': attribute type 8 has an invalid length. [ 85.217016][ T6249] loop5: detected capacity change from 0 to 512 [ 85.258427][ T6249] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.287113][ T6249] EXT4-fs (loop5): mount failed [ 85.293583][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 85.430655][ T6262] loop1: detected capacity change from 0 to 8192 [ 85.484307][ T6267] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'. [ 85.504515][ T6262] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.591468][ T6274] loop2: detected capacity change from 0 to 512 [ 85.622961][ T6274] ext4: Unknown parameter 'smackfstransmute' [ 85.673037][ T6274] loop2: detected capacity change from 0 to 2048 [ 85.696550][ T6282] loop0: detected capacity change from 0 to 1024 [ 85.717071][ T6283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.756'. [ 85.728336][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.756'. [ 85.758786][ T6282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.801129][ T6283] veth0_macvtap: left promiscuous mode [ 85.811752][ T6282] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.823709][ T6292] loop2: detected capacity change from 0 to 164 [ 85.894498][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.760'. [ 85.981594][ T6301] loop2: detected capacity change from 0 to 164 [ 85.987285][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.045714][ T6305] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 86.060639][ T6304] bond0: entered promiscuous mode [ 86.096074][ T6305] loop0: detected capacity change from 0 to 512 [ 86.107076][ T6304] batadv0: entered promiscuous mode [ 86.112823][ T6304] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 86.124505][ T6305] EXT4-fs: old and new quota format mixing [ 86.148179][ T6305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.763'. [ 86.162121][ T6304] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 86.172178][ T6304] bond0: left promiscuous mode [ 86.181647][ T6304] batadv0: left promiscuous mode [ 86.209280][ T6299] loop3: detected capacity change from 0 to 8192 [ 86.230722][ T6299] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.273772][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 86.273791][ T29] audit: type=1326 audit(1750534408.201:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.320846][ T6312] loop0: detected capacity change from 0 to 1024 [ 86.333200][ T29] audit: type=1326 audit(1750534408.241:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.356639][ T29] audit: type=1326 audit(1750534408.241:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.380205][ T29] audit: type=1326 audit(1750534408.241:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.403606][ T29] audit: type=1326 audit(1750534408.241:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.427507][ T29] audit: type=1326 audit(1750534408.241:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.450828][ T29] audit: type=1326 audit(1750534408.241:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.474475][ T29] audit: type=1326 audit(1750534408.241:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.496188][ T6316] netlink: 'syz.1.766': attribute type 21 has an invalid length. [ 86.497841][ T29] audit: type=1326 audit(1750534408.241:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.529009][ T29] audit: type=1326 audit(1750534408.241:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.0.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c93e5e929 code=0x7ffc0000 [ 86.554136][ T6312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.600544][ T6317] netlink: 'syz.2.768': attribute type 21 has an invalid length. [ 86.612578][ T6312] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.631542][ T6328] loop5: detected capacity change from 0 to 512 [ 86.646968][ T6328] ext4: Unknown parameter 'smackfstransmute' [ 86.679209][ T6310] team0: Mode changed to "loadbalance" [ 86.690624][ T6320] team0: Mode changed to "loadbalance" [ 86.731729][ T6328] loop5: detected capacity change from 0 to 2048 [ 86.875161][ T6337] program syz.3.772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.890712][ T6338] netlink: 'syz.5.771': attribute type 21 has an invalid length. [ 86.913879][ T6343] loop2: detected capacity change from 0 to 164 [ 86.938159][ T6341] loop3: detected capacity change from 0 to 2048 [ 86.958043][ T6334] team0: Unable to change to the same mode the team is in [ 86.983388][ T6345] loop2: detected capacity change from 0 to 1024 [ 86.991033][ T6341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.006910][ T6341] random: crng reseeded on system resumption [ 87.023803][ T6345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.100223][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.111996][ T6351] 8021q: VLANs not supported on ip6gre0 [ 87.114149][ T6345] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.775: Allocating blocks 449-513 which overlap fs metadata [ 87.134454][ T6351] netlink: 452 bytes leftover after parsing attributes in process `syz.5.776'. [ 87.164872][ T6351] SELinux: syz.5.776 (6351) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 87.190781][ T6345] FAULT_INJECTION: forcing a failure. [ 87.190781][ T6345] name failslab, interval 1, probability 0, space 0, times 0 [ 87.211907][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.2.775 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 87.211954][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.211970][ T6345] Call Trace: [ 87.211977][ T6345] [ 87.211985][ T6345] __dump_stack+0x1d/0x30 [ 87.212048][ T6345] dump_stack_lvl+0xe8/0x140 [ 87.212072][ T6345] dump_stack+0x15/0x1b [ 87.212092][ T6345] should_fail_ex+0x265/0x280 [ 87.212191][ T6345] should_failslab+0x8c/0xb0 [ 87.212221][ T6345] kmem_cache_alloc_noprof+0x50/0x310 [ 87.212254][ T6345] ? dst_alloc+0xbd/0x100 [ 87.212358][ T6345] dst_alloc+0xbd/0x100 [ 87.212385][ T6345] ? __ip_rt_update_pmtu+0x82/0x7f0 [ 87.212431][ T6345] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 87.212490][ T6345] ip_route_output_key_hash+0x7a/0xb0 [ 87.212528][ T6345] tcp_v4_connect+0x3d5/0xac0 [ 87.212559][ T6345] __inet_stream_connect+0x166/0x7e0 [ 87.212643][ T6345] ? tcp_sendmsg_fastopen+0x172/0x520 [ 87.212671][ T6345] ? should_failslab+0x8c/0xb0 [ 87.212698][ T6345] ? __kmalloc_cache_noprof+0x189/0x320 [ 87.212811][ T6345] tcp_sendmsg_fastopen+0x43a/0x520 [ 87.212840][ T6345] tcp_sendmsg_locked+0x27be/0x2cc0 [ 87.212958][ T6345] ? perf_event_output_forward+0x11e/0x160 [ 87.213026][ T6345] ? __perf_event_overflow+0x669/0x8d0 [ 87.213056][ T6345] ? __rcu_read_unlock+0x4f/0x70 [ 87.213088][ T6345] ? avc_has_perm_noaudit+0x1b1/0x200 [ 87.213127][ T6345] ? avc_has_perm+0xd3/0x150 [ 87.213163][ T6345] ? _raw_spin_unlock_bh+0x36/0x40 [ 87.213205][ T6345] ? __pfx_tcp_sendmsg+0x10/0x10 [ 87.213239][ T6345] tcp_sendmsg+0x2f/0x50 [ 87.213269][ T6345] inet_sendmsg+0x76/0xd0 [ 87.213290][ T6345] __sock_sendmsg+0x102/0x180 [ 87.213350][ T6345] __sys_sendto+0x268/0x330 [ 87.213400][ T6345] __x64_sys_sendto+0x76/0x90 [ 87.213438][ T6345] x64_sys_call+0x2eb6/0x2fb0 [ 87.213495][ T6345] do_syscall_64+0xd2/0x200 [ 87.213517][ T6345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 87.213556][ T6345] ? clear_bhb_loop+0x40/0x90 [ 87.213644][ T6345] ? clear_bhb_loop+0x40/0x90 [ 87.213697][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.213717][ T6345] RIP: 0033:0x7efc6b9ce929 [ 87.213735][ T6345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.213758][ T6345] RSP: 002b:00007efc6a037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 87.213790][ T6345] RAX: ffffffffffffffda RBX: 00007efc6bbf5fa0 RCX: 00007efc6b9ce929 [ 87.213806][ T6345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 87.213821][ T6345] RBP: 00007efc6a037090 R08: 0000200000e68000 R09: 0000000000000010 [ 87.213833][ T6345] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 87.213844][ T6345] R13: 0000000000000000 R14: 00007efc6bbf5fa0 R15: 00007ffc2f328df8 [ 87.213940][ T6345] [ 87.537425][ T6358] FAULT_INJECTION: forcing a failure. [ 87.537425][ T6358] name failslab, interval 1, probability 0, space 0, times 0 [ 87.550142][ T6358] CPU: 1 UID: 0 PID: 6358 Comm: syz.0.779 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 87.550184][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.550200][ T6358] Call Trace: [ 87.550206][ T6358] [ 87.550214][ T6358] __dump_stack+0x1d/0x30 [ 87.550238][ T6358] dump_stack_lvl+0xe8/0x140 [ 87.550323][ T6358] dump_stack+0x15/0x1b [ 87.550345][ T6358] should_fail_ex+0x265/0x280 [ 87.550386][ T6358] should_failslab+0x8c/0xb0 [ 87.550416][ T6358] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 87.550504][ T6358] ? shmem_alloc_inode+0x34/0x50 [ 87.550605][ T6358] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 87.550629][ T6358] shmem_alloc_inode+0x34/0x50 [ 87.550653][ T6358] alloc_inode+0x40/0x170 [ 87.550709][ T6358] new_inode+0x1d/0xe0 [ 87.550755][ T6358] shmem_get_inode+0x244/0x750 [ 87.550778][ T6358] ? __se_sys_memfd_create+0x1cc/0x590 [ 87.550847][ T6358] __shmem_file_setup+0x113/0x210 [ 87.550953][ T6358] shmem_file_setup+0x3b/0x50 [ 87.551062][ T6358] __se_sys_memfd_create+0x2c3/0x590 [ 87.551102][ T6358] __x64_sys_memfd_create+0x31/0x40 [ 87.551140][ T6358] x64_sys_call+0x122f/0x2fb0 [ 87.551173][ T6358] do_syscall_64+0xd2/0x200 [ 87.551242][ T6358] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 87.551276][ T6358] ? clear_bhb_loop+0x40/0x90 [ 87.551302][ T6358] ? clear_bhb_loop+0x40/0x90 [ 87.551329][ T6358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.551355][ T6358] RIP: 0033:0x7f0c93e5e929 [ 87.551410][ T6358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.551432][ T6358] RSP: 002b:00007f0c924c6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 87.551455][ T6358] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007f0c93e5e929 [ 87.551496][ T6358] RDX: 00007f0c924c6ef0 RSI: 0000000000000000 RDI: 00007f0c93ee14cc [ 87.551512][ T6358] RBP: 0000200000000400 R08: 00007f0c924c6bb7 R09: 00007f0c924c6e40 [ 87.551527][ T6358] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 87.551589][ T6358] R13: 00007f0c924c6ef0 R14: 00007f0c924c6eb0 R15: 0000200000000100 [ 87.551613][ T6358] [ 87.562650][ T6344] EXT4-fs (loop2): pa ffff888106a427e0: logic 48, phys. 177, len 21 [ 87.643516][ T6365] netlink: 'syz.1.780': attribute type 8 has an invalid length. [ 87.648385][ T6344] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, [ 87.663782][ T6365] loop1: detected capacity change from 0 to 512 [ 87.668739][ T6344] free 0, pa_free 4 [ 87.675201][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.703137][ T6366] netlink: 'syz.5.781': attribute type 21 has an invalid length. [ 87.818883][ T6368] team0: Unable to change to the same mode the team is in [ 87.842803][ T6365] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.895084][ T6378] program syz.0.784 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.906016][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 87.917906][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.959963][ T6365] EXT4-fs (loop1): mount failed [ 88.004091][ T6385] loop5: detected capacity change from 0 to 1024 [ 88.068930][ T6385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.131921][ T6385] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.185534][ T6402] loop0: detected capacity change from 0 to 2048 [ 88.226501][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.254830][ T6383] loop3: detected capacity change from 0 to 8192 [ 88.317821][ T6410] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 88.329652][ T6383] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.368518][ T6416] team0: Unable to change to the same mode the team is in [ 88.376135][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 88.391503][ T6413] loop1: detected capacity change from 0 to 164 [ 88.426053][ T6413] syz.1.792: attempt to access beyond end of device [ 88.426053][ T6413] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.458829][ T6413] syz.1.792: attempt to access beyond end of device [ 88.458829][ T6413] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.542198][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.632210][ T6424] program syz.1.795 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.757864][ T6432] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 88.802512][ T6432] loop1: detected capacity change from 0 to 512 [ 88.832802][ T6432] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.839018][ T6436] loop3: detected capacity change from 0 to 512 [ 88.873963][ T5517] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.884171][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.914713][ T6432] EXT4-fs (loop1): mount failed [ 88.921421][ T6436] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.987892][ T6436] batadv_slave_0: entered promiscuous mode [ 88.999428][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 89.049933][ T6436] batadv_slave_0 (unregistering): left promiscuous mode [ 89.058479][ T6450] loop1: detected capacity change from 0 to 164 [ 89.075701][ T6450] syz.1.804: attempt to access beyond end of device [ 89.075701][ T6450] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.120191][ T6450] syz.1.804: attempt to access beyond end of device [ 89.120191][ T6450] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 89.135199][ T6453] loop5: detected capacity change from 0 to 164 [ 89.148105][ T6453] syz.5.805: attempt to access beyond end of device [ 89.148105][ T6453] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.173627][ T6453] syz.5.805: attempt to access beyond end of device [ 89.173627][ T6453] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 89.252308][ T6458] loop1: detected capacity change from 0 to 164 [ 89.264461][ T6460] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 89.273805][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.284073][ T6456] loop2: detected capacity change from 0 to 2048 [ 89.330043][ T6462] bond0: entered promiscuous mode [ 89.345009][ T6462] batadv0: entered promiscuous mode [ 89.345484][ T6456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.350956][ T6462] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 89.373925][ T6462] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 89.383391][ T6462] bond0: left promiscuous mode [ 89.385135][ T6456] random: crng reseeded on system resumption [ 89.403890][ T6466] loop3: detected capacity change from 0 to 1024 [ 89.417587][ T6462] batadv0: left promiscuous mode [ 89.431860][ T6471] FAULT_INJECTION: forcing a failure. [ 89.431860][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 89.444663][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.0.812 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 89.444699][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.444779][ T6471] Call Trace: [ 89.444787][ T6471] [ 89.444800][ T6471] __dump_stack+0x1d/0x30 [ 89.444827][ T6471] dump_stack_lvl+0xe8/0x140 [ 89.444846][ T6471] dump_stack+0x15/0x1b [ 89.444887][ T6471] should_fail_ex+0x265/0x280 [ 89.444926][ T6471] should_failslab+0x8c/0xb0 [ 89.444965][ T6471] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 89.445083][ T6471] ? ip6_setup_cork+0x3c9/0x7a0 [ 89.445112][ T6471] kmemdup_noprof+0x2b/0x70 [ 89.445143][ T6471] ip6_setup_cork+0x3c9/0x7a0 [ 89.445177][ T6471] ip6_append_data+0x18e/0x250 [ 89.445280][ T6471] ? __pfx_raw6_getfrag+0x10/0x10 [ 89.445320][ T6471] rawv6_sendmsg+0xdba/0xf70 [ 89.445355][ T6471] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 89.445384][ T6471] inet_sendmsg+0xc2/0xd0 [ 89.445408][ T6471] __sock_sendmsg+0x102/0x180 [ 89.445439][ T6471] __sys_sendto+0x268/0x330 [ 89.445606][ T6471] __x64_sys_sendto+0x76/0x90 [ 89.445645][ T6471] x64_sys_call+0x2eb6/0x2fb0 [ 89.445670][ T6471] do_syscall_64+0xd2/0x200 [ 89.445691][ T6471] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 89.445787][ T6471] ? clear_bhb_loop+0x40/0x90 [ 89.445816][ T6471] ? clear_bhb_loop+0x40/0x90 [ 89.445893][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.445962][ T6471] RIP: 0033:0x7f0c93e5e929 [ 89.445982][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.446006][ T6471] RSP: 002b:00007f0c924c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 89.446030][ T6471] RAX: ffffffffffffffda RBX: 00007f0c94085fa0 RCX: 00007f0c93e5e929 [ 89.446044][ T6471] RDX: 00000000000000a6 RSI: 0000200000000300 RDI: 0000000000000003 [ 89.446056][ T6471] RBP: 00007f0c924c7090 R08: 0000000000000000 R09: fffffffffffffdfd [ 89.446067][ T6471] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 89.446079][ T6471] R13: 0000000000000000 R14: 00007f0c94085fa0 R15: 00007ffefc8c50e8 [ 89.446162][ T6471] [ 89.773299][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.846613][ T6488] loop0: detected capacity change from 0 to 2048 [ 89.865523][ T6490] netlink: 'syz.5.814': attribute type 21 has an invalid length. [ 89.915802][ T6476] team0: Unable to change to the same mode the team is in [ 89.974461][ T6488] random: crng reseeded on system resumption [ 90.263001][ T6538] program syz.3.826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.405862][ T6598] loop0: detected capacity change from 0 to 164 [ 90.515475][ T6610] loop0: detected capacity change from 0 to 1024 [ 90.534454][ T6610] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.620518][ T6617] __nla_validate_parse: 1 callbacks suppressed [ 90.620689][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.834'. [ 90.832456][ T6623] loop5: detected capacity change from 0 to 8192 [ 90.885957][ T6623] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 91.162962][ T6649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6649 comm=syz.3.838 [ 91.228511][ T6654] netlink: 36 bytes leftover after parsing attributes in process `syz.3.839'. [ 91.306636][ T6661] program syz.3.840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.344633][ T6663] Illegal XDP return value 4294967274 on prog (id 462) dev syz_tun, expect packet loss! [ 91.363713][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 91.493936][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 91.493954][ T29] audit: type=1326 audit(1750534413.421:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.528455][ T6682] bond0: entered promiscuous mode [ 91.539803][ T6682] batadv0: entered promiscuous mode [ 91.545589][ T6682] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 91.561461][ T6683] netlink: 'syz.5.848': attribute type 8 has an invalid length. [ 91.570609][ T6682] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 91.577503][ T6689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.850'. [ 91.581937][ T29] audit: type=1326 audit(1750534413.421:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.609852][ T29] audit: type=1326 audit(1750534413.461:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.633275][ T29] audit: type=1326 audit(1750534413.461:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.638089][ T6693] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 91.656778][ T29] audit: type=1326 audit(1750534413.491:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.656887][ T29] audit: type=1326 audit(1750534413.491:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.665782][ T6682] bond0: left promiscuous mode [ 91.687812][ T29] audit: type=1326 audit(1750534413.491:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.687852][ T29] audit: type=1326 audit(1750534413.491:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.687924][ T29] audit: type=1326 audit(1750534413.491:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.687949][ T29] audit: type=1326 audit(1750534413.491:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.5.848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6728f2e929 code=0x7ffc0000 [ 91.720054][ T6691] loop5: detected capacity change from 0 to 512 [ 91.766158][ T6682] batadv0: left promiscuous mode [ 91.832227][ T6691] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.850006][ T6691] EXT4-fs (loop5): mount failed [ 91.868230][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.879457][ T6705] ip6erspan0: entered promiscuous mode [ 91.921610][ T6705] bond1: (slave ip6erspan0): making interface the new active one [ 91.961386][ T6707] xt_CT: No such helper "syz0" [ 91.977236][ T6705] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 91.988788][ T6713] loop1: detected capacity change from 0 to 2048 [ 92.020352][ T6717] loop5: detected capacity change from 0 to 1024 [ 92.041916][ T6717] EXT4-fs: Ignoring removed bh option [ 92.297249][ T6753] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 92.326023][ T6751] loop1: detected capacity change from 0 to 512 [ 92.338073][ T6753] EXT4-fs (loop5): Remounting filesystem read-only [ 92.362918][ T6751] ext4: Unknown parameter 'smackfstransmute' [ 92.399373][ T6761] vhci_hcd: invalid port number 255 [ 92.404645][ T6761] vhci_hcd: invalid port number 255 [ 92.439188][ T6751] loop1: detected capacity change from 0 to 2048 [ 92.548573][ T6770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.862'. [ 92.640496][ T6783] loop2: detected capacity change from 0 to 164 [ 92.666214][ T6781] xt_CT: No such helper "syz0" [ 92.694555][ T6786] loop1: detected capacity change from 0 to 512 [ 92.708999][ T6783] syz.2.867: attempt to access beyond end of device [ 92.708999][ T6783] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 92.720032][ T6786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.868: bg 0: block 5: invalid block bitmap [ 92.742999][ T6786] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 92.752259][ T6783] syz.2.867: attempt to access beyond end of device [ 92.752259][ T6783] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 92.766834][ T6786] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.868: invalid indirect mapped block 3 (level 2) [ 92.790728][ T6786] EXT4-fs (loop1): 2 truncates cleaned up [ 92.900151][ T6796] loop3: detected capacity change from 0 to 128 [ 92.903832][ T6799] loop0: detected capacity change from 0 to 512 [ 92.943571][ T6799] ext4: Unknown parameter 'smackfstransmute' [ 92.988779][ T6796] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.033394][ T6812] loop5: detected capacity change from 0 to 512 [ 93.077798][ T6812] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.126168][ T6826] syz!: rxe_newlink: already configured on team_slave_0 [ 93.169615][ T6826] loop3: detected capacity change from 0 to 512 [ 93.196085][ T6826] EXT4-fs: old and new quota format mixing [ 93.240682][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.882'. [ 93.295410][ T6832] xt_CT: No such helper "syz0" [ 93.518993][ T6861] loop5: detected capacity change from 0 to 164 [ 93.574879][ T6861] syz.5.891: attempt to access beyond end of device [ 93.574879][ T6861] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.625222][ T6861] syz.5.891: attempt to access beyond end of device [ 93.625222][ T6861] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.696574][ T6871] loop3: detected capacity change from 0 to 164 [ 93.741092][ T6871] syz.3.894: attempt to access beyond end of device [ 93.741092][ T6871] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 93.780422][ T6871] syz.3.894: attempt to access beyond end of device [ 93.780422][ T6871] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 93.924427][ T6875] loop2: detected capacity change from 0 to 128 [ 93.937186][ T6886] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.952347][ T6875] vfat: Unknown parameter 'nnonumtail' [ 93.967216][ T6886] loop1: detected capacity change from 0 to 512 [ 94.001184][ T6886] EXT4-fs: old and new quota format mixing [ 94.029809][ T6886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.898'. [ 94.179270][ T6904] loop2: detected capacity change from 0 to 512 [ 94.200578][ T6904] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.298338][ T6917] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 94.409728][ T6928] FAULT_INJECTION: forcing a failure. [ 94.409728][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 94.422659][ T6928] CPU: 1 UID: 0 PID: 6928 Comm: syz.0.908 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 94.422748][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.422766][ T6928] Call Trace: [ 94.422775][ T6928] [ 94.422784][ T6928] __dump_stack+0x1d/0x30 [ 94.422830][ T6928] dump_stack_lvl+0xe8/0x140 [ 94.422853][ T6928] dump_stack+0x15/0x1b [ 94.422875][ T6928] should_fail_ex+0x265/0x280 [ 94.422913][ T6928] ? sctp_association_new+0x71/0x1200 [ 94.423010][ T6928] should_failslab+0x8c/0xb0 [ 94.423034][ T6928] __kmalloc_cache_noprof+0x4c/0x320 [ 94.423071][ T6928] sctp_association_new+0x71/0x1200 [ 94.423106][ T6928] ? sctp_v4_to_sk_saddr+0x29/0x40 [ 94.423170][ T6928] ? sctp_do_bind+0x49a/0x4b0 [ 94.423227][ T6928] ? sctp_v4_scope+0x8a/0x150 [ 94.423256][ T6928] sctp_connect_new_asoc+0x1a8/0x3a0 [ 94.423297][ T6928] __sctp_connect+0x424/0x7a0 [ 94.423386][ T6928] ? selinux_sctp_bind_connect+0x20d/0x250 [ 94.423483][ T6928] sctp_getsockopt_connectx3+0x220/0x300 [ 94.423567][ T6928] sctp_getsockopt+0x910/0xaa0 [ 94.423602][ T6928] sock_common_getsockopt+0x60/0x70 [ 94.423634][ T6928] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 94.423666][ T6928] do_sock_getsockopt+0x200/0x240 [ 94.423758][ T6928] __x64_sys_getsockopt+0x11e/0x1a0 [ 94.423792][ T6928] x64_sys_call+0x12aa/0x2fb0 [ 94.423871][ T6928] do_syscall_64+0xd2/0x200 [ 94.423939][ T6928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.423972][ T6928] ? clear_bhb_loop+0x40/0x90 [ 94.424064][ T6928] ? clear_bhb_loop+0x40/0x90 [ 94.424086][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.424110][ T6928] RIP: 0033:0x7f0c93e5e929 [ 94.424176][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.424218][ T6928] RSP: 002b:00007f0c924c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 94.424243][ T6928] RAX: ffffffffffffffda RBX: 00007f0c94085fa0 RCX: 00007f0c93e5e929 [ 94.424259][ T6928] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 94.424310][ T6928] RBP: 00007f0c924c7090 R08: 00002000000003c0 R09: 0000000000000000 [ 94.424326][ T6928] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.424342][ T6928] R13: 0000000000000000 R14: 00007f0c94085fa0 R15: 00007ffefc8c50e8 [ 94.424365][ T6928] [ 94.708367][ T6934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.910'. [ 94.740035][ T6938] bond0: entered promiscuous mode [ 94.745146][ T6938] bond_slave_0: entered promiscuous mode [ 94.751143][ T6938] bond_slave_1: entered promiscuous mode [ 94.759257][ T6938] batadv0: entered promiscuous mode [ 94.765230][ T6938] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 94.800305][ T6935] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 94.807456][ T3408] IPVS: starting estimator thread 0... [ 94.821958][ T6938] bond0: left promiscuous mode [ 94.827068][ T6938] bond_slave_0: left promiscuous mode [ 94.832639][ T6938] bond_slave_1: left promiscuous mode [ 94.844033][ T6938] batadv0: left promiscuous mode [ 94.851913][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.914'. [ 94.897003][ T6946] IPVS: using max 1776 ests per chain, 88800 per kthread [ 94.962569][ T6959] loop2: detected capacity change from 0 to 512 [ 95.002414][ T6964] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.054409][ T6959] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.188804][ T6957] loop5: detected capacity change from 0 to 8192 [ 95.202987][ T6957] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.242993][ T6984] xt_hashlimit: size too large, truncated to 1048576 [ 95.380903][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 95.597632][ T7001] loop1: detected capacity change from 0 to 8192 [ 95.630288][ T7001] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.699145][ T7013] xt_hashlimit: size too large, truncated to 1048576 [ 95.750177][ T7026] syz!: rxe_newlink: already configured on team_slave_0 [ 95.926108][ T7037] loop5: detected capacity change from 0 to 512 [ 96.022053][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 96.022838][ T7037] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.077248][ T7049] netlink: 'syz.2.930': attribute type 8 has an invalid length. [ 96.095439][ T7049] loop2: detected capacity change from 0 to 512 [ 96.194993][ T7049] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.226670][ T7049] EXT4-fs (loop2): mount failed [ 96.369832][ T7071] loop3: detected capacity change from 0 to 512 [ 96.398985][ T7071] EXT4-fs: Ignoring removed oldalloc option [ 96.405105][ T7071] ext4: Unknown parameter 'smackfsfloor' [ 96.416880][ T7080] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 96.443836][ T7077] netlink: 'syz.1.936': attribute type 21 has an invalid length. [ 96.506727][ T7087] team0: Unable to change to the same mode the team is in [ 96.511285][ T7071] SELinux: Context system_u:object_r:auditd_var_run_t:s0 is not valid (left unmapped). [ 96.524380][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 96.524397][ T29] audit: type=1400 audit(1750534418.461:4256): avc: denied { relabelto } for pid=7057 comm="syz.3.935" name="189" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_var_run_t:s0" [ 96.557325][ T29] audit: type=1400 audit(1750534418.461:4257): avc: denied { associate } for pid=7057 comm="syz.3.935" name="189" dev="tmpfs" ino=1023 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:auditd_var_run_t:s0" [ 96.644709][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 96.712747][ T7095] xt_CT: No such helper "syz0" [ 96.800446][ T7109] loop1: detected capacity change from 0 to 512 [ 96.849172][ T7109] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.891819][ T7110] bridge_slave_0: left allmulticast mode [ 96.897579][ T7110] bridge_slave_0: left promiscuous mode [ 96.903337][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.908146][ T29] audit: type=1400 audit(1750534418.801:4258): avc: denied { remove_name } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=1028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_var_run_t:s0" [ 96.937750][ T29] audit: type=1400 audit(1750534418.801:4259): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="189" dev="tmpfs" ino=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_var_run_t:s0" [ 96.964486][ T29] audit: type=1326 audit(1750534418.821:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 96.971040][ T7127] netlink: 'syz.0.943': attribute type 21 has an invalid length. [ 96.987970][ T29] audit: type=1326 audit(1750534418.821:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 96.995701][ T7127] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.019099][ T29] audit: type=1326 audit(1750534418.821:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 97.050588][ T29] audit: type=1326 audit(1750534418.821:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 97.074085][ T29] audit: type=1326 audit(1750534418.821:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 97.098211][ T29] audit: type=1326 audit(1750534418.821:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.1.944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ccd54e929 code=0x7ffc0000 [ 97.186595][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.943'. [ 97.250927][ T7110] bridge_slave_1: left allmulticast mode [ 97.256648][ T7110] bridge_slave_1: left promiscuous mode [ 97.262632][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.268171][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 97.298926][ T7110] bond0: (slave bond_slave_0): Releasing backup interface [ 97.360105][ T7110] bond0: (slave bond_slave_1): Releasing backup interface [ 97.362441][ T7155] loop5: detected capacity change from 0 to 1024 [ 97.401977][ T7156] loop1: detected capacity change from 0 to 1024 [ 97.420324][ T7156] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.446587][ T7151] loop3: detected capacity change from 0 to 8192 [ 97.476363][ T7151] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.503253][ T7155] EXT4-fs: Ignoring removed bh option [ 97.520973][ T7110] team0: Port device team_slave_0 removed [ 97.573560][ T7110] team0: Port device team_slave_1 removed [ 97.603632][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.611321][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.636118][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.643670][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.831162][ T7168] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 19: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 97.853132][ T7167] loop1: detected capacity change from 0 to 512 [ 97.864664][ T7168] EXT4-fs (loop5): Remounting filesystem read-only [ 97.889603][ T7167] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.003903][ T7175] loop1: detected capacity change from 0 to 512 [ 98.048256][ T7175] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.102608][ T7175] EXT4-fs (loop1): 1 truncate cleaned up [ 98.230382][ T7180] loop2: detected capacity change from 0 to 512 [ 98.239545][ T7180] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.286738][ T7180] EXT4-fs (loop2): 1 truncate cleaned up [ 98.321520][ T7180] FAULT_INJECTION: forcing a failure. [ 98.321520][ T7180] name failslab, interval 1, probability 0, space 0, times 0 [ 98.334314][ T7180] CPU: 0 UID: 0 PID: 7180 Comm: syz.2.960 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 98.334357][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 98.334374][ T7180] Call Trace: [ 98.334381][ T7180] [ 98.334391][ T7180] __dump_stack+0x1d/0x30 [ 98.334417][ T7180] dump_stack_lvl+0xe8/0x140 [ 98.334441][ T7180] dump_stack+0x15/0x1b [ 98.334462][ T7180] should_fail_ex+0x265/0x280 [ 98.334538][ T7180] should_failslab+0x8c/0xb0 [ 98.334567][ T7180] kmem_cache_alloc_noprof+0x50/0x310 [ 98.334600][ T7180] ? getname_flags+0x80/0x3b0 [ 98.334629][ T7180] getname_flags+0x80/0x3b0 [ 98.334654][ T7180] __x64_sys_unlink+0x21/0x40 [ 98.334689][ T7180] x64_sys_call+0x22a6/0x2fb0 [ 98.334716][ T7180] do_syscall_64+0xd2/0x200 [ 98.334739][ T7180] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 98.334828][ T7180] ? clear_bhb_loop+0x40/0x90 [ 98.334916][ T7180] ? clear_bhb_loop+0x40/0x90 [ 98.334943][ T7180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.334975][ T7180] RIP: 0033:0x7efc6b9ce929 [ 98.334993][ T7180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.335058][ T7180] RSP: 002b:00007efc6a037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 98.335076][ T7180] RAX: ffffffffffffffda RBX: 00007efc6bbf5fa0 RCX: 00007efc6b9ce929 [ 98.335088][ T7180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 98.335154][ T7180] RBP: 00007efc6a037090 R08: 0000000000000000 R09: 0000000000000000 [ 98.335166][ T7180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.335180][ T7180] R13: 0000000000000000 R14: 00007efc6bbf5fa0 R15: 00007ffc2f328df8 [ 98.335201][ T7180] [ 98.553147][ T7192] loop0: detected capacity change from 0 to 2048 [ 98.572056][ T7198] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 98.662937][ T7192] random: crng reseeded on system resumption [ 98.767196][ T7216] loop2: detected capacity change from 0 to 512 [ 98.801397][ T7216] ext4: Unknown parameter 'smackfstransmute' [ 98.850425][ T7216] loop2: detected capacity change from 0 to 2048 [ 98.899986][ T7229] netlink: 'syz.1.974': attribute type 21 has an invalid length. [ 98.963594][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 99.063741][ T3307] EXT4-fs unmount: 33 callbacks suppressed [ 99.063758][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.130882][ T7246] FAULT_INJECTION: forcing a failure. [ 99.130882][ T7246] name failslab, interval 1, probability 0, space 0, times 0 [ 99.143597][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.0.979 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 99.143629][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.143644][ T7246] Call Trace: [ 99.143651][ T7246] [ 99.143660][ T7246] __dump_stack+0x1d/0x30 [ 99.143684][ T7246] dump_stack_lvl+0xe8/0x140 [ 99.143714][ T7246] dump_stack+0x15/0x1b [ 99.143734][ T7246] should_fail_ex+0x265/0x280 [ 99.143766][ T7246] should_failslab+0x8c/0xb0 [ 99.143788][ T7246] kmem_cache_alloc_noprof+0x50/0x310 [ 99.143819][ T7246] ? vm_area_alloc+0x2c/0xb0 [ 99.143856][ T7246] vm_area_alloc+0x2c/0xb0 [ 99.143889][ T7246] mmap_region+0xa43/0x1580 [ 99.143938][ T7246] do_mmap+0x9b3/0xbe0 [ 99.143974][ T7246] vm_mmap_pgoff+0x17a/0x2e0 [ 99.144004][ T7246] ksys_mmap_pgoff+0xc2/0x310 [ 99.144036][ T7246] ? __x64_sys_mmap+0x49/0x70 [ 99.144058][ T7246] x64_sys_call+0x1602/0x2fb0 [ 99.144092][ T7246] do_syscall_64+0xd2/0x200 [ 99.144110][ T7246] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.144136][ T7246] ? clear_bhb_loop+0x40/0x90 [ 99.144157][ T7246] ? clear_bhb_loop+0x40/0x90 [ 99.144179][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.144201][ T7246] RIP: 0033:0x7f0c93e5e963 [ 99.144216][ T7246] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 99.144234][ T7246] RSP: 002b:00007f0c924c6e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 99.144253][ T7246] RAX: ffffffffffffffda RBX: 000000000000045a RCX: 00007f0c93e5e963 [ 99.144265][ T7246] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 99.144278][ T7246] RBP: 0000200000002402 R08: 00000000ffffffff R09: 0000000000000000 [ 99.144290][ T7246] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 99.144302][ T7246] R13: 00007f0c924c6ef0 R14: 00007f0c924c6eb0 R15: 0000200000000200 [ 99.144321][ T7246] [ 99.399864][ T7249] loop0: detected capacity change from 0 to 1024 [ 99.432378][ T7249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.455181][ T7253] loop3: detected capacity change from 0 to 2048 [ 99.466740][ T7249] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.491728][ T7253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.515642][ T7253] random: crng reseeded on system resumption [ 99.588676][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.628391][ T7260] loop0: detected capacity change from 0 to 512 [ 99.674033][ T7260] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 99.710500][ T7260] EXT4-fs (loop0): 1 truncate cleaned up [ 99.728175][ T7260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.752407][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.779651][ T7262] netlink: 'syz.1.985': attribute type 21 has an invalid length. [ 99.843308][ T3307] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /184/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 99.875745][ T7266] xt_CT: No such helper "syz0" [ 99.908668][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 99.928759][ T3307] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /184/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.023328][ T7291] bond0: entered promiscuous mode [ 100.036169][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.069046][ T7291] batadv0: entered promiscuous mode [ 100.093243][ T7291] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 100.107528][ T3307] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /184/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.152753][ T7291] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.161557][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.220782][ T3307] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /184/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.242779][ T7291] bond0: left promiscuous mode [ 100.248925][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.269235][ T7291] batadv0: left promiscuous mode [ 100.271049][ T3307] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /184/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.300217][ T3307] EXT4-fs error (device loop0): ext4_empty_dir:3116: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.413558][ T7322] loop5: detected capacity change from 0 to 164 [ 100.421036][ T7317] bond1: (slave ip6erspan0): Releasing active interface [ 100.433110][ T7322] syz.5.1000: attempt to access beyond end of device [ 100.433110][ T7322] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 100.462264][ T7322] syz.5.1000: attempt to access beyond end of device [ 100.462264][ T7322] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 100.503924][ T7317] netlink: 'syz.3.998': attribute type 21 has an invalid length. [ 100.513662][ T5732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.613991][ T7335] loop1: detected capacity change from 0 to 164 [ 100.705816][ T7334] xt_CT: No such helper "syz0" [ 100.772853][ T3431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.888269][ T7348] ip6erspan0: left promiscuous mode [ 100.927527][ T3431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.976033][ T7349] loop3: detected capacity change from 0 to 512 [ 100.982755][ T7349] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 101.154742][ T7348] 9pnet: Could not find request transport: Cd [ 101.199324][ T3431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.301095][ T3431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.313840][ T7358] netlink: 'syz.5.1011': attribute type 21 has an invalid length. [ 101.318710][ T7366] loop2: detected capacity change from 0 to 1024 [ 101.401885][ T7366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.417038][ T7366] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.534601][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 101.534620][ T29] audit: type=1326 audit(1750534423.461:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.564794][ T7388] loop5: detected capacity change from 0 to 256 [ 101.576158][ T29] audit: type=1326 audit(1750534423.461:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.600113][ T29] audit: type=1326 audit(1750534423.461:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.623732][ T29] audit: type=1326 audit(1750534423.461:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.647909][ T29] audit: type=1326 audit(1750534423.461:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.671682][ T29] audit: type=1326 audit(1750534423.461:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.675686][ T7392] loop3: detected capacity change from 0 to 1024 [ 101.695158][ T29] audit: type=1326 audit(1750534423.461:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.724964][ T29] audit: type=1326 audit(1750534423.461:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.748432][ T29] audit: type=1326 audit(1750534423.461:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.771890][ T29] audit: type=1326 audit(1750534423.461:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.3.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5364f0e929 code=0x7ffc0000 [ 101.801414][ T7396] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.806141][ T7392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.821979][ T7392] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.856413][ T7397] capability: warning: `syz.5.1014' uses deprecated v2 capabilities in a way that may be insecure [ 101.873808][ T7396] loop1: detected capacity change from 0 to 512 [ 101.881567][ T2995] ================================================================== [ 101.881646][ T7396] EXT4-fs: old and new quota format mixing [ 101.889733][ T2995] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 101.889783][ T2995] [ 101.889789][ T2995] read-write to 0xffff8881005f0bb0 of 8 bytes by task 7396 on cpu 0: [ 101.889809][ T2995] __filemap_add_folio+0x5b9/0x7d0 [ 101.920074][ T2995] filemap_add_folio+0x98/0x1b0 [ 101.924964][ T2995] __filemap_get_folio+0x31e/0x6b0 [ 101.930108][ T2995] bdev_getblk+0x16e/0x3d0 [ 101.934550][ T2995] __ext4_sb_bread_gfp+0x44/0x170 [ 101.939592][ T2995] ext4_fill_super+0x46c/0x34e0 [ 101.944466][ T2995] get_tree_bdev_flags+0x28e/0x300 [ 101.949618][ T2995] get_tree_bdev+0x1f/0x30 [ 101.954061][ T2995] ext4_get_tree+0x1c/0x30 [ 101.958492][ T2995] vfs_get_tree+0x57/0x1d0 [ 101.962914][ T2995] do_new_mount+0x207/0x680 [ 101.967442][ T2995] path_mount+0x4a4/0xb20 [ 101.971811][ T2995] __se_sys_mount+0x28f/0x2e0 [ 101.976500][ T2995] __x64_sys_mount+0x67/0x80 [ 101.981105][ T2995] x64_sys_call+0xd36/0x2fb0 [ 101.985713][ T2995] do_syscall_64+0xd2/0x200 [ 101.990241][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.996584][ T2995] [ 101.998927][ T2995] read to 0xffff8881005f0bb0 of 8 bytes by task 2995 on cpu 1: [ 102.006485][ T2995] filemap_write_and_wait_range+0x59/0x340 [ 102.012317][ T2995] bdev_release+0xeb/0x3d0 [ 102.016750][ T2995] blkdev_release+0x15/0x20 [ 102.021274][ T2995] __fput+0x298/0x650 [ 102.025276][ T2995] fput_close_sync+0x6e/0x120 [ 102.029976][ T2995] __x64_sys_close+0x56/0xf0 [ 102.034588][ T2995] x64_sys_call+0x2747/0x2fb0 [ 102.039291][ T2995] do_syscall_64+0xd2/0x200 [ 102.043808][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.049734][ T2995] [ 102.052066][ T2995] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 102.059182][ T2995] [ 102.061515][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 102.067676][ T2995] CPU: 1 UID: 0 PID: 2995 Comm: udevd Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(voluntary) [ 102.079757][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.089826][ T2995] ================================================================== [ 102.112874][ T3431] bond0 (unregistering): Released all slaves [ 102.127070][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.139271][ T7396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1015'. [ 102.263733][ T3431] hsr_slave_0: left promiscuous mode [ 102.271145][ T3431] hsr_slave_1: left promiscuous mode [ 102.279876][ T3431] veth1_macvtap: left promiscuous mode [ 102.285383][ T3431] veth0_macvtap: left promiscuous mode [ 102.291903][ T3431] veth1_vlan: left promiscuous mode [ 102.301081][ T3431] veth0_vlan: left promiscuous mode [ 102.376599][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.442853][ T7354] chnl_net:caif_netlink_parms(): no params data found [ 102.477863][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.484978][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.492268][ T7354] bridge_slave_0: entered allmulticast mode [ 102.498857][ T7354] bridge_slave_0: entered promiscuous mode [ 102.505459][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.512690][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.519915][ T7354] bridge_slave_1: entered allmulticast mode [ 102.526458][ T7354] bridge_slave_1: entered promiscuous mode [ 102.545741][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.556170][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.574975][ T7354] team0: Port device team_slave_0 added [ 102.581442][ T7354] team0: Port device team_slave_1 added [ 102.596942][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.604002][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.629992][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.641456][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.648648][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.674754][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.703556][ T7354] hsr_slave_0: entered promiscuous mode [ 102.709664][ T7354] hsr_slave_1: entered promiscuous mode [ 102.715468][ T7354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.723089][ T7354] Cannot create hsr debugfs directory [ 102.788951][ T7354] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 102.797757][ T7354] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 102.806253][ T7354] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 102.815402][ T7354] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 102.850172][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.867904][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.878135][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.885283][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.896948][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.904041][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.970474][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.075946][ T7354] veth0_vlan: entered promiscuous mode [ 103.084212][ T7354] veth1_vlan: entered promiscuous mode [ 103.100972][ T7354] veth0_macvtap: entered promiscuous mode [ 103.108391][ T7354] veth1_macvtap: entered promiscuous mode [ 103.120710][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.132721][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.141455][ T7354] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.150352][ T7354] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.159163][ T7354] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.168000][ T7354] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0