last executing test programs: 21.435611335s ago: executing program 2 (id=22): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)={0x2ac, 0x1, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_EXP={0x100, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0xd0, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}}}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}]}, @NFQA_EXP={0x78, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6e63}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf4e}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xcc9a}]}, @NFQA_EXP={0x5c, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2780000}, @CTA_EXPECT_MASTER={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @NFQA_EXP={0xa8, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa6}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x80}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x374}]}]}, 0x2ac}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000300", @ANYRES32=r7], 0x44}, 0x1, 0xd}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x10) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) (async) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000000), 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800209b67eb0000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) r13 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_UNIMAP(r13, 0x4b67, &(0x7f00000005c0)={0x1, &(0x7f0000000580)=[{0x5, 0x3}]}) (async) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 21.354598282s ago: executing program 2 (id=24): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) set_robust_list(0x0, 0x0) 21.353887952s ago: executing program 2 (id=25): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb783, 0x0, 0x0, 0x1bb}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) set_robust_list(0x0, 0x0) 21.228100712s ago: executing program 2 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) r0 = socket(0x23, 0x2, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x1) 21.219790493s ago: executing program 2 (id=30): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x1a) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) 20.173074197s ago: executing program 2 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xf, "03f37fe99f4da288"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) io_cancel(0x0, 0x0, 0x0) 20.172905298s ago: executing program 32 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xf, "03f37fe99f4da288"}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) io_cancel(0x0, 0x0, 0x0) 3.374419837s ago: executing program 0 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffee5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000138000/0x1000)=nil, 0x1000, 0x100001d, 0x80010, 0xffffffffffffffff, 0x4eefe000) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000180)) 1.930144704s ago: executing program 0 (id=317): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) keyctl$link(0x8, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x216b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.884729427s ago: executing program 0 (id=318): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa08000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x1fc, 0x400, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 1.282854296s ago: executing program 5 (id=332): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) keyctl$link(0x8, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000023c0)={0x2c0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffd8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x294, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x10}, 0x40010) epoll_create(0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.266449267s ago: executing program 5 (id=334): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) getresuid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x261db46d6aa896b9}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="080400001500060525bd00000000df2520010000000000000000000000000001ac1414bb0000000000000000000000004e2300404e2400400200206d2fe8802c", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="b26b6e000100000008001e00feffffffc2000800be0008000103b6008feeb7f3f5af3f5a93f035bdae84e428cbc2f2db4ea76f170f8c9e72ec5a04d8447b9ad1a1aaea60efe6cab189ea7c881d1a1bafdddf0f0ab2f7168b10b9064c7344ccc1e2a060d82fe3016ccbe9d063542d8ad86601d4514c762db22e284e2425f3803d1b645952abc3c37cbe49136f2ba24f18824ab013227004232030717f59dbe2b4034a58c14248c588ca9c82575543bdb1570894291843a3299fd858d0b6d05edb96682a3ba90635df6ebcd8f35dc6b9e817ae000024000900020000000000000000000000000000000600000000000000ce090000000000000a00100000000000000000000c0015005c0735000a000000080018000500000004010500e0000002000000000000000000000000000004d3ff0000000a000000fe8000000000000000000000000000bbff340000000305000700000002000000d7000000ff020000000000000000000000000001000004d23300000002000000ff020000000000000000000000000001ff34000004010000050000000200000000000000fc000000000000000000000000000001000004d5ff00000002000000fc020000000000000000000000000001000000000300030000000000f7ffffff00000000ffffffff000000000000000000000000000004d33c0000000a000000fe800000000000000000000000000021ff3400000401020005000000bd0d000006000000930008008f000800000d8700db8be2f38bf78b710e8c7523677d4856088fa0745f960ce4bc6d641b7f2c18f6582daebdab5fb1eb9d6e95f7013de236e60e791b8ceda88e61b908c70992646edea1b0374e955ae9895f8c90f357058936e56a29d7b7e11578025c1130eb90f3c7b584a7ac53207779e712f8451e96853f21138c7bb3d5c1ba4c68d3c1464545eeea98f2206e470008000c0008000000050112006573736976286d6f727573313238302d617678322c6372637431306469662d70636c6d756c290000000000000000000000000000000000000000000000000000c8050000c0000000b40389d29684397baede18a1b2713cb2ab26205956f10f2a5f0acde73e7834e4fdbd6c1407e0470a5dce8c426d2424b0ebdbb0323cfa1a50298267942d88879d0268462d584699593a2879c52c31c99e059f182946b7c7972302ebf637eaa3ab828a5beaebdca8987a46ca65a958925b41cf2160b5acb793aa03d539204a66565a5c7745202b5552db20f0d8cf7b7828628807338b53fb7aa4bea906de817d8144a4a62a5fb13b985b31b66f115445906c3625b0e8e86279c9000000"], 0x408}, 0x1, 0x0, 0x0, 0x40800}, 0x40) lchown(&(0x7f0000000100)='./file0/../file0\x00', r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1.250861408s ago: executing program 5 (id=335): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xba, 0x32}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f00000000c0)="541c025f93ca63dd56e0aa6ee06f223a9abd5975d42b3ec239c1b30b6863528fdeb646bfaddd5bbd256b76cc644b3386b66df416f824cddac4e4aa2f61380bc9259282ef2c2d23d879a6118f21d2dcf692179d05212974c06b92134ad813db4f420a1e91cb39081a02cb372fd2fa6ec1bccc90e2da30aa5de13b1151839ee00885a407a04fa9413eb79ce6677cc52e910205153133093dffd1ea2f8bd7099e47289bec9ce5e3aa161fc0c98a76d181d4c8c3684178f280a4392c", &(0x7f0000000180)=""/50) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="2557271abc8ad0617aa52470008d064b3f6286e2cb2786af4e3bc8bce584d7bf5f47ca0dda75dbc7727222420fdeded28df59f4460b524ae124931a43531a181dc11ec85564ecbee139ab7b8b5237e9db1e007428804abe66ea7fe25409b7819d7a12b3ba529886114848c028ae0c237c13b36769d424f543ca42dfd5ffd72b5fbc5d71856d0027e968d74d0255d213e576e167c9d803de4e139199767f75e8d9ee3019d6b15", 0xa6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x8) r1 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='oaep', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAMEAT(r2, &(0x7f0000000400)={0x7, 0x4b, 0x1}, 0x7) r3 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="dba5467388272434c00d68d6d8fc630c0a618dee27a67b316c96220358ce980a9ad1862ad5a2c0c1ea78ea8cc2e02806a3a5734fc6cc081ec916019d0ed1dc49daf74409a287db2990fdd3e554e2bcdea6fa7022a741d651fa3577945e0ea8b1dd3ffd4e350fd75448a779611b4c9b9cc50a73aaa719e484037dc13463bd4987fea8de831b8e482f75e78cb3cb938a496e158189d37bca802c34592f9649f96bcbb1cfcb01ad79a9b03af6f5121020fb53591a03c7f1f072df53b2d4d28ce805ae95a337f2df18aaaff0962312ed751b93c0abf865c1bd9b", 0xd8, 0xfffffffffffffffb) io_setup(0x5, &(0x7f00000005c0)=0x0) io_getevents(r4, 0x8000000000000000, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000640)) io_destroy(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/195, 0xc3}, {0x0}], 0x3, &(0x7f0000000a00)=""/4096, 0x1000}, 0xb3d}], 0x1, 0x40010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wg2\x00', 0x0}) r8 = getpgid(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000001a80)=0x2) bind$inet(r6, &(0x7f0000001ac0)={0x2, 0x4e20, @multicast2}, 0x10) mq_unlink(&(0x7f0000001b00)=':-\xdf]\x00') sendmsg$nl_xfrm(r6, &(0x7f0000001cc0)={&(0x7f0000001b40), 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)=@newpolicy={0xcc, 0x13, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0x2c, r7}, {0x1, 0xce, 0x10000, 0x2, 0x2, 0x3, 0x96b, 0x4}, {0xf64, 0x5, 0x0, 0x8}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x0, 0x2}, [@offload={0xc, 0x1c, {r7, 0x1}}, @extra_flags={0x8, 0x18, 0xb9e1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)="e2def11f3d657c5436fd63aa1601290055d450af99794ebfec20a9d93d40d033de17936e127268425c8a75d4a50b7dea008989fc1a06dcbdaac50b4b9dbc79a71686b6a904a85310a32a2106bb224690e75decf5fa66a85d30cfd1fcccda171d104a09c543579f38e4bdc72ffb22a9297866fac37b800306643bbc0cf873724cb5c0a260b49c3eef58e463104cb663d75cf4fad72d63cbf77161fba0a93e541440e46c606cbd9f38f56f70331deb5553e49444df6171dd468f7cb7de347af1fd3fb1fae55efc0391cf64463383c0c0b33fea52ec4b99fb2b57420598906e959316831b6df45f404eeef43c87", 0xec}, {&(0x7f0000001e00)="ab05a2c0b2f223b7c9a8fd3b2126494166bccf0e19050a5cac2d44e78b271e638805944a3767cbfd110e566d91d3c6583e58d71d33e3a36833b14b990262e417b0c075f51a1f238396cfebb5810e6b2041197f2940fe80eb440d803f0b92e0ec79593875e616818b", 0x68}], 0x2, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffb070}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast1}}}], 0xb8}}, {{&(0x7f0000001fc0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002000)="8cf7ac0f8e4781efd247288dfb175f20aa397bdeeb5e0d0b4e7bd51a38250bbf", 0x20}, {&(0x7f0000002040)="228f224aa65fa9b66ded4adac9622b7a431c4382d859bad9284ab4c2f7d85ce6c82e050bd998fb42d92c6c3a6930857a1a72299091e6e730b959389f30c2ce8c81b57570eacfc67255f0cee053521a569240606a82dc9eb5f656ccb7dbe3b676e2b9abb06abc6837694450dc435710bc545a4dc5e02ced13ac436dec9e42bd22a693ce4f6be7cdce584b57b34b92d5c107307ff5070c20312927d2e5377894bbe533", 0xa2}], 0x2, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x0) io_setup(0x5, &(0x7f0000002380)=0x0) io_getevents(r11, 0x4fd4, 0x6, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}], 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002480), 0x44040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000024c0)={0x8000, 0x0, 0x1, 'queue1\x00', 0x3}) r13 = add_key$keyring(&(0x7f0000002580), &(0x7f00000025c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r13, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r6) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r14, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x488d0) 1.187340873s ago: executing program 4 (id=338): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2, 0x500}, 0x40000100) 1.096538181s ago: executing program 5 (id=341): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x8004, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 979.10018ms ago: executing program 0 (id=342): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x6bbb, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc3ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 952.092393ms ago: executing program 5 (id=344): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000600)="1f6472e1e66c219d35e6bab8fd8a2c042e618bd11e9e6eecd8c6afef0e80d1b713fd3b6262e7230c15d87790f3d8e9f90394ceb3c370c48151b6745f4b2a52161c76a9abdf89d74ff1fe38505882bc4ce08e6cde3740f3b1136bde6ec75179782c3f6edc48f8c3e298f32690b6c9f33e9962f472213d4ab2612495655978df289f15d9fe26b478578e08c54c00762161a6dfe4c297e6803156ea37393b33fff87562a2b56e04d7cee2f71611e9c08a4bef", 0xb1}, {&(0x7f0000000a80)="4475c37b3b74d364df5a66dd98d602e7e31b83de22399e1665e05a199aeb944ff707ead62d4ba78e42bfef8fd50991a263d5f7ed6dcffcd8bc300e21e3d9e9409b559162935fe41884f80bab7cd9e22c760a8ec40b2a50953da8acca1610dd2c6659c0a1cd1947e94917f757992528b360d443b144f712906096bf5380ade8110ce59cfd625154b18a5b8e573e1fb03de443ff591a4b29ab23878691fa31d350590173e4d0b0afd25eaf5f3431dba2872c59fb7a0029ff90c1a521791db1da1c351d7e78386b25e8d385b72d240597c49f519e82e4976ce0010a52548aa10a2fac764514", 0xe4}, {&(0x7f0000000340)="2b3f34f6dd85d7cde64ef732d743e0f512d2b45706222e1683b6", 0x1a}, {&(0x7f00000002c0)="9183e1f557eb7302fc081681efee1eb6565a274dbd8d8513b18f30026a42a62a59f618399f700f9dfc82d2983f61f16b3803a2a8402d10ca6e07fb1c38d8acc206647c", 0x43}, {&(0x7f0000000b80)="ad9b1e93da1ca92a82e5d63596082055a6c1be46bc4629174fee2e4422dc1758ff23610ea91bb79f431f3e2e4b62637bdbd7de5511b4ae67a52d7904c00b03e448fd2da01dddb1a56e59b65475c9bc04ee707f5d7ed99b4df575a4ee59d1735f39a6f56d12b9bc7b9ea9ca8b69ac5d8bb48e96bdadc1259a45d341af180e10925d357759133d04592a9351affc19c0bc7ebac1f2b95a3564d2ef3858f7b80a53206fcb334deab984c63712095c72adfb80d66bf1b5052741a84643224ebd634c2c8345910b5f7b7a238436b71397be", 0xcf}, {&(0x7f0000000380)="65f07a37be39a17fdaebc081", 0xc}, {&(0x7f0000000c80)="25298b8d56b6e39a35321e4219afc1d1b67de0446a7ec09348566f3cdddb4025852d11bc6a2010a68fb91c76659ce91a9c2499781e926ca5be5aa99a766387323f98c12ea061adf57227cd5b87bc71719a0ff65da122a276716ae5bd8d21530bb0e170f7758aa65512fd76dd7c3b11062cd616e0b932420701b99a6cfac1c8b06a4a618af4e42a1200a0f483967a20294fb6d29979137d1c6cc31274b2c355e24db4be700e96694c89ca534079a5d0e6dde35f6b1f22", 0xb6}, {&(0x7f0000000d40)="e5a56086744f14bdda71309d9d34beed3b62031b4091e41ba09f84a6eb2d6897e7c1dcbb220d30b2b20d79e15f22bca86f424e9d6385c54a3520ad417df9f25cf05c9fe71d75784d12fcb51a885dbc861647cbc18b18f140c633ba3acdfcf76b414c4a814da59e568d4bc79261b198d6284b810f91334648b4449473ab0d5338129b11cd510fec16a53b1a670d", 0x8d}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000e00)="6ee6c0289c84f4570286f5873da2398ef84f95a6f3f7df61969439e056918c59aee79d4934ced49bf7ba83662d41c12a79782b7e267bb871dff85830c21408b2a7f328cab1703abb79dcd5fb45fa6bdb689ab3c404bfaf9f672d78e81792d813a29014b70f7efff04bdc6f01812a948871133be48ee185d163c92836f1fa1f176c9f18ffd76084c73260e68987e9a02352e031cd8fc6b8f2bace824678", 0x9d}], 0xa, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0x20, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050426bd7000fedbcb250100000008000100", @ANYRES32=r7, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000700"/19, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="14000300726f73653000"/20], 0x3c}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x53}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) 941.655754ms ago: executing program 0 (id=345): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) getresuid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x261db46d6aa896b9}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="080400001500060525bd00000000df2520010000000000000000000000000001ac1414bb0000000000000000000000004e2300404e2400400200206d2fe8802c", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x408}, 0x1, 0x0, 0x0, 0x40800}, 0x40) lchown(&(0x7f0000000100)='./file0/../file0\x00', r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 915.790586ms ago: executing program 1 (id=346): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) keyctl$link(0x8, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000023c0)={0x2c0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffd8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x294, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x10}, 0x40010) epoll_create(0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 841.942072ms ago: executing program 0 (id=347): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x0, &(0x7f0000000080), &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x190, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8001}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x190}}, 0x4800) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0x3]}, 0x8, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) ftruncate(0xffffffffffffffff, 0x2007ffc) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x200200, 0x0) open_by_handle_at(r9, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) 835.057512ms ago: executing program 1 (id=348): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x806, 0x0, 0x0, 0x7ffc0001}]}) keyctl$link(0x8, 0x0, 0x0) keyctl$update(0x2, 0x0, &(0x7f00000000c0)="e4", 0x1) 801.684345ms ago: executing program 1 (id=349): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000940), 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x7, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r1, @ANYRES32=r1, @ANYRESOCT=r0], &(0x7f0000000540)='GPL\x00', 0x2000008, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000000780)={0xfd25, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}, {0x0, &(0x7f0000000580)=@lang_id={0x0, 0x3, 0x140a}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000400)={0xa, 0x0, 0xffd, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "44274a8900ae0d82", "968cac164c70bc8fb4aad62db7163c6b", "febbf40d", "9aee7f00c24c0526"}, 0x28) recvmmsg(r3, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 596.903961ms ago: executing program 4 (id=352): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xba, 0x32}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f00000000c0)="541c025f93ca63dd56e0aa6ee06f223a9abd5975d42b3ec239c1b30b6863528fdeb646bfaddd5bbd256b76cc644b3386b66df416f824cddac4e4aa2f61380bc9259282ef2c2d23d879a6118f21d2dcf692179d05212974c06b92134ad813db4f420a1e91cb39081a02cb372fd2fa6ec1bccc90e2da30aa5de13b1151839ee00885a407a04fa9413eb79ce6677cc52e910205153133093dffd1ea2f8bd7099e47289bec9ce5e3aa161fc0c98a76d181d4c8c3684178f280a4392c", &(0x7f0000000180)=""/50) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="2557271abc8ad0617aa52470008d064b3f6286e2cb2786af4e3bc8bce584d7bf5f47ca0dda75dbc7727222420fdeded28df59f4460b524ae124931a43531a181dc11ec85564ecbee139ab7b8b5237e9db1e007428804abe66ea7fe25409b7819d7a12b3ba529886114848c028ae0c237c13b36769d424f543ca42dfd5ffd72b5fbc5d71856d0027e968d74d0255d213e576e167c9d803de4e139199767f75e8d9ee3019d6b15", 0xa6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x8) r1 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='oaep', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAMEAT(r2, &(0x7f0000000400)={0x7, 0x4b, 0x1}, 0x7) r3 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="dba5467388272434c00d68d6d8fc630c0a618dee27a67b316c96220358ce980a9ad1862ad5a2c0c1ea78ea8cc2e02806a3a5734fc6cc081ec916019d0ed1dc49daf74409a287db2990fdd3e554e2bcdea6fa7022a741d651fa3577945e0ea8b1dd3ffd4e350fd75448a779611b4c9b9cc50a73aaa719e484037dc13463bd4987fea8de831b8e482f75e78cb3cb938a496e158189d37bca802c34592f9649f96bcbb1cfcb01ad79a9b03af6f5121020fb53591a03c7f1f072df53b2d4d28ce805ae95a337f2df18aaaff0962312ed751b93c0abf865c1bd9b", 0xd8, 0xfffffffffffffffb) io_setup(0x5, &(0x7f00000005c0)=0x0) io_getevents(r4, 0x8000000000000000, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000640)) io_destroy(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/195, 0xc3}, {0x0}], 0x3, &(0x7f0000000a00)=""/4096, 0x1000}, 0xb3d}], 0x1, 0x40010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wg2\x00', 0x0}) r8 = getpgid(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000001a80)=0x2) bind$inet(r6, &(0x7f0000001ac0)={0x2, 0x4e20, @multicast2}, 0x10) mq_unlink(&(0x7f0000001b00)=':-\xdf]\x00') sendmsg$nl_xfrm(r6, &(0x7f0000001cc0)={&(0x7f0000001b40), 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)=@newpolicy={0xcc, 0x13, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0x2c, r7}, {0x1, 0xce, 0x10000, 0x2, 0x2, 0x3, 0x96b, 0x4}, {0xf64, 0x5, 0x0, 0x8}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x0, 0x2}, [@offload={0xc, 0x1c, {r7, 0x1}}, @extra_flags={0x8, 0x18, 0xb9e1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)="e2def11f3d657c5436fd63aa1601290055d450af99794ebfec20a9d93d40d033de17936e127268425c8a75d4a50b7dea008989fc1a06dcbdaac50b4b9dbc79a71686b6a904a85310a32a2106bb224690e75decf5fa66a85d30cfd1fcccda171d104a09c543579f38e4bdc72ffb22a9297866fac37b800306643bbc0cf873724cb5c0a260b49c3eef58e463104cb663d75cf4fad72d63cbf77161fba0a93e541440e46c606cbd9f38f56f70331deb5553e49444df6171dd468f7cb7de347af1fd3fb1fae55efc0391cf64463383c0c0b33fea52ec4b99fb2b57420598906e959316831b6df45f404eeef43c87", 0xec}, {&(0x7f0000001e00)="ab05a2c0b2f223b7c9a8fd3b2126494166bccf0e19050a5cac2d44e78b271e638805944a3767cbfd110e566d91d3c6583e58d71d33e3a36833b14b990262e417b0c075f51a1f238396cfebb5810e6b2041197f2940fe80eb440d803f0b92e0ec79593875e616818b", 0x68}], 0x2, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffb070}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast1}}}], 0xb8}}, {{&(0x7f0000001fc0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002000)="8cf7ac0f8e4781efd247288dfb175f20aa397bdeeb5e0d0b4e7bd51a38250bbf", 0x20}, {&(0x7f0000002040)="228f224aa65fa9b66ded4adac9622b7a431c4382d859bad9284ab4c2f7d85ce6c82e050bd998fb42d92c6c3a6930857a1a72299091e6e730b959389f30c2ce8c81b57570eacfc67255f0cee053521a569240606a82dc9eb5f656ccb7dbe3b676e2b9abb06abc6837694450dc435710bc545a4dc5e02ced13ac436dec9e42bd22a693ce4f6be7cdce584b57b34b92d5c107307ff5070c20312927d2e5377894bbe533", 0xa2}], 0x2, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x0) io_setup(0x5, &(0x7f0000002380)=0x0) io_getevents(r11, 0x4fd4, 0x6, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}], 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002480), 0x44040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000024c0)={0x8000, 0x0, 0x1, 'queue1\x00', 0x3}) r13 = add_key$keyring(&(0x7f0000002580), &(0x7f00000025c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r13, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r6) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r14, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x488d0) 589.488992ms ago: executing program 5 (id=353): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa08000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x4c, 0x0, 0x1, 0x1fc, 0x400, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) 413.971857ms ago: executing program 4 (id=356): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r4, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) r5 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) truncate(&(0x7f0000000000)='./bus\x00', 0x6) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r7, &(0x7f0000000140)=ANY=[@ANYRES32], 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$P9_RREADLINK(r1, &(0x7f0000000340)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11) sendmsg$TIPC_CMD_SHOW_PORTS(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r12, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsetxattr$security_capability(r7, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x1000000, [{0x5, 0xfff}]}, 0xc, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendfile(r6, r5, 0x0, 0x3ffff) 355.419141ms ago: executing program 3 (id=358): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) keyctl$link(0x8, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000023c0)={0x2c0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffffd8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x294, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x25c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}]}]}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x10}, 0x40010) epoll_create(0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 331.424363ms ago: executing program 3 (id=359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000300)=0x6bbb, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc3ffb}]}) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) 281.224297ms ago: executing program 3 (id=360): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x200000000000019b, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000818110600", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b708000000001900828af8ff00000000bfa200030000000000000000f8ffffff060000000000000080ec6cf6f08a08000000b7040000000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = openat$tun(0xffffff9c, &(0x7f0000000440), 0x2000, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40845}, 0x4000) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4054}, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f00000001c0)={0x0, 0x17, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x2400c804) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200), 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x1) 228.152621ms ago: executing program 3 (id=361): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x1000000, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 227.569852ms ago: executing program 3 (id=362): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) keyctl$setperm(0x5, 0x0, 0x5036210) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000805}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1cc, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x1c}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ff}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x65f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x1ff, 0x8, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6c2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d4}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfc8}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0xc9fc, 0x8, 0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x41}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0xb968, 0x1, 0x6, 0x4, 0x5, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffff7fff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2000}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x344}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x586}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2d4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xe, 0x9, 0x3ff, 0x8, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x40}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x28720000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x51f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x265}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r8, &(0x7f0000000100)=""/227, 0xe3, 0x2000, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @private1, 0x3}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 226.737401ms ago: executing program 1 (id=363): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES8, @ANYRESDEC=0x0, @ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000600)="1f6472e1e66c219d35e6bab8fd8a2c042e618bd11e9e6eecd8c6afef0e80d1b713fd3b6262e7230c15d87790f3d8e9f90394ceb3c370c48151b6745f4b2a52161c76a9abdf89d74ff1fe38505882bc4ce08e6cde3740f3b1136bde6ec75179782c3f6edc48f8c3e298f32690b6c9f33e9962f472213d4ab2612495655978df289f15d9fe26b478578e08c54c00762161a6dfe4c297e6803156ea37393b33fff87562a2b56e04d7cee2f71611e9c08a4bef", 0xb1}, {&(0x7f0000000a80)="4475c37b3b74d364df5a66dd98d602e7e31b83de22399e1665e05a199aeb944ff707ead62d4ba78e42bfef8fd50991a263d5f7ed6dcffcd8bc300e21e3d9e9409b559162935fe41884f80bab7cd9e22c760a8ec40b2a50953da8acca1610dd2c6659c0a1cd1947e94917f757992528b360d443b144f712906096bf5380ade8110ce59cfd625154b18a5b8e573e1fb03de443ff591a4b29ab23878691fa31d350590173e4d0b0afd25eaf5f3431dba2872c59fb7a0029ff90c1a521791db1da1c351d7e78386b25e8d385b72d240597c49f519e82e4976ce0010a52548aa10a2fac764514", 0xe4}, {&(0x7f0000000340)="2b3f34f6dd85d7cde64ef732d743e0f512d2b45706222e1683b6", 0x1a}, {&(0x7f00000002c0)="9183e1f557eb7302fc081681efee1eb6565a274dbd8d8513b18f30026a42a62a59f618399f700f9dfc82d2983f61f16b3803a2a8402d10ca6e07fb1c38d8acc206647c", 0x43}, {&(0x7f0000000b80)="ad9b1e93da1ca92a82e5d63596082055a6c1be46bc4629174fee2e4422dc1758ff23610ea91bb79f431f3e2e4b62637bdbd7de5511b4ae67a52d7904c00b03e448fd2da01dddb1a56e59b65475c9bc04ee707f5d7ed99b4df575a4ee59d1735f39a6f56d12b9bc7b9ea9ca8b69ac5d8bb48e96bdadc1259a45d341af180e10925d357759133d04592a9351affc19c0bc7ebac1f2b95a3564d2ef3858f7b80a53206fcb334deab984c63712095c72adfb80d66bf1b5052741a84643224ebd634c2c8345910b5f7b7a238436b71397be", 0xcf}, {&(0x7f0000000380)="65f07a37be39a17fdaebc081", 0xc}, {&(0x7f0000000c80)="25298b8d56b6e39a35321e4219afc1d1b67de0446a7ec09348566f3cdddb4025852d11bc6a2010a68fb91c76659ce91a9c2499781e926ca5be5aa99a766387323f98c12ea061adf57227cd5b87bc71719a0ff65da122a276716ae5bd8d21530bb0e170f7758aa65512fd76dd7c3b11062cd616e0b932420701b99a6cfac1c8b06a4a618af4e42a1200a0f483967a20294fb6d29979137d1c6cc31274b2c355e24db4be700e96694c89ca534079a5d0e6dde35f6b1f22", 0xb6}, {&(0x7f0000000d40)="e5a56086744f14bdda71309d9d34beed3b62031b4091e41ba09f84a6eb2d6897e7c1dcbb220d30b2b20d79e15f22bca86f424e9d6385c54a3520ad417df9f25cf05c9fe71d75784d12fcb51a885dbc861647cbc18b18f140c633ba3acdfcf76b414c4a814da59e568d4bc79261b198d6284b810f91334648b4449473ab0d5338129b11cd510fec16a53b1a670d", 0x8d}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000000e00)="6ee6c0289c84f4570286f5873da2398ef84f95a6f3f7df61969439e056918c59aee79d4934ced49bf7ba83662d41c12a79782b7e267bb871dff85830c21408b2a7f328cab1703abb79dcd5fb45fa6bdb689ab3c404bfaf9f672d78e81792d813a29014b70f7efff04bdc6f01812a948871133be48ee185d163c92836f1fa1f176c9f18ffd76084c73260e68987e9a02352e031cd8fc6b8f2bace824678", 0x9d}], 0xa, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = io_uring_setup(0x42f6, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x1c9}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0x20, 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@resuid}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050426bd7000fedbcb250100000008000100", @ANYRES32=r7, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000700"/19, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="14000300726f73653000"/20], 0x3c}, 0x1, 0x0, 0x0, 0x4008014}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x53}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r11], 0x0}, 0x94) 209.222863ms ago: executing program 4 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f00000001c0), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) unshare(0x20000400) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0x0, 0x0) 68.846104ms ago: executing program 4 (id=365): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) keyctl$link(0x8, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @local}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x216b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 68.182824ms ago: executing program 3 (id=366): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000)={0x0, 0xba, 0x32}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'sha3-384-ce\x00'}}, &(0x7f00000000c0)="541c025f93ca63dd56e0aa6ee06f223a9abd5975d42b3ec239c1b30b6863528fdeb646bfaddd5bbd256b76cc644b3386b66df416f824cddac4e4aa2f61380bc9259282ef2c2d23d879a6118f21d2dcf692179d05212974c06b92134ad813db4f420a1e91cb39081a02cb372fd2fa6ec1bccc90e2da30aa5de13b1151839ee00885a407a04fa9413eb79ce6677cc52e910205153133093dffd1ea2f8bd7099e47289bec9ce5e3aa161fc0c98a76d181d4c8c3684178f280a4392c", &(0x7f0000000180)=""/50) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="2557271abc8ad0617aa52470008d064b3f6286e2cb2786af4e3bc8bce584d7bf5f47ca0dda75dbc7727222420fdeded28df59f4460b524ae124931a43531a181dc11ec85564ecbee139ab7b8b5237e9db1e007428804abe66ea7fe25409b7819d7a12b3ba529886114848c028ae0c237c13b36769d424f543ca42dfd5ffd72b5fbc5d71856d0027e968d74d0255d213e576e167c9d803de4e139199767f75e8d9ee3019d6b15", 0xa6, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x8) r1 = request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380)='oaep', 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RRENAMEAT(r2, &(0x7f0000000400)={0x7, 0x4b, 0x1}, 0x7) r3 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)="dba5467388272434c00d68d6d8fc630c0a618dee27a67b316c96220358ce980a9ad1862ad5a2c0c1ea78ea8cc2e02806a3a5734fc6cc081ec916019d0ed1dc49daf74409a287db2990fdd3e554e2bcdea6fa7022a741d651fa3577945e0ea8b1dd3ffd4e350fd75448a779611b4c9b9cc50a73aaa719e484037dc13463bd4987fea8de831b8e482f75e78cb3cb938a496e158189d37bca802c34592f9649f96bcbb1cfcb01ad79a9b03af6f5121020fb53591a03c7f1f072df53b2d4d28ce805ae95a337f2df18aaaff0962312ed751b93c0abf865c1bd9b", 0xd8, 0xfffffffffffffffb) io_setup(0x5, &(0x7f00000005c0)=0x0) io_getevents(r4, 0x8000000000000000, 0x2, &(0x7f0000000600)=[{}, {}], &(0x7f0000000640)) io_destroy(r4) r5 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000008c0)=""/245, 0xf5}], 0x2, &(0x7f0000000a00)=""/4096, 0x1000}, 0xb3d}], 0x1, 0x40010020, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wg2\x00', 0x0}) r8 = getpgid(0x0) sched_setaffinity(r8, 0x8, &(0x7f0000001a80)=0x2) bind$inet(r6, &(0x7f0000001ac0)={0x2, 0x4e20, @multicast2}, 0x10) mq_unlink(&(0x7f0000001b00)=':-\xdf]\x00') sendmsg$nl_xfrm(r6, &(0x7f0000001cc0)={&(0x7f0000001b40), 0xc, &(0x7f0000001c80)={&(0x7f0000001b80)=@newpolicy={0xcc, 0x13, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0x7, 0x2, 0x80, 0x20, 0x2c, r7}, {0x1, 0xce, 0x10000, 0x2, 0x2, 0x3, 0x96b, 0x4}, {0xf64, 0x5, 0x0, 0x8}, 0x5, 0x6e6bbe, 0x1, 0x1, 0x0, 0x2}, [@offload={0xc, 0x1c, {r7, 0x1}}, @extra_flags={0x8, 0x18, 0xb9e1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) sendmmsg$inet(r6, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001d00)="e2def11f3d657c5436fd63aa1601290055d450af99794ebfec20a9d93d40d033de17936e127268425c8a75d4a50b7dea008989fc1a06dcbdaac50b4b9dbc79a71686b6a904a85310a32a2106bb224690e75decf5fa66a85d30cfd1fcccda171d104a09c543579f38e4bdc72ffb22a9297866fac37b800306643bbc0cf873724cb5c0a260b49c3eef58e463104cb663d75cf4fad72d63cbf77161fba0a93e541440e46c606cbd9f38f56f70331deb5553e49444df6171dd468f7cb7de347af1fd3fb1fae55efc0391cf64463383c0c0b33fea52ec4b99fb2b57420598906e959316831b6df45f404eeef43c87", 0xec}, {&(0x7f0000001e00)="ab05a2c0b2f223b7c9a8fd3b2126494166bccf0e19050a5cac2d44e78b271e638805944a3767cbfd110e566d91d3c6583e58d71d33e3a36833b14b990262e417b0c075f51a1f238396cfebb5810e6b2041197f2940fe80eb440d803f0b92e0ec79593875e616818b", 0x68}], 0x2, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffb070}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast1}}}], 0xb8}}, {{&(0x7f0000001fc0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000002100)=[{&(0x7f0000002000)="8cf7ac0f8e4781efd247288dfb175f20aa397bdeeb5e0d0b4e7bd51a38250bbf", 0x20}, {&(0x7f0000002040)="228f224aa65fa9b66ded4adac9622b7a431c4382d859bad9284ab4c2f7d85ce6c82e050bd998fb42d92c6c3a6930857a1a72299091e6e730b959389f30c2ce8c81b57570eacfc67255f0cee053521a569240606a82dc9eb5f656ccb7dbe3b676e2b9abb06abc6837694450dc435710bc545a4dc5e02ced13ac436dec9e42bd22a693ce4f6be7cdce584b57b34b92d5c107307ff5070c20312927d2e5377894bbe533", 0xa2}], 0x2, &(0x7f0000002140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}], 0x2, 0x0) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x80, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40810}, 0x0) io_setup(0x5, &(0x7f0000002380)=0x0) io_getevents(r11, 0x4fd4, 0x6, &(0x7f00000023c0)=[{}, {}, {}, {}, {}, {}], 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002480), 0x44040) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f00000024c0)={0x8000, 0x0, 0x1, 'queue1\x00', 0x3}) r13 = add_key$keyring(&(0x7f0000002580), &(0x7f00000025c0)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r13, 0x1) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002640), r6) sendmsg$NL80211_CMD_ABORT_SCAN(r6, &(0x7f0000002740)={&(0x7f0000002600), 0xc, &(0x7f0000002700)={&(0x7f00000026c0)={0x28, r14, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x67}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x488d0) 57.633255ms ago: executing program 4 (id=367): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0xa, 0x73) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r4, 0x0, 0x0, 0x8004, &(0x7f00000003c0)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) 33.413237ms ago: executing program 1 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) getresuid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x261db46d6aa896b9}, 0xc, &(0x7f0000001000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="080400001500060525bd00000000df2520010000000000000000000000000001ac1414bb0000000000000000000000004e2300404e2400400200206d2fe8802c", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="b26b6e000100000008001e00feffffffc2000800be0008000103b6008feeb7f3f5af3f5a93f035bdae84e428cbc2f2db4ea76f170f8c9e72ec5a04d8447b9ad1a1aaea60efe6cab189ea7c881d1a1bafdddf0f0ab2f7168b10b9064c7344ccc1e2a060d82fe3016ccbe9d063542d8ad86601d4514c762db22e284e2425f3803d1b645952abc3c37cbe49136f2ba24f18824ab013227004232030717f59dbe2b4034a58c14248c588ca9c82575543bdb1570894291843a3299fd858d0b6d05edb96682a3ba90635df6ebcd8f35dc6b9e817ae000024000900020000000000000000000000000000000600000000000000ce090000000000000a00100000000000000000000c0015005c0735000a000000080018000500000004010500e0000002000000000000000000000000000004d3ff0000000a000000fe8000000000000000000000000000bbff340000000305000700000002000000d7000000ff020000000000000000000000000001000004d23300000002000000ff020000000000000000000000000001ff34000004010000050000000200000000000000fc000000000000000000000000000001000004d5ff00000002000000fc020000000000000000000000000001000000000300030000000000f7ffffff00000000ffffffff000000000000000000000000000004d33c0000000a000000fe800000000000000000000000000021ff3400000401020005000000bd0d000006000000930008008f000800000d8700db8be2f38bf78b710e8c7523677d4856088fa0745f960ce4bc6d641b7f2c18f6582daebdab5fb1eb9d6e95f7013de236e60e791b8ceda88e61b908c70992646edea1b0374e955ae9895f8c90f357058936e56a29d7b7e11578025c1130eb90f3c7b584a7ac53207779e712f8451e96853f21138c7bb3d5c1ba4c68d3c1464545eeea98f2206e470008000c0008000000050112006573736976286d6f727573313238302d617678322c6372637431306469662d70636c6d756c290000000000000000000000000000000000000000000000000000c8050000c0000000b40389d29684397baede18a1b2713cb2ab26205956f10f2a5f0acde73e7834e4fdbd6c1407e0470a5dce8c426d2424b0ebdbb0323cfa1a50298267942d88879d0268462d584699593a2879c52c31c99e059f182946b7c7972302ebf637eaa3ab828a5beaebdca8987a46ca65a958925b41cf2160b5acb793aa03d539204a66565a5c7745202b5552db20f0d8cf7b7828628807338b53fb7aa4bea906de817d8144a4a62a5fb13b985b31b66f115445906c3625b0e8e86279c9000000"], 0x408}, 0x1, 0x0, 0x0, 0x40800}, 0x40) lchown(&(0x7f0000000100)='./file0/../file0\x00', r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 1 (id=369): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000c0, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f0000000600)="$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") (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (rerun: 64) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x7f, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=@newtaction={0x2aa8, 0x30, 0x1, 0x70bd29, 0x25dfdbff, {}, [{0x2a94, 0x1, [@m_pedit={0x2a90, 0x1a, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5f7, 0x8b60, 0x5, 0x101, 0x88}, 0x65, 0x6}, [{0xfff, 0x6, 0x3, 0x7, 0x5, 0xa92}, {0x65a, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x8, 0x8001, 0x2, 0x1, 0x9}, {0x10, 0x7, 0xfffff000, 0x6f30, 0xf}, {0x7, 0x9, 0x4, 0x1caece98, 0xf, 0xefcf}, {0x48a0, 0xb, 0x200, 0x9, 0x7f, 0x7}, {0x1, 0x7, 0x81, 0x800, 0x4, 0x3}, {0x6, 0x9e, 0x4, 0x400, 0x8}, {0x4, 0x8, 0x3, 0xa, 0x5, 0xa99c}, {0x4, 0xfc, 0x8, 0x7, 0x5}, {0x5, 0x2, 0x7, 0xffffc8e1, 0x35a59efd, 0x400}, {0x6, 0x5, 0x4, 0xfffffff7, 0x1739, 0xffffff00}, {0x6, 0x9, 0x4, 0x7ff, 0x2, 0x7}, {0x7ff, 0xfffffffb, 0x0, 0x8, 0x22e8, 0x80}, {0x1, 0x9, 0xf, 0x7f2b, 0x5, 0x2}, {0x1, 0x6, 0x3, 0xfff, 0xf19, 0x4}, {0x9, 0x80000001, 0x3, 0xa124, 0xb6, 0x2}, {0x401, 0x1, 0x5, 0x8, 0x485, 0x4}, {0x8001, 0x5, 0x0, 0xfffffc00, 0x1, 0x9}, {0x12fb, 0x9, 0x8, 0x10f, 0x0, 0x3}, {0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0x6}, {0x5, 0x8, 0x8, 0x0, 0xfffffffb, 0x9}, {0x0, 0x8, 0x9, 0x6, 0x3, 0x97}, {0x813, 0x5d8, 0x8, 0x8, 0x9, 0x1}, {0x4, 0x9, 0x8, 0x4, 0x2, 0x1}, {0x1, 0x0, 0x7fff, 0xfffffff8, 0x4, 0xfffffff0}, {0xe79, 0x7, 0x7ff, 0x5, 0x0, 0x5}, {0xc2d7, 0x400, 0x6, 0x5, 0x0, 0x2}, {0xfffffffd, 0x2, 0x5, 0xfc, 0xfffffff5, 0xfffffc00}, {0x5, 0xfff, 0x1524, 0x0, 0x7, 0xfff}, {0x6, 0x0, 0x155c, 0x7, 0x7}, {0x2, 0x1, 0xfffffff7, 0x5, 0xfffffff7, 0x7fff}, {0x2, 0x6d48, 0x1, 0x8, 0xf, 0x7}, {0x1, 0x4, 0x7341, 0xd, 0x8936}, {0x1, 0x5, 0x1, 0x3, 0xa0, 0xb285}, {0x7fffffff, 0x0, 0x4, 0xbb, 0x8, 0xfffffff8}, {0x2, 0x5, 0x6, 0x1, 0x9}, {0x8, 0x4, 0x30, 0x200, 0x2, 0x7}, {0x3, 0x3ff, 0xe, 0x0, 0xafbe, 0x3c0a}, {0x80000000, 0x3, 0x1, 0x1, 0x891f, 0x4}, {0x9, 0x80000000, 0x74, 0x9, 0x1, 0x99}, {0x9, 0x1, 0x0, 0x10001, 0x3ff, 0x7fff}, {0x9, 0xffff, 0x5ef7, 0x5, 0x3, 0x6}, {0x5, 0x19, 0x0, 0x0, 0x401, 0x500000}, {0x2, 0x1, 0x9, 0x489a, 0x2, 0xb}, {0x80000000, 0x0, 0x4, 0x4, 0x5, 0x1}, {0x0, 0x4, 0x2, 0x5, 0x3, 0x8f}, {0xffffffff, 0x45, 0xffff, 0x7, 0x5, 0x9}, {0x1, 0x0, 0x401, 0x4, 0xa32, 0x401c}, {0x5, 0x1000, 0xfffffff9, 0x1b00000, 0x0, 0xd7}, {0xbfb1, 0x2, 0x2, 0xcb3, 0x6f8, 0x7}, {0x3, 0xe70, 0xd1d, 0x4, 0x4, 0x5}, {0xc7, 0x5, 0x5, 0x9, 0x3, 0x7}, {0x34, 0x88, 0x1e97d19c, 0x2, 0x8, 0x40}, {0x11a5, 0x1, 0x10000, 0x3, 0x3, 0x1ff}, {0x8, 0x6, 0x5, 0x3, 0x1e3e4ead, 0x80000001}, {0x401, 0x6, 0x1, 0x4, 0x2, 0x4}, {0x9, 0x71cfabe7, 0x5, 0x4, 0x8, 0x9}, {0xa, 0xffff, 0x4, 0xf, 0x80, 0x9}, {0xa17, 0x1, 0x5, 0x7, 0x300000, 0xb9}, {0x5, 0x1, 0x0, 0x3, 0x9, 0x6}, {0x1, 0x2, 0xead, 0x4, 0x4, 0x3}, {0x6, 0xffffffff, 0x9, 0x7, 0xe8, 0xb76}, {0x7, 0xe, 0x2, 0xac, 0x10001, 0x5a4}, {0x1, 0x0, 0x9, 0x3, 0x7ff, 0x100}, {0x9, 0x1, 0xfffffe01, 0x8, 0x8, 0x6}, {0x10000, 0x2, 0x8, 0x0, 0x9, 0x940}, {0x21db, 0x4, 0x40000000, 0xa1, 0x96, 0x7}, {0x581ba20a, 0x9, 0x0, 0x83, 0x4, 0x4}, {0xd, 0xe3, 0x0, 0x19c3, 0x6, 0xffffffff}, {0x7ff, 0xe00000, 0x2, 0x6, 0x5d, 0x6}, {0xfff, 0x0, 0x4, 0xfffffbff, 0x3, 0x2}, {0x9f, 0x5, 0x10, 0x280000, 0x800, 0x4}, {0xf, 0x80000001, 0xffffffb2, 0x2b, 0x5, 0x2}, {0x6, 0x8, 0x7, 0x6e6, 0xe9}, {0x10000, 0xfffffff8, 0xb78, 0x4, 0x4, 0x6}, {0x1, 0xfffffffb, 0x3ff, 0x1, 0xade, 0x7ff}, {0x6, 0x2, 0xfffffff7, 0x7, 0x2, 0x7f}, {0x6, 0xf590, 0x80, 0x1, 0x8001, 0x4}, {0x6, 0x2, 0x480, 0x79, 0x9, 0x6}, {0x1, 0x3d40, 0x7, 0x46d, 0x8, 0xd}, {0x7, 0x2, 0x1, 0x9, 0x84c4, 0x9}, {0x2756, 0x400, 0x4, 0x2, 0x0, 0x1}, {0xffffffff, 0xe, 0x1, 0xa8, 0x2, 0x7fffffff}, {0x2, 0x1, 0x3, 0x3, 0x4, 0x9}, {0x3b7, 0x3, 0x2, 0x7, 0x2, 0x8}, {0x5, 0x8001, 0x81, 0x56, 0x9, 0x7}, {0x1, 0x0, 0x7ff, 0x3, 0x8, 0x3}, {0x2e73, 0x1f, 0xdb72, 0x7c365bee, 0x8, 0x3}, {0x8001, 0x5, 0x6, 0x7, 0x1, 0x9}, {0xffff2508, 0x2, 0x101, 0x100, 0x0, 0x6}, {0x38f5, 0xffff8000, 0x81, 0x9, 0x7, 0x8}, {0x7, 0x9, 0x9, 0x80000001, 0x3ff, 0x101}, {0x413d22a0, 0x1, 0xb65c, 0x7, 0x81, 0x4}, {0xa, 0x95, 0x101, 0x4, 0x0, 0x5}, {0x1ff, 0x20, 0x8, 0x5592, 0x9, 0x100}, {0x4, 0x9, 0x81, 0xfffffff8, 0x7, 0xe86}, {0x3, 0x6, 0xd, 0x1, 0x4, 0x3}, {0xe, 0x9958, 0x81, 0xfffffff0, 0x1, 0x5}, {0x0, 0x7, 0xfffff07c, 0x845, 0xfff}, {0x0, 0xfffffff9, 0x6, 0x8, 0x5, 0x5}, {0x4, 0x7, 0x9, 0x330a, 0x4, 0x8}, {0x30f0a026, 0x8, 0x4, 0x7, 0x6, 0xff}, {0x7, 0x0, 0x3800000, 0x8, 0x4cc0c7e8, 0x3}, {0xb1, 0x2, 0x98, 0x8001, 0x80000001, 0x1}, {0x200, 0x9, 0xfffffffb, 0x7, 0x800, 0x8}, {0x6, 0xe, 0x23, 0xf, 0xd9, 0x5}, {0x400, 0x9, 0x100, 0x8, 0x100}, {0x0, 0x0, 0xe, 0x0, 0x4, 0x7b}, {0x92e, 0x400, 0xffffff01, 0x2d, 0xc07, 0x400}, {0x4, 0x4, 0xc76, 0x7, 0x8, 0x558b}, {0x4, 0x9, 0x2bc, 0xa0, 0x3ff, 0x2}, {0x6, 0x1, 0x5, 0x2, 0x7, 0x7f}, {0x3, 0x49a, 0x2, 0x2, 0x4, 0x10}, {0x2, 0x7, 0x9, 0x5, 0x6}, {0x63f024bb, 0xa0, 0x5, 0x3, 0x8, 0x7b}, {0x1, 0x10001, 0x81, 0x9, 0x5, 0x7}, {0x5, 0x1ff, 0x1, 0x7, 0x8000, 0xa457}, {0xc, 0x9, 0xffffff00, 0x605, 0x0, 0x774}, {0x4, 0x5, 0x8, 0x400, 0x5d85, 0x9}, {0x4, 0x2, 0x10001, 0x7, 0x0, 0x10000}, {0x9, 0x2, 0x9, 0x9, 0x1, 0x79f}, {0x6, 0x8, 0x1, 0x2, 0x0, 0xffff8001}, {0x100, 0x9, 0x4, 0x8, 0x7, 0xd2f}, {0xfffffeff, 0x4, 0x30, 0x2a, 0x6, 0x2}, {0x5, 0x3, 0x0, 0x35, 0x9, 0x9e}, {0x9, 0x5, 0xe2, 0x5, 0x0, 0x1}, {0x4, 0xa, 0x0, 0x3, 0x8}], [{0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x1, 0xbd8a62aa819b833a}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x1}, {0x5}, {0x6, 0x1}, {}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x60acfaa94dc96dc1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x6}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0xa}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x9293fc9a996600a2, 0x1}, {0x3}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x7}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x7}, {}, {0x7}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1ff, 0x100, 0x10000000, 0x55, 0x8000}, 0x9, 0x7}, [{0xdd, 0xffff9bcb, 0x0, 0x8, 0x40}, {0x10, 0x400, 0x1, 0x89, 0xe, 0xf}, {0x9, 0xbc, 0x15, 0x3, 0x23b0, 0x4}, {0x3, 0x3, 0x6, 0x80000001, 0x4, 0x236}, {0x4, 0x1, 0xb3, 0x4, 0x2, 0x101}, {0x5, 0x6, 0xfe2a, 0x2, 0x4d8, 0x6}, {0x6, 0x3, 0x2, 0x9, 0x6, 0x8}, {0xfff, 0x9, 0x9, 0x8, 0x3, 0x8001}, {0x0, 0x7, 0xfff, 0x8b9, 0x6, 0x7}, {0x80000003, 0x6, 0xfffff75c, 0x2262, 0x80, 0x4}, {0xfffffffa, 0xa, 0x7f, 0x8, 0x7, 0x2}, {0x8, 0x2, 0x80000001, 0x1, 0x1, 0x1}, {0xffff, 0x9, 0x1, 0xb, 0x2, 0xff}, {0xffffffff, 0x6, 0x3, 0xffffffff, 0x200}, {0x101, 0x5, 0x6, 0x4, 0xfffffffa, 0x7}, {0x0, 0x80, 0x71d3, 0x459, 0x6, 0xfffffffc}, {0x2000081, 0x3d7, 0x2, 0x9, 0x4, 0x5}, {0xfffffffc, 0x0, 0x6, 0x1000, 0x4, 0x1000}, {0x1, 0xdf7, 0x0, 0x3, 0x80, 0x3}, {0x5, 0xb, 0x47, 0x3, 0x7, 0x9}, {0xb2ac, 0xebe, 0x7df, 0xfffff001, 0x80, 0x539e}, {0x3, 0x10000, 0x7ff, 0xc4, 0x9, 0x7b1a}, {0x6, 0x9, 0x5cb, 0xfffffff9, 0x33c3, 0xfff}, {0x5, 0xffff9448, 0x8001, 0x7, 0x0, 0x471f83e2}, {0x7f7, 0xcba, 0x100, 0x3, 0xd, 0x5}, {0x6, 0x0, 0xffff, 0x3, 0x40, 0x946}, {0xf535, 0x10000, 0x2, 0x7, 0x6, 0x8000}, {0xffffff7b, 0x8, 0x2, 0x90000000, 0xfa, 0x2}, {0x6, 0x3, 0xc, 0x3, 0x5}, {0x2, 0x2, 0x548fb84d, 0xfffffffb, 0x9, 0x2}, {0x4, 0x0, 0x6, 0xe5, 0x80000000, 0x4}, {0xc2, 0x7ff, 0xb, 0x0, 0x4, 0x66}, {0x7, 0x30b, 0xfffffffe, 0x21, 0x5, 0x1}, {0x3f, 0x9, 0xffff, 0xffff, 0x3, 0x1}, {0x0, 0x0, 0xffff, 0x5, 0x5, 0x9ed9}, {0xffffffff, 0x8, 0x9, 0x6, 0x1, 0x2}, {0x8, 0x4, 0x17b3, 0x3, 0x4, 0x2e}, {0x3, 0x6, 0xfa, 0x2, 0x2, 0x6}, {0x2, 0x5, 0x3, 0x9, 0x63c9, 0xf5c}, {0x3, 0xffff, 0xae2c, 0xfffffffc, 0x9, 0x5}, {0x4, 0x3, 0x6, 0x4, 0xd4c, 0x9a}, {0x1, 0x4f, 0x10001, 0x3, 0x9, 0x6}, {0x6, 0x75, 0x8, 0x2, 0x101, 0x7}, {0x0, 0x4f, 0xff, 0x3, 0xc4a6, 0x2}, {0x6, 0x32000000, 0xff, 0x1400, 0x2, 0xffffffff}, {0x0, 0x6, 0x7, 0x6, 0x5, 0x1}, {0x6, 0x9, 0xffff, 0x6, 0x1, 0xb4}, {0x0, 0x1, 0xfbd1, 0x8, 0x5, 0x3}, {0x8, 0x200000, 0x7ff, 0x6, 0x6, 0xfffffffe}, {0x3, 0x8, 0x3, 0x3, 0x8, 0x5}, {0xfffffffb, 0xfff, 0xf, 0x2, 0x1, 0x4}, {0x6, 0x7f, 0x4, 0x4, 0x5, 0x10001}, {0x7, 0x6, 0xffffffff, 0x80000001, 0x400, 0x10001}, {0x100, 0x401, 0x9, 0xfffffffd, 0x4, 0x3}, {0x2, 0xfad, 0xa, 0x2, 0x7f, 0xa}, {0xa, 0x1, 0x7, 0x0, 0x21f, 0x2}, {0x1d2, 0x6, 0xd, 0x6, 0x9, 0x9}, {0x0, 0xfffffffb, 0x1, 0x7ff, 0xb52, 0x3}, {0x80000001, 0x101, 0x5, 0x7, 0x1000, 0xbc78}, {0x6, 0x8, 0x6, 0x3, 0x2, 0x3}, {0x7, 0xd, 0x0, 0xfffffffc, 0x7fff, 0xffff}, {0xca9, 0x7f, 0x5, 0x3, 0x9, 0xffffffff}, {0x4, 0x2, 0x101, 0x8, 0x6, 0xe6}, {0x9, 0xfffffac5, 0x0, 0x7, 0x8, 0x8000}, {0x1, 0x7, 0x1, 0x0, 0xcc, 0xff}, {0x400, 0xc, 0x7, 0x3, 0x100, 0x8}, {0x8001, 0x2e, 0x4, 0x400, 0x3, 0x800}, {0x5, 0x2, 0xe9, 0x7, 0xc}, {0x7ff, 0x5, 0x0, 0x5, 0x800, 0x1ff}, {0x1, 0x3, 0x9, 0x3ff, 0x4026944d, 0x9}, {0x8, 0x1, 0x4, 0x0, 0x8, 0x3}, {0x9, 0x4, 0x10000, 0x1, 0x3, 0x2}, {0x4, 0x7, 0x10000, 0x6, 0x297, 0xff}, {0x0, 0x1000, 0x4, 0x7, 0x10001}, {0x5, 0xbde, 0x5, 0x2cd78ace, 0x3, 0x8}, {0x1, 0xc6, 0x800, 0x5, 0x6, 0x40}, {0x1d47, 0x0, 0x1, 0x5, 0xffffffff, 0x11c}, {0x1, 0x162, 0xc86, 0x4, 0x2, 0x3}, {0x98f, 0x6, 0xecfd, 0x40, 0xf28, 0x7ff}, {0x5, 0x6, 0x5, 0x8, 0x2, 0x401}, {0x6, 0x40, 0x40, 0x9, 0x5, 0x5f0a8000}, {0xf50c, 0x2655, 0x7f, 0x1c, 0x3, 0x9}, {0x0, 0x80, 0x4, 0x6, 0x1e7072c6, 0x1cf000}, {0xfffffff7, 0x5, 0x3ff, 0x9, 0x30}, {0xbbe5, 0x3ff, 0x7, 0x0, 0x400, 0x100}, {0x2, 0x9, 0x4, 0xec, 0x8, 0x80000001}, {0x1, 0x2, 0xd40b8fe7, 0xfb29, 0x2, 0x1d65b554}, {0x3b1b2cfe, 0x4, 0xa6, 0xc0000000, 0x401, 0xfffffff1}, {0x0, 0x7ff, 0x0, 0xffffffc0, 0x7fff800, 0x7}, {0xd, 0x5, 0x6, 0x5, 0x0, 0x10000}, {0x0, 0x6, 0x1, 0x4, 0x4, 0x4}, {0x4, 0xf0, 0x9, 0xfffffffe, 0x5}, {0x8001, 0x2ded, 0x6, 0x6, 0x7, 0x2}, {0x179, 0x2, 0xfffffffe, 0x200, 0x10000, 0x5}, {0x1, 0x1, 0x2, 0xf1e, 0x4, 0xfb6d}, {0x1, 0x6102, 0xd02, 0x5, 0xf5b, 0xf}, {0xf58, 0x3, 0x6, 0xe, 0x9, 0xffff}, {0x0, 0x9, 0x8, 0x0, 0x9}, {0x10, 0x3, 0x4, 0xa, 0xfffffff9, 0x9}, {0x6, 0x62, 0x3f3, 0x80000001, 0x5, 0x4}, {0x4, 0x81, 0x23, 0x2, 0x6, 0xff}, {0xc, 0x10, 0x7, 0x8, 0x4, 0x10001}, {0x4, 0x559ed72d, 0xcac, 0x0, 0x2, 0xffff}, {0x6, 0xe1, 0x100, 0x401, 0x200, 0x9}, {0x3a6f6741, 0xe6a4, 0x9, 0x5, 0x1, 0x4}, {0x8000, 0x6, 0x19, 0x400, 0x2, 0x8}, {0x6469c0e4, 0x0, 0x10000, 0x7, 0x0, 0x5}, {0x0, 0x9, 0x0, 0xfffffeff, 0x0, 0x3}, {0x200, 0x80, 0xa, 0x4, 0x7ca}, {0x5f, 0x3ff, 0x3ff, 0x489733aa, 0xcc, 0x10000}, {0x5, 0xba, 0x6, 0x1, 0x6, 0x10}, {0x1, 0xc, 0x7, 0x1ff, 0x53, 0x3}, {0x6, 0x2, 0xc, 0x2, 0x7f, 0x9}, {0xf0, 0x81, 0xfffffff7, 0x3, 0x3, 0x80000001}, {0xf5b, 0x7e, 0xb, 0x4, 0x9, 0x4}, {0x2f, 0x1, 0xffff491c, 0x9, 0xfffff8ec, 0x6bca}, {0x8001, 0x8, 0x3, 0x6, 0x8, 0xf}, {0x1, 0x7, 0x9, 0x2, 0xfffffffd, 0xffffffff}, {0xffff, 0x400, 0xb, 0x5, 0x8, 0xa}, {0x8001, 0x8, 0xbe, 0x6, 0x9, 0xffff7fff}, {0x5c, 0x0, 0x3b, 0x2, 0x6, 0xff}, {0x0, 0x6, 0x100, 0x1ff, 0x7fffffff, 0x8}, {0x8, 0x0, 0x8, 0xfffffff7, 0x10001, 0x722c}, {0x3f, 0x8, 0x4, 0x1, 0x7f, 0x1000}, {0x7, 0x2, 0x7, 0x8248, 0x64, 0xc}, {0x2, 0x1, 0x4, 0x0, 0x100, 0xc46a}, {0x1b0, 0x4, 0x8bdb, 0x7, 0x5, 0x1}, {0x0, 0x8981864, 0x90000, 0x3, 0x6, 0x2}], [{0x3}, {0x3}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x3}, {0x4}, {0x3}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x4a04d0d0d040c9a}, {0x1, 0x1}, {0x3}, {}, {}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x3}, {0x1}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {}, {0x7}, {0x2}, {}, {0x4, 0x1}, {0x5}]}}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x7, 0x3, 0x7f}, 0x1, 0x2}, [{0x1, 0x5, 0x4, 0x2, 0x9, 0x3e341d61}, {0x42, 0xfffffffd, 0x8, 0x0, 0xea, 0x68000000}, {0xa8, 0x1d2, 0xe8a, 0x7d, 0x17eb, 0xb0}, {0x2, 0x100, 0x4, 0x7, 0x5}, {0x9103, 0x4, 0x5, 0x0, 0xfffff728, 0xc}, {0x3, 0x401, 0x8c, 0x6, 0x4, 0x369}, {0x4c92, 0x9, 0x2, 0x7, 0xfe07, 0x5}, {0x8f31, 0x6, 0x2, 0x101, 0x0, 0x20000}, {0xffffffff, 0x0, 0x7f, 0xf18, 0x9, 0x7}, {0x4, 0x3, 0x2e, 0x7fffffff, 0x3, 0x7}, {0x0, 0x0, 0xfffffffd, 0xfffff6ff, 0x6, 0x38000}, {0xc6a, 0x0, 0xffffff83, 0xe6ca, 0x9, 0xc}, {0xc, 0x7, 0x2, 0xfffffdfe, 0x8001, 0x8001}, {0x3f8, 0x5d0, 0x3d, 0x0, 0x8, 0x7e04}, {0x6, 0xfffffffe, 0x8, 0x643, 0x7, 0x4a}, {0x81, 0x6, 0x6, 0x1ff, 0x100, 0x20000000}, {0x3ff, 0x3, 0x200, 0xf33d, 0x9, 0x5}, {0x81, 0x1, 0x7ff, 0xefc8, 0x0, 0x5}, {0x7fffffff, 0x6, 0x2, 0xba4, 0x6, 0x1}, {0x2, 0x38, 0x1, 0x80000001, 0x7fff, 0x1}, {0x7, 0x6, 0x101, 0x4, 0x6, 0xe57}, {0x6, 0x2, 0x401, 0x6, 0x5, 0x1}, {0x7, 0x9, 0x9, 0x2, 0xfffffff9}, {0xf21, 0x7fffffff, 0xfffffffb, 0xc, 0x2, 0x1}, {0x5, 0x1, 0x6, 0x8, 0xffff8000, 0x3}, {0x3, 0x4, 0x7, 0x3, 0x5, 0x8}, {0xffffff01, 0x7, 0x3, 0x7, 0xfff, 0x6}, {0x81, 0x6, 0x3, 0x2, 0x9, 0x3}, {0x2, 0x8, 0xda, 0x6, 0x7, 0x3}, {0x6, 0x8, 0xf86, 0x10, 0x3f, 0x7}, {0x7fffffff, 0x0, 0x81, 0x200, 0x1, 0x604}, {0x7fff, 0x0, 0x80000001, 0x68f7e38f, 0x2, 0x6}, {0xf46, 0xe, 0x6, 0x0, 0xae, 0xff}, {0xfffffffb, 0x80, 0x3, 0x9c, 0x6, 0x4}, {0x3, 0x3, 0x3, 0x3, 0x9, 0xffffffff}, {0xc, 0x4dd0, 0x8001, 0x3, 0x0, 0x5}, {0x1, 0xffffffff, 0x2, 0xe, 0xac, 0x2}, {0x3a5b, 0x5, 0x5, 0x5, 0x7f, 0x7}, {0x1, 0x9, 0x7fffffff, 0x0, 0x2, 0x7}, {0x8, 0x7ff, 0x1, 0x7ff, 0x7dbd, 0x4ec0}, {0x7, 0x1, 0xffffffff, 0x0, 0x40, 0x5}, {0x1, 0x0, 0x6094, 0x0, 0x3}, {0xfff, 0x5, 0x80, 0x8, 0x7, 0x1}, {0x6, 0x8001, 0x1, 0x100, 0xf8ab, 0x6}, {0x4a, 0x5, 0x0, 0x8d7e, 0x1, 0x400}, {0xf, 0x7f, 0x1, 0x7fffffff, 0xc, 0x101}, {0xff, 0x81, 0x7, 0x4, 0x917, 0x6}, {0x6, 0x1fe00000, 0x3, 0x4, 0x3, 0xa0000000}, {0xa77d, 0xfffffff9, 0x8}, {0x403, 0x5, 0x1, 0x2, 0x8, 0x10001}, {0xd, 0x401, 0xf, 0x7f, 0x15e4, 0x9}, {0xfffffffc, 0x5, 0x5, 0xfffffca9, 0x90, 0x3}, {0xf4, 0x2, 0x4, 0x4, 0x2, 0x8a4a}, {0x3, 0x6, 0x4, 0x8, 0x7, 0x1}, {0x1ff, 0x6, 0x7fffffff, 0x60, 0x3, 0xe}, {0x7, 0x993b, 0x400, 0x10000, 0x3, 0xe}, {0x7, 0x6, 0x1, 0xfff, 0xffffffff, 0x3ffc}, {0x7, 0x10000, 0x2, 0x80000000, 0x0, 0xffff}, {0xffffffff, 0xf, 0x5, 0x4, 0xd5, 0x9}, {0x7ff, 0xae96, 0x3, 0x6, 0x3, 0x1}, {0x4, 0x2, 0x8, 0x5, 0xf424, 0x5}, {0x9, 0x5, 0xade7, 0x9, 0x2, 0x5}, {0x6, 0x4, 0x1, 0xb1e, 0x0, 0x2}, {0x6, 0xd, 0x1, 0x80, 0x5, 0xc75}, {0xf, 0x9, 0x1, 0x3e989c97, 0xfffffffe, 0x5}, {0x200, 0xdc, 0x5, 0x8000, 0x1000, 0x5}, {0x2, 0x200, 0x7, 0x8, 0x1ff, 0x3}, {0xc0, 0x1, 0x5, 0x52, 0x7, 0xfffffff8}, {0xff, 0x2, 0x10001, 0x0, 0x2, 0xffffff00}, {0x4, 0xed, 0xfffffff9, 0x1307, 0x2, 0x1}, {0x0, 0x0, 0xb, 0x6, 0x6, 0x80000000}, {0xb623, 0x10000, 0x1, 0x8, 0x6, 0x8}, {0x4, 0x9, 0xe7, 0x2, 0x40, 0x401}, {0x4, 0x8001, 0x5, 0x97c, 0xfffffffe, 0x7}, {0x0, 0x2, 0x4, 0x7, 0x80000001, 0xfffffff7}, {0x1, 0x8, 0x4, 0x865, 0x2, 0x7}, {0x6, 0x3, 0x5d, 0x8e816326, 0xc, 0x6}, {0x5, 0xee6c, 0x2, 0x5, 0x40, 0x101}, {0x2, 0xfffffff9, 0xd, 0x66, 0x5, 0x9}, {0x4, 0xfffffff8, 0x3, 0x6, 0x4, 0x5}, {0x1, 0xdd, 0x6, 0x9, 0x80000001, 0x8818518a}, {0x7, 0x1, 0xff, 0x7fff, 0x8, 0x6}, {0x9, 0x9d, 0x2, 0x9, 0x7b7fb9f0, 0x9}, {0x30, 0x7, 0x3, 0x100000, 0x8, 0xfffffe01}, {0xfffffffe, 0x6, 0x40, 0x0, 0xfffff5a2, 0x401}, {0x1, 0x100, 0x5, 0x3, 0x7, 0x7}, {0x1, 0x800, 0x3, 0x40, 0x5, 0xc}, {0x3, 0x3ff, 0x4, 0x7, 0x9, 0xd}, {0x1, 0x401, 0x9, 0x2, 0x7, 0x6}, {0x3, 0x7, 0x3, 0x1, 0x10001, 0x9}, {0x2, 0x7fff, 0x9, 0x9, 0xb}, {0x7, 0x7, 0x2, 0x0, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x6, 0x7, 0x5}, {0x9, 0x7, 0x1, 0x2, 0x1, 0x80}, {0x9, 0x7f, 0x5, 0x5, 0xeb, 0x5}, {0x3, 0x1, 0x8000, 0x5, 0x8, 0x3}, {0x1, 0x5a1c, 0x8001, 0x7ebe, 0x4cf72505, 0xcd}, {0x0, 0x6, 0x6, 0x5, 0x1ff0, 0x10001}, {0xe, 0x1, 0x3, 0x2, 0x9, 0x100}, {0x5, 0x7ff, 0x3, 0x80, 0x200, 0x4}, {0x4, 0x6, 0x1ff, 0x3ff, 0x20000000, 0x8}, {0x31b, 0x8001, 0xe, 0x1, 0x3, 0x8}, {0x6, 0x2, 0x5, 0xb, 0x1, 0x8}, {0xf, 0x6, 0x98a, 0x3, 0x1, 0x3}, {0x5276, 0x366, 0x5, 0x44, 0x0, 0x5cd0}, {0x80000001, 0x8, 0x2, 0x24c, 0x7, 0x1000}, {0x1, 0x2, 0x6, 0x2, 0x5}, {0x5, 0x5, 0x80, 0x1, 0x5, 0x401}, {0x1, 0x5cf, 0xa, 0x2, 0x3, 0x8}, {0x800, 0x4, 0x2, 0x1, 0xc0, 0xfffffffa}, {0x7, 0x3ff, 0x200, 0x0, 0x2, 0x5}, {0xffffffff, 0x7, 0xf, 0x0, 0x8, 0x3}, {0x3, 0xb2b2, 0x194f9bf4, 0x87a4, 0xaab7, 0x7}, {0x7, 0x9, 0xa8e, 0x7, 0x60670000, 0x7}, {0x40, 0x10000, 0x4, 0x2, 0x0, 0x1}, {0x5, 0x9, 0xffffff7f, 0x7, 0x3}, {0x8e5, 0x1, 0xa, 0x28, 0x9, 0x80000001}, {0x3, 0x80000001, 0xe225, 0xd, 0x8, 0x9}, {0x29d, 0x401, 0x3, 0xfff, 0xfded, 0x8}, {0xfffffbff, 0xe, 0x0, 0xffffff81, 0x8, 0xfffffffe}, {0xed6, 0x3, 0x5, 0x259c, 0x9, 0x3}, {0xfffffbff, 0x7f, 0x400, 0xfffffff9, 0x0, 0x1}, {0x0, 0x7ff, 0x40, 0xcd, 0x6, 0x8}, {0x6, 0x6, 0x1, 0x9, 0x61, 0xffffffff}, {0x6, 0x8, 0x0, 0x4, 0x5, 0x6}, {0x8000, 0xff, 0x516, 0x0, 0x2371, 0xffff}, {0x8, 0x1, 0x6, 0x9, 0x101, 0x86}, {0x5, 0x8, 0x186, 0x1, 0x101, 0x80000000}], [{0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x3}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x3}, {0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0xd171415e8ad05f3d}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x3}, {0x6}, {0x4}, {0x1}, {0x5}, {0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {}, {0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2aa8}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=ANY=[@ANYBLOB="301000003b0007010100000000000000017c00000400fc8018100180"], 0x1030}}, 0x4c000) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x52f}, 0x18) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file1\x00'}) socket$inet(0x2, 0x3, 0xd) (async) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) kernel console output (not intermixed with test programs): ridge_slave_1) entered forwarding state [ 24.944058][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.951151][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.960435][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.967482][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.985186][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.024763][ T3300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.035208][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.063271][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.079646][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.109326][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.204494][ T3299] veth0_vlan: entered promiscuous mode [ 25.221637][ T3306] veth0_vlan: entered promiscuous mode [ 25.233630][ T3306] veth1_vlan: entered promiscuous mode [ 25.240942][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.262594][ T3299] veth1_vlan: entered promiscuous mode [ 25.279412][ T3306] veth0_macvtap: entered promiscuous mode [ 25.301106][ T3306] veth1_macvtap: entered promiscuous mode [ 25.313690][ T3299] veth0_macvtap: entered promiscuous mode [ 25.320621][ T3307] veth0_vlan: entered promiscuous mode [ 25.331671][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.339696][ T3299] veth1_macvtap: entered promiscuous mode [ 25.355004][ T3307] veth1_vlan: entered promiscuous mode [ 25.364151][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.375616][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.390578][ T3307] veth0_macvtap: entered promiscuous mode [ 25.404179][ T354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.414184][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.430419][ T354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.439200][ T3300] veth0_vlan: entered promiscuous mode [ 25.445790][ T3307] veth1_macvtap: entered promiscuous mode [ 25.455328][ T354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.475153][ T354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.484079][ T354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.493241][ T354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.502329][ T354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.514300][ T354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.530104][ T3303] veth0_vlan: entered promiscuous mode [ 25.535918][ T3300] veth1_vlan: entered promiscuous mode [ 25.544016][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.558633][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.573399][ T3303] veth1_vlan: entered promiscuous mode [ 25.584286][ T3300] veth0_macvtap: entered promiscuous mode [ 25.593318][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.615607][ T559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.634553][ T3300] veth1_macvtap: entered promiscuous mode [ 25.643862][ T559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.676171][ T3468] bridge_slave_0: left allmulticast mode [ 25.681970][ T3468] bridge_slave_0: left promiscuous mode [ 25.687662][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.696457][ T3468] bridge_slave_1: left allmulticast mode [ 25.702391][ T3468] bridge_slave_1: left promiscuous mode [ 25.708078][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.717605][ T3468] bond0: (slave bond_slave_0): Releasing backup interface [ 25.729649][ T3468] bond0: (slave bond_slave_1): Releasing backup interface [ 25.739463][ T3471] loop2: detected capacity change from 0 to 512 [ 25.746418][ T3471] ======================================================= [ 25.746418][ T3471] WARNING: The mand mount option has been deprecated and [ 25.746418][ T3471] and is ignored by this kernel. Remove the mand [ 25.746418][ T3471] option from the mount to silence this warning. [ 25.746418][ T3471] ======================================================= [ 25.751799][ T3468] team0: Port device team_slave_0 removed [ 25.790529][ T3468] team0: Port device team_slave_1 removed [ 25.797083][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 25.797895][ T3471] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3: Invalid inode bitmap blk 4 in block_group 0 [ 25.804635][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 25.826104][ T3471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 25.826126][ T3468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 25.826141][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 25.835164][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.860351][ T559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.869223][ T559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.906429][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.926529][ T3303] veth0_macvtap: entered promiscuous mode [ 25.936651][ T3475] loop0: detected capacity change from 0 to 512 [ 25.939045][ T3303] veth1_macvtap: entered promiscuous mode [ 25.950102][ T3468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 25.952506][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.975721][ T3475] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.979058][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.998579][ T3468] tipc: Started in network mode [ 26.003608][ T3468] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 26.010803][ T3468] tipc: Enabled bearer , priority 0 [ 26.016960][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.035543][ T3477] bridge_slave_0: left allmulticast mode [ 26.041294][ T3477] bridge_slave_0: left promiscuous mode [ 26.047196][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.055731][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 26.055745][ T29] audit: type=1400 audit(1754033912.400:111): avc: denied { read } for pid=3476 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.057276][ T3475] EXT4-fs (loop0): 1 orphan inode deleted [ 26.088533][ T51] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 26.098519][ T51] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 26.098644][ T3481] loop3: detected capacity change from 0 to 512 [ 26.099640][ T3475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.130394][ T3481] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 4 in block_group 0 [ 26.140632][ T3477] bridge_slave_1: left allmulticast mode [ 26.145047][ T3475] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.148449][ T3477] bridge_slave_1: left promiscuous mode [ 26.148594][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.159577][ T3481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 26.185020][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.190298][ T29] audit: type=1400 audit(1754033912.570:112): avc: denied { add_name } for pid=3474 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.214765][ T29] audit: type=1400 audit(1754033912.570:113): avc: denied { create } for pid=3474 comm="syz.0.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.238024][ T3477] bond0: (slave bond_slave_0): Releasing backup interface [ 26.247557][ T3477] bond0: (slave bond_slave_1): Releasing backup interface [ 26.248597][ T29] audit: type=1400 audit(1754033912.570:114): avc: denied { read write open } for pid=3474 comm="syz.0.1" path="/0/file1/bus" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.286653][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.293910][ T3477] team0: Port device team_slave_0 removed [ 26.304098][ T3477] team0: Port device team_slave_1 removed [ 26.316385][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 26.323906][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 26.332993][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 26.340266][ T29] audit: type=1400 audit(1754033912.710:115): avc: denied { read write } for pid=3487 comm="syz.0.8" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 26.340501][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 26.363872][ T29] audit: type=1400 audit(1754033912.710:116): avc: denied { open } for pid=3487 comm="syz.0.8" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 26.374418][ T3490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 26.398977][ T3491] loop0: detected capacity change from 0 to 512 [ 26.410927][ T3491] ext4: Unknown parameter 'fowner<00000000000000000000' [ 26.415395][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.432290][ T29] audit: type=1400 audit(1754033912.810:117): avc: denied { prog_run } for pid=3487 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.462514][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.487986][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.549233][ T3477] tipc: Started in network mode [ 26.554469][ T3477] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 26.561794][ T3477] tipc: Enabled bearer , priority 0 [ 26.593138][ T3495] FAULT_INJECTION: forcing a failure. [ 26.593138][ T3495] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.606281][ T3495] CPU: 1 UID: 0 PID: 3495 Comm: syz.2.9 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 26.606308][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 26.606319][ T3495] Call Trace: [ 26.606327][ T3495] [ 26.606335][ T3495] __dump_stack+0x1d/0x30 [ 26.606357][ T3495] dump_stack_lvl+0xe8/0x140 [ 26.606465][ T3495] dump_stack+0x15/0x1b [ 26.606481][ T3495] should_fail_ex+0x265/0x280 [ 26.606509][ T3495] should_fail+0xb/0x20 [ 26.606593][ T3495] should_fail_usercopy+0x1a/0x20 [ 26.606609][ T3495] _copy_to_user+0x20/0xa0 [ 26.606634][ T3495] simple_read_from_buffer+0xb5/0x130 [ 26.606665][ T3495] proc_fail_nth_read+0x10e/0x150 [ 26.606737][ T3495] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 26.606758][ T3495] vfs_read+0x1a0/0x6f0 [ 26.606776][ T3495] ? __rcu_read_unlock+0x4f/0x70 [ 26.606794][ T3495] ? __fget_files+0x184/0x1c0 [ 26.606887][ T3495] ksys_read+0xda/0x1a0 [ 26.606906][ T3495] __x64_sys_read+0x40/0x50 [ 26.606982][ T3495] x64_sys_call+0x27bc/0x2ff0 [ 26.607004][ T3495] do_syscall_64+0xd2/0x200 [ 26.607044][ T3495] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 26.607074][ T3495] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 26.607097][ T3495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 26.607177][ T3495] RIP: 0033:0x7f1cd4ccd57c [ 26.607197][ T3495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 26.607212][ T3495] RSP: 002b:00007f1cd3337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 26.607231][ T3495] RAX: ffffffffffffffda RBX: 00007f1cd4ef5fa0 RCX: 00007f1cd4ccd57c [ 26.607244][ T3495] RDX: 000000000000000f RSI: 00007f1cd33370a0 RDI: 0000000000000004 [ 26.607257][ T3495] RBP: 00007f1cd3337090 R08: 0000000000000000 R09: 0000000000000000 [ 26.607269][ T3495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.607282][ T3495] R13: 0000000000000000 R14: 00007f1cd4ef5fa0 R15: 00007ffe47351ba8 [ 26.607350][ T3495] [ 26.822128][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 26.831861][ T354] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.865784][ T354] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.924608][ T3498] bridge_slave_0: left allmulticast mode [ 26.930477][ T3498] bridge_slave_0: left promiscuous mode [ 26.936274][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.956090][ T3502] loop4: detected capacity change from 0 to 512 [ 26.956103][ T3498] bridge_slave_1: left allmulticast mode [ 26.956123][ T3498] bridge_slave_1: left promiscuous mode [ 26.962704][ T29] audit: type=1400 audit(1754033913.330:118): avc: denied { create } for pid=3500 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 26.968159][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.973670][ T29] audit: type=1400 audit(1754033913.330:119): avc: denied { create } for pid=3500 comm="syz.2.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 27.020360][ T3385] tipc: Node number set to 11578026 [ 27.053349][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 27.072061][ T3502] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.5: Invalid inode bitmap blk 4 in block_group 0 [ 27.100559][ T3498] bond0: (slave bond_slave_0): Releasing backup interface [ 27.112751][ T3514] netlink: 268 bytes leftover after parsing attributes in process `syz.3.13'. [ 27.121844][ T3514] unsupported nla_type 65024 [ 27.130361][ T3498] bond0: (slave bond_slave_1): Releasing backup interface [ 27.138116][ T3502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.158027][ T3498] team0: Port device team_slave_0 removed [ 27.171593][ T3498] team0: Port device team_slave_1 removed [ 27.183341][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 27.190886][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 27.201437][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 27.208896][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 27.238287][ T354] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.255763][ T3514] Zero length message leads to an empty skb [ 27.262295][ T3518] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 27.274017][ T354] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.336493][ T3498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 27.345998][ T3509] syz.3.13 (3509) used greatest stack depth: 10464 bytes left [ 27.370937][ T3498] tipc: Started in network mode [ 27.375973][ T3498] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 27.383143][ T3498] tipc: Enabled bearer , priority 0 [ 27.403291][ T3526] loop1: detected capacity change from 0 to 2048 [ 27.424604][ T3498] syz.4.5 (3498) used greatest stack depth: 10224 bytes left [ 27.442431][ T3526] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.455581][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.508237][ T3303] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 27.524769][ T3533] loop0: detected capacity change from 0 to 512 [ 27.535253][ T3531] loop4: detected capacity change from 0 to 512 [ 27.543613][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.560753][ T3531] EXT4-fs: Ignoring removed mblk_io_submit option [ 27.567283][ T3531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.587333][ T3531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.587369][ T3536] loop3: detected capacity change from 0 to 1024 [ 27.596044][ T3531] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 27.649880][ T23] tipc: Node number set to 11578026 [ 27.664338][ T3536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.676607][ T3536] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.691610][ T3531] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.16: Allocating blocks 41-42 which overlap fs metadata [ 27.694298][ T3533] mmap: syz.0.17 (3533) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 27.706416][ T3531] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.16: Allocating blocks 41-42 which overlap fs metadata [ 27.764824][ T3531] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.16: Failed to acquire dquot type 1 [ 27.790296][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.807494][ T3531] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 27.850383][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.869768][ T3531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.16: corrupted inode contents [ 27.937074][ T3571] bridge_slave_0: left allmulticast mode [ 27.943015][ T3571] bridge_slave_0: left promiscuous mode [ 27.948841][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.959165][ T3531] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.16: mark_inode_dirty error [ 27.974951][ T3531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.16: corrupted inode contents [ 27.988332][ T3571] bridge_slave_1: left allmulticast mode [ 27.994064][ T3571] bridge_slave_1: left promiscuous mode [ 27.999773][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.007837][ T3531] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.16: mark_inode_dirty error [ 28.020224][ T3578] loop0: detected capacity change from 0 to 512 [ 28.029088][ T3578] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.26: Invalid inode bitmap blk 4 in block_group 0 [ 28.043970][ T3578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.059320][ T3571] bond0: (slave bond_slave_0): Releasing backup interface [ 28.069980][ T3531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.16: corrupted inode contents [ 28.082759][ T3531] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 28.091732][ T3531] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.16: corrupted inode contents [ 28.104561][ T3531] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.16: mark_inode_dirty error [ 28.116025][ T3531] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 28.127699][ T3531] EXT4-fs (loop4): 1 truncate cleaned up [ 28.134074][ T3531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.143866][ T3571] bond0: (slave bond_slave_1): Releasing backup interface [ 28.161759][ T3581] FAULT_INJECTION: forcing a failure. [ 28.161759][ T3581] name failslab, interval 1, probability 0, space 0, times 1 [ 28.162841][ T3571] team0: Port device team_slave_0 removed [ 28.174507][ T3581] CPU: 1 UID: 0 PID: 3581 Comm: syz.3.31 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 28.174534][ T3581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 28.174545][ T3581] Call Trace: [ 28.174552][ T3581] [ 28.174559][ T3581] __dump_stack+0x1d/0x30 [ 28.174580][ T3581] dump_stack_lvl+0xe8/0x140 [ 28.174654][ T3581] dump_stack+0x15/0x1b [ 28.174671][ T3581] should_fail_ex+0x265/0x280 [ 28.174764][ T3581] should_failslab+0x8c/0xb0 [ 28.174787][ T3581] kmem_cache_alloc_node_noprof+0x57/0x320 [ 28.174818][ T3581] ? __alloc_skb+0x101/0x320 [ 28.174847][ T3581] __alloc_skb+0x101/0x320 [ 28.174874][ T3581] netlink_alloc_large_skb+0xba/0xf0 [ 28.174944][ T3581] netlink_sendmsg+0x3cf/0x6b0 [ 28.174990][ T3581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 28.175020][ T3581] __sock_sendmsg+0x142/0x180 [ 28.175049][ T3581] ____sys_sendmsg+0x31e/0x4e0 [ 28.175081][ T3581] ___sys_sendmsg+0x17b/0x1d0 [ 28.175166][ T3581] __x64_sys_sendmsg+0xd4/0x160 [ 28.175198][ T3581] x64_sys_call+0x191e/0x2ff0 [ 28.175220][ T3581] do_syscall_64+0xd2/0x200 [ 28.175242][ T3581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 28.175315][ T3581] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 28.175375][ T3581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.175397][ T3581] RIP: 0033:0x7eff2e47eb69 [ 28.175415][ T3581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.175461][ T3581] RSP: 002b:00007eff2cadf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.175481][ T3581] RAX: ffffffffffffffda RBX: 00007eff2e6a5fa0 RCX: 00007eff2e47eb69 [ 28.175512][ T3581] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 28.175525][ T3581] RBP: 00007eff2cadf090 R08: 0000000000000000 R09: 0000000000000000 [ 28.175594][ T3581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 28.175606][ T3581] R13: 0000000000000000 R14: 00007eff2e6a5fa0 R15: 00007ffe24c87bf8 [ 28.175639][ T3581] [ 28.230837][ T3531] ext4: Unknown parameter '®Õ¾øó˜C(XȈ¥Øeiê@ë' [ 28.392269][ T3571] team0: Port device team_slave_1 removed [ 28.399427][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.406891][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 28.417055][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.420597][ T3531] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 28.424607][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.468679][ T3531] syz.4.16 (3531) used greatest stack depth: 10032 bytes left [ 28.487353][ T3584] tipc: Started in network mode [ 28.492370][ T3584] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 28.499587][ T3584] tipc: Enabled bearer , priority 0 [ 28.507765][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.516811][ T23] tipc: Node number set to 11578026 [ 28.535504][ T3587] FAULT_INJECTION: forcing a failure. [ 28.535504][ T3587] name failslab, interval 1, probability 0, space 0, times 0 [ 28.548195][ T3587] CPU: 1 UID: 0 PID: 3587 Comm: syz.4.32 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 28.548225][ T3587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 28.548237][ T3587] Call Trace: [ 28.548244][ T3587] [ 28.548253][ T3587] __dump_stack+0x1d/0x30 [ 28.548330][ T3587] dump_stack_lvl+0xe8/0x140 [ 28.548351][ T3587] dump_stack+0x15/0x1b [ 28.548368][ T3587] should_fail_ex+0x265/0x280 [ 28.548401][ T3587] ? __hw_addr_add_ex+0x162/0x440 [ 28.548459][ T3587] should_failslab+0x8c/0xb0 [ 28.548484][ T3587] __kmalloc_cache_noprof+0x4c/0x320 [ 28.548617][ T3587] __hw_addr_add_ex+0x162/0x440 [ 28.548646][ T3587] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 28.548669][ T3587] dev_addr_init+0xb1/0x120 [ 28.548783][ T3587] alloc_netdev_mqs+0x1c5/0xa20 [ 28.548860][ T3587] rtnl_create_link+0x239/0x710 [ 28.548893][ T3587] rtnl_newlink_create+0x14c/0x620 [ 28.548920][ T3587] ? security_capable+0x83/0x90 [ 28.548944][ T3587] ? netlink_ns_capable+0x86/0xa0 [ 28.548973][ T3587] rtnl_newlink+0xf29/0x12d0 [ 28.549003][ T3587] ? xas_load+0x413/0x430 [ 28.549032][ T3587] ? css_rstat_updated+0xb7/0x240 [ 28.549059][ T3587] ? __memcg_slab_free_hook+0x135/0x230 [ 28.549093][ T3587] ? __rcu_read_unlock+0x4f/0x70 [ 28.549161][ T3587] ? avc_has_perm_noaudit+0x1b1/0x200 [ 28.549185][ T3587] ? cred_has_capability+0x210/0x280 [ 28.549256][ T3587] ? selinux_capable+0x31/0x40 [ 28.549355][ T3587] ? security_capable+0x83/0x90 [ 28.549376][ T3587] ? ns_capable+0x7d/0xb0 [ 28.549433][ T3587] ? __pfx_rtnl_newlink+0x10/0x10 [ 28.549531][ T3587] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 28.549558][ T3587] netlink_rcv_skb+0x123/0x220 [ 28.549653][ T3587] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 28.549681][ T3587] rtnetlink_rcv+0x1c/0x30 [ 28.549724][ T3587] netlink_unicast+0x5bd/0x690 [ 28.549755][ T3587] netlink_sendmsg+0x58b/0x6b0 [ 28.549786][ T3587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 28.549876][ T3587] __sock_sendmsg+0x142/0x180 [ 28.549896][ T3587] ____sys_sendmsg+0x31e/0x4e0 [ 28.549928][ T3587] ___sys_sendmsg+0x17b/0x1d0 [ 28.549973][ T3587] __x64_sys_sendmsg+0xd4/0x160 [ 28.550006][ T3587] x64_sys_call+0x191e/0x2ff0 [ 28.550024][ T3587] do_syscall_64+0xd2/0x200 [ 28.550043][ T3587] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 28.550121][ T3587] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 28.550139][ T3587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.550207][ T3587] RIP: 0033:0x7f0131dbeb69 [ 28.550226][ T3587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.550241][ T3587] RSP: 002b:00007f013041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.550257][ T3587] RAX: ffffffffffffffda RBX: 00007f0131fe5fa0 RCX: 00007f0131dbeb69 [ 28.550270][ T3587] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000004 [ 28.550282][ T3587] RBP: 00007f013041f090 R08: 0000000000000000 R09: 0000000000000000 [ 28.550298][ T3587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 28.550309][ T3587] R13: 0000000000000000 R14: 00007f0131fe5fa0 R15: 00007ffe9491bc48 [ 28.550324][ T3587] [ 28.896208][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.973898][ T354] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.049435][ T354] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.081341][ T3604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.120043][ T3604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.142931][ T354] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.154165][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 29.162956][ T3604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.40'. [ 29.194544][ T3604] loop3: detected capacity change from 0 to 1024 [ 29.201547][ T3604] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 29.216805][ T3604] EXT4-fs: error: could not find journal device path [ 29.292364][ T354] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.471850][ T3617] loop4: detected capacity change from 0 to 512 [ 29.472300][ T354] bond0 (unregistering): Released all slaves [ 29.478441][ T3617] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.510151][ T3617] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.36: inode #13: comm syz.4.36: iget: illegal inode # [ 29.526932][ T3617] EXT4-fs (loop4): Remounting filesystem read-only [ 29.534676][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.553995][ T354] tipc: Disabling bearer [ 29.576060][ T354] tipc: Left network mode [ 29.584547][ T3630] loop1: detected capacity change from 0 to 128 [ 29.593549][ T3605] chnl_net:caif_netlink_parms(): no params data found [ 29.619817][ T10] tipc: Node number set to 11578026 [ 29.635695][ T354] hsr_slave_0: left promiscuous mode [ 29.641989][ T354] hsr_slave_1: left promiscuous mode [ 29.651487][ T354] veth1_macvtap: left promiscuous mode [ 29.657394][ T354] veth0_macvtap: left promiscuous mode [ 29.663795][ T354] veth1_vlan: left promiscuous mode [ 29.670570][ T354] veth0_vlan: left promiscuous mode [ 29.681649][ T3617] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 29.767060][ T3643] loop0: detected capacity change from 0 to 128 [ 29.788335][ T3630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 29.844847][ T3654] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 29.853377][ T3654] FAT-fs (loop0): Filesystem has been set read-only [ 29.954417][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.961624][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.988738][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.995102][ T3605] bridge_slave_0: entered allmulticast mode [ 30.004824][ T3605] bridge_slave_0: entered promiscuous mode [ 30.011591][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.018709][ T3605] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.026178][ T3605] bridge_slave_1: entered allmulticast mode [ 30.032870][ T3605] bridge_slave_1: entered promiscuous mode [ 30.107782][ T3605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.141968][ T3605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.253212][ T3605] team0: Port device team_slave_0 added [ 30.280823][ T3605] team0: Port device team_slave_1 added [ 30.292970][ T3701] FAULT_INJECTION: forcing a failure. [ 30.292970][ T3701] name failslab, interval 1, probability 0, space 0, times 0 [ 30.305730][ T3701] CPU: 1 UID: 0 PID: 3701 Comm: syz.0.51 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 30.305754][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.305764][ T3701] Call Trace: [ 30.305770][ T3701] [ 30.305778][ T3701] __dump_stack+0x1d/0x30 [ 30.305796][ T3701] dump_stack_lvl+0xe8/0x140 [ 30.305851][ T3701] dump_stack+0x15/0x1b [ 30.305865][ T3701] should_fail_ex+0x265/0x280 [ 30.305894][ T3701] should_failslab+0x8c/0xb0 [ 30.305951][ T3701] kmem_cache_alloc_noprof+0x50/0x310 [ 30.305992][ T3701] ? alloc_empty_file+0x76/0x200 [ 30.306098][ T3701] alloc_empty_file+0x76/0x200 [ 30.306192][ T3701] alloc_file_pseudo+0xc6/0x160 [ 30.306217][ T3701] __shmem_file_setup+0x1de/0x210 [ 30.306245][ T3701] shmem_file_setup+0x3b/0x50 [ 30.306323][ T3701] __se_sys_memfd_create+0x2c3/0x590 [ 30.306342][ T3701] __x64_sys_memfd_create+0x31/0x40 [ 30.306359][ T3701] x64_sys_call+0x2abe/0x2ff0 [ 30.306404][ T3701] do_syscall_64+0xd2/0x200 [ 30.306425][ T3701] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.306447][ T3701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 30.306542][ T3701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.306564][ T3701] RIP: 0033:0x7f53b4c5eb69 [ 30.306580][ T3701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.306598][ T3701] RSP: 002b:00007f53b32bed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 30.306618][ T3701] RAX: ffffffffffffffda RBX: 000000000000105b RCX: 00007f53b4c5eb69 [ 30.306653][ T3701] RDX: 00007f53b32bedec RSI: 0000000000000000 RDI: 00007f53b4ce2784 [ 30.306666][ T3701] RBP: 0000200000000000 R08: 00007f53b32beb07 R09: 0000000000000000 [ 30.306679][ T3701] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 30.306690][ T3701] R13: 00007f53b32bedec R14: 00007f53b32bedf0 R15: 00007ffdaeba4d58 [ 30.306707][ T3701] [ 30.505099][ T3693] loop4: detected capacity change from 0 to 8192 [ 30.530122][ T3706] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 30.555240][ T3698] loop1: detected capacity change from 0 to 128 [ 30.577329][ T3288] loop4: p1 < > p2 p4 [ 30.581484][ T3288] loop4: partition table partially beyond EOD, truncated [ 30.598789][ T3288] loop4: p1 start 8862976 is beyond EOD, truncated [ 30.605427][ T3288] loop4: p2 size 8388352 extends beyond EOD, truncated [ 30.616359][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.623403][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.649340][ T3605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.668210][ T3693] loop4: p1 < > p2 p4 [ 30.672387][ T3693] loop4: partition table partially beyond EOD, truncated [ 30.681946][ T3693] loop4: p1 start 8862976 is beyond EOD, truncated [ 30.688517][ T3693] loop4: p2 size 8388352 extends beyond EOD, truncated [ 30.707649][ T3710] loop1: detected capacity change from 0 to 1024 [ 30.714527][ T3710] EXT4-fs: Ignoring removed oldalloc option [ 30.726647][ T3605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.733720][ T3605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.759706][ T3605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.783167][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.816628][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 30.825419][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 30.834493][ T3605] hsr_slave_0: entered promiscuous mode [ 30.841382][ T3605] hsr_slave_1: entered promiscuous mode [ 30.858420][ T3717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 30.917492][ T3615] udevd[3615]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 30.937696][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 31.003720][ T3615] udevd[3615]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 31.017857][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 31.049177][ T3741] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 31.069934][ T29] kauditd_printk_skb: 485 callbacks suppressed [ 31.069959][ T29] audit: type=1326 audit(1754033917.450:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.099567][ T29] audit: type=1326 audit(1754033917.450:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.106669][ T3743] tipc: Resetting bearer [ 31.175481][ T29] audit: type=1326 audit(1754033917.510:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.198778][ T29] audit: type=1326 audit(1754033917.510:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.202458][ T3740] loop3: detected capacity change from 0 to 512 [ 31.221904][ T29] audit: type=1326 audit(1754033917.510:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.221928][ T29] audit: type=1326 audit(1754033917.510:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.274765][ T29] audit: type=1326 audit(1754033917.510:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.276720][ T3740] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.57: Invalid inode bitmap blk 4 in block_group 0 [ 31.298447][ T29] audit: type=1326 audit(1754033917.510:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.313703][ T3740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.334231][ T29] audit: type=1326 audit(1754033917.510:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.369784][ T29] audit: type=1326 audit(1754033917.510:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3739 comm="syz.4.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0131dbeb69 code=0x7ffc0000 [ 31.403710][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.406168][ T3605] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 31.470122][ T3605] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 31.481459][ T3740] tipc: Enabling of bearer rejected, already enabled [ 31.490894][ T3605] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 31.512357][ T3605] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 31.521861][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.699259][ T3605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.712249][ T3605] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.726718][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.733833][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.751433][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.758581][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.792552][ T3797] loop0: detected capacity change from 0 to 128 [ 31.807489][ T3797] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.823830][ T3605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.835299][ T3797] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.899064][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.930027][ T3811] loop4: detected capacity change from 0 to 1024 [ 31.943591][ T3605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.975329][ T3811] EXT4-fs: Ignoring removed oldalloc option [ 31.981396][ T3811] EXT4-fs: Ignoring removed bh option [ 32.007856][ T3811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.056531][ T3820] loop0: detected capacity change from 0 to 8192 [ 32.125756][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.135233][ T3840] bridge_slave_0: left allmulticast mode [ 32.141048][ T3840] bridge_slave_0: left promiscuous mode [ 32.146815][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.215280][ T3848] loop1: detected capacity change from 0 to 512 [ 32.217446][ T3858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.221952][ T3840] bridge_slave_1: left allmulticast mode [ 32.230871][ T3858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.235809][ T3840] bridge_slave_1: left promiscuous mode [ 32.249108][ T3840] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.249497][ T3858] loop4: detected capacity change from 0 to 512 [ 32.267900][ T3848] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.71: Invalid inode bitmap blk 4 in block_group 0 [ 32.287291][ T3858] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.293769][ T3858] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 32.302441][ T3840] bond0: (slave bond_slave_0): Releasing backup interface [ 32.302545][ T3858] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.324435][ T3858] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.74: attempt to clear invalid blocks 2 len 1 [ 32.328829][ T3848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.339152][ T3858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.74: invalid indirect mapped block 1819239214 (level 0) [ 32.364121][ T3840] bond0: (slave bond_slave_1): Releasing backup interface [ 32.365496][ T3858] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.74: invalid indirect mapped block 1819239214 (level 1) [ 32.385580][ T3858] EXT4-fs (loop4): 1 truncate cleaned up [ 32.391678][ T3858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.392936][ T3840] team0: Port device team_slave_0 removed [ 32.412978][ T3840] team0: Port device team_slave_1 removed [ 32.419782][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.427204][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.435820][ T3840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.443388][ T3840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.468876][ T3865] netlink: 'syz.4.74': attribute type 10 has an invalid length. [ 32.476630][ T3865] netlink: 40 bytes leftover after parsing attributes in process `syz.4.74'. [ 32.524960][ T3605] veth0_vlan: entered promiscuous mode [ 32.535012][ T3872] SELinux: policydb version 280 does not match my version range 15-35 [ 32.535098][ T3863] tipc: Started in network mode [ 32.544585][ T3872] SELinux: failed to load policy [ 32.548688][ T3863] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 32.561293][ T3863] tipc: Enabled bearer , priority 0 [ 32.572591][ T3605] veth1_vlan: entered promiscuous mode [ 32.584755][ T3865] team0: Port device geneve1 added [ 32.601467][ T3876] FAULT_INJECTION: forcing a failure. [ 32.601467][ T3876] name failslab, interval 1, probability 0, space 0, times 0 [ 32.603806][ T3872] netlink: 16 bytes leftover after parsing attributes in process `syz.0.76'. [ 32.614321][ T3876] CPU: 0 UID: 0 PID: 3876 Comm: syz.3.77 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 32.614351][ T3876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.614364][ T3876] Call Trace: [ 32.614371][ T3876] [ 32.614379][ T3876] __dump_stack+0x1d/0x30 [ 32.614401][ T3876] dump_stack_lvl+0xe8/0x140 [ 32.614438][ T3876] dump_stack+0x15/0x1b [ 32.614510][ T3876] should_fail_ex+0x265/0x280 [ 32.614571][ T3876] should_failslab+0x8c/0xb0 [ 32.614662][ T3876] kmem_cache_alloc_noprof+0x50/0x310 [ 32.614688][ T3876] ? getname_flags+0x80/0x3b0 [ 32.614850][ T3876] getname_flags+0x80/0x3b0 [ 32.614914][ T3876] user_path_at+0x28/0x130 [ 32.614944][ T3876] do_fchownat+0xb0/0x210 [ 32.614982][ T3876] __x64_sys_lchown+0x4a/0x60 [ 32.615009][ T3876] x64_sys_call+0x2861/0x2ff0 [ 32.615080][ T3876] do_syscall_64+0xd2/0x200 [ 32.615103][ T3876] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.615125][ T3876] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.615218][ T3876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.615238][ T3876] RIP: 0033:0x7eff2e47eb69 [ 32.615254][ T3876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.615301][ T3876] RSP: 002b:00007eff2cadf038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 32.615320][ T3876] RAX: ffffffffffffffda RBX: 00007eff2e6a5fa0 RCX: 00007eff2e47eb69 [ 32.615332][ T3876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000980 [ 32.615344][ T3876] RBP: 00007eff2cadf090 R08: 0000000000000000 R09: 0000000000000000 [ 32.615356][ T3876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.615369][ T3876] R13: 0000000000000000 R14: 00007eff2e6a5fa0 R15: 00007ffe24c87bf8 [ 32.615386][ T3876] [ 32.679011][ T3878] loop3: detected capacity change from 0 to 8192 [ 32.696824][ T3605] veth0_macvtap: entered promiscuous mode [ 32.818430][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.820342][ T3605] veth1_macvtap: entered promiscuous mode [ 32.842517][ T3878] loop3: p1 < > p2 p4 [ 32.846635][ T3878] loop3: partition table partially beyond EOD, truncated [ 32.856065][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.870011][ T3878] loop3: p1 start 408832 is beyond EOD, truncated [ 32.876599][ T3878] loop3: p2 size 8388352 extends beyond EOD, truncated [ 32.894796][ T3884] capability: warning: `syz.3.78' uses 32-bit capabilities (legacy support in use) [ 32.895211][ T3605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.969923][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.978736][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006556][ T559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035096][ T559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.096012][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 33.107291][ T3616] udevd[3616]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 33.145965][ T3907] loop1: detected capacity change from 0 to 256 [ 33.171871][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.210906][ T3907] FAT-fs (loop1): IO charset cp863 not found [ 33.230199][ T3916] SELinux: Context Ü is not valid (left unmapped). [ 33.275759][ T3907] loop1: detected capacity change from 0 to 128 [ 33.287573][ T3912] bridge_slave_0: left allmulticast mode [ 33.293314][ T3912] bridge_slave_0: left promiscuous mode [ 33.299035][ T3912] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.336520][ T3907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.368522][ T3907] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.501464][ T3927] loop5: detected capacity change from 0 to 512 [ 33.518851][ T3912] bridge_slave_1: left allmulticast mode [ 33.524670][ T3912] bridge_slave_1: left promiscuous mode [ 33.530689][ T3912] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.988437][ T3929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.84'. [ 34.002515][ T2954] tipc: Node number set to 11578026 [ 34.026099][ T3931] loop4: detected capacity change from 0 to 256 [ 34.042773][ T3912] bond0: (slave bond_slave_0): Releasing backup interface [ 34.062214][ T3931] FAT-fs (loop4): Directory bread(block 64) failed [ 34.080645][ T3931] FAT-fs (loop4): Directory bread(block 65) failed [ 34.089486][ T3927] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.38: Invalid inode bitmap blk 4 in block_group 0 [ 34.136368][ T3931] FAT-fs (loop4): Directory bread(block 66) failed [ 34.212368][ T3931] FAT-fs (loop4): Directory bread(block 67) failed [ 34.218933][ T3931] FAT-fs (loop4): Directory bread(block 68) failed [ 34.232557][ T3912] bond0: (slave bond_slave_1): Releasing backup interface [ 34.246112][ T3927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.265146][ T3931] FAT-fs (loop4): Directory bread(block 69) failed [ 34.276892][ T3931] FAT-fs (loop4): Directory bread(block 70) failed [ 34.290079][ T3931] FAT-fs (loop4): Directory bread(block 71) failed [ 34.298206][ T3912] team0: Port device team_slave_0 removed [ 34.305161][ T3931] FAT-fs (loop4): Directory bread(block 72) failed [ 34.315606][ T3931] FAT-fs (loop4): Directory bread(block 73) failed [ 34.331031][ T3912] team0: Port device team_slave_1 removed [ 34.338618][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.346034][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.357057][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.364711][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.400091][ T3898] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 34.409549][ T3898] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 34.474922][ T3931] veth0_vlan: left promiscuous mode [ 34.508162][ T3927] netlink: 28 bytes leftover after parsing attributes in process `syz.5.38'. [ 34.522003][ T3931] vlan0: entered promiscuous mode [ 34.527164][ T3931] veth0_vlan: entered promiscuous mode [ 34.587984][ T3931] team0: Port device vlan0 added [ 34.610929][ T3912] tipc: Started in network mode [ 34.615882][ T3912] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 34.623062][ T3912] tipc: Enabled bearer , priority 0 [ 34.650854][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.695261][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.730486][ T3952] can0: slcan on ttyS3. [ 34.739530][ T3946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 34.771816][ T3956] SELinux: policydb magic number 0x818 does not match expected magic number 0xf97cff8c [ 34.792372][ T3956] SELinux: failed to load policy [ 34.801242][ T3952] can0 (unregistered): slcan off ttyS3. [ 34.805679][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.823253][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.832906][ T3960] can0: slcan on ttyS3. [ 34.838678][ T3962] loop3: detected capacity change from 0 to 512 [ 34.855376][ T3962] EXT4-fs (loop3): orphan cleanup on readonly fs [ 34.861837][ T3962] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 34.875492][ T3962] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 34.891575][ T3962] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.95: attempt to clear invalid blocks 2 len 1 [ 34.900955][ T3951] can0 (unregistered): slcan off ttyS3. [ 34.912125][ T3962] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.95: invalid indirect mapped block 1819239214 (level 0) [ 34.929779][ T3962] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.95: invalid indirect mapped block 1819239214 (level 1) [ 34.960024][ T3973] FAULT_INJECTION: forcing a failure. [ 34.960024][ T3973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.960261][ T3962] EXT4-fs (loop3): 1 truncate cleaned up [ 34.973297][ T3973] CPU: 1 UID: 0 PID: 3973 Comm: syz.4.96 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 34.973378][ T3973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.973388][ T3973] Call Trace: [ 34.973394][ T3973] [ 34.973401][ T3973] __dump_stack+0x1d/0x30 [ 34.973433][ T3973] dump_stack_lvl+0xe8/0x140 [ 34.973452][ T3973] dump_stack+0x15/0x1b [ 34.973530][ T3973] should_fail_ex+0x265/0x280 [ 34.973637][ T3973] should_fail+0xb/0x20 [ 34.973664][ T3973] should_fail_usercopy+0x1a/0x20 [ 34.973682][ T3973] _copy_from_iter+0xcf/0xe40 [ 34.973750][ T3973] ? __build_skb_around+0x1a0/0x200 [ 34.973830][ T3973] ? __alloc_skb+0x223/0x320 [ 34.973858][ T3973] netlink_sendmsg+0x471/0x6b0 [ 34.973967][ T3973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.974046][ T3973] __sock_sendmsg+0x142/0x180 [ 34.974069][ T3973] ____sys_sendmsg+0x31e/0x4e0 [ 34.974109][ T3973] ___sys_sendmsg+0x17b/0x1d0 [ 34.974162][ T3973] __x64_sys_sendmsg+0xd4/0x160 [ 34.974195][ T3973] x64_sys_call+0x191e/0x2ff0 [ 34.974216][ T3973] do_syscall_64+0xd2/0x200 [ 34.974239][ T3973] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.974297][ T3973] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.974317][ T3973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.974335][ T3973] RIP: 0033:0x7f0131dbeb69 [ 34.974348][ T3973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.974363][ T3973] RSP: 002b:00007f013041f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.974390][ T3973] RAX: ffffffffffffffda RBX: 00007f0131fe5fa0 RCX: 00007f0131dbeb69 [ 34.974466][ T3973] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 34.974478][ T3973] RBP: 00007f013041f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.974491][ T3973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.974502][ T3973] R13: 0000000000000000 R14: 00007f0131fe5fa0 R15: 00007ffe9491bc48 [ 34.974520][ T3973] [ 35.182432][ T3996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 35.193830][ T3962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.211525][ T3996] hsr_slave_1 (unregistering): left promiscuous mode [ 35.231762][ T3962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.279067][ T4005] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 35.286788][ T4005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 35.333655][ T3962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.364119][ T4005] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 35.385119][ T4005] team0: Failed to send options change via netlink (err -105) [ 35.392709][ T4005] team0: Port device geneve1 added [ 35.423401][ T3962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.456899][ T4013] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 35.503220][ T3962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.552400][ T4027] capability: warning: `syz.5.103' uses deprecated v2 capabilities in a way that may be insecure [ 35.557188][ T4026] tipc: Resetting bearer [ 35.598310][ T354] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.615600][ T354] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.626506][ T354] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.626950][ T4026] loop0: detected capacity change from 0 to 512 [ 35.639999][ T354] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.654595][ T4026] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.104: Invalid inode bitmap blk 4 in block_group 0 [ 35.668077][ T4026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.687748][ T4026] tipc: Enabling of bearer rejected, already enabled [ 35.709079][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.739817][ T3408] tipc: Node number set to 11578026 [ 35.814830][ T4038] loop4: detected capacity change from 0 to 1024 [ 35.858276][ T4044] FAULT_INJECTION: forcing a failure. [ 35.858276][ T4044] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 35.871549][ T4044] CPU: 1 UID: 0 PID: 4044 Comm: syz.4.109 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 35.871592][ T4044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.871604][ T4044] Call Trace: [ 35.871612][ T4044] [ 35.871620][ T4044] __dump_stack+0x1d/0x30 [ 35.871641][ T4044] dump_stack_lvl+0xe8/0x140 [ 35.871658][ T4044] dump_stack+0x15/0x1b [ 35.871739][ T4044] should_fail_ex+0x265/0x280 [ 35.871850][ T4044] should_fail_alloc_page+0xf2/0x100 [ 35.871877][ T4044] __alloc_frozen_pages_noprof+0xff/0x360 [ 35.871912][ T4044] alloc_pages_mpol+0xb3/0x250 [ 35.872064][ T4044] vma_alloc_folio_noprof+0x1aa/0x300 [ 35.872095][ T4044] do_wp_page+0x5db/0x24e0 [ 35.872115][ T4044] ? css_rstat_updated+0xb7/0x240 [ 35.872156][ T4044] ? __rcu_read_lock+0x37/0x50 [ 35.872181][ T4044] handle_mm_fault+0x77d/0x2c20 [ 35.872291][ T4044] do_user_addr_fault+0x636/0x1090 [ 35.872326][ T4044] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 35.872351][ T4044] exc_page_fault+0x62/0xa0 [ 35.872363][ T4044] asm_exc_page_fault+0x26/0x30 [ 35.872435][ T4044] RIP: 0033:0x7f0131c80d90 [ 35.872446][ T4044] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 35.872456][ T4044] RSP: 002b:00007f013041e4a0 EFLAGS: 00010202 [ 35.872466][ T4044] RAX: 000000000000a005 RBX: 00007f013041e540 RCX: 0000000000000101 [ 35.872473][ T4044] RDX: 00000000000000ff RSI: 0000000000000400 RDI: 00007f013041e5e0 [ 35.872480][ T4044] RBP: 0000000000000102 R08: 00007f0127fff000 R09: 0000000000000004 [ 35.872487][ T4044] R10: 0000200000001082 R11: 0000000000000551 R12: 0000000000000301 [ 35.872570][ T4044] R13: 00007f0131e5d940 R14: 0000000000000013 R15: 00007f013041e5e0 [ 35.872589][ T4044] [ 35.872612][ T4044] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 36.064690][ T4044] loop4: detected capacity change from 0 to 1024 [ 36.081288][ T4044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.100772][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.163073][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.183110][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 36.183162][ T29] audit: type=1326 audit(1754033922.560:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fafaeb69 code=0x7ffc0000 [ 36.212751][ T29] audit: type=1326 audit(1754033922.560:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fafaeb69 code=0x7ffc0000 [ 36.236079][ T29] audit: type=1326 audit(1754033922.560:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4051 comm="syz.1.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fafaeb69 code=0x7ffc0000 [ 36.259850][ T29] audit: type=1326 audit(1754033922.570:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.283300][ T29] audit: type=1326 audit(1754033922.570:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.306630][ T29] audit: type=1326 audit(1754033922.570:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.329845][ T29] audit: type=1326 audit(1754033922.570:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.353127][ T29] audit: type=1326 audit(1754033922.570:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.376425][ T29] audit: type=1326 audit(1754033922.570:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.399755][ T29] audit: type=1326 audit(1754033922.570:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4053 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 36.451239][ T4065] program ,&#^% is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.535065][ T4063] tipc: Resetting bearer [ 36.544271][ T4078] netlink: 'syz.5.121': attribute type 1 has an invalid length. [ 36.568831][ T4083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.583423][ T4084] loop1: detected capacity change from 0 to 512 [ 36.593955][ T4083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.606556][ T4084] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.116: Invalid inode bitmap blk 4 in block_group 0 [ 36.621735][ T4084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.646894][ T4083] loop0: detected capacity change from 0 to 512 [ 36.653781][ T4063] tipc: Enabling of bearer rejected, already enabled [ 36.695418][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.718184][ T4083] EXT4-fs (loop0): orphan cleanup on readonly fs [ 36.724660][ T4083] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 36.738573][ T4091] loop5: detected capacity change from 0 to 512 [ 36.749948][ T4083] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 36.759614][ T4091] ext2: Unknown parameter 'nouser_xattr' [ 36.767174][ T4093] loop1: detected capacity change from 0 to 512 [ 36.793144][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.806497][ T4083] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.122: attempt to clear invalid blocks 2 len 1 [ 36.828082][ T4083] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 0) [ 36.846522][ T4083] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.122: invalid indirect mapped block 1819239214 (level 1) [ 36.869099][ T4083] EXT4-fs (loop0): 1 truncate cleaned up [ 36.876080][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.900772][ T4083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.948139][ T4105] netlink: 'syz.0.122': attribute type 10 has an invalid length. [ 36.956019][ T4105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.122'. [ 36.957697][ T4078] netlink: 'syz.5.121': attribute type 1 has an invalid length. [ 36.979387][ T4078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.995593][ T4105] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 37.004570][ T4105] team0: Failed to send options change via netlink (err -105) [ 37.010488][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.012308][ T4105] team0: Port device geneve1 added [ 37.036814][ T4083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.083901][ T4114] loop4: detected capacity change from 0 to 512 [ 37.095443][ T4114] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 37.119337][ T4083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.130457][ T4116] FAULT_INJECTION: forcing a failure. [ 37.130457][ T4116] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 37.143746][ T4116] CPU: 1 UID: 0 PID: 4116 Comm: syz.1.130 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 37.143796][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 37.143808][ T4116] Call Trace: [ 37.143816][ T4116] [ 37.143825][ T4116] __dump_stack+0x1d/0x30 [ 37.143847][ T4116] dump_stack_lvl+0xe8/0x140 [ 37.143864][ T4116] dump_stack+0x15/0x1b [ 37.143900][ T4116] should_fail_ex+0x265/0x280 [ 37.143932][ T4116] should_fail_alloc_page+0xf2/0x100 [ 37.143954][ T4116] __alloc_frozen_pages_noprof+0xff/0x360 [ 37.144005][ T4116] alloc_pages_mpol+0xb3/0x250 [ 37.144035][ T4116] alloc_pages_noprof+0x90/0x130 [ 37.144081][ T4116] __pmd_alloc+0x47/0x470 [ 37.144104][ T4116] handle_mm_fault+0x19d4/0x2c20 [ 37.144125][ T4116] ? __rcu_read_unlock+0x4f/0x70 [ 37.144216][ T4116] do_user_addr_fault+0x3fe/0x1090 [ 37.144250][ T4116] exc_page_fault+0x62/0xa0 [ 37.144272][ T4116] asm_exc_page_fault+0x26/0x30 [ 37.144355][ T4116] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 37.144445][ T4116] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f6 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 37.144463][ T4116] RSP: 0018:ffffc9000160fe08 EFLAGS: 00050202 [ 37.144477][ T4116] RAX: ffff888109d4dd20 RBX: 0000000000000080 RCX: 0000000000000080 [ 37.144496][ T4116] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000160fe30 [ 37.144534][ T4116] RBP: 0000000000000080 R08: 00000000000004f6 R09: 0000000000000000 [ 37.144544][ T4116] R10: 0001c9000160fe30 R11: 0001c9000160feaf R12: 0000000000000000 [ 37.144556][ T4116] R13: 0000000000000000 R14: ffffc9000160fe30 R15: 0000200000000300 [ 37.144575][ T4116] _copy_from_user+0x6f/0xb0 [ 37.144601][ T4116] __sys_connect+0xd0/0x2b0 [ 37.144693][ T4116] __x64_sys_connect+0x3f/0x50 [ 37.144715][ T4116] x64_sys_call+0x2c08/0x2ff0 [ 37.144734][ T4116] do_syscall_64+0xd2/0x200 [ 37.144754][ T4116] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.144830][ T4116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 37.144851][ T4116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.144872][ T4116] RIP: 0033:0x7f99fafaeb69 [ 37.144885][ T4116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.144900][ T4116] RSP: 002b:00007f99f960f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 37.144917][ T4116] RAX: ffffffffffffffda RBX: 00007f99fb1d5fa0 RCX: 00007f99fafaeb69 [ 37.145042][ T4116] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 37.145055][ T4116] RBP: 00007f99f960f090 R08: 0000000000000000 R09: 0000000000000000 [ 37.145068][ T4116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.145081][ T4116] R13: 0000000000000000 R14: 00007f99fb1d5fa0 R15: 00007ffcb4db5888 [ 37.145141][ T4116] [ 37.463211][ T4083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.470275][ T4120] loop5: detected capacity change from 0 to 256 [ 37.487000][ T4120] vfat: Unknown parameter '' [ 37.494548][ T4120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=4120 comm=+}[@ [ 37.547287][ T559] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.559156][ T559] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.569524][ T559] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 37.605481][ T559] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.614088][ T4129] netlink: 96 bytes leftover after parsing attributes in process `syz.5.133'. [ 37.632248][ T4131] tipc: Resetting bearer [ 37.653787][ T4138] loop4: detected capacity change from 0 to 512 [ 37.667936][ T4140] loop3: detected capacity change from 0 to 1024 [ 37.681367][ T4138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.686271][ T4140] EXT4-fs: Ignoring removed oldalloc option [ 37.701816][ T4141] loop1: detected capacity change from 0 to 512 [ 37.715417][ T4141] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.134: Invalid inode bitmap blk 4 in block_group 0 [ 37.734822][ T175] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.736216][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.759321][ T4140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.795054][ T4131] tipc: Enabling of bearer rejected, already enabled [ 37.818396][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.897889][ T4155] netlink: 16 bytes leftover after parsing attributes in process `syz.5.141'. [ 37.916788][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.141'. [ 37.925715][ T4155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.141'. [ 37.952892][ T4159] loop1: detected capacity change from 0 to 1024 [ 37.961066][ T4159] EXT4-fs: Ignoring removed oldalloc option [ 37.967020][ T4159] EXT4-fs: Ignoring removed bh option [ 37.981016][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.996234][ T4159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.108534][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.270205][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.311972][ T4186] nfs: Unknown parameter '' [ 38.320065][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 38.366010][ T4188] team0: Port device geneve1 removed [ 38.376211][ T175] tipc: Resetting bearer [ 38.393939][ T4188] loop0: detected capacity change from 0 to 512 [ 38.422002][ T4193] loop4: detected capacity change from 0 to 512 [ 38.443717][ T4193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.459415][ T4195] FAULT_INJECTION: forcing a failure. [ 38.459415][ T4195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.472725][ T4195] CPU: 1 UID: 0 PID: 4195 Comm: syz.5.153 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 38.472743][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.472749][ T4195] Call Trace: [ 38.472754][ T4195] [ 38.472759][ T4195] __dump_stack+0x1d/0x30 [ 38.472824][ T4195] dump_stack_lvl+0xe8/0x140 [ 38.472908][ T4195] dump_stack+0x15/0x1b [ 38.472917][ T4195] should_fail_ex+0x265/0x280 [ 38.472967][ T4195] should_fail_alloc_page+0xf2/0x100 [ 38.473019][ T4195] __alloc_frozen_pages_noprof+0xff/0x360 [ 38.473099][ T4195] alloc_pages_mpol+0xb3/0x250 [ 38.473117][ T4195] vma_alloc_folio_noprof+0x1aa/0x300 [ 38.473136][ T4195] do_wp_page+0x5db/0x24e0 [ 38.473149][ T4195] ? css_rstat_updated+0xb7/0x240 [ 38.473257][ T4195] ? __rcu_read_lock+0x37/0x50 [ 38.473280][ T4195] handle_mm_fault+0x77d/0x2c20 [ 38.473293][ T4195] ? __rcu_read_unlock+0x4f/0x70 [ 38.473310][ T4195] do_user_addr_fault+0x3fe/0x1090 [ 38.473330][ T4195] ? xas_load+0x413/0x430 [ 38.473411][ T4195] exc_page_fault+0x62/0xa0 [ 38.473423][ T4195] asm_exc_page_fault+0x26/0x30 [ 38.473434][ T4195] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 38.473451][ T4195] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f6 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 38.473461][ T4195] RSP: 0018:ffffc90003a07890 EFLAGS: 00050206 [ 38.473531][ T4195] RAX: ffff888109d49b20 RBX: ffff888109e40000 RCX: 0000000000004480 [ 38.473539][ T4195] RDX: 0000000000000000 RSI: ffff888109e43b80 RDI: 0000200000006000 [ 38.473546][ T4195] RBP: 0000200000002480 R08: 0000000000000eaf R09: 0000000000000000 [ 38.473553][ T4195] R10: 0001888109e40000 R11: 0001888109e47fff R12: 000020000000a480 [ 38.473560][ T4195] R13: ffffc90003a07e80 R14: 0000000000008000 R15: 00007ffffffff000 [ 38.473571][ T4195] _copy_to_iter+0x13e/0xe30 [ 38.473584][ T4195] ? xas_load+0x413/0x430 [ 38.473596][ T4195] ? __rcu_read_unlock+0x4f/0x70 [ 38.473654][ T4195] ? xa_load+0xb1/0xe0 [ 38.473667][ T4195] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 38.473678][ T4195] __skb_datagram_iter+0x2f4/0x690 [ 38.473766][ T4195] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 38.473778][ T4195] skb_copy_datagram_iter+0x3d/0x110 [ 38.473797][ T4195] unix_stream_read_actor+0x43/0x70 [ 38.473907][ T4195] unix_stream_read_generic+0x6b1/0x1580 [ 38.473931][ T4195] unix_stream_recvmsg+0xc3/0xf0 [ 38.473987][ T4195] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 38.474004][ T4195] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 38.474067][ T4195] sock_recvmsg+0x136/0x170 [ 38.474081][ T4195] ____sys_recvmsg+0xf5/0x280 [ 38.474096][ T4195] ___sys_recvmsg+0x11f/0x370 [ 38.474112][ T4195] __x64_sys_recvmsg+0xd1/0x160 [ 38.474144][ T4195] x64_sys_call+0x2b42/0x2ff0 [ 38.474158][ T4195] do_syscall_64+0xd2/0x200 [ 38.474171][ T4195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.474184][ T4195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.474237][ T4195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.474249][ T4195] RIP: 0033:0x7ffbd3f0eb69 [ 38.474258][ T4195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.474268][ T4195] RSP: 002b:00007ffbd2556038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 38.474278][ T4195] RAX: ffffffffffffffda RBX: 00007ffbd4136080 RCX: 00007ffbd3f0eb69 [ 38.474285][ T4195] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 38.474364][ T4195] RBP: 00007ffbd2556090 R08: 0000000000000000 R09: 0000000000000000 [ 38.474371][ T4195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.474378][ T4195] R13: 0000000000000001 R14: 00007ffbd4136080 R15: 00007ffe896183e8 [ 38.474389][ T4195] [ 38.534767][ T4159] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.142: Allocating blocks 1-17 which overlap fs metadata [ 38.657786][ T4188] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.151: Invalid inode bitmap blk 4 in block_group 0 [ 38.681653][ T4168] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.142: Allocating blocks 1-17 which overlap fs metadata [ 38.889015][ T4188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.900951][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.903609][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.928153][ T4188] tipc: Enabling of bearer rejected, already enabled [ 38.965733][ T4209] FAULT_INJECTION: forcing a failure. [ 38.965733][ T4209] name failslab, interval 1, probability 0, space 0, times 0 [ 38.978523][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.4.157 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 38.978616][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.978705][ T4209] Call Trace: [ 38.978713][ T4209] [ 38.978720][ T4209] __dump_stack+0x1d/0x30 [ 38.978740][ T4209] dump_stack_lvl+0xe8/0x140 [ 38.978756][ T4209] dump_stack+0x15/0x1b [ 38.978796][ T4209] should_fail_ex+0x265/0x280 [ 38.978857][ T4209] should_failslab+0x8c/0xb0 [ 38.978879][ T4209] kmem_cache_alloc_node_noprof+0x57/0x320 [ 38.978903][ T4209] ? alloc_vmap_area+0x231/0xe50 [ 38.978929][ T4209] alloc_vmap_area+0x231/0xe50 [ 38.978990][ T4209] ? should_failslab+0x8c/0xb0 [ 38.979009][ T4209] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 38.979137][ T4209] __get_vm_area_node+0x173/0x1d0 [ 38.979166][ T4209] __vmalloc_node_range_noprof+0x273/0xe00 [ 38.979276][ T4209] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 38.979303][ T4209] ? avc_has_perm_noaudit+0x1b1/0x200 [ 38.979327][ T4209] ? cred_has_capability+0x210/0x280 [ 38.979358][ T4209] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 38.979401][ T4209] __vmalloc_noprof+0x83/0xc0 [ 38.979469][ T4209] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 38.979495][ T4209] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 38.979529][ T4209] ? bpf_prog_alloc+0x2a/0x150 [ 38.979552][ T4209] bpf_prog_alloc+0x3c/0x150 [ 38.979576][ T4209] bpf_prog_load+0x514/0x1070 [ 38.979608][ T4209] ? security_bpf+0x2b/0x90 [ 38.979687][ T4209] __sys_bpf+0x462/0x7b0 [ 38.979783][ T4209] __x64_sys_bpf+0x41/0x50 [ 38.979804][ T4209] x64_sys_call+0x2aea/0x2ff0 [ 38.979824][ T4209] do_syscall_64+0xd2/0x200 [ 38.979848][ T4209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.979891][ T4209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.979910][ T4209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.979928][ T4209] RIP: 0033:0x7f0131dbeb69 [ 38.979977][ T4209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.980054][ T4209] RSP: 002b:00007f013041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 38.980074][ T4209] RAX: ffffffffffffffda RBX: 00007f0131fe5fa0 RCX: 00007f0131dbeb69 [ 38.980085][ T4209] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 38.980095][ T4209] RBP: 00007f013041f090 R08: 0000000000000000 R09: 0000000000000000 [ 38.980105][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.980117][ T4209] R13: 0000000000000000 R14: 00007f0131fe5fa0 R15: 00007ffe9491bc48 [ 38.980133][ T4209] [ 39.234061][ T4209] syz.4.157: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 39.237126][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.250136][ T4209] CPU: 0 UID: 0 PID: 4209 Comm: syz.4.157 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 39.250162][ T4209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.250172][ T4209] Call Trace: [ 39.250179][ T4209] [ 39.250187][ T4209] __dump_stack+0x1d/0x30 [ 39.250228][ T4209] dump_stack_lvl+0xe8/0x140 [ 39.250248][ T4209] dump_stack+0x15/0x1b [ 39.250265][ T4209] warn_alloc+0x12b/0x1a0 [ 39.250349][ T4209] __vmalloc_node_range_noprof+0x297/0xe00 [ 39.250383][ T4209] ? avc_has_perm_noaudit+0x1b1/0x200 [ 39.250408][ T4209] ? cred_has_capability+0x210/0x280 [ 39.250488][ T4209] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 39.250514][ T4209] __vmalloc_noprof+0x83/0xc0 [ 39.250588][ T4209] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 39.250614][ T4209] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 39.250666][ T4209] ? bpf_prog_alloc+0x2a/0x150 [ 39.250691][ T4209] bpf_prog_alloc+0x3c/0x150 [ 39.250715][ T4209] bpf_prog_load+0x514/0x1070 [ 39.250822][ T4209] ? security_bpf+0x2b/0x90 [ 39.250928][ T4209] __sys_bpf+0x462/0x7b0 [ 39.250958][ T4209] __x64_sys_bpf+0x41/0x50 [ 39.250981][ T4209] x64_sys_call+0x2aea/0x2ff0 [ 39.251013][ T4209] do_syscall_64+0xd2/0x200 [ 39.251069][ T4209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.251093][ T4209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.251115][ T4209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.251135][ T4209] RIP: 0033:0x7f0131dbeb69 [ 39.251152][ T4209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.251185][ T4209] RSP: 002b:00007f013041f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.251204][ T4209] RAX: ffffffffffffffda RBX: 00007f0131fe5fa0 RCX: 00007f0131dbeb69 [ 39.251216][ T4209] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 39.251290][ T4209] RBP: 00007f013041f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.251302][ T4209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.251313][ T4209] R13: 0000000000000000 R14: 00007f0131fe5fa0 R15: 00007ffe9491bc48 [ 39.251331][ T4209] [ 39.251352][ T4209] Mem-Info: [ 39.476468][ T4209] active_anon:7781 inactive_anon:0 isolated_anon:0 [ 39.476468][ T4209] active_file:6165 inactive_file:2195 isolated_file:0 [ 39.476468][ T4209] unevictable:0 dirty:1736 writeback:0 [ 39.476468][ T4209] slab_reclaimable:3243 slab_unreclaimable:13796 [ 39.476468][ T4209] mapped:29346 shmem:265 pagetables:1277 [ 39.476468][ T4209] sec_pagetables:0 bounce:0 [ 39.476468][ T4209] kernel_misc_reclaimable:0 [ 39.476468][ T4209] free:1903410 free_pcp:9732 free_cma:0 [ 39.521355][ T4209] Node 0 active_anon:31124kB inactive_anon:0kB active_file:24660kB inactive_file:8780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117384kB dirty:6944kB writeback:0kB shmem:1060kB kernel_stack:3408kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 39.548602][ T4209] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 39.577198][ T4209] lowmem_reserve[]: 0 2883 7862 7862 [ 39.582661][ T4209] Node 0 DMA32 free:2949376kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952908kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 39.613808][ T4209] lowmem_reserve[]: 0 0 4978 4978 [ 39.618848][ T4209] Node 0 Normal free:4650256kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31164kB inactive_anon:0kB active_file:24660kB inactive_file:8780kB unevictable:0kB writepending:6896kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:33920kB local_pcp:19188kB free_cma:0kB [ 39.651184][ T4209] lowmem_reserve[]: 0 0 0 0 [ 39.655711][ T4209] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 39.668736][ T4209] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 5*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949376kB [ 39.684840][ T4209] Node 0 Normal: 174*4kB (UME) 195*8kB (UM) 111*16kB (UME) 55*32kB (UM) 60*64kB (UME) 62*128kB (UME) 38*256kB (UME) 25*512kB (UME) 24*1024kB (UE) 7*2048kB (U) 1116*4096kB (UM) = 4650144kB [ 39.703738][ T4209] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 39.713087][ T4209] 8615 total pagecache pages [ 39.717651][ T4209] 0 pages in swap cache [ 39.721830][ T4209] Free swap = 124996kB [ 39.725969][ T4209] Total swap = 124996kB [ 39.730267][ T4209] 2097051 pages RAM [ 39.734279][ T4209] 0 pages HighMem/MovableOnly [ 39.738931][ T4209] 80424 pages reserved [ 39.778591][ T4222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.801926][ T4222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.827083][ T4227] loop0: detected capacity change from 0 to 512 [ 39.837060][ T4222] loop5: detected capacity change from 0 to 512 [ 39.842730][ T4228] loop3: detected capacity change from 0 to 1024 [ 39.852011][ T4222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 39.858360][ T4222] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 39.868786][ T4227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.872853][ T4228] EXT4-fs: Ignoring removed oldalloc option [ 39.887051][ T4228] EXT4-fs: Ignoring removed bh option [ 39.893933][ T4222] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 39.934227][ T4222] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.162: attempt to clear invalid blocks 2 len 1 [ 39.957326][ T4222] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.162: invalid indirect mapped block 1819239214 (level 0) [ 39.980426][ T4222] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.162: invalid indirect mapped block 1819239214 (level 1) [ 39.995016][ T4222] EXT4-fs (loop5): 1 truncate cleaned up [ 40.002242][ T4222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.003852][ T4228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.041048][ T4222] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.090946][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.102351][ T4243] netlink: 'syz.5.162': attribute type 10 has an invalid length. [ 40.110265][ T4243] netlink: 40 bytes leftover after parsing attributes in process `syz.5.162'. [ 40.123433][ T4222] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.151526][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.156580][ T4246] tipc: Resetting bearer [ 40.169033][ T4251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.168'. [ 40.183507][ T4253] loop1: detected capacity change from 0 to 512 [ 40.195716][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 40.211643][ T4243] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 40.216869][ T4253] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.169: Invalid inode bitmap blk 4 in block_group 0 [ 40.225393][ T4243] team0: Failed to send options change via netlink (err -105) [ 40.240574][ T4243] team0: Port device geneve1 added [ 40.248332][ T4253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.267555][ T4222] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.282488][ T4260] loop3: detected capacity change from 0 to 512 [ 40.290406][ T4260] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.171: Invalid inode bitmap blk 4 in block_group 0 [ 40.303185][ T4262] loop0: detected capacity change from 0 to 512 [ 40.303568][ T4260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.337665][ T4251] bridge0: port 1(macvlan2) entered blocking state [ 40.344371][ T4251] bridge0: port 1(macvlan2) entered disabled state [ 40.348614][ T4262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.351377][ T4251] macvlan2: entered allmulticast mode [ 40.363759][ T4262] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.368862][ T4251] bridge0: entered allmulticast mode [ 40.385205][ T4262] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.168: corrupted inode contents [ 40.398764][ T4262] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.168: mark_inode_dirty error [ 40.398872][ T4251] macvlan2: left allmulticast mode [ 40.411415][ T4262] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.168: corrupted inode contents [ 40.415109][ T4251] bridge0: left allmulticast mode [ 40.432612][ T4262] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.168: mark_inode_dirty error [ 40.445526][ T4262] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.168: Failed to acquire dquot type 1 [ 40.459801][ T4262] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.168: corrupted inode contents [ 40.473184][ T4262] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.168: mark_inode_dirty error [ 40.484987][ T4262] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.168: corrupted inode contents [ 40.496880][ T4262] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.168: mark_inode_dirty error [ 40.508590][ T4262] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.168: Failed to acquire dquot type 1 [ 40.511054][ T4256] team0: Port device geneve1 removed [ 40.529336][ T4253] tipc: Enabling of bearer rejected, already enabled [ 40.538184][ T41] tipc: Resetting bearer [ 40.547936][ T4222] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.559608][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.568920][ T4269] tipc: Enabling of bearer rejected, already enabled [ 40.592956][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.627774][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.640982][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661745][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.672245][ T51] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.731437][ T4288] loop1: detected capacity change from 0 to 512 [ 40.748340][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.903464][ T4298] tipc: Resetting bearer [ 40.913632][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.967123][ T4298] loop3: detected capacity change from 0 to 512 [ 40.983260][ T4262] syz.0.168 (4262) used greatest stack depth: 9728 bytes left [ 40.983560][ T4298] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.180: Invalid inode bitmap blk 4 in block_group 0 [ 41.012468][ T4298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.022116][ T4306] loop1: detected capacity change from 0 to 1024 [ 41.033547][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.057068][ T4306] EXT4-fs: Ignoring removed oldalloc option [ 41.063067][ T4306] EXT4-fs: Ignoring removed bh option [ 41.070595][ T4298] tipc: Enabling of bearer rejected, already enabled [ 41.088774][ T4310] tipc: Resetting bearer [ 41.105692][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.124352][ T4310] loop0: detected capacity change from 0 to 512 [ 41.132019][ T4306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.147749][ T4312] team0: Port device vlan0 removed [ 41.154514][ T4310] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.183: Invalid inode bitmap blk 4 in block_group 0 [ 41.186194][ T4312] team0: Port device geneve1 removed [ 41.190195][ T4310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.204422][ T4316] loop4: detected capacity change from 0 to 512 [ 41.221179][ T354] tipc: Resetting bearer [ 41.236990][ T4316] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.184: Invalid inode bitmap blk 4 in block_group 0 [ 41.238752][ T3605] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.268245][ T4316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.269814][ T29] kauditd_printk_skb: 637 callbacks suppressed [ 41.269828][ T29] audit: type=1326 audit(1754033927.640:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.310300][ T29] audit: type=1326 audit(1754033927.640:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.333707][ T29] audit: type=1326 audit(1754033927.640:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.357093][ T29] audit: type=1326 audit(1754033927.640:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.360071][ T4324] FAULT_INJECTION: forcing a failure. [ 41.360071][ T4324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 41.380448][ T29] audit: type=1326 audit(1754033927.640:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.393476][ T4324] CPU: 0 UID: 0 PID: 4324 Comm: syz.5.187 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 41.393509][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.393520][ T4324] Call Trace: [ 41.393527][ T4324] [ 41.393535][ T4324] __dump_stack+0x1d/0x30 [ 41.393557][ T4324] dump_stack_lvl+0xe8/0x140 [ 41.393577][ T4324] dump_stack+0x15/0x1b [ 41.393654][ T4324] should_fail_ex+0x265/0x280 [ 41.393702][ T4324] should_fail+0xb/0x20 [ 41.393724][ T4324] should_fail_usercopy+0x1a/0x20 [ 41.393740][ T4324] strncpy_from_user+0x25/0x230 [ 41.393767][ T4324] __x64_sys_lgetxattr+0xa5/0x140 [ 41.393842][ T4324] x64_sys_call+0x2fa4/0x2ff0 [ 41.393869][ T4324] do_syscall_64+0xd2/0x200 [ 41.393893][ T4324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.393916][ T4324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.394014][ T4324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.394071][ T4324] RIP: 0033:0x7ffbd3f0eb69 [ 41.394088][ T4324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.394114][ T4324] RSP: 002b:00007ffbd2577038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 41.394132][ T4324] RAX: ffffffffffffffda RBX: 00007ffbd4135fa0 RCX: 00007ffbd3f0eb69 [ 41.394145][ T4324] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000000 [ 41.394157][ T4324] RBP: 00007ffbd2577090 R08: 0000000000000000 R09: 0000000000000000 [ 41.394201][ T4324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.394212][ T4324] R13: 0000000000000001 R14: 00007ffbd4135fa0 R15: 00007ffe896183e8 [ 41.394231][ T4324] [ 41.584285][ T29] audit: type=1326 audit(1754033927.640:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.609440][ T29] audit: type=1326 audit(1754033927.640:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.632817][ T29] audit: type=1326 audit(1754033927.720:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.633235][ T4310] tipc: Enabling of bearer rejected, already enabled [ 41.656350][ T29] audit: type=1326 audit(1754033927.790:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.656391][ T29] audit: type=1326 audit(1754033927.790:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4321 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 41.726244][ T4312] tipc: Enabling of bearer rejected, already enabled [ 41.757415][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.767124][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.778277][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.821698][ T4342] loop4: detected capacity change from 0 to 512 [ 41.885237][ T4342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.955740][ T4362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.966481][ T4354] IPVS: Unknown mcast interface: pimreg0 [ 41.972199][ T4362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.986343][ T4362] loop1: detected capacity change from 0 to 512 [ 42.013753][ T4365] tipc: Resetting bearer [ 42.024604][ T4362] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.031048][ T4362] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 42.044358][ T4362] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 42.070287][ T4369] tipc: Resetting bearer [ 42.071306][ T4362] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.201: attempt to clear invalid blocks 2 len 1 [ 42.089383][ T4362] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.201: invalid indirect mapped block 1819239214 (level 0) [ 42.104746][ T4362] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.201: invalid indirect mapped block 1819239214 (level 1) [ 42.106879][ T4365] loop0: detected capacity change from 0 to 512 [ 42.136629][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.146064][ T4376] loop3: detected capacity change from 0 to 512 [ 42.158033][ T4365] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.202: Invalid inode bitmap blk 4 in block_group 0 [ 42.186381][ T4365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.206836][ T4362] EXT4-fs (loop1): 1 truncate cleaned up [ 42.213601][ T4362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.222453][ T4376] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.203: Invalid inode bitmap blk 4 in block_group 0 [ 42.249376][ T4365] tipc: Enabling of bearer rejected, already enabled [ 42.268885][ T4376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.269900][ T4385] loop4: detected capacity change from 0 to 1024 [ 42.288835][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.296096][ T4385] EXT4-fs: Ignoring removed oldalloc option [ 42.303890][ T4385] EXT4-fs: Ignoring removed bh option [ 42.313191][ T4362] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.335074][ T4369] netlink: 28 bytes leftover after parsing attributes in process `syz.3.203'. [ 42.344702][ T4393] netlink: 'syz.1.201': attribute type 10 has an invalid length. [ 42.352615][ T4393] netlink: 40 bytes leftover after parsing attributes in process `syz.1.201'. [ 42.362276][ T4369] tipc: Enabling of bearer rejected, already enabled [ 42.382840][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.415796][ T4393] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 42.427759][ T4393] team0: Failed to send options change via netlink (err -105) [ 42.430301][ T4385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.435387][ T4393] team0: Port device geneve1 added [ 42.468388][ T4362] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.484564][ T4405] loop3: detected capacity change from 0 to 1024 [ 42.501641][ T4405] EXT4-fs: Ignoring removed oldalloc option [ 42.507660][ T4405] EXT4-fs: Ignoring removed bh option [ 42.514401][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.527189][ T4362] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.539646][ T4405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.569262][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.583171][ T4362] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.645616][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.664516][ T175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.683786][ T175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.693030][ T175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.758516][ T4426] loop0: detected capacity change from 0 to 512 [ 42.796095][ T4429] loop3: detected capacity change from 0 to 512 [ 42.806561][ T4426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 42.815993][ T4426] System zones: 1-12 [ 42.822679][ T4426] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.214: error while reading EA inode 32 err=-116 [ 42.838144][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.839658][ T4426] EXT4-fs (loop0): Remounting filesystem read-only [ 42.856807][ T4426] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 42.869820][ T4426] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 42.883050][ T4426] EXT4-fs (loop0): 1 orphan inode deleted [ 42.889172][ T4426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.902207][ T4437] loop5: detected capacity change from 0 to 512 [ 42.931443][ T4434] team0: Port device geneve1 removed [ 42.937646][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.947843][ T175] tipc: Resetting bearer [ 42.955097][ T4437] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.217: Invalid inode bitmap blk 4 in block_group 0 [ 42.975929][ T4437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.998625][ T4445] tipc: Resetting bearer [ 43.009704][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.035531][ T4445] loop0: detected capacity change from 0 to 512 [ 43.046359][ T4445] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.218: Invalid inode bitmap blk 4 in block_group 0 [ 43.064638][ T4445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.091459][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 43.100842][ T4445] tipc: Enabling of bearer rejected, already enabled [ 43.121618][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.131663][ T4434] tipc: Enabling of bearer rejected, already enabled [ 43.295339][ T4468] IPVS: Unknown mcast interface: pimreg0 [ 43.351578][ T4476] loop5: detected capacity change from 0 to 512 [ 43.443747][ T4485] tipc: Resetting bearer [ 43.485783][ T4485] loop0: detected capacity change from 0 to 512 [ 43.511268][ T4485] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.234: Invalid inode bitmap blk 4 in block_group 0 [ 43.540926][ T4493] tipc: Resetting bearer [ 43.563975][ T4485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.234'. [ 43.573627][ T4485] tipc: Enabling of bearer rejected, already enabled [ 43.575349][ T4493] loop4: detected capacity change from 0 to 512 [ 43.598487][ T4493] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.235: Invalid inode bitmap blk 4 in block_group 0 [ 43.694490][ T4493] tipc: Enabling of bearer rejected, already enabled [ 43.705663][ T4505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.735742][ T4505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.754756][ T4505] loop5: detected capacity change from 0 to 512 [ 43.776765][ T4505] EXT4-fs (loop5): orphan cleanup on readonly fs [ 43.783183][ T4505] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 43.797767][ T4505] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 43.813114][ T4505] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.240: attempt to clear invalid blocks 2 len 1 [ 43.826292][ T4505] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.240: invalid indirect mapped block 1819239214 (level 0) [ 43.853605][ T4505] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.240: invalid indirect mapped block 1819239214 (level 1) [ 43.869823][ T4505] EXT4-fs (loop5): 1 truncate cleaned up [ 43.892776][ T4505] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.900549][ T4521] loop4: detected capacity change from 0 to 512 [ 43.916893][ T4523] tipc: Resetting bearer [ 43.940409][ T4529] netlink: 'syz.5.240': attribute type 10 has an invalid length. [ 43.948295][ T4529] netlink: 40 bytes leftover after parsing attributes in process `syz.5.240'. [ 43.970530][ T4530] loop0: detected capacity change from 0 to 512 [ 43.986193][ T4527] tipc: Resetting bearer [ 43.994250][ T4530] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.247: Invalid inode bitmap blk 4 in block_group 0 [ 44.015973][ T4534] loop3: detected capacity change from 0 to 512 [ 44.029425][ T4534] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.248: Invalid inode bitmap blk 4 in block_group 0 [ 44.078793][ T4505] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.093366][ T4529] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 44.106224][ T4529] team0: Failed to send options change via netlink (err -105) [ 44.106772][ T4527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.248'. [ 44.113749][ T4529] team0: Port device geneve1 added [ 44.140965][ T4527] tipc: Enabling of bearer rejected, already enabled [ 44.144382][ T4523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 44.160395][ T4505] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.179351][ T4523] tipc: Enabling of bearer rejected, already enabled [ 44.211764][ T4505] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.362109][ T4563] IPVS: Unknown mcast interface: pimreg0 [ 44.390864][ T4571] loop0: detected capacity change from 0 to 512 [ 44.514799][ T4576] tipc: Resetting bearer [ 44.551040][ T4576] loop4: detected capacity change from 0 to 512 [ 44.568892][ T4576] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.262: Invalid inode bitmap blk 4 in block_group 0 [ 44.586995][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 44.596282][ T4576] tipc: Enabling of bearer rejected, already enabled [ 44.693308][ T4592] Driver unsupported XDP return value 0 on prog (id 131) dev N/A, expect packet loss! [ 44.719038][ T4592] loop0: detected capacity change from 0 to 512 [ 44.756071][ T4592] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.264: corrupted xattr block 95: invalid header [ 44.771596][ T4592] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.264: bg 0: block 7: invalid block bitmap [ 44.784204][ T4592] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 44.794275][ T4592] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.264: corrupted xattr block 95: invalid header [ 44.810935][ T4592] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 44.826895][ T4592] EXT4-fs (loop0): 1 orphan inode deleted [ 44.845481][ T4605] loop1: detected capacity change from 0 to 1024 [ 44.869167][ T4605] EXT4-fs: Ignoring removed oldalloc option [ 44.875196][ T4605] EXT4-fs: Ignoring removed bh option [ 44.990510][ T4626] loop1: detected capacity change from 0 to 512 [ 44.999587][ T4622] loop0: detected capacity change from 0 to 512 [ 45.015101][ T4622] EXT4-fs: Ignoring removed i_version option [ 45.024762][ T4622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.036130][ T4622] EXT4-fs (loop0): 1 truncate cleaned up [ 45.045794][ T4622] tipc: Enabled bearer , priority 0 [ 45.053874][ T4622] syzkaller0: entered promiscuous mode [ 45.059371][ T4622] syzkaller0: entered allmulticast mode [ 45.074712][ T4622] tipc: Resetting bearer [ 45.081646][ T4619] tipc: Resetting bearer [ 45.093055][ T4619] tipc: Disabling bearer [ 45.232236][ T4639] team0: Port device geneve1 removed [ 45.241027][ T4649] loop1: detected capacity change from 0 to 512 [ 45.244702][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.256560][ T354] tipc: Resetting bearer [ 45.274981][ T4649] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.276: Invalid inode bitmap blk 4 in block_group 0 [ 45.288230][ T354] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.300546][ T175] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.328129][ T175] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.345040][ T4658] can0: slcan on ttyS3. [ 45.359495][ T4639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'. [ 45.376624][ T4639] tipc: Enabling of bearer rejected, already enabled [ 45.390577][ T4658] can0 (unregistered): slcan off ttyS3. [ 45.402135][ T4658] can0: slcan on ttyS3. [ 45.465833][ T4671] loop1: detected capacity change from 0 to 1024 [ 45.484207][ T4674] loop3: detected capacity change from 0 to 512 [ 45.491996][ T4671] EXT4-fs: Ignoring removed oldalloc option [ 45.497937][ T4671] EXT4-fs: Ignoring removed bh option [ 45.508110][ T4657] can0 (unregistered): slcan off ttyS3. [ 45.709612][ T4707] IPVS: Unknown mcast interface: pimreg0 [ 45.792051][ T4721] tipc: Resetting bearer [ 45.838270][ T4728] loop1: detected capacity change from 0 to 512 [ 45.910133][ T4728] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.296: Invalid inode bitmap blk 4 in block_group 0 [ 45.988244][ T4721] netlink: 28 bytes leftover after parsing attributes in process `syz.1.296'. [ 46.012489][ T4743] loop4: detected capacity change from 0 to 512 [ 46.012725][ T4745] loop5: detected capacity change from 0 to 1024 [ 46.034681][ T4745] EXT4-fs: Ignoring removed oldalloc option [ 46.040746][ T4745] EXT4-fs: Ignoring removed bh option [ 46.047468][ T4728] tipc: Enabling of bearer rejected, already enabled [ 46.271928][ T29] kauditd_printk_skb: 1561 callbacks suppressed [ 46.271941][ T29] audit: type=1326 audit(1754033932.650:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff2e475b27 code=0x7ffc0000 [ 46.349317][ T29] audit: type=1326 audit(1754033932.650:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff2e41ad69 code=0x7ffc0000 [ 46.372833][ T29] audit: type=1326 audit(1754033932.650:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 46.396204][ T29] audit: type=1326 audit(1754033932.660:3174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff2e475b27 code=0x7ffc0000 [ 46.419560][ T29] audit: type=1326 audit(1754033932.660:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff2e41ad69 code=0x7ffc0000 [ 46.442857][ T29] audit: type=1326 audit(1754033932.660:3176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 46.466182][ T29] audit: type=1326 audit(1754033932.670:3177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff2e475b27 code=0x7ffc0000 [ 46.489512][ T29] audit: type=1326 audit(1754033932.670:3178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7eff2e41ad69 code=0x7ffc0000 [ 46.512940][ T29] audit: type=1326 audit(1754033932.670:3179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7eff2e47eb69 code=0x7ffc0000 [ 46.536360][ T29] audit: type=1326 audit(1754033932.680:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4706 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7eff2e475b27 code=0x7ffc0000 [ 46.808321][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.828652][ T4808] tipc: Resetting bearer [ 46.836278][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.863754][ T4809] loop3: detected capacity change from 0 to 512 [ 46.915213][ T4809] EXT4-fs (loop3): orphan cleanup on readonly fs [ 46.921621][ T4809] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 46.935852][ T4809] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 46.951299][ T4809] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.310: attempt to clear invalid blocks 2 len 1 [ 46.964650][ T4809] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.310: invalid indirect mapped block 1819239214 (level 0) [ 46.980782][ T4809] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.310: invalid indirect mapped block 1819239214 (level 1) [ 47.005119][ T4809] EXT4-fs (loop3): 1 truncate cleaned up [ 47.028263][ T4809] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.049575][ T4808] loop1: detected capacity change from 0 to 512 [ 47.071554][ T4809] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.073129][ T4826] loop4: detected capacity change from 0 to 1024 [ 47.099896][ T4808] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.313: Invalid inode bitmap blk 4 in block_group 0 [ 47.110320][ T4826] EXT4-fs: Ignoring removed oldalloc option [ 47.118497][ T4826] EXT4-fs: Ignoring removed bh option [ 47.124136][ T4830] netlink: 'syz.3.310': attribute type 10 has an invalid length. [ 47.131973][ T4830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.310'. [ 47.152537][ T4832] loop5: detected capacity change from 0 to 256 [ 47.172865][ T4809] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.210235][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 47.220224][ T4808] tipc: Enabling of bearer rejected, already enabled [ 47.250951][ T4830] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 47.263014][ T4832] FAT-fs (loop5): Directory bread(block 64) failed [ 47.269560][ T4832] FAT-fs (loop5): Directory bread(block 65) failed [ 47.275924][ T4830] team0: Failed to send options change via netlink (err -105) [ 47.283710][ T4830] team0: Port device geneve1 added [ 47.290426][ T4832] FAT-fs (loop5): Directory bread(block 66) failed [ 47.297100][ T4832] FAT-fs (loop5): Directory bread(block 67) failed [ 47.303798][ T4832] FAT-fs (loop5): Directory bread(block 68) failed [ 47.311454][ T4809] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.319951][ T4832] FAT-fs (loop5): Directory bread(block 69) failed [ 47.338265][ T4832] FAT-fs (loop5): Directory bread(block 70) failed [ 47.347219][ T4832] FAT-fs (loop5): Directory bread(block 71) failed [ 47.353950][ T4832] FAT-fs (loop5): Directory bread(block 72) failed [ 47.361693][ T4832] FAT-fs (loop5): Directory bread(block 73) failed [ 47.376028][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.431027][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.456484][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.467018][ T354] kworker/u8:5: attempt to access beyond end of device [ 47.467018][ T354] loop5: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 47.475993][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.516806][ T4873] loop1: detected capacity change from 0 to 512 [ 47.788325][ T4912] tipc: Resetting bearer [ 47.801853][ T4915] loop5: detected capacity change from 0 to 1024 [ 47.810458][ T4915] EXT4-fs: Ignoring removed oldalloc option [ 47.816422][ T4915] EXT4-fs: Ignoring removed bh option [ 47.830705][ T4912] loop1: detected capacity change from 0 to 512 [ 47.848041][ T4912] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.329: Invalid inode bitmap blk 4 in block_group 0 [ 47.871610][ T4912] tipc: Enabling of bearer rejected, already enabled [ 47.957925][ T4927] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.333' sets config #-1 [ 48.006018][ T4934] loop3: detected capacity change from 0 to 1024 [ 48.013160][ T4934] EXT4-fs: Ignoring removed orlov option [ 48.033002][ T4939] loop1: detected capacity change from 0 to 512 [ 48.222938][ T4954] loop3: detected capacity change from 0 to 1024 [ 48.235166][ T4954] EXT4-fs: Ignoring removed oldalloc option [ 48.241219][ T4954] EXT4-fs: Ignoring removed bh option [ 48.326676][ T4961] team0: Port device geneve1 removed [ 48.350521][ T175] tipc: Resetting bearer [ 48.376669][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.386022][ T4968] loop5: detected capacity change from 0 to 512 [ 48.388908][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.405663][ T4972] loop0: detected capacity change from 0 to 512 [ 48.418095][ T4972] EXT4-fs (loop0): orphan cleanup on readonly fs [ 48.424519][ T4972] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 48.440095][ T4968] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.344: Invalid inode bitmap blk 4 in block_group 0 [ 48.441378][ T4972] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 48.467676][ T4972] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.347: attempt to clear invalid blocks 2 len 1 [ 48.481608][ T4972] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.347: invalid indirect mapped block 1819239214 (level 0) [ 48.496189][ T4972] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.347: invalid indirect mapped block 1819239214 (level 1) [ 48.525298][ T4972] EXT4-fs (loop0): 1 truncate cleaned up [ 48.538260][ T4961] __nla_validate_parse: 1 callbacks suppressed [ 48.538275][ T4961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.344'. [ 48.559987][ T4972] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.571175][ T4961] tipc: Enabling of bearer rejected, already enabled [ 48.587576][ T4202] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 48.595974][ T4202] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.608255][ T4972] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.610163][ T4985] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 48.625763][ T4985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'. [ 48.640558][ T4985] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 48.656349][ T4984] fido_id[4984]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.682426][ T4985] team0: Failed to send options change via netlink (err -105) [ 48.689957][ T4985] team0: Port device geneve1 added [ 48.762541][ T4972] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.779099][ T4999] loop4: detected capacity change from 0 to 512 [ 48.812212][ T4972] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.867862][ T175] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.938353][ T175] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.956599][ T175] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972867][ T5017] tipc: Resetting bearer [ 48.997867][ T175] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.016075][ T5017] loop1: detected capacity change from 0 to 512 [ 49.023813][ T5022] loop3: detected capacity change from 0 to 1024 [ 49.024267][ T5017] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.363: Invalid inode bitmap blk 4 in block_group 0 [ 49.031065][ T5022] EXT4-fs: Ignoring removed oldalloc option [ 49.048808][ T5022] EXT4-fs: Ignoring removed bh option [ 49.085455][ T5017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'. [ 49.122908][ T5017] tipc: Enabling of bearer rejected, already enabled [ 49.183955][ T5038] ================================================================== [ 49.192113][ T5038] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 49.198817][ T5038] [ 49.201134][ T5038] write to 0xffff888103e94908 of 8 bytes by task 5036 on cpu 0: [ 49.208755][ T5038] call_rcu+0x51/0x3f0 [ 49.212828][ T5038] mas_wmb_replace+0xc6a/0x14a0 [ 49.217870][ T5038] mas_wr_store_entry+0x1773/0x2b50 [ 49.223057][ T5038] mas_store_prealloc+0x74d/0x9e0 [ 49.228079][ T5038] vma_iter_store_new+0x1c5/0x200 [ 49.233094][ T5038] vma_complete+0x125/0x580 [ 49.237583][ T5038] __split_vma+0x591/0x650 [ 49.241996][ T5038] vma_modify+0x21e/0xc80 [ 49.246340][ T5038] vma_modify_flags+0x101/0x130 [ 49.251181][ T5038] mprotect_fixup+0x2cc/0x570 [ 49.255879][ T5038] do_mprotect_pkey+0x6d6/0x980 [ 49.260730][ T5038] __x64_sys_mprotect+0x48/0x60 [ 49.265571][ T5038] x64_sys_call+0x274e/0x2ff0 [ 49.270246][ T5038] do_syscall_64+0xd2/0x200 [ 49.274739][ T5038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.280620][ T5038] [ 49.282927][ T5038] read to 0xffff888103e94908 of 8 bytes by task 5038 on cpu 1: [ 49.290452][ T5038] mas_state_walk+0x28f/0x650 [ 49.295555][ T5038] mas_walk+0x60/0x150 [ 49.299612][ T5038] lock_vma_under_rcu+0xa2/0x2f0 [ 49.304559][ T5038] do_user_addr_fault+0x233/0x1090 [ 49.309668][ T5038] exc_page_fault+0x62/0xa0 [ 49.314167][ T5038] asm_exc_page_fault+0x26/0x30 [ 49.319021][ T5038] [ 49.321328][ T5038] value changed: 0x0000555562951fff -> 0xffff888103e94808 [ 49.328501][ T5038] [ 49.330811][ T5038] Reported by Kernel Concurrency Sanitizer on: [ 49.336969][ T5038] CPU: 1 UID: 0 PID: 5038 Comm: syz.1.369 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 49.349021][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.359062][ T5038] ==================================================================