last executing test programs: 6.28912952s ago: executing program 1 (id=890): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.208651171s ago: executing program 1 (id=901): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000000101040000eee7ffff000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140010"], 0x80}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r8, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6.042944294s ago: executing program 1 (id=899): r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sched_rr_get_interval(0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x7000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet6_tcp_int(r5, 0x6, 0x7, &(0x7f0000000280), &(0x7f0000000300)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) 5.904090336s ago: executing program 1 (id=906): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/42, 0x2a}, {&(0x7f0000006180)=""/136, 0x88}], 0x2, &(0x7f00000000c0)=[{&(0x7f0000008480)=""/95, 0x5f}, {&(0x7f0000000040)=""/89, 0x59}], 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.746127709s ago: executing program 1 (id=908): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xffffff63, 0x0, 0x0) 5.189490628s ago: executing program 1 (id=923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0xfffffffffffffffc, 0x0, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x40, 0x7, 0x0, 0x82c, 0x0, 0x81, 0x4}) 5.116347398s ago: executing program 32 (id=923): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0xfffffffffffffffc, 0x0, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x40, 0x7, 0x0, 0x82c, 0x0, 0x81, 0x4}) 2.321726723s ago: executing program 5 (id=994): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'veth1\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000080)={@mcast2, 0x1000001, r4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1.534386336s ago: executing program 3 (id=1018): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xb, 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r5, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.459050087s ago: executing program 3 (id=1022): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 1.370651788s ago: executing program 3 (id=1026): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x68, 0x64, 0xf31, 0xfffffffb, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1.2435797s ago: executing program 3 (id=1030): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ustat(0x3, &(0x7f0000000000)) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x4d, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x3, 0x547b7513, {{0x2d, 0x4, 0x3, 0x2b, 0xb4, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@end, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x10, "47bff0579f643afdff3c926b0c12"}, {0x0, 0x9, "a7ba987507dde8"}]}, @rr={0x7, 0x1b, 0x46, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @empty]}, @end, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x4, [0x6]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0xf, [0x2, 0x6, 0x3, 0x879, 0x1, 0x5, 0xfffffffe]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x0, [{@remote, 0x43d7}]}, @timestamp={0x44, 0x2c, 0xf1, 0x0, 0x1, [0x1, 0x6, 0xfff, 0x401, 0x6, 0x7ffd, 0x5, 0x7, 0x62, 0x9]}, @end]}}}}}) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={0xffffffffffffffff, r8, 0x25, 0x4, @val=@iter={&(0x7f0000000c00)=@cgroup={0x4, r9, 0x100000001}, 0x10}}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0xfffffffc, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 955.448035ms ago: executing program 3 (id=1039): futex(&(0x7f0000002e80), 0x80, 0x0, &(0x7f0000002ec0), 0x0, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x560, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x80}, {0x3, 0x0, 0x3}, {0x6, 0x0, 0xff}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) lseek(r5, 0x8, 0x3) getdents64(r5, &(0x7f0000000280)=""/158, 0x9e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 550.116982ms ago: executing program 2 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001006c617374"], 0x104}}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002"], 0xb4}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f0000000440)={0x0}) 519.861142ms ago: executing program 0 (id=1051): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ustat(0x3, &(0x7f0000000000)) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x4d, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000780)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000b00)={'gretap0\x00', 0x0, 0x20, 0x10, 0x3, 0x547b7513, {{0x2d, 0x4, 0x3, 0x2b, 0xb4, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @rand_addr=0x64010101, {[@end, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x10, "47bff0579f643afdff3c926b0c12"}, {0x0, 0x9, "a7ba987507dde8"}]}, @rr={0x7, 0x1b, 0x46, [@remote, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @empty]}, @end, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x4, [0x6]}, @timestamp={0x44, 0x20, 0x2a, 0x0, 0xf, [0x2, 0x6, 0x3, 0x879, 0x1, 0x5, 0xfffffffe]}, @timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x0, [{@remote, 0x43d7}]}, @timestamp={0x44, 0x2c, 0xf1, 0x0, 0x1, [0x1, 0x6, 0xfff, 0x401, 0x6, 0x7ffd, 0x5, 0x7, 0x62, 0x9]}, @end]}}}}}) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000780)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c40)={0xffffffffffffffff, r8, 0x25, 0x4, @val=@iter={&(0x7f0000000c00)=@cgroup={0x4, r9, 0x100000001}, 0x10}}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_config_ext={0x9}, 0x104002, 0xa1b7, 0xfffffffc, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 483.656222ms ago: executing program 2 (id=1052): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x9], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 474.615313ms ago: executing program 0 (id=1054): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x30, 0x1, 0x4000000, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 463.630403ms ago: executing program 2 (id=1055): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 429.477813ms ago: executing program 0 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 428.852393ms ago: executing program 2 (id=1057): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 390.366214ms ago: executing program 5 (id=1058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x68, 0x64, 0xf31, 0xfffffffb, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 389.881124ms ago: executing program 0 (id=1059): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 370.182184ms ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) unshare(0x62040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x100}, &(0x7f00000001c0)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x9], 0x0, 0x0, 0x1}}, 0x40) 346.035785ms ago: executing program 4 (id=1061): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x68, 0x64, 0xf31, 0xfffffffb, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 229.266567ms ago: executing program 5 (id=1062): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) syz_emit_ethernet(0xffffff63, 0x0, 0x0) 189.474067ms ago: executing program 5 (id=1063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c692500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11dc0, &(0x7f0000001e00)=ANY=[], 0x0) 188.904827ms ago: executing program 2 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[], 0x1, 0x1fa, &(0x7f0000000500)="$eJzs2zFrE2EYB/Dn2rRe7GAHJ1E4cHEK6icwSAUxIEQy6GSgurQipEsUxH4eZz+EX8alg2SLXO5om2sLjWdyEn8/ON6H/O/guSF53uHN27sfDvY/Hr3f+nISaZLFRsSTmETs5lUpKdd0Vm/HnCTq+FXraQDgj/T7w27TPbBco1F3eDsidi4kg2+NNAQAAAAAAAAAAEBti5z/34j4Wj3/f7zifgGA+pz/X1/tch2NusN7xf6twvl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDmT6fTWNL/Sci2vGxGRRkQ7Im5GRCsi8s+b7hcAqG8ynZ/7V83/iEgiwvwHgDXw6vWbF91eb6+fZWnEz+PxYDwo1iJ/9ry39zCb2T176mQ8Hmye5o+KPJvPt2b7hjx/fGm+HQ/uF3mePX3Zq+Q7sb/81weA/1InO3Vuvm+WV0Snc1mez+eiOrc/qMzvVtxprew1AIAFHH36fDA8PHw3+utFsthT7bKhq+/53lpWq4prFT+Sf6INRd0ivc7NDf8wAUt39qWvJmkzDQEAAAAAAAAAAAAAABes4i9HTb8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADr53cAAAD//8h6UUs=") r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000240)="013f4482431814312ee3df480ee05519f3f25ba4c08a45faed36318c11628c3640cdebb203b0337f8aa503a5f43edb89b03cc80df18ec021551a1f6b90cbca9219", 0x41}, {&(0x7f00000003c0)="1f65b4326f960dc946d7dab35932f729a2c303d4d5f39b685f603f54b499474370d38c1c0146ef87002ad53def0538a2bd1fa586bfa75749243b7f217fa670e7287a7e650ffc06e9fd8e82f91d63b7e25ecc1aaaa9c5c6196ef1c560677f09", 0x5f}, {&(0x7f0000000440)="3fa1aaa7fc8571a3a6715bb414e37110a1bbcc4e672474c8c48bdb96da50156959ae0dd59494744a5b406ea58fb3f5e32e7d5ab79610da73101485328de961e0418322ffe036ce8d011aeb2f0096320f9b09f6f1241ed275864bdba0796c03b714ea4cebbb3d315b595c5dac62390b618020cab1c7b583467bafbef277d0388fbeeb2145a8c2eaa536279a5455169f29824a5739278c14cfde2a1d9e5d3ca27fc37bdcb237feebae7201a140f5c2b8987f86feb58ba8", 0xb6}, {&(0x7f0000001a80)="b5d06c04d6aeb237e22416564c6a46684b2902f09d707cfee84e2efa4d4bfba27d2f0d4beb01d546593126780c1f5232c050f0bbcdd4d0d3d9648f53589c61b17c2f88f0e3c0f39a994c1638b6aa9c88d9792f79076d26c215423a358af59d8ab7cd6031a6296d35e73afc", 0x6b}], 0x5, 0x17, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) rename(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x4000000) 167.377657ms ago: executing program 4 (id=1073): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) syz_emit_ethernet(0xffffff63, 0x0, 0x0) 166.549328ms ago: executing program 0 (id=1065): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r2, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x68, 0x64, 0xf31, 0xfffffffb, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) close_range(r1, r2, 0x0) 129.262548ms ago: executing program 4 (id=1066): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0xfffffffffffffffc, 0x0, 0x100000001, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x40, 0x7, 0x0, 0x82c, 0x0, 0x81, 0x4}) 123.767029ms ago: executing program 5 (id=1067): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 122.300939ms ago: executing program 4 (id=1068): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x30, 0x1, 0x4000000, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x4}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 100.722029ms ago: executing program 5 (id=1069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d40)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001cc0), 0x4000, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, &(0x7f0000001d00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8937, &(0x7f0000000040)={'veth0_vlan\x00', @random="0100002010ff"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0006, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@max_dir_size_kb}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xc78c}}, {@noload}, {@errors_remount}, {@sysvgroups}]}, 0xfe, 0x45d, &(0x7f00000004c0)="$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") 79.645319ms ago: executing program 4 (id=1070): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 39.78105ms ago: executing program 4 (id=1071): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 2.28762ms ago: executing program 3 (id=1072): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x43) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, 0x0, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 2 (id=1074): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@delchain={0x68, 0x64, 0xf31, 0xfffffffb, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e22}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xe}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) kernel console output (not intermixed with test programs): nted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.853709][ T4308] loop1: detected capacity change from 0 to 256 [ 51.877106][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.899104][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 51.927606][ T4308] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.950804][ T4301] loop2: detected capacity change from 0 to 512 [ 51.957770][ T4308] xt_hashlimit: max too large, truncated to 1048576 [ 51.965999][ T4301] EXT4-fs: Ignoring removed nobh option [ 51.976034][ T4301] EXT4-fs: Mount option(s) incompatible with ext2 [ 52.026739][ T4320] syzkaller0: entered promiscuous mode [ 52.032443][ T4320] syzkaller0: entered allmulticast mode [ 52.042099][ T4301] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 52.124644][ T4331] loop1: detected capacity change from 0 to 512 [ 52.146299][ T4331] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.290: Invalid inode bitmap blk 4 in block_group 0 [ 52.160445][ T4331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.195666][ T4331] tipc: Enabled bearer , priority 0 [ 52.247832][ T4330] tipc: Disabling bearer [ 52.279598][ T4338] netlink: 'syz.4.291': attribute type 21 has an invalid length. [ 52.290860][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.380363][ T4358] loop4: detected capacity change from 0 to 256 [ 52.389474][ T4358] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.406709][ T4358] xt_hashlimit: max too large, truncated to 1048576 [ 52.416192][ T4361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4361 comm=syz.2.301 [ 52.530153][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.565124][ T4388] FAULT_INJECTION: forcing a failure. [ 52.565124][ T4388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.578441][ T4388] CPU: 1 UID: 0 PID: 4388 Comm: syz.0.310 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 52.578469][ T4388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.578480][ T4388] Call Trace: [ 52.578556][ T4388] [ 52.578565][ T4388] dump_stack_lvl+0xf6/0x150 [ 52.578591][ T4388] dump_stack+0x15/0x1a [ 52.578683][ T4388] should_fail_ex+0x261/0x270 [ 52.578765][ T4388] should_fail+0xb/0x10 [ 52.578793][ T4388] should_fail_usercopy+0x1a/0x20 [ 52.578827][ T4388] _copy_from_user+0x1c/0xa0 [ 52.578867][ T4388] move_addr_to_kernel+0x8c/0x130 [ 52.578975][ T4388] __sys_connect+0x6c/0x1b0 [ 52.579004][ T4388] __x64_sys_connect+0x41/0x50 [ 52.579025][ T4388] x64_sys_call+0x2030/0x2e10 [ 52.579050][ T4388] do_syscall_64+0xc9/0x1c0 [ 52.579093][ T4388] ? clear_bhb_loop+0x25/0x80 [ 52.579161][ T4388] ? clear_bhb_loop+0x25/0x80 [ 52.579187][ T4388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.579211][ T4388] RIP: 0033:0x7fe64608d169 [ 52.579228][ T4388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.579266][ T4388] RSP: 002b:00007fe6446c9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 52.579288][ T4388] RAX: ffffffffffffffda RBX: 00007fe6462a6080 RCX: 00007fe64608d169 [ 52.579302][ T4388] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000004 [ 52.579317][ T4388] RBP: 00007fe6446c9090 R08: 0000000000000000 R09: 0000000000000000 [ 52.579330][ T4388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.579344][ T4388] R13: 0000000000000001 R14: 00007fe6462a6080 R15: 00007ffdbeb43b18 [ 52.579405][ T4388] [ 52.585488][ T4390] loop3: detected capacity change from 0 to 512 [ 52.585655][ T4392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4392 comm=syz.2.315 [ 52.630562][ T4390] EXT4-fs (loop3): 1 orphan inode deleted [ 52.651143][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 52.655583][ T4390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.805783][ T4390] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.834024][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.859280][ T4401] loop3: detected capacity change from 0 to 512 [ 52.894131][ T4401] EXT4-fs (loop3): too many log groups per flexible block group [ 52.902038][ T4401] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 52.910158][ T4401] EXT4-fs (loop3): mount failed [ 52.928248][ T4396] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 52.930801][ T4401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.949952][ T4409] loop4: detected capacity change from 0 to 256 [ 52.959123][ T4409] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.972431][ T4409] xt_hashlimit: max too large, truncated to 1048576 [ 53.072166][ T4421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4421 comm=syz.2.326 [ 53.092375][ T4423] loop4: detected capacity change from 0 to 1024 [ 53.101677][ T4423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.115655][ T4426] loop3: detected capacity change from 0 to 512 [ 53.126775][ T4423] netlink: 'syz.4.327': attribute type 13 has an invalid length. [ 53.145296][ T4426] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 53.153794][ T4423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.176586][ T4426] EXT4-fs (loop3): invalid journal inode [ 53.192597][ T4426] EXT4-fs (loop3): can't get journal size [ 53.199724][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.216909][ T4426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 53.226600][ T4426] System zones: 1-12, 13-13 [ 53.234298][ T4426] EXT4-fs (loop3): 1 truncate cleaned up [ 53.240795][ T4426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.300493][ T4440] loop4: detected capacity change from 0 to 2048 [ 53.311588][ T4440] EXT4-fs: Ignoring removed bh option [ 53.332543][ T4440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.362149][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 53.362166][ T29] audit: type=1326 audit(1744667072.005:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34d90d169 code=0x7ffc0000 [ 53.397487][ T29] audit: type=1326 audit(1744667072.045:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34d90d169 code=0x7ffc0000 [ 53.421885][ T29] audit: type=1326 audit(1744667072.045:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fa34d90d169 code=0x7ffc0000 [ 53.445589][ T29] audit: type=1326 audit(1744667071.047:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4446 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34d90d169 code=0x7ffc0000 [ 53.485057][ T4454] loop2: detected capacity change from 0 to 256 [ 53.492212][ T29] audit: type=1326 audit(1744667071.127:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 53.515640][ T29] audit: type=1326 audit(1744667071.127:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 53.539086][ T29] audit: type=1326 audit(1744667071.127:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 53.562452][ T29] audit: type=1326 audit(1744667071.127:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f50c879bc1f code=0x7ffc0000 [ 53.585774][ T29] audit: type=1326 audit(1744667071.127:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 53.609186][ T29] audit: type=1326 audit(1744667071.127:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4451 comm="syz.2.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 53.668688][ T4457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4457 comm=syz.0.338 [ 53.693403][ T4459] FAULT_INJECTION: forcing a failure. [ 53.693403][ T4459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 53.706701][ T4459] CPU: 0 UID: 0 PID: 4459 Comm: syz.1.339 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 53.706728][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 53.706810][ T4459] Call Trace: [ 53.706818][ T4459] [ 53.706826][ T4459] dump_stack_lvl+0xf6/0x150 [ 53.706919][ T4459] dump_stack+0x15/0x1a [ 53.706940][ T4459] should_fail_ex+0x261/0x270 [ 53.706974][ T4459] should_fail_alloc_page+0xfd/0x110 [ 53.707010][ T4459] __alloc_frozen_pages_noprof+0x11d/0x360 [ 53.707079][ T4459] alloc_pages_mpol+0xb6/0x260 [ 53.707155][ T4459] vma_alloc_folio_noprof+0x19c/0x300 [ 53.707191][ T4459] handle_mm_fault+0xdda/0x2e80 [ 53.707231][ T4459] ? __rcu_read_lock+0x36/0x50 [ 53.707264][ T4459] ? __pte_offset_map_lock+0x1d3/0x290 [ 53.707330][ T4459] __get_user_pages+0xf4e/0x2340 [ 53.707371][ T4459] __mm_populate+0x25d/0x3c0 [ 53.707399][ T4459] do_mlock+0x4d7/0x580 [ 53.707431][ T4459] ? __secure_computing+0x7e/0x160 [ 53.707469][ T4459] __x64_sys_mlock+0x36/0x40 [ 53.707595][ T4459] x64_sys_call+0x267b/0x2e10 [ 53.707622][ T4459] do_syscall_64+0xc9/0x1c0 [ 53.707657][ T4459] ? clear_bhb_loop+0x25/0x80 [ 53.707700][ T4459] ? clear_bhb_loop+0x25/0x80 [ 53.707723][ T4459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.707802][ T4459] RIP: 0033:0x7fa34d90d169 [ 53.707819][ T4459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.707888][ T4459] RSP: 002b:00007fa34bf6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 53.707906][ T4459] RAX: ffffffffffffffda RBX: 00007fa34db25fa0 RCX: 00007fa34d90d169 [ 53.707921][ T4459] RDX: 0000000000000000 RSI: 000000000000e000 RDI: 0000200000e1d000 [ 53.707935][ T4459] RBP: 00007fa34bf6f090 R08: 0000000000000000 R09: 0000000000000000 [ 53.707949][ T4459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.707963][ T4459] R13: 0000000000000000 R14: 00007fa34db25fa0 R15: 00007ffe6ca1db18 [ 53.708050][ T4459] [ 53.908824][ T4454] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.921759][ T4454] xt_hashlimit: max too large, truncated to 1048576 [ 53.982488][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.994090][ T4464] loop0: detected capacity change from 0 to 1024 [ 54.004241][ T4464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.022054][ T4464] IPv6: NLM_F_CREATE should be specified when creating new route [ 54.031238][ T4464] netlink: 'syz.0.341': attribute type 13 has an invalid length. [ 54.073791][ T4450] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 54.089678][ T4450] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 54.102040][ T4450] EXT4-fs (loop4): This should not happen!! Data will be lost [ 54.102040][ T4450] [ 54.102060][ T4450] EXT4-fs (loop4): Total free blocks count 0 [ 54.102074][ T4450] EXT4-fs (loop4): Free/Dirty block details [ 54.117745][ T4450] EXT4-fs (loop4): free_blocks=2415919104 [ 54.117763][ T4450] EXT4-fs (loop4): dirty_blocks=8208 [ 54.134776][ T4450] EXT4-fs (loop4): Block reservation details [ 54.140884][ T4450] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 54.147757][ T4464] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.209812][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.281578][ T4481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.348'. [ 54.311111][ T4490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4490 comm=syz.2.351 [ 54.356637][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 54.418660][ T4496] loop1: detected capacity change from 0 to 256 [ 54.435381][ T4496] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.475571][ T4496] xt_hashlimit: max too large, truncated to 1048576 [ 54.482612][ T4500] loop3: detected capacity change from 0 to 512 [ 54.489075][ T4501] loop2: detected capacity change from 0 to 512 [ 54.496032][ T4501] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 54.510137][ T4501] EXT4-fs (loop2): invalid journal inode [ 54.515897][ T4501] EXT4-fs (loop2): can't get journal size [ 54.532559][ T4501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 54.538891][ T4500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.553234][ T4501] System zones: 1-12, 13-13 [ 54.560863][ T4507] FAULT_INJECTION: forcing a failure. [ 54.560863][ T4507] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.574280][ T4507] CPU: 1 UID: 0 PID: 4507 Comm: syz.4.353 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 54.574311][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 54.574326][ T4507] Call Trace: [ 54.574333][ T4507] [ 54.574342][ T4507] dump_stack_lvl+0xf6/0x150 [ 54.574371][ T4507] dump_stack+0x15/0x1a [ 54.574393][ T4507] should_fail_ex+0x261/0x270 [ 54.574429][ T4507] should_fail_alloc_page+0xfd/0x110 [ 54.574478][ T4507] __alloc_frozen_pages_noprof+0x11d/0x360 [ 54.574518][ T4507] alloc_pages_mpol+0xb6/0x260 [ 54.574549][ T4507] alloc_pages_noprof+0xe8/0x130 [ 54.574579][ T4507] __pmd_alloc+0x4d/0x440 [ 54.574602][ T4507] copy_page_range+0x374c/0x3a20 [ 54.574637][ T4507] ? kmem_cache_alloc_bulk_noprof+0x263/0x4a0 [ 54.574668][ T4507] ? mod_objcg_state+0x3f9/0x530 [ 54.574701][ T4507] ? mas_wr_store_type+0x6da/0xb50 [ 54.574751][ T4507] copy_mm+0xabc/0x1360 [ 54.574787][ T4507] copy_process+0xcfc/0x1f60 [ 54.574813][ T4507] ? copy_clone_args_from_user+0x413/0x4b0 [ 54.574851][ T4507] kernel_clone+0x168/0x5d0 [ 54.574887][ T4507] __se_sys_clone3+0x1c6/0x200 [ 54.574937][ T4507] __x64_sys_clone3+0x31/0x40 [ 54.574971][ T4507] x64_sys_call+0x11e9/0x2e10 [ 54.574998][ T4507] do_syscall_64+0xc9/0x1c0 [ 54.575033][ T4507] ? clear_bhb_loop+0x25/0x80 [ 54.575060][ T4507] ? clear_bhb_loop+0x25/0x80 [ 54.575087][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.575112][ T4507] RIP: 0033:0x7f001bfcd169 [ 54.575131][ T4507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.575152][ T4507] RSP: 002b:00007f001a62ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 54.575175][ T4507] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f001bfcd169 [ 54.575189][ T4507] RDX: 00007f001a62ef20 RSI: 0000000000000058 RDI: 00007f001a62ef20 [ 54.575204][ T4507] RBP: 00007f001a62f090 R08: 0000000000000000 R09: 0000000000000058 [ 54.575218][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.575232][ T4507] R13: 0000000000000001 R14: 00007f001c1e5fa0 R15: 00007ffe60e7ae48 [ 54.575255][ T4507] [ 54.576428][ T4500] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.616783][ T4501] EXT4-fs (loop2): 1 truncate cleaned up [ 54.807720][ T4501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.839165][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.905606][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 54.917488][ T4531] netlink: 'syz.3.366': attribute type 7 has an invalid length. [ 54.925185][ T4531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 54.982237][ T4542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4542 comm=syz.4.371 [ 55.025245][ T4549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=4549 comm=syz.3.373 [ 55.041545][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 55.050598][ T4551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 55.072519][ T4550] loop4: detected capacity change from 0 to 1024 [ 55.081333][ T4549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 55.094596][ T4550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.116806][ T4550] netlink: 'syz.4.374': attribute type 13 has an invalid length. [ 55.144287][ T4550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.186186][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.275966][ T4562] __nla_validate_parse: 1 callbacks suppressed [ 55.275983][ T4562] netlink: 332 bytes leftover after parsing attributes in process `syz.3.377'. [ 55.341121][ T4572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4572 comm=syz.1.384 [ 55.356012][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.447553][ T4584] sctp: [Deprecated]: syz.2.388 (pid 4584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 55.447553][ T4584] Use struct sctp_sack_info instead [ 55.469650][ T4588] pim6reg: entered allmulticast mode [ 55.477045][ T4584] hub 9-0:1.0: USB hub found [ 55.479922][ T4588] pim6reg: left allmulticast mode [ 55.487966][ T4584] hub 9-0:1.0: 8 ports detected [ 55.496821][ T4592] loop4: detected capacity change from 0 to 256 [ 55.504851][ T4592] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.516712][ T4592] xt_hashlimit: max too large, truncated to 1048576 [ 55.771511][ T4622] loop2: detected capacity change from 0 to 1024 [ 55.781448][ T4622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.797366][ T4622] netlink: 'syz.2.405': attribute type 13 has an invalid length. [ 55.815425][ T4622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.848261][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.023874][ T4638] loop0: detected capacity change from 0 to 1024 [ 56.027041][ T4639] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.104048][ T4638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.129203][ T4648] loop3: detected capacity change from 0 to 2048 [ 56.136250][ T4648] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.149272][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.174309][ T4655] xt_hashlimit: max too large, truncated to 1048576 [ 56.189422][ T4652] loop2: detected capacity change from 0 to 1024 [ 56.204422][ T4652] netlink: 'syz.2.417': attribute type 13 has an invalid length. [ 56.227802][ T4652] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.432657][ T4688] netlink: 'syz.2.432': attribute type 46 has an invalid length. [ 56.465912][ T4692] loop0: detected capacity change from 0 to 1024 [ 56.472254][ T4695] loop4: detected capacity change from 0 to 256 [ 56.479967][ T4692] netlink: 'syz.0.434': attribute type 13 has an invalid length. [ 56.490436][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.435'. [ 56.501375][ T4692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.525153][ T4695] vlan2: entered allmulticast mode [ 56.530379][ T4695] batadv0: entered allmulticast mode [ 56.680533][ T4707] loop0: detected capacity change from 0 to 512 [ 56.800488][ T4707] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.896748][ T4727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.948804][ T4732] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 56.975249][ T4733] loop3: detected capacity change from 0 to 1024 [ 56.989656][ T4737] FAULT_INJECTION: forcing a failure. [ 56.989656][ T4737] name failslab, interval 1, probability 0, space 0, times 0 [ 57.002411][ T4737] CPU: 0 UID: 0 PID: 4737 Comm: syz.2.450 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 57.002437][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 57.002486][ T4737] Call Trace: [ 57.002493][ T4737] [ 57.002502][ T4737] dump_stack_lvl+0xf6/0x150 [ 57.002530][ T4737] dump_stack+0x15/0x1a [ 57.002550][ T4737] should_fail_ex+0x261/0x270 [ 57.002585][ T4737] should_failslab+0x8f/0xb0 [ 57.002687][ T4737] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 57.002715][ T4737] ? __alloc_skb+0x10d/0x320 [ 57.002742][ T4737] __alloc_skb+0x10d/0x320 [ 57.002765][ T4737] netlink_alloc_large_skb+0xad/0xe0 [ 57.002820][ T4737] netlink_sendmsg+0x3da/0x720 [ 57.002856][ T4737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.002928][ T4737] __sock_sendmsg+0x140/0x180 [ 57.002945][ T4737] ____sys_sendmsg+0x350/0x4e0 [ 57.002988][ T4737] __sys_sendmsg+0x1a0/0x240 [ 57.003061][ T4737] __x64_sys_sendmsg+0x46/0x50 [ 57.003087][ T4737] x64_sys_call+0x26f3/0x2e10 [ 57.003110][ T4737] do_syscall_64+0xc9/0x1c0 [ 57.003147][ T4737] ? clear_bhb_loop+0x25/0x80 [ 57.003236][ T4737] ? clear_bhb_loop+0x25/0x80 [ 57.003257][ T4737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.003281][ T4737] RIP: 0033:0x7f50c879d169 [ 57.003299][ T4737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.003319][ T4737] RSP: 002b:00007f50c6dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.003341][ T4737] RAX: ffffffffffffffda RBX: 00007f50c89b5fa0 RCX: 00007f50c879d169 [ 57.003355][ T4737] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 57.003369][ T4737] RBP: 00007f50c6dff090 R08: 0000000000000000 R09: 0000000000000000 [ 57.003404][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.003415][ T4737] R13: 0000000000000000 R14: 00007f50c89b5fa0 R15: 00007ffcbe1678e8 [ 57.003436][ T4737] [ 57.233221][ T4733] netlink: 'syz.3.447': attribute type 13 has an invalid length. [ 57.260223][ T4745] netlink: 300 bytes leftover after parsing attributes in process `syz.1.452'. [ 57.409708][ T4733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.555813][ T4761] loop4: detected capacity change from 0 to 512 [ 57.569436][ T4761] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.605072][ T4761] EXT4-fs (loop4): invalid journal inode [ 57.616877][ T4761] EXT4-fs (loop4): can't get journal size [ 57.627797][ T4771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.462'. [ 57.657462][ T4771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 57.677541][ T4761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 57.685573][ T4761] System zones: 1-12, 13-13 [ 57.718833][ T4761] EXT4-fs (loop4): 1 truncate cleaned up [ 57.931558][ T4783] team0: No ports can be present during mode change [ 58.164213][ T4790] netlink: 'syz.3.468': attribute type 10 has an invalid length. [ 58.227591][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.264120][ T4790] team0: Port device bond0 added [ 58.407109][ T4796] loop3: detected capacity change from 0 to 1024 [ 58.505874][ T4796] netlink: 'syz.3.470': attribute type 13 has an invalid length. [ 58.526349][ T4796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.568158][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 58.568175][ T29] audit: type=1326 audit(1744667065.215:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 58.617538][ T29] audit: type=1326 audit(1744667065.215:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 58.641591][ T29] audit: type=1326 audit(1744667064.223:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4804 comm="syz.2.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 58.719575][ T29] audit: type=1326 audit(1744667064.353:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001bfcd169 code=0x7ffc0000 [ 58.743131][ T29] audit: type=1326 audit(1744667064.353:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001bfcd169 code=0x7ffc0000 [ 58.766669][ T29] audit: type=1326 audit(1744667064.353:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f001bfcd169 code=0x7ffc0000 [ 58.790364][ T29] audit: type=1326 audit(1744667063.370:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4816 comm="syz.4.478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001bfcd169 code=0x7ffc0000 [ 58.840510][ T29] audit: type=1400 audit(1744667063.490:1711): avc: denied { cpu } for pid=4822 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.884423][ T29] audit: type=1400 audit(1744667063.510:1712): avc: denied { tracepoint } for pid=4822 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.904259][ T29] audit: type=1400 audit(1744667063.510:1713): avc: denied { execute } for pid=4820 comm="syz.4.483" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 58.944298][ T4828] loop3: detected capacity change from 0 to 256 [ 58.956134][ T4828] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.979924][ T4828] xt_hashlimit: max too large, truncated to 1048576 [ 59.028565][ T4838] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.065443][ T4842] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4842 comm=syz.4.486 [ 59.415412][ T4860] loop4: detected capacity change from 0 to 1024 [ 59.464781][ T4860] netlink: 'syz.4.493': attribute type 13 has an invalid length. [ 59.607304][ T4860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.712878][ T4873] loop3: detected capacity change from 0 to 256 [ 59.755744][ T4873] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.819938][ T4873] xt_hashlimit: max too large, truncated to 1048576 [ 59.976439][ T4844] syz.2.487 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 59.990724][ T4844] CPU: 0 UID: 0 PID: 4844 Comm: syz.2.487 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 59.990756][ T4844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 59.990772][ T4844] Call Trace: [ 59.990781][ T4844] [ 59.990790][ T4844] dump_stack_lvl+0xf6/0x150 [ 59.990855][ T4844] dump_stack+0x15/0x1a [ 59.990871][ T4844] dump_header+0x83/0x2d0 [ 59.990909][ T4844] oom_kill_process+0x341/0x4c0 [ 59.990947][ T4844] out_of_memory+0x9d1/0xc20 [ 59.991025][ T4844] mem_cgroup_out_of_memory+0x13f/0x190 [ 59.991132][ T4844] try_charge_memcg+0x59f/0x820 [ 59.991170][ T4844] obj_cgroup_charge_pages+0xc0/0x1a0 [ 59.991198][ T4844] __memcg_kmem_charge_page+0x9d/0x170 [ 59.991223][ T4844] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 59.991344][ T4844] alloc_pages_mpol+0xb6/0x260 [ 59.991371][ T4844] alloc_pages_noprof+0xe8/0x130 [ 59.991395][ T4844] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 59.991505][ T4844] __kvmalloc_node_noprof+0x311/0x520 [ 59.991536][ T4844] ? ip_set_alloc+0x1f/0x30 [ 59.991557][ T4844] ? ip_set_alloc+0x1f/0x30 [ 59.991581][ T4844] ip_set_alloc+0x1f/0x30 [ 59.991598][ T4844] hash_netiface_create+0x273/0x730 [ 59.991629][ T4844] ? __nla_parse+0x40/0x60 [ 59.991712][ T4844] ? __pfx_hash_netiface_create+0x10/0x10 [ 59.991795][ T4844] ip_set_create+0x3b6/0x970 [ 59.991832][ T4844] ? __nla_parse+0x40/0x60 [ 59.991870][ T4844] nfnetlink_rcv_msg+0x4ba/0x580 [ 59.991924][ T4844] netlink_rcv_skb+0x12f/0x230 [ 59.991976][ T4844] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 59.992022][ T4844] nfnetlink_rcv+0x187/0x1610 [ 59.992057][ T4844] ? __kfree_skb+0x102/0x150 [ 59.992108][ T4844] ? nlmon_xmit+0x51/0x60 [ 59.992142][ T4844] ? __kfree_skb+0x102/0x150 [ 59.992171][ T4844] ? consume_skb+0x49/0x160 [ 59.992220][ T4844] ? nlmon_xmit+0x51/0x60 [ 59.992255][ T4844] ? dev_hard_start_xmit+0x3d1/0x400 [ 59.992290][ T4844] ? __dev_queue_xmit+0xb76/0x20b0 [ 59.992325][ T4844] ? should_fail_ex+0x31/0x270 [ 59.992375][ T4844] ? ref_tracker_free+0x3b8/0x420 [ 59.992415][ T4844] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 59.992446][ T4844] netlink_unicast+0x605/0x6c0 [ 59.992470][ T4844] netlink_sendmsg+0x609/0x720 [ 59.992563][ T4844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.992669][ T4844] __sock_sendmsg+0x140/0x180 [ 59.992692][ T4844] ____sys_sendmsg+0x350/0x4e0 [ 59.992789][ T4844] __sys_sendmsg+0x1a0/0x240 [ 59.992865][ T4844] __x64_sys_sendmsg+0x46/0x50 [ 59.992897][ T4844] x64_sys_call+0x26f3/0x2e10 [ 59.992919][ T4844] do_syscall_64+0xc9/0x1c0 [ 59.992976][ T4844] ? clear_bhb_loop+0x25/0x80 [ 59.993002][ T4844] ? clear_bhb_loop+0x25/0x80 [ 59.993028][ T4844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.993053][ T4844] RIP: 0033:0x7f50c879d169 [ 59.993070][ T4844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.993160][ T4844] RSP: 002b:00007f50c6dde038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.993183][ T4844] RAX: ffffffffffffffda RBX: 00007f50c89b6080 RCX: 00007f50c879d169 [ 59.993196][ T4844] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 59.993208][ T4844] RBP: 00007f50c881e990 R08: 0000000000000000 R09: 0000000000000000 [ 59.993219][ T4844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.993230][ T4844] R13: 0000000000000000 R14: 00007f50c89b6080 R15: 00007ffcbe1678e8 [ 59.993252][ T4844] [ 59.993259][ T4844] memory: usage 307200kB, limit 307200kB, failcnt 1651 [ 60.338985][ T4844] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 60.346911][ T4844] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 60.349729][ T4897] loop4: detected capacity change from 0 to 512 [ 60.354315][ T4844] Memory cgroup stats for /syz2: [ 60.361467][ T4844] cache 4096 [ 60.369668][ T4844] rss 0 [ 60.372444][ T4844] shmem 0 [ 60.375409][ T4844] mapped_file 0 [ 60.378910][ T4844] dirty 0 [ 60.381883][ T4844] writeback 0 [ 60.385111][ T4897] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.385167][ T4844] workingset_refault_anon 114 [ 60.398093][ T4844] workingset_refault_file 556 [ 60.402783][ T4844] swap 217088 [ 60.406080][ T4844] swapcached 8192 [ 60.408907][ T4897] EXT4-fs (loop4): invalid journal inode [ 60.409734][ T4844] pgpgin 135356 [ 60.418849][ T4844] pgpgout 135353 [ 60.422403][ T4844] pgfault 35118 [ 60.424578][ T4897] EXT4-fs (loop4): can't get journal size [ 60.425868][ T4844] pgmajfault 66 [ 60.425878][ T4844] inactive_anon 0 [ 60.425887][ T4844] active_anon 8192 [ 60.442552][ T4844] inactive_file 0 [ 60.446198][ T4844] active_file 4096 [ 60.447853][ T4897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 60.450000][ T4844] unevictable 0 [ 60.461355][ T4844] hierarchical_memory_limit 314572800 [ 60.466840][ T4844] hierarchical_memsw_limit 9223372036854771712 [ 60.467540][ T4897] System zones: 1-12, 13-13 [ 60.473224][ T4844] total_cache 4096 [ 60.481544][ T4844] total_rss 0 [ 60.481556][ T4844] total_shmem 0 [ 60.481564][ T4844] total_mapped_file 0 [ 60.481572][ T4844] total_dirty 0 [ 60.481580][ T4844] total_writeback 0 [ 60.481589][ T4844] total_workingset_refault_anon 114 [ 60.481650][ T4844] total_workingset_refault_file 556 [ 60.485141][ T4897] EXT4-fs (loop4): 1 truncate cleaned up [ 60.488408][ T4844] total_swap 217088 [ 60.488420][ T4844] total_swapcached 8192 [ 60.523994][ T4844] total_pgpgin 135356 [ 60.528536][ T4844] total_pgpgout 135353 [ 60.532612][ T4844] total_pgfault 35118 [ 60.536657][ T4844] total_pgmajfault 66 [ 60.540670][ T4844] total_inactive_anon 0 [ 60.544918][ T4844] total_active_anon 8192 [ 60.549317][ T4844] total_inactive_file 0 [ 60.553478][ T4844] total_active_file 4096 [ 60.557821][ T4844] total_unevictable 0 [ 60.561796][ T4844] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.487,pid=4839,uid=0 [ 60.576636][ T4844] Memory cgroup out of memory: Killed process 4839 (syz.2.487) total-vm:100140kB, anon-rss:1044kB, file-rss:26704kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 60.850405][ T4909] xt_CT: No such helper "syz0" [ 60.976246][ T4920] loop1: detected capacity change from 0 to 1024 [ 61.028190][ T4920] netlink: 'syz.1.518': attribute type 13 has an invalid length. [ 61.055529][ T4920] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.131426][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 61.140374][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 61.182133][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 61.239287][ T4941] FAULT_INJECTION: forcing a failure. [ 61.239287][ T4941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.252363][ T4902] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.260170][ T4941] CPU: 0 UID: 0 PID: 4941 Comm: syz.4.524 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 61.260222][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.260237][ T4941] Call Trace: [ 61.260244][ T4941] [ 61.260252][ T4941] dump_stack_lvl+0xf6/0x150 [ 61.260313][ T4941] dump_stack+0x15/0x1a [ 61.260329][ T4941] should_fail_ex+0x261/0x270 [ 61.260361][ T4941] should_fail+0xb/0x10 [ 61.260387][ T4941] should_fail_usercopy+0x1a/0x20 [ 61.260422][ T4941] _copy_from_user+0x1c/0xa0 [ 61.260461][ T4941] kstrtouint_from_user+0x84/0x100 [ 61.260494][ T4941] ? 0xffffffff81000000 [ 61.260506][ T4941] ? selinux_file_permission+0x22d/0x360 [ 61.260595][ T4941] proc_fail_nth_write+0x54/0x160 [ 61.260613][ T4941] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 61.260633][ T4941] vfs_write+0x295/0x950 [ 61.260661][ T4941] ? __fget_files+0x186/0x1c0 [ 61.260682][ T4941] ksys_write+0xeb/0x1b0 [ 61.260788][ T4941] __x64_sys_write+0x42/0x50 [ 61.260816][ T4941] x64_sys_call+0x2a45/0x2e10 [ 61.260881][ T4941] do_syscall_64+0xc9/0x1c0 [ 61.260917][ T4941] ? clear_bhb_loop+0x25/0x80 [ 61.260942][ T4941] ? clear_bhb_loop+0x25/0x80 [ 61.260963][ T4941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.261012][ T4941] RIP: 0033:0x7f001bfcbc1f [ 61.261029][ T4941] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 61.261050][ T4941] RSP: 002b:00007f001a60e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 61.261072][ T4941] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f001bfcbc1f [ 61.261086][ T4941] RDX: 0000000000000001 RSI: 00007f001a60e0a0 RDI: 0000000000000008 [ 61.261100][ T4941] RBP: 00007f001a60e090 R08: 0000000000000000 R09: 0000000000000000 [ 61.261114][ T4941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 61.261127][ T4941] R13: 0000000000000000 R14: 00007f001c1e6080 R15: 00007ffe60e7ae48 [ 61.261157][ T4941] [ 61.731892][ T4961] loop0: detected capacity change from 0 to 1024 [ 61.740862][ T4964] loop1: detected capacity change from 0 to 256 [ 61.749035][ T4964] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.763454][ T4964] xt_hashlimit: max too large, truncated to 1048576 [ 61.819464][ T4961] netlink: 'syz.0.532': attribute type 13 has an invalid length. [ 61.849501][ T4961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.856372][ T4972] loop4: detected capacity change from 0 to 256 [ 61.879158][ T4972] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.894184][ T4972] xt_hashlimit: max too large, truncated to 1048576 [ 61.936921][ T3380] kernel write not supported for file /ppp (pid: 3380 comm: kworker/0:3) [ 61.948633][ T4981] loop2: detected capacity change from 0 to 512 [ 61.956039][ T4981] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 61.965292][ T4981] EXT4-fs (loop2): invalid journal inode [ 61.971185][ T4981] EXT4-fs (loop2): can't get journal size [ 61.977703][ T4978] loop0: detected capacity change from 0 to 512 [ 61.984725][ T4978] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.995320][ T4981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 62.003524][ T4981] System zones: 1-12, 13-13 [ 62.009123][ T4981] EXT4-fs (loop2): 1 truncate cleaned up [ 62.024753][ T4978] EXT4-fs (loop0): 1 truncate cleaned up [ 62.165109][ T4997] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 63.022595][ T5023] loop4: detected capacity change from 0 to 1764 [ 63.070959][ T5022] FAULT_INJECTION: forcing a failure. [ 63.070959][ T5022] name failslab, interval 1, probability 0, space 0, times 0 [ 63.083916][ T5022] CPU: 0 UID: 0 PID: 5022 Comm: syz.2.553 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 63.083946][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.083959][ T5022] Call Trace: [ 63.083968][ T5022] [ 63.083977][ T5022] dump_stack_lvl+0xf6/0x150 [ 63.084070][ T5022] dump_stack+0x15/0x1a [ 63.084163][ T5022] should_fail_ex+0x261/0x270 [ 63.084190][ T5022] should_failslab+0x8f/0xb0 [ 63.084223][ T5022] kmem_cache_alloc_noprof+0x59/0x340 [ 63.084250][ T5022] ? getname_flags+0x81/0x3b0 [ 63.084276][ T5022] getname_flags+0x81/0x3b0 [ 63.084345][ T5022] user_path_at+0x26/0x140 [ 63.084375][ T5022] __se_sys_mount+0x25e/0x2e0 [ 63.084464][ T5022] __x64_sys_mount+0x67/0x80 [ 63.084499][ T5022] x64_sys_call+0xd11/0x2e10 [ 63.084525][ T5022] do_syscall_64+0xc9/0x1c0 [ 63.084617][ T5022] ? clear_bhb_loop+0x25/0x80 [ 63.084638][ T5022] ? clear_bhb_loop+0x25/0x80 [ 63.084664][ T5022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.084688][ T5022] RIP: 0033:0x7f50c879d169 [ 63.084713][ T5022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.084787][ T5022] RSP: 002b:00007f50c6dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.084875][ T5022] RAX: ffffffffffffffda RBX: 00007f50c89b5fa0 RCX: 00007f50c879d169 [ 63.084907][ T5022] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 63.084931][ T5022] RBP: 00007f50c6dff090 R08: 0000200000000300 R09: 0000000000000000 [ 63.084945][ T5022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.084959][ T5022] R13: 0000000000000000 R14: 00007f50c89b5fa0 R15: 00007ffcbe1678e8 [ 63.084985][ T5022] [ 63.262631][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 63.271639][ T5029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 63.325119][ T5031] 9pnet_virtio: no channels available for device /dev/nullb0 [ 63.344948][ T5033] set match dimension is over the limit! [ 63.446686][ T5047] netlink: 132 bytes leftover after parsing attributes in process `syz.4.558'. [ 63.617276][ T5064] netlink: 164 bytes leftover after parsing attributes in process `syz.2.568'. [ 63.644945][ T5064] loop2: detected capacity change from 0 to 512 [ 63.653638][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 63.653652][ T29] audit: type=1400 audit(1744667060.303:2103): avc: denied { write } for pid=5061 comm="syz.3.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.703426][ T5064] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.779025][ T5064] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.568: corrupted inode contents [ 63.802820][ T5064] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.568: mark_inode_dirty error [ 63.816687][ T5064] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.568: corrupted inode contents [ 63.839312][ T5064] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.568: mark_inode_dirty error [ 63.853941][ T29] audit: type=1400 audit(1744667060.363:2104): avc: denied { read } for pid=5063 comm="syz.2.568" path="/121/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.857317][ T5064] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.568: mark inode dirty (error -117) [ 63.876615][ T29] audit: type=1400 audit(1744667060.363:2105): avc: denied { setattr } for pid=5063 comm="syz.2.568" path="/121/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.876647][ T29] audit: type=1400 audit(1744667060.413:2106): avc: denied { ioctl } for pid=5063 comm="syz.2.568" path="/121/file1/file1" dev="loop2" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.938450][ T29] audit: type=1400 audit(1744667060.563:2107): avc: denied { ioctl } for pid=5061 comm="syz.3.567" path="socket:[8710]" dev="sockfs" ino=8710 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.939041][ T5064] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 63.995439][ T5078] FAULT_INJECTION: forcing a failure. [ 63.995439][ T5078] name failslab, interval 1, probability 0, space 0, times 0 [ 64.008550][ T5078] CPU: 0 UID: 0 PID: 5078 Comm: syz.1.570 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 64.008626][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.008641][ T5078] Call Trace: [ 64.008649][ T5078] [ 64.008659][ T5078] dump_stack_lvl+0xf6/0x150 [ 64.008688][ T5078] dump_stack+0x15/0x1a [ 64.008708][ T5078] should_fail_ex+0x261/0x270 [ 64.008767][ T5078] should_failslab+0x8f/0xb0 [ 64.008844][ T5078] __kmalloc_cache_noprof+0x55/0x320 [ 64.008866][ T5078] ? __rdma_create_id+0x49/0x330 [ 64.008951][ T5078] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 64.008985][ T5078] __rdma_create_id+0x49/0x330 [ 64.009058][ T5078] ? should_failslab+0x8f/0xb0 [ 64.009093][ T5078] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 64.009129][ T5078] __rdma_create_kernel_id+0x3c/0x80 [ 64.009153][ T5078] rdma_create_trans+0x521/0x9f0 [ 64.009207][ T5078] ? __rcu_read_unlock+0x4e/0x70 [ 64.009272][ T5078] p9_client_create+0x5f3/0xbb0 [ 64.009306][ T5078] v9fs_session_init+0xfb/0xdb0 [ 64.009412][ T5078] ? obj_cgroup_charge+0xc9/0x170 [ 64.009439][ T5078] ? prandom_u32_state+0xa6/0xd0 [ 64.009508][ T5078] ? should_fail_ex+0xd7/0x270 [ 64.009539][ T5078] ? should_failslab+0x8f/0xb0 [ 64.009603][ T5078] ? __kmalloc_cache_noprof+0x18d/0x320 [ 64.009630][ T5078] ? v9fs_mount+0x56/0x580 [ 64.009721][ T5078] v9fs_mount+0x6c/0x580 [ 64.009754][ T5078] ? __pfx_v9fs_mount+0x10/0x10 [ 64.009788][ T5078] legacy_get_tree+0x77/0xd0 [ 64.009867][ T5078] vfs_get_tree+0x56/0x1e0 [ 64.009903][ T5078] do_new_mount+0x246/0x6b0 [ 64.009945][ T5078] path_mount+0x49b/0xb30 [ 64.010021][ T5078] __se_sys_mount+0x28f/0x2e0 [ 64.010073][ T5078] __x64_sys_mount+0x67/0x80 [ 64.010113][ T5078] x64_sys_call+0xd11/0x2e10 [ 64.010140][ T5078] do_syscall_64+0xc9/0x1c0 [ 64.010194][ T5078] ? clear_bhb_loop+0x25/0x80 [ 64.010220][ T5078] ? clear_bhb_loop+0x25/0x80 [ 64.010294][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.010319][ T5078] RIP: 0033:0x7fa34d90d169 [ 64.010337][ T5078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.010359][ T5078] RSP: 002b:00007fa34bf6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 64.010381][ T5078] RAX: ffffffffffffffda RBX: 00007fa34db25fa0 RCX: 00007fa34d90d169 [ 64.010474][ T5078] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 64.010489][ T5078] RBP: 00007fa34bf6f090 R08: 0000200000000300 R09: 0000000000000000 [ 64.010503][ T5078] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 64.010517][ T5078] R13: 0000000000000000 R14: 00007fa34db25fa0 R15: 00007ffe6ca1db18 [ 64.010539][ T5078] [ 64.292049][ T5084] loop0: detected capacity change from 0 to 512 [ 64.311197][ T5084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.357573][ T5084] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.371548][ T29] audit: type=1326 audit(1744667061.003:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 64.395311][ T29] audit: type=1326 audit(1744667061.003:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 64.419168][ T29] audit: type=1326 audit(1744667061.003:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 64.442817][ T29] audit: type=1326 audit(1744667060.020:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5087 comm="syz.2.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x7ffc0000 [ 64.467193][ T29] audit: type=1326 audit(1744667060.030:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.4.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f001bfcd169 code=0x7ffc0000 [ 64.493474][ T5084] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.571: Failed to acquire dquot type 1 [ 64.505447][ T5084] EXT4-fs (loop0): 1 truncate cleaned up [ 64.516066][ T5095] netlink: 268 bytes leftover after parsing attributes in process `syz.1.578'. [ 64.525314][ T5095] unsupported nla_type 65024 [ 64.539352][ T5099] loop4: detected capacity change from 0 to 1024 [ 64.582764][ T5099] netlink: 'syz.4.577': attribute type 13 has an invalid length. [ 64.610189][ T5107] FAULT_INJECTION: forcing a failure. [ 64.610189][ T5107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.623970][ T5099] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.645960][ T5107] CPU: 1 UID: 0 PID: 5107 Comm: syz.1.583 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 64.646103][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.646116][ T5107] Call Trace: [ 64.646122][ T5107] [ 64.646128][ T5107] dump_stack_lvl+0xf6/0x150 [ 64.646152][ T5107] dump_stack+0x15/0x1a [ 64.646169][ T5107] should_fail_ex+0x261/0x270 [ 64.646202][ T5107] should_fail_alloc_page+0xfd/0x110 [ 64.646291][ T5107] __alloc_frozen_pages_noprof+0x11d/0x360 [ 64.646324][ T5107] alloc_pages_mpol+0xb6/0x260 [ 64.646348][ T5107] folio_alloc_noprof+0xee/0x140 [ 64.646372][ T5107] filemap_alloc_folio_noprof+0x6d/0x220 [ 64.646486][ T5107] __filemap_get_folio+0x2ab/0x6b0 [ 64.646516][ T5107] ? __filemap_get_folio+0x465/0x6b0 [ 64.646549][ T5107] aio_setup_ring+0x270/0x730 [ 64.646573][ T5107] ioctx_alloc+0x2b2/0x4c0 [ 64.646713][ T5107] __se_sys_io_setup+0x6b/0x1b0 [ 64.646745][ T5107] __x64_sys_io_setup+0x31/0x40 [ 64.646797][ T5107] x64_sys_call+0x2b35/0x2e10 [ 64.646819][ T5107] do_syscall_64+0xc9/0x1c0 [ 64.646876][ T5107] ? clear_bhb_loop+0x25/0x80 [ 64.646897][ T5107] ? clear_bhb_loop+0x25/0x80 [ 64.646918][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.646943][ T5107] RIP: 0033:0x7fa34d90d169 [ 64.646960][ T5107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.646980][ T5107] RSP: 002b:00007fa34bf6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 64.647034][ T5107] RAX: ffffffffffffffda RBX: 00007fa34db25fa0 RCX: 00007fa34d90d169 [ 64.647048][ T5107] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000a915 [ 64.647101][ T5107] RBP: 00007fa34bf6f090 R08: 0000000000000000 R09: 0000000000000000 [ 64.647114][ T5107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.647127][ T5107] R13: 0000000000000000 R14: 00007fa34db25fa0 R15: 00007ffe6ca1db18 [ 64.647149][ T5107] [ 64.845870][ T5097] loop3: detected capacity change from 0 to 256 [ 64.869339][ T5097] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.898081][ T5097] xt_hashlimit: max too large, truncated to 1048576 [ 65.011444][ T5129] loop2: detected capacity change from 0 to 2048 [ 65.032245][ T5134] loop4: detected capacity change from 0 to 512 [ 65.040744][ T5134] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 65.052423][ T5134] EXT4-fs (loop4): invalid journal inode [ 65.059146][ T5134] EXT4-fs (loop4): can't get journal size [ 65.073534][ T5134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 65.081744][ T5134] System zones: 1-12, 13-13 [ 65.089359][ T5134] EXT4-fs (loop4): 1 truncate cleaned up [ 65.173109][ T5143] loop3: detected capacity change from 0 to 256 [ 65.188797][ T5143] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.210167][ T5143] xt_hashlimit: max too large, truncated to 1048576 [ 65.222761][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.601'. [ 65.237151][ T5151] loop1: detected capacity change from 0 to 1024 [ 65.246254][ T5151] EXT4-fs: Ignoring removed nobh option [ 65.251960][ T5151] EXT4-fs: Ignoring removed bh option [ 65.268085][ T5151] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 65.341368][ T5170] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.353051][ T5170] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.435486][ T5179] netlink: 'syz.2.612': attribute type 298 has an invalid length. [ 65.596395][ T5201] loop2: detected capacity change from 0 to 256 [ 65.606125][ T5201] vfat: Unknown parameter 'fowner' [ 65.709742][ T5209] loop2: detected capacity change from 0 to 512 [ 65.719737][ T5209] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.634: inode #16777216: comm syz.2.634: iget: illegal inode # [ 65.721634][ T5212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 65.748255][ T5209] EXT4-fs (loop2): Remounting filesystem read-only [ 65.754876][ T5209] EXT4-fs (loop2): no journal found [ 65.760145][ T5209] EXT4-fs (loop2): can't get journal size [ 65.767620][ T5209] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 65.779351][ T5209] EXT4-fs (loop2): failed to initialize system zone (-22) [ 65.795814][ T5209] EXT4-fs (loop2): mount failed [ 65.871845][ T5221] loop4: detected capacity change from 0 to 256 [ 65.890653][ T5221] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.915359][ T5221] xt_hashlimit: max too large, truncated to 1048576 [ 66.031423][ T5226] loop3: detected capacity change from 0 to 1024 [ 66.050304][ T5226] ext4: Unknown parameter 'uid<00000000000000000000' [ 66.063325][ T5234] loop2: detected capacity change from 0 to 512 [ 66.073376][ T5234] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.097595][ T5234] EXT4-fs (loop2): 1 truncate cleaned up [ 66.231478][ T5172] delete_channel: no stack [ 66.318187][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.327086][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.336423][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.351494][ T5261] loop2: detected capacity change from 0 to 1024 [ 66.363999][ T5261] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.373438][ T5261] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.390952][ T5258] loop1: detected capacity change from 0 to 256 [ 66.399395][ T5261] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 66.407579][ T5261] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.414212][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.414273][ T5263] loop3: detected capacity change from 0 to 512 [ 66.423027][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.449931][ T5263] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.466771][ T5261] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.477675][ T5263] EXT4-fs (loop3): invalid journal inode [ 66.483399][ T5263] EXT4-fs (loop3): can't get journal size [ 66.509497][ T5261] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.654: mark_inode_dirty error [ 66.522387][ T5261] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.654: Invalid block bitmap block 3 in block_group 0 [ 66.536450][ T5261] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.654: Invalid block bitmap block 3 in block_group 0 [ 66.552242][ T5261] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.654: Invalid block bitmap block 3 in block_group 0 [ 66.558164][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.596940][ T5258] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.613725][ T5261] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.613919][ T5263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 66.647628][ T5261] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #3: comm syz.2.654: mark_inode_dirty error [ 66.648716][ T5263] System zones: 1-12, 13-13 [ 66.668585][ T5258] xt_hashlimit: max too large, truncated to 1048576 [ 66.677661][ T5261] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 1: comm syz.2.654: lblock 6 mapped to illegal pblock 1 (length 1) [ 66.705567][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.705745][ T5261] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 48: comm syz.2.654: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.714459][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.757352][ T5263] EXT4-fs (loop3): 1 truncate cleaned up [ 66.774443][ T5261] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.654: Failed to acquire dquot type 0 [ 66.800245][ T5261] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 49: comm syz.2.654: lblock 1 mapped to illegal pblock 49 (length 1) [ 66.800420][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 66.814990][ T5261] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.654: Failed to acquire dquot type 0 [ 66.836526][ T5261] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.846213][ T5261] EXT4-fs error (device loop2): ext4_evict_inode:259: inode #15: comm syz.2.654: mark_inode_dirty error [ 66.862039][ T5261] EXT4-fs warning (device loop2): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 66.877141][ T5261] EXT4-fs (loop2): 1 orphan inode deleted [ 66.980949][ T5281] netlink: 'syz.4.648': attribute type 6 has an invalid length. [ 66.989181][ T5282] loop0: detected capacity change from 0 to 512 [ 67.007380][ T5282] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.023381][ T5282] EXT4-fs (loop0): 1 truncate cleaned up [ 67.029315][ T5284] loop2: detected capacity change from 0 to 128 [ 67.045573][ T5284] syz.2.649: attempt to access beyond end of device [ 67.045573][ T5284] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 67.059480][ T5284] syz.2.649: attempt to access beyond end of device [ 67.059480][ T5284] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 67.073433][ T5284] syz.2.649: attempt to access beyond end of device [ 67.073433][ T5284] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 67.080961][ T5290] usb usb8: usbfs: process 5290 (syz.4.651) did not claim interface 0 before use [ 67.087260][ T5284] syz.2.649: attempt to access beyond end of device [ 67.087260][ T5284] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 67.110260][ T5284] syz.2.649: attempt to access beyond end of device [ 67.110260][ T5284] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 67.123823][ T5284] syz.2.649: attempt to access beyond end of device [ 67.123823][ T5284] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 67.137461][ T5284] syz.2.649: attempt to access beyond end of device [ 67.137461][ T5284] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 67.151802][ T5284] syz.2.649: attempt to access beyond end of device [ 67.151802][ T5284] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 67.165252][ T5284] syz.2.649: attempt to access beyond end of device [ 67.165252][ T5284] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 67.179013][ T5284] syz.2.649: attempt to access beyond end of device [ 67.179013][ T5284] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 67.196938][ T5290] loop4: detected capacity change from 0 to 512 [ 67.242235][ T5290] EXT4-fs (loop4): 1 orphan inode deleted [ 67.250444][ T4967] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 67.257244][ T5290] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.329291][ T5310] loop2: detected capacity change from 0 to 256 [ 67.367493][ T5310] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.379817][ T5310] xt_hashlimit: max too large, truncated to 1048576 [ 67.434605][ T5324] loop0: detected capacity change from 0 to 1024 [ 67.463667][ T5325] loop3: detected capacity change from 0 to 512 [ 67.472579][ T5325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.477759][ T5324] EXT4-fs: Ignoring removed orlov option [ 67.479587][ T5325] ext2: Bad value for 'resgid' [ 67.490717][ T5325] ext2: Bad value for 'resgid' [ 67.522945][ T23] kernel write not supported for file /393/attr/exec (pid: 23 comm: kworker/1:0) [ 67.534935][ T5332] netlink: '+}[@': attribute type 3 has an invalid length. [ 67.546764][ T5333] loop4: detected capacity change from 0 to 512 [ 67.572537][ T5333] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.636645][ T5341] loop0: detected capacity change from 0 to 164 [ 67.672539][ T5341] ISOFS: unable to read i-node block [ 67.677948][ T5341] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 67.832213][ T5368] loop1: detected capacity change from 0 to 2048 [ 67.855722][ T5368] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.683: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 67.873223][ T5372] syzkaller1: entered promiscuous mode [ 67.873574][ T5368] EXT4-fs (loop1): Remounting filesystem read-only [ 67.878820][ T5372] syzkaller1: entered allmulticast mode [ 67.896158][ T5375] loop2: detected capacity change from 0 to 512 [ 67.904798][ T5375] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 67.915865][ T5375] EXT4-fs (loop2): invalid journal inode [ 67.921896][ T5375] EXT4-fs (loop2): can't get journal size [ 67.929182][ T5375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 67.930703][ T5377] loop0: detected capacity change from 0 to 512 [ 67.937289][ T5375] System zones: 1-12, 13-13 [ 67.949610][ T5375] EXT4-fs (loop2): 1 truncate cleaned up [ 67.952553][ T5377] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.686: inode #16777216: comm syz.0.686: iget: illegal inode # [ 67.970648][ T5377] EXT4-fs (loop0): Remounting filesystem read-only [ 67.977214][ T5377] EXT4-fs (loop0): no journal found [ 67.982480][ T5377] EXT4-fs (loop0): can't get journal size [ 67.999596][ T5381] loop1: detected capacity change from 0 to 512 [ 68.006516][ T5381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.018622][ T5377] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 68.030049][ T5381] EXT4-fs (loop1): 1 truncate cleaned up [ 68.044531][ T5377] EXT4-fs (loop0): failed to initialize system zone (-22) [ 68.069283][ T5377] EXT4-fs (loop0): mount failed [ 68.240517][ T5398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.690'. [ 68.257328][ T5398] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 68.261192][ T5401] loop3: detected capacity change from 0 to 512 [ 68.270601][ T5398] : renamed from bond0 (while UP) [ 68.294693][ T5401] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.329267][ T5407] loop0: detected capacity change from 0 to 164 [ 68.366943][ T5407] Unable to read rock-ridge attributes [ 68.378694][ T5407] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 68.395707][ T5392] FAULT_INJECTION: forcing a failure. [ 68.395707][ T5392] name failslab, interval 1, probability 0, space 0, times 0 [ 68.408567][ T5392] CPU: 1 UID: 0 PID: 5392 Comm: syz.4.691 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 68.408595][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.408610][ T5392] Call Trace: [ 68.408618][ T5392] [ 68.408627][ T5392] dump_stack_lvl+0xf6/0x150 [ 68.408656][ T5392] dump_stack+0x15/0x1a [ 68.408673][ T5392] should_fail_ex+0x261/0x270 [ 68.408757][ T5392] should_failslab+0x8f/0xb0 [ 68.408881][ T5392] kmem_cache_alloc_noprof+0x59/0x340 [ 68.408909][ T5392] ? security_inode_alloc+0x37/0x100 [ 68.408975][ T5392] security_inode_alloc+0x37/0x100 [ 68.409011][ T5392] inode_init_always_gfp+0x4a2/0x4f0 [ 68.409126][ T5392] ? __pfx_proc_alloc_inode+0x10/0x10 [ 68.409153][ T5392] alloc_inode+0x86/0x170 [ 68.409233][ T5392] new_inode+0x1e/0xe0 [ 68.409255][ T5392] proc_pid_make_inode+0x1d/0xd0 [ 68.409288][ T5392] proc_ns_dir_lookup+0x138/0x220 [ 68.409381][ T5392] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 68.409418][ T5392] path_openat+0xd76/0x2000 [ 68.409489][ T5392] do_filp_open+0x115/0x240 [ 68.409524][ T5392] ? __pfx_kfree_link+0x10/0x10 [ 68.409562][ T5392] do_sys_openat2+0xaa/0x110 [ 68.409591][ T5392] __x64_sys_openat+0xf8/0x120 [ 68.409684][ T5392] x64_sys_call+0x1ac/0x2e10 [ 68.409726][ T5392] do_syscall_64+0xc9/0x1c0 [ 68.409756][ T5392] ? clear_bhb_loop+0x25/0x80 [ 68.409779][ T5392] ? clear_bhb_loop+0x25/0x80 [ 68.409805][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.409828][ T5392] RIP: 0033:0x7f001bfcbad0 [ 68.409915][ T5392] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 68.409936][ T5392] RSP: 002b:00007f001a62ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 68.409957][ T5392] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f001bfcbad0 [ 68.409983][ T5392] RDX: 0000000000000002 RSI: 00007f001a62efa0 RDI: 00000000ffffff9c [ 68.409994][ T5392] RBP: 00007f001a62efa0 R08: 0000000000000000 R09: 00007f001a62ecd5 [ 68.410005][ T5392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 68.410016][ T5392] R13: 0000000000000000 R14: 00007f001c1e5fa0 R15: 00007ffe60e7ae48 [ 68.410036][ T5392] [ 68.451734][ T5407] Unable to read rock-ridge attributes [ 68.668898][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 68.668915][ T29] audit: type=1326 audit(1744667050.313:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.715019][ T29] audit: type=1326 audit(1744667050.313:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.738905][ T29] audit: type=1326 audit(1744667050.313:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.762585][ T29] audit: type=1326 audit(1744667050.313:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.786613][ T29] audit: type=1326 audit(1744667050.313:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.810323][ T29] audit: type=1326 audit(1744667050.313:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb173f5d1a3 code=0x7ffc0000 [ 68.833614][ T29] audit: type=1326 audit(1744667050.313:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb173f5d1a3 code=0x7ffc0000 [ 68.856841][ T29] audit: type=1326 audit(1744667050.313:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.880170][ T29] audit: type=1326 audit(1744667050.313:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 68.903512][ T29] audit: type=1326 audit(1744667050.313:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5409 comm="syz.3.698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb173f5bc1f code=0x7ffc0000 [ 68.931401][ T3308] EXT4-fs unmount: 53 callbacks suppressed [ 68.931419][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.966309][ T5422] loop4: detected capacity change from 0 to 512 [ 68.984557][ T5422] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.703: inode #16777216: comm syz.4.703: iget: illegal inode # [ 69.004079][ T5422] EXT4-fs (loop4): Remounting filesystem read-only [ 69.010692][ T5422] EXT4-fs (loop4): no journal found [ 69.015918][ T5422] EXT4-fs (loop4): can't get journal size [ 69.203205][ T5422] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 69.219906][ T5422] EXT4-fs (loop4): failed to initialize system zone (-22) [ 69.227083][ T5422] EXT4-fs (loop4): mount failed [ 69.256075][ T5440] loop1: detected capacity change from 0 to 256 [ 69.267754][ T5440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.281342][ T5440] xt_hashlimit: max too large, truncated to 1048576 [ 69.451231][ T5467] loop2: detected capacity change from 0 to 1024 [ 69.459793][ T5467] EXT4-fs: Ignoring removed orlov option [ 69.480742][ T5467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.585331][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.611050][ T5493] loop4: detected capacity change from 0 to 512 [ 69.618029][ T5493] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.630459][ T5493] EXT4-fs (loop4): 1 truncate cleaned up [ 69.636779][ T5493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.667102][ T5497] loop2: detected capacity change from 0 to 256 [ 69.675778][ T5497] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.695999][ T5497] xt_hashlimit: max too large, truncated to 1048576 [ 69.746425][ T5504] loop3: detected capacity change from 0 to 1024 [ 69.765751][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.780904][ T5504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.826659][ T5504] netlink: 'syz.3.735': attribute type 13 has an invalid length. [ 69.877299][ T5504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.916828][ T5530] loop2: detected capacity change from 0 to 1024 [ 69.929722][ T5530] EXT4-fs: Ignoring removed orlov option [ 69.951619][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.960438][ T5537] loop0: detected capacity change from 0 to 512 [ 69.961499][ T5521] loop4: detected capacity change from 0 to 512 [ 69.974154][ T5537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.997363][ T5540] loop3: detected capacity change from 0 to 512 [ 70.000068][ T5542] loop1: detected capacity change from 0 to 512 [ 70.004671][ T5521] EXT4-fs: Ignoring removed oldalloc option [ 70.010621][ T5530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.016913][ T5540] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.749: inode #16777216: comm syz.3.749: iget: illegal inode # [ 70.028244][ T5537] EXT4-fs (loop0): 1 truncate cleaned up [ 70.044639][ T5521] ext4: Unknown parameter 'fsname' [ 70.052267][ T5542] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.750: inode #16777216: comm syz.1.750: iget: illegal inode # [ 70.067406][ T5537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.090297][ T5542] EXT4-fs (loop1): Remounting filesystem read-only [ 70.093224][ T5540] EXT4-fs (loop3): Remounting filesystem read-only [ 70.096838][ T5542] EXT4-fs (loop1): no journal found [ 70.103354][ T5540] EXT4-fs (loop3): no journal found [ 70.103368][ T5540] EXT4-fs (loop3): can't get journal size [ 70.108579][ T5542] EXT4-fs (loop1): can't get journal size [ 70.140863][ T5542] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 70.153541][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.172172][ T5540] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 70.197058][ T5542] EXT4-fs (loop1): failed to initialize system zone (-22) [ 70.204315][ T5542] EXT4-fs (loop1): mount failed [ 70.233507][ T3363] hid-generic 0000:0004:03FF.0001: unknown main item tag 0x0 [ 70.241016][ T3363] hid-generic 0000:0004:03FF.0001: unknown main item tag 0x0 [ 70.241423][ T5540] EXT4-fs (loop3): failed to initialize system zone (-22) [ 70.248488][ T3363] hid-generic 0000:0004:03FF.0001: unknown main item tag 0x0 [ 70.272036][ T3363] hid-generic 0000:0004:03FF.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 70.284217][ T5540] EXT4-fs (loop3): mount failed [ 70.322599][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.413217][ T5572] loop1: detected capacity change from 0 to 256 [ 70.419008][ T5574] loop0: detected capacity change from 0 to 1024 [ 70.428261][ T5572] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.434993][ T5574] EXT4-fs: Ignoring removed orlov option [ 70.448650][ T5572] xt_hashlimit: max too large, truncated to 1048576 [ 70.468027][ T5580] loop3: detected capacity change from 0 to 256 [ 70.475524][ T5574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.492519][ T5580] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.514043][ T5586] loop2: detected capacity change from 0 to 512 [ 70.526882][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.536068][ T5586] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.768: inode #16777216: comm syz.2.768: iget: illegal inode # [ 70.540389][ T5580] xt_hashlimit: max too large, truncated to 1048576 [ 70.567910][ T5586] EXT4-fs (loop2): Remounting filesystem read-only [ 70.574487][ T5586] EXT4-fs (loop2): no journal found [ 70.579785][ T5586] EXT4-fs (loop2): can't get journal size [ 70.606072][ T5586] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 70.628655][ T5586] EXT4-fs (loop2): failed to initialize system zone (-22) [ 70.638494][ T5586] EXT4-fs (loop2): mount failed [ 70.646188][ T5591] mmap: syz.1.771 (5591) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.658462][ T5594] loop0: detected capacity change from 0 to 256 [ 70.715004][ T5591] loop1: detected capacity change from 0 to 512 [ 70.734305][ T5591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.744232][ T5591] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 70.753493][ T5594] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.775079][ T5594] xt_hashlimit: max too large, truncated to 1048576 [ 70.909739][ T5615] loop0: detected capacity change from 0 to 256 [ 70.946009][ T5615] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.967540][ T5610] loop2: detected capacity change from 0 to 2048 [ 70.973877][ T5615] xt_hashlimit: max too large, truncated to 1048576 [ 71.139315][ T5628] loop4: detected capacity change from 0 to 512 [ 71.159666][ T5628] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.785: inode #16777216: comm syz.4.785: iget: illegal inode # [ 71.233056][ T5628] EXT4-fs (loop4): Remounting filesystem read-only [ 71.239654][ T5628] EXT4-fs (loop4): no journal found [ 71.244889][ T5628] EXT4-fs (loop4): can't get journal size [ 71.254578][ T5628] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 71.267436][ T5638] loop1: detected capacity change from 0 to 164 [ 71.271009][ T5628] EXT4-fs (loop4): failed to initialize system zone (-22) [ 71.274045][ T5638] iso9660: Unknown parameter 'ÊŸ·ŽÚ÷¿eíW£9Õý4fè' [ 71.288085][ T5628] EXT4-fs (loop4): mount failed [ 71.325718][ T5643] loop3: detected capacity change from 0 to 256 [ 71.392362][ T5643] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.447041][ T5643] xt_hashlimit: max too large, truncated to 1048576 [ 71.515951][ T5645] ipvlan2: entered promiscuous mode [ 71.523236][ T5645] bridge0: port 3(ipvlan2) entered blocking state [ 71.530152][ T5645] bridge0: port 3(ipvlan2) entered disabled state [ 71.540202][ T5645] ipvlan2: entered allmulticast mode [ 71.545536][ T5645] bridge0: entered allmulticast mode [ 71.551563][ T5645] ipvlan2: left allmulticast mode [ 71.556659][ T5645] bridge0: left allmulticast mode [ 71.557061][ T5662] loop3: detected capacity change from 0 to 512 [ 71.569224][ T5662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.581996][ T5662] EXT4-fs (loop3): 1 truncate cleaned up [ 71.588114][ T5662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.611384][ T5659] loop1: detected capacity change from 0 to 764 [ 71.622049][ T5659] rock: directory entry would overflow storage [ 71.628484][ T5659] rock: sig=0x4654, size=5, remaining=4 [ 71.696621][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.736775][ T5675] loop0: detected capacity change from 0 to 1024 [ 71.748891][ T5681] loop4: detected capacity change from 0 to 512 [ 71.757264][ T5675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.771164][ T5681] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 71.809046][ T5690] loop2: detected capacity change from 0 to 256 [ 71.818729][ T5675] netlink: 'syz.0.808': attribute type 13 has an invalid length. [ 71.825702][ T5681] EXT4-fs (loop4): invalid journal inode [ 71.833796][ T5690] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.846902][ T5690] xt_hashlimit: max too large, truncated to 1048576 [ 71.866916][ T5681] EXT4-fs (loop4): can't get journal size [ 71.874136][ T5675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.890767][ T5681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 71.900687][ T5681] System zones: 1-12, 13-13 [ 71.907717][ T5681] EXT4-fs (loop4): 1 truncate cleaned up [ 71.914679][ T5696] loop1: detected capacity change from 0 to 512 [ 71.915829][ T5681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.951659][ T5696] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.815: inode #16777216: comm syz.1.815: iget: illegal inode # [ 71.963247][ T5700] hub 9-0:1.0: USB hub found [ 71.971753][ T5700] hub 9-0:1.0: 8 ports detected [ 71.985154][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.994865][ T5696] EXT4-fs (loop1): Remounting filesystem read-only [ 72.001659][ T5696] EXT4-fs (loop1): no journal found [ 72.006908][ T5696] EXT4-fs (loop1): can't get journal size [ 72.020157][ T5703] loop0: detected capacity change from 0 to 512 [ 72.026727][ T5705] loop2: detected capacity change from 0 to 1024 [ 72.027719][ T5703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.041307][ T5705] EXT4-fs: Ignoring removed orlov option [ 72.043442][ T5696] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 72.052070][ T5703] EXT4-fs (loop0): 1 truncate cleaned up [ 72.060022][ T5696] EXT4-fs (loop1): failed to initialize system zone (-22) [ 72.072756][ T5703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.074168][ T5696] EXT4-fs (loop1): mount failed [ 72.087163][ T5705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.115636][ T5698] ipvlan2: entered promiscuous mode [ 72.123440][ T5698] bridge0: port 3(ipvlan2) entered blocking state [ 72.130006][ T5698] bridge0: port 3(ipvlan2) entered disabled state [ 72.141856][ T5698] ipvlan2: entered allmulticast mode [ 72.147467][ T5698] bridge0: entered allmulticast mode [ 72.153853][ T5698] ipvlan2: left allmulticast mode [ 72.154585][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.158986][ T5698] bridge0: left allmulticast mode [ 72.185878][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.216622][ T5717] loop1: detected capacity change from 0 to 512 [ 72.233660][ T5721] serio: Serial port ptm0 [ 72.245183][ T5717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.272964][ T5717] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.320008][ T5733] loop2: detected capacity change from 0 to 1024 [ 72.337509][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.342611][ T5735] loop3: detected capacity change from 0 to 512 [ 72.354639][ T5735] EXT4-fs error (device loop3): ext4_get_journal_inode:5798: comm syz.3.829: inode #16777216: comm syz.3.829: iget: illegal inode # [ 72.371037][ T5733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.386511][ T5738] loop0: detected capacity change from 0 to 512 [ 72.386669][ T5733] netlink: 'syz.2.828': attribute type 13 has an invalid length. [ 72.394182][ T5738] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.411503][ T5735] EXT4-fs (loop3): Remounting filesystem read-only [ 72.418143][ T5735] EXT4-fs (loop3): no journal found [ 72.423425][ T5735] EXT4-fs (loop3): can't get journal size [ 72.429828][ T5733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.448883][ T5738] EXT4-fs (loop0): 1 truncate cleaned up [ 72.448922][ T5735] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 72.465569][ T5735] EXT4-fs (loop3): failed to initialize system zone (-22) [ 72.474205][ T5735] EXT4-fs (loop3): mount failed [ 72.479460][ T5738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.495747][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.523631][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.567031][ T5747] loop4: detected capacity change from 0 to 1024 [ 72.576064][ T5747] EXT4-fs: Ignoring removed orlov option [ 72.615356][ T5747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.638171][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.712340][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.782288][ T5780] tipc: Failed to obtain node identity [ 72.788123][ T5780] tipc: Enabling of bearer rejected, failed to enable media [ 72.808554][ T5777] loop4: detected capacity change from 0 to 1024 [ 72.817828][ T5777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.830023][ T5782] loop0: detected capacity change from 0 to 512 [ 72.848729][ T5782] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 72.859007][ T5777] netlink: 'syz.4.843': attribute type 13 has an invalid length. [ 72.885920][ T5782] EXT4-fs (loop0): invalid journal inode [ 72.891912][ T5782] EXT4-fs (loop0): can't get journal size [ 72.898643][ T5777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.937273][ T5782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 72.945508][ T5782] System zones: 1-12, 13-13 [ 72.952183][ T5782] EXT4-fs (loop0): 1 truncate cleaned up [ 72.960103][ T5782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.056747][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.102505][ T5800] loop3: detected capacity change from 0 to 2048 [ 73.109555][ T5800] EXT4-fs: Ignoring removed bh option [ 73.119807][ T5800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.190551][ T5791] bond0: entered promiscuous mode [ 73.196300][ T5791] bond0: entered allmulticast mode [ 73.203736][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.265889][ T5791] bond0 (unregistering): Released all slaves [ 73.293372][ T5812] loop4: detected capacity change from 0 to 512 [ 73.311162][ T5812] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.849: inode #16777216: comm syz.4.849: iget: illegal inode # [ 73.337744][ T5812] EXT4-fs (loop4): Remounting filesystem read-only [ 73.344384][ T5812] EXT4-fs (loop4): no journal found [ 73.349711][ T5812] EXT4-fs (loop4): can't get journal size [ 73.369086][ T5812] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 73.379397][ T5812] EXT4-fs (loop4): failed to initialize system zone (-22) [ 73.417265][ T5812] EXT4-fs (loop4): mount failed [ 73.425016][ T5816] loop2: detected capacity change from 0 to 512 [ 73.432982][ T5816] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.459346][ T5816] EXT4-fs (loop2): 1 truncate cleaned up [ 73.465497][ T5816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.496532][ T5809] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.525395][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.525829][ T5809] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 73.546977][ T5809] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.546977][ T5809] [ 73.556896][ T5809] EXT4-fs (loop3): Total free blocks count 0 [ 73.563126][ T5809] EXT4-fs (loop3): Free/Dirty block details [ 73.569093][ T5809] EXT4-fs (loop3): free_blocks=2415919104 [ 73.574871][ T5809] EXT4-fs (loop3): dirty_blocks=8208 [ 73.580234][ T5809] EXT4-fs (loop3): Block reservation details [ 73.586304][ T5809] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 73.604849][ T5821] loop1: detected capacity change from 0 to 1024 [ 73.613574][ T5824] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 73.613870][ T5826] loop4: detected capacity change from 0 to 1024 [ 73.620302][ T5824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.620385][ T5824] vhci_hcd vhci_hcd.0: Device attached [ 73.644627][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.657288][ T5824] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 73.661367][ T5821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.663891][ T5824] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 73.683470][ T5826] netlink: 'syz.4.857': attribute type 13 has an invalid length. [ 73.683990][ T5824] vhci_hcd vhci_hcd.0: Device attached [ 73.707095][ T5834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.714760][ T4967] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 28 [ 73.735315][ T5826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.753943][ T5821] IPv6: NLM_F_CREATE should be specified when creating new route [ 73.764470][ T5821] netlink: 'syz.1.856': attribute type 13 has an invalid length. [ 73.772686][ T5824] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 73.779336][ T5824] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 73.786811][ T5824] vhci_hcd vhci_hcd.0: Device attached [ 73.794675][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.806189][ T5821] 8021q: adding VLAN 0 to HW filter on device  [ 73.814031][ T5834] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(23) [ 73.820718][ T5834] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.828410][ T5834] vhci_hcd vhci_hcd.0: Device attached [ 73.835208][ T3380] vhci_hcd: vhci_device speed not set [ 73.843856][ T5824] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(21) [ 73.850523][ T5824] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.858294][ T5821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.858299][ T5824] vhci_hcd vhci_hcd.0: Device attached [ 73.869572][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 73.869591][ T29] audit: type=1326 audit(1744667042.517:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 73.885834][ T5843] loop0: detected capacity change from 0 to 256 [ 73.908942][ T3380] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 73.923373][ T5834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.932140][ T5834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.932448][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.940929][ T5834] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 73.967762][ T29] audit: type=1326 audit(1744667042.517:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 73.968397][ T5828] vhci_hcd: connection reset by peer [ 73.991232][ T29] audit: type=1326 audit(1744667042.517:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 73.991320][ T29] audit: type=1326 audit(1744667042.517:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe64608bc1f code=0x7ffc0000 [ 73.991345][ T29] audit: type=1326 audit(1744667042.517:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 73.997836][ T5832] vhci_hcd: connection closed [ 74.020030][ T29] audit: type=1326 audit(1744667042.527:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 74.050891][ T5837] vhci_hcd: connection closed [ 74.066542][ T29] audit: type=1326 audit(1744667042.527:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 74.066577][ T29] audit: type=1326 audit(1744667042.527:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 74.066605][ T29] audit: type=1326 audit(1744667042.527:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 74.066634][ T29] audit: type=1326 audit(1744667042.527:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5841 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe64608d169 code=0x7ffc0000 [ 74.084872][ T31] vhci_hcd: stop threads [ 74.130174][ T5843] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 74.146341][ T31] vhci_hcd: release socket [ 74.146361][ T31] vhci_hcd: disconnect device [ 74.172858][ T5839] vhci_hcd: connection closed [ 74.197204][ T5835] vhci_hcd: connection closed [ 74.224301][ T31] vhci_hcd: stop threads [ 74.233399][ T31] vhci_hcd: release socket [ 74.237961][ T31] vhci_hcd: disconnect device [ 74.241942][ T5843] xt_hashlimit: max too large, truncated to 1048576 [ 74.251069][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.264749][ T31] vhci_hcd: stop threads [ 74.269062][ T31] vhci_hcd: release socket [ 74.273609][ T31] vhci_hcd: disconnect device [ 74.278714][ T31] vhci_hcd: stop threads [ 74.283030][ T31] vhci_hcd: release socket [ 74.287634][ T31] vhci_hcd: disconnect device [ 74.293752][ T31] vhci_hcd: stop threads [ 74.298125][ T31] vhci_hcd: release socket [ 74.302712][ T31] vhci_hcd: disconnect device [ 74.388459][ T5865] loop1: detected capacity change from 0 to 1024 [ 74.395381][ T5865] EXT4-fs: Ignoring removed orlov option [ 74.409824][ T5865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.436764][ T5872] loop4: detected capacity change from 0 to 1024 [ 74.462094][ T5872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.486661][ T5872] netlink: 'syz.4.870': attribute type 13 has an invalid length. [ 74.501662][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.511893][ T5872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.544753][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.582164][ T3363] IPVS: starting estimator thread 0... [ 74.632784][ T5891] netlink: 'syz.4.876': attribute type 7 has an invalid length. [ 74.640532][ T5891] __nla_validate_parse: 2 callbacks suppressed [ 74.640548][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.876'. [ 74.661652][ T5897] loop1: detected capacity change from 0 to 512 [ 74.669793][ T5897] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.687345][ T5886] IPVS: using max 2304 ests per chain, 115200 per kthread [ 74.694655][ T5897] EXT4-fs (loop1): 1 truncate cleaned up [ 74.701072][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.824746][ T5913] loop0: detected capacity change from 0 to 1024 [ 74.833208][ T5913] EXT4-fs: Ignoring removed orlov option [ 74.853927][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.869600][ T5915] loop4: detected capacity change from 0 to 1024 [ 74.887458][ T5913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.900840][ T5915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.917386][ T5915] netlink: 'syz.4.888': attribute type 13 has an invalid length. [ 74.936150][ T5915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 74.967419][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.000563][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.010867][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.901'. [ 75.053738][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.894'. [ 75.185488][ T5945] loop0: detected capacity change from 0 to 1024 [ 75.192195][ T5948] loop2: detected capacity change from 0 to 512 [ 75.199486][ T5948] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.211519][ T5948] EXT4-fs (loop2): 1 truncate cleaned up [ 75.218907][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.221552][ T5948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.255673][ T5945] netlink: 'syz.0.902': attribute type 13 has an invalid length. [ 75.292700][ T5959] loop1: detected capacity change from 0 to 512 [ 75.335277][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.359281][ T5953] bond1: entered promiscuous mode [ 75.364903][ T5957] loop4: detected capacity change from 0 to 256 [ 75.369997][ T5957] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.373031][ T5953] bond1: entered allmulticast mode [ 75.386570][ T5959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.395985][ T5953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 75.402625][ T5959] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.410699][ T5957] xt_hashlimit: max too large, truncated to 1048576 [ 75.481686][ T5953] bond1 (unregistering): Released all slaves [ 75.538592][ T5945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.603430][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.628541][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.909'. [ 75.741845][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.911'. [ 75.772339][ T5141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.842684][ T5993] loop2: detected capacity change from 0 to 512 [ 75.849495][ T5993] EXT4-fs: Ignoring removed orlov option [ 75.856996][ T5993] EXT4-fs error (device loop2): ext4_iget_extra_inode:4693: inode #15: comm syz.2.919: corrupted in-inode xattr: invalid ea_ino [ 75.878747][ T5993] EXT4-fs error (device loop2): ext4_orphan_get:1395: comm syz.2.919: couldn't read orphan inode 15 (err -117) [ 75.885427][ T5998] loop4: detected capacity change from 0 to 256 [ 75.894497][ T5993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.911287][ T5998] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.928277][ T5993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.919: bg 0: block 411: padding at end of block bitmap is not set [ 75.942961][ T6000] loop0: detected capacity change from 0 to 1024 [ 75.948071][ T5998] xt_hashlimit: max too large, truncated to 1048576 [ 75.963178][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.986825][ T6000] netlink: 'syz.0.922': attribute type 13 has an invalid length. [ 75.998481][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.026511][ T6000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.047072][ T4967] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.060809][ T6004] loop2: detected capacity change from 0 to 1024 [ 76.069322][ T6004] EXT4-fs: Ignoring removed orlov option [ 76.086831][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.111099][ T6004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.134445][ T4967] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.174833][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.927'. [ 76.213396][ T4967] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.247017][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.930'. [ 76.312414][ T4967] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.372708][ T6035] loop2: detected capacity change from 0 to 512 [ 76.383827][ T6035] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.390433][ T6035] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 76.413085][ T6035] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 76.428236][ T6035] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.934: attempt to clear invalid blocks 2 len 1 [ 76.441480][ T6035] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.934: invalid indirect mapped block 1819239214 (level 0) [ 76.457241][ T6035] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.934: invalid indirect mapped block 1819239214 (level 1) [ 76.472669][ T6035] EXT4-fs (loop2): 1 truncate cleaned up [ 76.479993][ T6035] EXT4-fs error (device loop2): ext4_lookup:1786: inode #2: comm syz.2.934: 'file1' linked to parent dir [ 76.494186][ T6040] loop0: detected capacity change from 0 to 1024 [ 76.502189][ T4967] bridge_slave_1: left allmulticast mode [ 76.507927][ T4967] bridge_slave_1: left promiscuous mode [ 76.513991][ T4967] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.524136][ T6040] netlink: 'syz.0.936': attribute type 13 has an invalid length. [ 76.533598][ T4967] bridge_slave_0: left allmulticast mode [ 76.539342][ T4967] bridge_slave_0: left promiscuous mode [ 76.545018][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.582710][ T6050] loop2: detected capacity change from 0 to 1024 [ 76.590097][ T6050] EXT4-fs: Ignoring removed orlov option [ 76.670697][ T4967]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.671971][ T6060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.943'. [ 76.690449][ T4967]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.700321][ T4967]  (unregistering): Released all slaves [ 76.731054][ T6040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.752156][ T6008] chnl_net:caif_netlink_parms(): no params data found [ 76.786130][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.945'. [ 76.820425][ T4967] tipc: Left network mode [ 76.836237][ T6075] loop2: detected capacity change from 0 to 256 [ 76.839710][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 76.851510][ T6073] netlink: 'syz.4.947': attribute type 46 has an invalid length. [ 76.852372][ T6075] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.870866][ T4967] hsr_slave_0: left promiscuous mode [ 76.876704][ T4967] hsr_slave_1: left promiscuous mode [ 76.882609][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.890635][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.898422][ T4967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.905910][ T4967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.916722][ T4967] veth1_vlan: left promiscuous mode [ 76.927352][ T4967] veth0_vlan: left promiscuous mode [ 76.996597][ T6082] loop0: detected capacity change from 0 to 512 [ 77.005748][ T6082] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.015287][ T4967] team0 (unregistering): Port device team_slave_1 removed [ 77.031937][ T4967] team0 (unregistering): Port device team_slave_0 removed [ 77.049070][ T6082] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.061893][ T6082] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #3: comm syz.0.946: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 77.080039][ T6082] EXT4-fs error (device loop0): ext4_quota_enable:7129: comm syz.0.946: Bad quota inode: 3, type: 0 [ 77.091695][ T6082] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 77.106816][ T6082] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 77.121355][ T6082] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.946: bg 0: block 64: padding at end of block bitmap is not set [ 77.142476][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.149770][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.157750][ T6008] bridge_slave_0: entered allmulticast mode [ 77.165090][ T6008] bridge_slave_0: entered promiscuous mode [ 77.172597][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.179887][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.188752][ T6008] bridge_slave_1: entered allmulticast mode [ 77.195359][ T6008] bridge_slave_1: entered promiscuous mode [ 77.230811][ T6008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.242637][ T6008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.258391][ T6091] loop2: detected capacity change from 0 to 1024 [ 77.265183][ T6091] EXT4-fs: Ignoring removed orlov option [ 77.279109][ T6008] team0: Port device team_slave_0 added [ 77.288454][ T6008] team0: Port device team_slave_1 added [ 77.312434][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.319553][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.345955][ T6008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.360241][ T6097] loop3: detected capacity change from 0 to 512 [ 77.369735][ T6097] EXT4-fs: Ignoring removed orlov option [ 77.377235][ T6008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.384223][ T6008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.410498][ T6008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.423915][ T6097] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.953: corrupted in-inode xattr: invalid ea_ino [ 77.439650][ T6097] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.953: couldn't read orphan inode 15 (err -117) [ 77.462237][ T6097] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.953: bg 0: block 411: padding at end of block bitmap is not set [ 77.479555][ T6008] hsr_slave_0: entered promiscuous mode [ 77.485686][ T6008] hsr_slave_1: entered promiscuous mode [ 77.538654][ T6107] loop3: detected capacity change from 0 to 256 [ 77.549379][ T6107] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.602936][ T6008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.613003][ T6008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 77.636336][ T6008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 77.673129][ T6008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 77.696838][ T6118] loop3: detected capacity change from 0 to 512 [ 77.701429][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.710303][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.717705][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.724829][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.727260][ T6118] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.754149][ T6118] EXT4-fs (loop3): 1 truncate cleaned up [ 77.759423][ T6008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.786738][ T6123] loop2: detected capacity change from 0 to 1024 [ 77.804051][ T6123] EXT4-fs: Ignoring removed orlov option [ 77.814602][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.823486][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.843363][ T6008] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.855366][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.862472][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.878235][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.885365][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.925224][ T6131] loop2: detected capacity change from 0 to 1024 [ 77.946723][ T6134] loop4: detected capacity change from 0 to 512 [ 77.964949][ T6134] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 77.974696][ T6131] netlink: 'syz.2.967': attribute type 13 has an invalid length. [ 77.974782][ T6134] EXT4-fs (loop4): invalid journal inode [ 77.993578][ T6134] EXT4-fs (loop4): can't get journal size [ 78.000014][ T6131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.018126][ T6134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 78.052417][ T6134] System zones: 1-12, 13-13 [ 78.074900][ T6008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.083104][ T6134] EXT4-fs (loop4): 1 truncate cleaned up [ 78.164887][ T6151] loop0: detected capacity change from 0 to 256 [ 78.192047][ T6159] netlink: 'syz.3.973': attribute type 46 has an invalid length. [ 78.214199][ T6151] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.285306][ T6170] loop2: detected capacity change from 0 to 2048 [ 78.318095][ T6008] veth0_vlan: entered promiscuous mode [ 78.325632][ T6008] veth1_vlan: entered promiscuous mode [ 78.338835][ T6008] veth0_macvtap: entered promiscuous mode [ 78.346378][ T6008] veth1_macvtap: entered promiscuous mode [ 78.383602][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.394194][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.404119][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.414759][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.424656][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.435117][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.445359][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.455836][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.470613][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.479675][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.490373][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.500284][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.510759][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.520725][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.531202][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.541194][ T6008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.551834][ T6008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.563229][ T6008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.578593][ T6008] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.587500][ T6008] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.596294][ T6008] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.605162][ T6008] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.624681][ T6183] loop0: detected capacity change from 0 to 512 [ 78.640612][ T6183] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: comm syz.0.978: inode #16777216: comm syz.0.978: iget: illegal inode # [ 78.654789][ T6183] EXT4-fs (loop0): Remounting filesystem read-only [ 78.661669][ T6183] EXT4-fs (loop0): no journal found [ 78.666961][ T6183] EXT4-fs (loop0): can't get journal size [ 78.679304][ T6183] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 78.688943][ T6183] EXT4-fs (loop0): failed to initialize system zone (-22) [ 78.705197][ T6183] EXT4-fs (loop0): mount failed [ 78.739888][ T6201] loop2: detected capacity change from 0 to 1024 [ 78.746800][ T6201] EXT4-fs: Ignoring removed orlov option [ 78.791813][ T6209] xt_hashlimit: max too large, truncated to 1048576 [ 78.883867][ T6223] pim6reg1: entered promiscuous mode [ 78.889291][ T6223] pim6reg1: entered allmulticast mode [ 78.931510][ T6229] netlink: 'syz.0.996': attribute type 13 has an invalid length. [ 78.980931][ T29] kauditd_printk_skb: 598 callbacks suppressed [ 78.980948][ T29] audit: type=1326 audit(1744667034.625:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.2.999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50c879d169 code=0x0 [ 79.010659][ T3380] usb 5-1: enqueue for inactive port 0 [ 79.016315][ T6229] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.017189][ T3380] usb 5-1: enqueue for inactive port 0 [ 79.042120][ T6238] loop4: detected capacity change from 0 to 512 [ 79.042115][ T6239] loop2: detected capacity change from 0 to 512 [ 79.050397][ T6238] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.1000: inode #16777216: comm syz.4.1000: iget: illegal inode # [ 79.068657][ T6239] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 79.073262][ T6238] EXT4-fs (loop4): Remounting filesystem read-only [ 79.077658][ T6239] EXT4-fs (loop2): invalid journal inode [ 79.083536][ T6238] EXT4-fs (loop4): no journal found [ 79.091960][ T6239] EXT4-fs (loop2): can't get journal size [ 79.094299][ T6238] EXT4-fs (loop4): can't get journal size [ 79.110473][ T6239] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 79.118571][ T6239] System zones: 1-12, 13-13 [ 79.123473][ T3380] vhci_hcd: vhci_device speed not set [ 79.129696][ T6239] EXT4-fs (loop2): 1 truncate cleaned up [ 79.151775][ T6238] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 79.169228][ T6238] EXT4-fs (loop4): failed to initialize system zone (-22) [ 79.176445][ T6238] EXT4-fs (loop4): mount failed [ 79.271770][ T29] audit: type=1326 audit(1744667034.915:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.300087][ T6253] xt_hashlimit: max too large, truncated to 1048576 [ 79.310660][ T29] audit: type=1326 audit(1744667034.935:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.334505][ T29] audit: type=1326 audit(1744667034.935:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.358893][ T29] audit: type=1326 audit(1744667034.945:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb173f5bc1f code=0x7ffc0000 [ 79.382596][ T29] audit: type=1326 audit(1744667034.945:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.406408][ T29] audit: type=1326 audit(1744667034.945:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.430301][ T29] audit: type=1326 audit(1744667034.945:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.453850][ T29] audit: type=1326 audit(1744667034.945:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.477493][ T29] audit: type=1326 audit(1744667034.945:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6252 comm="syz.3.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb173f5d169 code=0x7ffc0000 [ 79.579798][ T6267] loop3: detected capacity change from 0 to 1024 [ 79.586540][ T6267] EXT4-fs: Ignoring removed orlov option [ 79.826370][ T6297] loop4: detected capacity change from 0 to 1024 [ 79.848618][ T6297] EXT4-fs: Ignoring removed orlov option [ 79.877083][ T6298] __nla_validate_parse: 9 callbacks suppressed [ 79.883468][ T6298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1026'. [ 79.913937][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'. [ 80.238672][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1038'. [ 80.266105][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 80.396594][ T6339] loop3: detected capacity change from 0 to 512 [ 80.403843][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1043'. [ 80.419084][ T6339] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 80.433917][ T6339] EXT4-fs (loop3): invalid journal inode [ 80.442956][ T6339] EXT4-fs (loop3): can't get journal size [ 80.451501][ T6339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 80.461149][ T6339] System zones: 1-12, 13-13 [ 80.466368][ T6345] loop2: detected capacity change from 0 to 256 [ 80.473246][ T6339] EXT4-fs (loop3): 1 truncate cleaned up [ 80.481685][ T6345] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.497169][ T6345] xt_hashlimit: max too large, truncated to 1048576 [ 80.511997][ T6348] loop4: detected capacity change from 0 to 256 [ 80.520128][ T6348] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 80.532960][ T6348] xt_hashlimit: max too large, truncated to 1048576 [ 80.642911][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 80.652096][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 80.661686][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1050'. [ 80.720840][ T6361] loop4: detected capacity change from 0 to 1024 [ 80.730764][ T6361] EXT4-fs: Ignoring removed orlov option [ 80.855287][ T6382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1061'. [ 80.869354][ T6369] bond1: entered promiscuous mode [ 80.874604][ T6369] bond1: entered allmulticast mode [ 80.883657][ T6369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.908169][ T6369] bond1 (unregistering): Released all slaves [ 81.007035][ T6388] loop2: detected capacity change from 0 to 256 [ 81.026789][ T6388] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.038870][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1065'. [ 81.050798][ T6388] xt_hashlimit: max too large, truncated to 1048576 [ 81.106281][ T6402] loop5: detected capacity change from 0 to 512 [ 81.113735][ T6402] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.1069: inode #16777216: comm syz.5.1069: iget: illegal inode # [ 81.138511][ T6402] EXT4-fs (loop5): Remounting filesystem read-only [ 81.145273][ T6402] EXT4-fs (loop5): no journal found [ 81.150549][ T6402] EXT4-fs (loop5): can't get journal size [ 81.159015][ T6407] loop4: detected capacity change from 0 to 1024 [ 81.165458][ T6402] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 81.176030][ T6407] EXT4-fs: Ignoring removed orlov option [ 81.177070][ T6402] EXT4-fs (loop5): failed to initialize system zone (-22) [ 81.190662][ T6402] EXT4-fs (loop5): mount failed [ 81.196178][ T6402] ================================================================== [ 81.204371][ T6402] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 81.211786][ T6402] [ 81.214112][ T6402] write to 0xffff888237c26b30 of 8 bytes by task 3311 on cpu 0: [ 81.222442][ T6402] invalidate_bh_lru+0x8b/0xf0 [ 81.227228][ T6402] smp_call_function_many_cond+0x5b0/0xbc0 [ 81.233050][ T6402] on_each_cpu_cond_mask+0x3c/0x90 [ 81.238175][ T6402] invalidate_bh_lrus+0x2a/0x30 [ 81.243048][ T6402] invalidate_bdev+0x42/0x70 [ 81.247672][ T6402] ext4_put_super+0x65b/0x910 [ 81.252364][ T6402] generic_shutdown_super+0xe5/0x220 [ 81.257796][ T6402] kill_block_super+0x2a/0x70 [ 81.262520][ T6402] ext4_kill_sb+0x44/0x80 [ 81.266857][ T6402] deactivate_locked_super+0x7d/0x1c0 [ 81.272248][ T6402] deactivate_super+0x9f/0xb0 [ 81.276946][ T6402] cleanup_mnt+0x26e/0x2e0 [ 81.281389][ T6402] __cleanup_mnt+0x19/0x20 [ 81.285879][ T6402] task_work_run+0x13c/0x1b0 [ 81.290488][ T6402] syscall_exit_to_user_mode+0xa8/0x120 [ 81.296076][ T6402] do_syscall_64+0xd6/0x1c0 [ 81.300646][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.306746][ T6402] [ 81.309086][ T6402] read to 0xffff888237c26b30 of 8 bytes by task 6402 on cpu 1: [ 81.316636][ T6402] has_bh_in_lru+0x35/0x1f0 [ 81.321168][ T6402] smp_call_function_many_cond+0x30a/0xbc0 [ 81.327011][ T6402] on_each_cpu_cond_mask+0x3c/0x90 [ 81.332160][ T6402] invalidate_bh_lrus+0x2a/0x30 [ 81.337033][ T6402] invalidate_bdev+0x42/0x70 [ 81.341715][ T6402] ext4_fill_super+0x1551/0x3580 [ 81.346692][ T6402] get_tree_bdev_flags+0x2b4/0x330 [ 81.351947][ T6402] get_tree_bdev+0x1f/0x30 [ 81.356394][ T6402] ext4_get_tree+0x1c/0x30 [ 81.360838][ T6402] vfs_get_tree+0x56/0x1e0 [ 81.365270][ T6402] do_new_mount+0x246/0x6b0 [ 81.369912][ T6402] path_mount+0x49b/0xb30 [ 81.374258][ T6402] __se_sys_mount+0x28f/0x2e0 [ 81.378956][ T6402] __x64_sys_mount+0x67/0x80 [ 81.383591][ T6402] x64_sys_call+0xd11/0x2e10 [ 81.388291][ T6402] do_syscall_64+0xc9/0x1c0 [ 81.392834][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.398851][ T6402] [ 81.401202][ T6402] value changed: 0xffff8881049126e8 -> 0x0000000000000000 [ 81.408398][ T6402] [ 81.410726][ T6402] Reported by Kernel Concurrency Sanitizer on: [ 81.416893][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.5.1069 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 81.427594][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.437677][ T6402] ================================================================== [ 81.473903][ T6412] loop3: detected capacity change from 0 to 1024 [ 81.482146][ T6412] EXT4-fs: Ignoring removed orlov option