last executing test programs: 6.761583449s ago: executing program 2 (id=1708): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 6.627939401s ago: executing program 2 (id=1710): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 6.563750762s ago: executing program 2 (id=1713): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x8000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='b 75:*\tm\nr'], 0xa) 6.471435503s ago: executing program 2 (id=1714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") chdir(&(0x7f0000000340)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0xc410, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) syz_clone(0x46000580, 0x0, 0xfffffffffffffc3e, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES8=r2, @ANYRES8=0x0, @ANYRES32=r2]) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x1, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x2, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x6, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x9, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x200, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x7, 0x25, 0x206, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7ffc, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x0, 0x82, 0x52e, 0x1, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x0, 0x14, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x0, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x5, 0x5, 0x7, 0x3, 0xd7c5, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xd, 0x7, 0x2, 0x0, 0x6ee1847d, 0x100, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x80, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x8, 0x7, 0x65fe, 0x2000005, 0x6, 0x4, 0x80000000, 0x5, 0x7ff, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x4, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x2, 0x10000000, 0xb, 0x7, 0x5, 0x2, 0x79e]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x20) pipe2(&(0x7f0000001cc0), 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) 6.029000891s ago: executing program 2 (id=1725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 5.279432413s ago: executing program 2 (id=1746): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r4], 0x4c}}, 0x0) 5.278839904s ago: executing program 32 (id=1746): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) pipe2$9p(&(0x7f00000001c0), 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r4], 0x4c}}, 0x0) 1.589921464s ago: executing program 3 (id=1808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='b 75:*\tm\nr'], 0xa) 1.507683266s ago: executing program 3 (id=1809): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x18) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) pread64(r2, &(0x7f0000000180)=""/73, 0x49, 0x0) 1.497883286s ago: executing program 3 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r2], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.468975966s ago: executing program 3 (id=1811): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}, 0x1, 0xd}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) socket$l2tp(0x2, 0x2, 0x73) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000020100008500000043000000950000000000001af4b9e6aa180d13436d1865244f18a382901b36aa5add22c1b5c1a10740af1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0xf}, 0x18) getsockopt$inet_mreqsrc(r3, 0x0, 0xf, &(0x7f00000001c0)={@multicast1, @initdev, @dev}, &(0x7f00000002c0)=0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r6, 0x50009401, &(0x7f0000001140)={{r3}, "1799c3b07e056a13d6ff4e3669ee5e14e159e43013e1dc4f1fc178b2ef6bcaaef965068b9ed5ae6d9131b6c65eefc781f6000e45516a6aeada4b07a8782c1aeb7f62634fda6d309a157ad5fc8f2e43207ac60fc6c6230604db3f5051203418431b8b2e8ccc2c3170c5f2eaeb71b1db842eef19c885ecf0615f5a26e124fad54de6b884d48b4ed5bc8b68891599e95f8bfc124a5e4448493db34d959673ab77bdc649557a08b7ef5b1960beec875bf4b9b6599d05b7b39bfc99b8436e3ed786c4d8005ac4fb2d7d215f4e7bf030d12987c086ef3a473ca4a4384d0956c769b65fc56d4065f6b617078400a1ffae8e3b80938b703c6e8840a2981c9db54eafa7f3b43adb2b4ef47265e778930b603aeb855158cbbfc2d24a6f03b308aadaa3dfdad6600acbc348eb371a576304d3786a1a23978763cffb8b5b530f8fd88a72a3702234eea2137bbbc5d9593e8a61123363ebf19b2d7e0ecef8b138aea470dd89a2a0c32f6d4e0074699930931f5843f3c6e19c1678d1bb75884816497bc7de57033175c221f37bf63f515b9106abacb179ce77326e1c32228a8ba05db10422a1f5497aafa638cc78325192c5d86071edb4c0ee9999cd17bcfe7b0f755db76b491337ce15d74771d47a213206c3a8b574e33f2ca12b4ef1f6fdb4064707c87cd9386b9b42fe7d26346f3a44403b47f1f305a49ee762dd4a61f0fee17d00b242e3ad48ff571312402a4910e8688fdcf6a32a8bc19309f4e8d240c62cde7580144bff85384f32c13fd15fb53fe1536fef4def64466120dd78f64c8e017a51f85110794e7d209bff0fcbdfad26b0aebaf7e81d7fbd4a9755fcbc2780aa0b74c0c4424bfdaea21a33e921a4f7ff6e1893cff26afc85f3434e2a50932b12e2838a23f1ed2be828b44d7f2807b9fedca76b8e5f4d0440ba138b5d66d08a58040933c69831db31c60ddc4dcc3704609cede047421bbc594076ca3fd15372a2e3e50d79b5083fee7b66c5fe8882f065fbe60f93f0770350969ac338d233d547142bbe7e025a9bc3012d7a23ae82663d1ce0f02707d64ab6f98646c664e8bccfdab3e7beaeba4ef918f019cda57a50bcce055ba6fc9a07e6040ec7ae3cc3015457a76663bb7c2be6858f377109318f411d0f46a99c0b857572966f65e30aacbf95a9bd254e125da4ac58d7f47f7a4c300129e034d2a305beba8e233fb263fb4adcff5e61ea9d585ae8998bc762a39f13b66caeac4a94a3c86e64ed7d58245700aa49bb73a9c9cb0750b78b3a616aea8e17b5fcf53d1584b24bf7b0d9da7c1649d7671a0ffe8281f2e3cd8f47233f29c9e3651c66298322775f451baa457e6fb3050dca69eae3dfebc68e773ea86b8405c23c28003f97a556674d213b87d0983ae1c2c4669621edc6728916ba77238f664dbfd870f8d0d2cd321d5f9cae3922c4ef2003921d5150fa5d3253bff9b67b81a83a25d5726ea8e793e507d5cb208ac61a8571a5ba33681cbe4c7f9c295ef60818005cda46faa9cc11d3812e6fbe38d649e58b20e108a6c773efbda4d51d4eedfadc9ab12bf3b1440789a338e57d5cca30b36cc4e11ba25cd2cccf4e88c24c64d9b8f5018c765eec64dc815e0829d07d883681faacd0ccf3fb2fa4bedd0e643853193808630d0f2c282d308186f06c65e00f070c6f8b93a44e4b077bb988a3c7f8915e032d7d3fcc8938ca4b6ea3ea353ea42a5eb12632c591922f3c4f3c7edecb98dcbdd3e669d32e15b9c7d1d47d66894d5f1aee6b7fcd0ab4cc4a4241cf75e24c5024b49a62a7d9fde77c8b027c9370818570a1d30299da0f6a2cd3b39abfb1cf6846add9aa9071277124136b595e67b5b4dadeb25d244e59e49057bc8585ac2919611dbe84ffb6828452d0fea50a33d77f5e35e2beaaf98bf730b1d6fb55b73a0d92f62cbea04ebab6218d92ed28a0e19b496b79ecc934205648b2363a2ad08c5a685ee802a66a997b0b118a17a40b401cb17eb75ce37c9c4e8b90976bed8ccedf1d0531453e8a6b9587c88acdfae2113e871bc0b2bb85ff22affcd3206d8ec143daaf744a4d33728bb9dfb4d27fc656f349a085d8286515002dee0eb6a0a1ec5174f255efa0297e108761a63c2827870b85869eedb98bba4f1b32bc63941c85439d2f721ecbc5bb8da7c6598ba6ddfc5c4ea6368d467569450abcb4cb60f88ce7aef4c44b62dff6baafab43669fcc7c3852298dc5711fe9651a8f97711b9b8fb6f3728308c4716f946b61f0f667477190af830a84f688cd3cfb755f65f3c90b47772f07aff0c75927a569d39aea76bacc2be346271cd3a17aafd708149563c6b60eb8146180af3cf621693cfc54b04132159cc705c0f3ea36a46907922fa5681a62ab27846eb7fecabe49c86eb4d318efc125acf9b92d470f6ba51677c8d77dc2697acc04b9442837082d589e5121fb8524f552d01c1902c0137c2c19ac37bb5880c0fe723d05e7730856bf8c3ed722e6fd45be49ead0cd3ded96c6df904160906e9396cb16e7bb3bd60b9f2143a32392b229c3176d16cc36462f692083383cff89cce602177e3fb5b3ada7ea0a0423ea99d5278adcf50e3209ec29213138a93a0c399360f386d8b137ef0cfefa68fbaaa45ff15013793eb9d7ad3166d8b39795444ae5b25ef47049c7fef2f2d5744f7be94b32a08aff3186fb5804934cbade007a048ed6984345c68e1a30677b4a17a194c01539afda94cc4eddefc1a97ec9a350d320c6bc42773d06a30f11c50624c64f446ad17ef9af2e7b94451e25efe0aae5eee44d4874e4699dfd933f18aa72c62ee3679639d99b71e93e67826ede7b63e30df7f83bb6950ed29e94d024ec546dd7381ce2efd9547303a0c2ac190db640ec2f8afdd3556555057863c0c2a280e7ac2f455151150a6b38a92b0db004e7fd412673104adfa18616fb02e8e6da2c859f0fa40f682c7f6da4c264478cf75598ddeec4c7b35b059694b0295149b9442fc0ab264cecaed5f3e3f352a11a80ab98da167dbd15ce06e6803038d844d40fe63c7bd72b27c8397b067cca52eb615cfe70ae96947f80b9e1323fbfa460c8f2312a07c900f682a95f55258b4c030b010b1318c9daaa1f6eff2e3fd456091a0f79265b58164f897f73b2650803dbd04e9cf657f45a98d82154984f2f3094e0bb0b8e2b150021eaee9341a51129a3de61817e4345e84675d0bdda263bbc33b01190ffab13b8eb26ec3a78d930c3758c06b619febc8b9aeda412bccc0e767f31fc78669929442b1b65d0fb1cef2c973f65ea627933ff96794c129990477d2eac8a0cf393f7902a4da0b5034215ae20a232ad459e81e2154fa088c4634ea31eafde52dd9c38af978198f32c5a8fba92a949b2c256773d33a7eaacff831596453d125ec29d2dead4e2054d16e950bc1180d499b2227deeaa677ded29ad67d4570e4cf6d3973873898eb3c3cd5b61f1dc0902ff6abd68bd86ce33e04f622486b4feb5a56a0568dc53e9d946ad5fa5ad0aa1b054c30c0db70bc0d34671a458de782a4c37e728f87f5aca5f1dad9ce27bea72e136101d02ae4466b07cae710d8d74bb80f642947df5c2da421e9bc9e8e43afc5361642071cffb6363f3de88ebf6ca9a5356fb83d03b84491c1fa602ea34665fdbe1664ae771b80f8503ce8e5b08d60a0593cdca0f6dd931ea36500113b65baa0f6d1aea8c3246bf5b725497133a9a740f09e5628170bb69c2a428860f67b0d5efcb8267990b05fdd79e6b901a515c1391f6e208a8c8523e1322552b90c69b2c3a548436ad78ca76681b4918d237963d0673a85731e61b29d421af8df5f3cbaca629e5985feccf8f244873f6adaaaa2038c3aa910a546b5cc216d4a1043e0660978fbce8c37eaa5acf5976e537ea821987eccf9a373580443bdac33bf7433fd429bde57ebd780014ab915d6d404244dda40b3dda1df830edc606a23abe109875c6940e0b6f271431da705d6f1ff1ff49757abcbd36c0597ad61658e68bc7c718364aaef0de6813a69eb46fd6327f14216b6a0d7b4b085ca7a3c6a9e0b7ffe7378b84d713b356e3a9eec45c8cbd46676c3b0f182da3785933fad44c845b89c6a12b2908a2ed1c5e5f7b7f7037fd8f98ad4e5564abacc5276bced3ba5bbcb290c1fdf36f15073e429f50acb29da8be7225382de87cc6d7c56a2b6c5e5fc6f3dac9eb4b12293a4735bbb19985fd3114a3a9ff83c61d47f66e688350a202b03f54f4d3fa1a21ce3efc5508c19aea37497b18be592ce9d39760afa8e543c7a1486a56b33a0f4d89e29dfd3165872a0f4e528bcafc541df24706b3d778edbe5e1d4c47dc0ec9a697a3c763ce1568c6c0730f4e1a319976e7c211ed7787d0031c2992af9e3886ca7441802cc148bbb1c403f214501e73a66f383372c44c5151521cf1f5587b870f2a8f6f0c245138b66d2bba672dce195408753025c7898e4470f842bbce9f2f8afc9edcbd26d85c377b25231af727acd8dd72657a7f22815b6b63ef748fb4a04c1c64d4ac6e9d61166393bd9655cabe7f83e06f2cd5a1adc65404698293521874ae0d9721dd7f0471996168e9d3d0ae949af5b0f85fd91f9464e1ea937481eb60294df44506eee1bd540d52e5eab503c2ea207c0f785eec2ab0d375b66d438fda619d0dc9cbf2fe15fe388670ca5b924133a40b721fe1f37d1edbfbf9b5af95b30ac1d62afb4b6f9a69083d840b879fd4fa0300897aa3b66d05c6d3a6ddd6195cf4921de047ed6d07ed9e43199c6dd3be00f486bc068484b2f504d71bd1359c311e6f4dde0421b9919497fa96019555a4085a7d3512c68cf6c706a180fb3cd9887c1da70a9624f9ad366f42b8358b5d664b5618b3d37fbfe7ff423e5a65a5188a41f119042eeef9b4da7f855ade9c30eb55780c7873177d19154aca481b2dde71d5668a5ef1322d6a0cbb70a491ac80bced084091f529045ffb5f029413dc729bb0f8552c78d0101c23fd8f38e8d92d972550b8c318c14a9d70e5ce50d95acb0a012cc0ccbb2bfb94e923f8aee455bf56b1270839352951c409d80271bcdc85cc886960bd0ba4df2491c184fb7d7bcdddaa7829597b9e4e20dabdfd107f26a96e12f759094b148deeb680df92000ac0ecf45441c5c68ab50f5058f5f654abba5da09df2b8218eaf93014790a21826538e7825232557f1df17aee0ded6a4ca3bed48d0be4b4a7b8d4c69d654bbb195b2c14b8e0a1e92662816d6c81fe0f1bb55d2a8cb82d9fb8f3084eaf1578e78d84c88c37464dd5180404bd0cc74ddd665ac5b7bc48530caabcdeb45cfb2f8163481e6e7058c51e880779e634f763e44c1367c5ac9c56669516180851e7afabcbfb4500e1672d54ffa2c7c7f12711eed89264afcfafd26607ad8ad302d7c231b97d94eeb7159966d68f1509852a58b01fdca6e634848e5b8399bea2672c2d5426a701fc23861bf972a3943067b54f97c69dcf62a9fbd30485c5ba22d2da2e8c682e9938f8e06d167383f3ec12c374cd690e4228a011e0db7c4a0b447d6c9bf51e6eded02ac101299150bce6ffc414552adda5d504f501f70c68b4820ec65ea5d449e36f1495a38ee00e892133d7c3292cbf2a753686e510cff6e15b51ae2bb4dc57956c72e88895e7f422588c20c28c415096af8105368fe0a12d4e2ca6275732c0ab4b5f8f998f656a194f1e650ae34f0bdfe038e102276e12dae0ea508abcaa12781d3737c99e6283960c3c479e09fd449f641271aa1c348ae07fb046d4fbb1e747bc20872703ddd94edf8fb769750f909aeb476cf4bc89bd3fe0b"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cgroup.controllers\x00', 0x26e1, 0x0) close(r7) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0xf) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230029) write$cgroup_type(r7, &(0x7f0000000080), 0xfffffed8) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x48845}, 0x40) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.103768632s ago: executing program 0 (id=1818): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, r3, 0xffffffffffffffff, 0x6, 0xfb, 0x9, "a71ddf35f259bad5341e490ed54b2b7405cdea4437414090c8816a0f0add8f6e5cfa39bf8bbc02a314ac08753102e5b6ce79e10d28b89b18516c3b9d15b999", 0xb}, 0x60) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x4008c55}, 0x48891) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 979.825044ms ago: executing program 4 (id=1820): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000700)={[{@nocompress}, {@map_off, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {}, {@mode={'mode', 0x3d, 0x5}}, {@utf8, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@utf8}, {}, {@overriderock}, {@gid={'gid', 0x3d, 0xee01}}]}, 0x1, 0x6b1, &(0x7f0000000f00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x120) getdents64(r1, &(0x7f0000000080)=""/203, 0xcb) 979.357454ms ago: executing program 1 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r2], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 950.920455ms ago: executing program 0 (id=1822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x1) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r9, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) syz_emit_ethernet(0x3e, &(0x7f0000001380)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x5, 0x6, '\x00', 0x8, 0x0, 0x0, @remote, @local, {[], "32754f8bef71bee9"}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioperm(0x2, 0x1, 0x9) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="feffffff000000000200fffee0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb00000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000010000010000000000"], 0x90) fcntl$getflags(r8, 0x401) 858.348746ms ago: executing program 0 (id=1823): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x5419, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) r5 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0104000000550519930f4a587dc6936baf0000000000000040000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f0000000800)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYRES16=r4, @ANYRESDEC=r2, @ANYRES32=r8, @ANYRES64=r5, @ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x19, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") timerfd_create(0x8, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) capget(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x401, 0x1, 0x25, 0x7f}]}) 776.612557ms ago: executing program 1 (id=1824): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'veth0_to_bond\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xff, 0xffffff00, 0xff000000], 0x4e20, 0x4e20, 0x4e20, 0x4e21, 0x2, 0x6, 0x10000, 0x8, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 755.354088ms ago: executing program 1 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) 664.564639ms ago: executing program 1 (id=1827): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f00000001c0)={0x6, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='name', &(0x7f0000000440)='.%\x90-{\x00', 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000005c0)={0x0, "ad62aa9b556dc25476192a9b834845d6fe893987f01f8297f4eddbe0366d20ad778b6f9ede56f901537266ca1afb832427fe16fd6b72f4a53f089ab8c0578e11", 0x2b}, 0x48, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB=',context']) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) close(r5) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x0, 0x6, 0x7}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0x3c}}, 0x0) write(r7, &(0x7f0000000180)="1219fd499d4cee8f7d87b003354ab87ab0a2551c8ac78eafcb2a5d1e2992773a30b229cba1037f6875567c73e6c827f4b404de5cc7051ade03fa1832412f49897daed891f42b7fe2d1237d5c3dd7703731d9105017731040bf59fed2dd54f484c71631822de9584147259d86513c67f9ca3bce3edbbb8d1cd024e63bbd195a583681cb9e6ee02b002e6a3f11eb0d81ac79daed83634995972611ce872d539b7e69a43df5f52004b043fa4b6c70ddf53d303688", 0xb3) pread64(r6, 0x0, 0x0, 0x5) 587.24065ms ago: executing program 0 (id=1830): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000740)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, r3, 0xffffffffffffffff, 0x6, 0xfb, 0x9, "a71ddf35f259bad5341e490ed54b2b7405cdea4437414090c8816a0f0add8f6e5cfa39bf8bbc02a314ac08753102e5b6ce79e10d28b89b18516c3b9d15b999", 0xb}, 0x60) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x64}, 0x1, 0x0, 0x0, 0x4008c55}, 0x48891) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 542.333091ms ago: executing program 3 (id=1832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x6c}}, 0x0) (fail_nth: 2) 286.662206ms ago: executing program 0 (id=1834): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r2], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 238.341326ms ago: executing program 3 (id=1835): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe12, 0x0, 0x0, 0x0, 0xfff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xfff, &(0x7f0000001e40)=""/4095, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8bf0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000000), 0x7, r1}, 0x36) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000000c0)={0x20, 0x6, 0x5000, 0x20, 0x0, 0x0, 0x0}) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(0x0, 0x0, 0x9) r6 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200401, &(0x7f00000007c0)=ANY=[], 0x0, 0x27c, &(0x7f0000000540)="$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") fchmod(r6, 0xab) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x10, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x700, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = timerfd_create(0x7, 0x0) timerfd_gettime(r8, &(0x7f0000000000)) r9 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) wait4(r9, 0x0, 0x40000000, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000040)={r11, 0x401}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r11, 0x7}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000000002030000000000000000000a0000047000018014000180080001000000000008e30200ac1414bb2c00018014000300ff02000000000000000000000000000114000400fe8800000000000000000001000001011400018008000100ffffffff08000200ac1414aa06000340000400000600034000020000060003400001000004000380500002802c00018014000300ff02000000000000000000000000000114000400fe8800000000000000000000000001010c00029005000100210000000c0002800500010084"], 0xd8}}, 0x44000) 237.621426ms ago: executing program 0 (id=1836): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_open(&(0x7f0000000040)='-}\x00', 0x40, 0x20, &(0x7f0000000080)={0x9, 0x1, 0x1, 0xf4}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) close_range(r1, 0xffffffffffffffff, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3, 0x0, 0x2}, 0x18) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000ffff000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r0) 230.832416ms ago: executing program 1 (id=1837): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x191a00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 225.056957ms ago: executing program 5 (id=1838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="f9", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4060}, 0x4048001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x2e, 0x9}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000840)={0x0, 0x6e, 0x10}, &(0x7f0000000880)=0xc) 195.597477ms ago: executing program 1 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x8001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000280)={[{@nouid32}]}, 0x1, 0x71c, &(0x7f0000000f40)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 195.030797ms ago: executing program 5 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c", @ANYRES64=r2], 0x4c}}, 0x0) 167.290198ms ago: executing program 4 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) open(&(0x7f0000000000)='./file1\x00', 0x10b942, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) 163.550267ms ago: executing program 5 (id=1842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 124.950498ms ago: executing program 4 (id=1843): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x10001}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x102) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v2={0x2000000, [{0x18fd62e8, 0x6}, {0x9ba7, 0x5}]}, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x44, 0x31, &(0x7f0000000000)="696107f71b013ae468e2527c7cffd9dd9d7819e9c399cacea6a035b0600ae88a51c062e51956eb82866642d31f4b5aaa134983e264a9ef8e0e0bef4f1af98d65fdc18fe8", &(0x7f0000000100)=""/49, 0x6, 0x0, 0x7f, 0x23, &(0x7f0000000140)="d12c080ac251fb7048b65d27a2c29c8097132acf47c2e550ff6bc9d4c37ccd85d1947e439703e39e9e946424072f80f549b82e15a0c414df7c224c8557b93c31b9ecb0bfece23be18435e9f3345b93bf540d07dbe0950376d3dee95cd8fe371ced89de69e2556eead3bd905fef37319d0747128a539e2902aef7c050668459", &(0x7f0000000200)="094ebd0fd4155d6fff55217d56905679a9b750d7c3edbccc5d5ee6fbbc5f4b8008b7a6", 0x6, 0x0, 0x10000}, 0x50) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01000000df3e8dcced0000000000"], 0x14}}, 0x0) 124.309908ms ago: executing program 5 (id=1844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x200400d4) 112.395509ms ago: executing program 4 (id=1845): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 66.611529ms ago: executing program 5 (id=1846): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x401, 0x3f000000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0xd}, 0x0) 52.554589ms ago: executing program 4 (id=1847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES64=r2], 0x4c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 29.77918ms ago: executing program 5 (id=1848): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f00000001c0)={0x6, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x20, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000400)='name', &(0x7f0000000440)='.%\x90-{\x00', 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000005c0)={0x0, "ad62aa9b556dc25476192a9b834845d6fe893987f01f8297f4eddbe0366d20ad778b6f9ede56f901537266ca1afb832427fe16fd6b72f4a53f089ab8c0578e11", 0x2b}, 0x48, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB=',context']) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x20000}, 0x0) close(r5) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x0, 0x6, 0x7}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], 0x3c}}, 0x0) write(r7, &(0x7f0000000180)="1219fd499d4cee8f7d87b003354ab87ab0a2551c8ac78eafcb2a5d1e2992773a30b229cba1037f6875567c73e6c827f4b404de5cc7051ade03fa1832412f49897daed891f42b7fe2d1237d5c3dd7703731d9105017731040bf59fed2dd54f484c71631822de9584147259d86513c67f9ca3bce3edbbb8d1cd024e63bbd195a583681cb9e6ee02b002e6a3f11eb0d81ac79daed83634995972611ce872d539b7e69a43df5f52004b043fa4b6c70ddf53d303688", 0xb3) pread64(r6, 0x0, 0x0, 0x5) 0s ago: executing program 4 (id=1849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x191a00, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000680)='devices.deny\x00', 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) 0s ago: executing program 4 (id=1850): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x10000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d000900000006000800150000000800030064"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x18) (async) sendmmsg(r5, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) (async, rerun: 64) io_setup(0x200, &(0x7f0000000140)=0x0) (rerun: 64) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r9, 0x0, 0x30}]) (async) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300)={0x0, 0x4}, &(0x7f0000000380)=0x8) kernel console output (not intermixed with test programs): 0000000000 R14: 00007f5b8e165fa0 R15: 00007ffe3d58f878 [ 56.805583][ T4919] [ 57.001764][ T4923] loop4: detected capacity change from 0 to 2048 [ 57.010464][ T4922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 57.020165][ T4923] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 57.050018][ T4928] netlink: 120 bytes leftover after parsing attributes in process `syz.0.552'. [ 57.058828][ T4927] usb usb1: usbfs: process 4927 (syz.3.551) did not claim interface 0 before use [ 57.070904][ T4923] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.157182][ T4937] loop3: detected capacity change from 0 to 2048 [ 57.163929][ T4937] EXT4-fs: Ignoring removed bh option [ 57.171388][ T4939] loop1: detected capacity change from 0 to 1024 [ 57.182102][ T4939] EXT4-fs: Ignoring removed bh option [ 57.190493][ T4939] EXT4-fs: inline encryption not supported [ 57.196435][ T4939] EXT4-fs: inline encryption not supported [ 57.206876][ T4942] 9pnet_fd: Insufficient options for proto=fd [ 57.214035][ T4939] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.261892][ T4939] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.556: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.393373][ T4952] loop2: detected capacity change from 0 to 764 [ 57.400623][ T4939] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.556: Failed to acquire dquot type 0 [ 57.412444][ T4939] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.556: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.426081][ T4939] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.556: Invalid inode bitmap blk 0 in block_group 0 [ 57.439986][ T4939] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 57.449397][ T4952] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.476448][ T4939] EXT4-fs (loop1): 1 orphan inode deleted [ 57.493634][ T4939] EXT4-fs error (device loop1): ext4_search_dir:1476: inode #2: block 16: comm syz.1.556: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 57.545121][ T31] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 57.561680][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 57.615324][ T31] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.633354][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 57.645751][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.645751][ T31] [ 57.655457][ T31] EXT4-fs (loop3): Total free blocks count 0 [ 57.661465][ T31] EXT4-fs (loop3): Free/Dirty block details [ 57.667397][ T31] EXT4-fs (loop3): free_blocks=2415919104 [ 57.673133][ T31] EXT4-fs (loop3): dirty_blocks=8224 [ 57.678458][ T31] EXT4-fs (loop3): Block reservation details [ 57.682035][ T4963] loop1: detected capacity change from 0 to 512 [ 57.684437][ T31] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 57.702964][ T4965] loop4: detected capacity change from 0 to 128 [ 57.705233][ T4963] loop1: detected capacity change from 0 to 2048 [ 57.712851][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 57.717185][ T4963] EXT4-fs: Ignoring removed bh option [ 57.728124][ T31] EXT4-fs (loop3): This should not happen!! Data will be lost [ 57.728124][ T31] [ 57.729482][ T4965] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.869838][ T4973] netlink: 120 bytes leftover after parsing attributes in process `syz.3.564'. [ 57.921419][ T4979] loop3: detected capacity change from 0 to 764 [ 57.938196][ T4979] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.997811][ T4985] loop3: detected capacity change from 0 to 128 [ 58.104587][ T4995] netlink: 48 bytes leftover after parsing attributes in process `syz.3.576'. [ 58.189339][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 58.189353][ T29] audit: type=1326 audit(1745130835.748:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.226028][ T29] audit: type=1326 audit(1745130835.748:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.249432][ T29] audit: type=1326 audit(1745130835.748:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.272889][ T29] audit: type=1326 audit(1745130835.748:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.296185][ T29] audit: type=1326 audit(1745130835.748:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.319473][ T29] audit: type=1326 audit(1745130835.748:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.342800][ T29] audit: type=1326 audit(1745130835.748:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.366098][ T29] audit: type=1326 audit(1745130835.748:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.389860][ T29] audit: type=1326 audit(1745130835.748:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.413746][ T29] audit: type=1326 audit(1745130835.748:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4996 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x7ffc0000 [ 58.461836][ T57] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.477548][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 58.489878][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.489878][ T57] [ 58.499523][ T57] EXT4-fs (loop1): Total free blocks count 0 [ 58.505519][ T57] EXT4-fs (loop1): Free/Dirty block details [ 58.511432][ T57] EXT4-fs (loop1): free_blocks=2415919104 [ 58.517221][ T57] EXT4-fs (loop1): dirty_blocks=8224 [ 58.522597][ T57] EXT4-fs (loop1): Block reservation details [ 58.529002][ T57] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 58.539451][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 58.552023][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.552023][ T57] [ 58.710471][ T5016] usb usb1: usbfs: process 5016 (syz.2.584) did not claim interface 0 before use [ 58.782228][ T5018] loop1: detected capacity change from 0 to 764 [ 58.792213][ T5018] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 58.860977][ T5028] usb usb1: usbfs: process 5028 (syz.1.589) did not claim interface 0 before use [ 58.979800][ T5036] netlink: 120 bytes leftover after parsing attributes in process `syz.1.592'. [ 59.035853][ T5044] usb usb1: usbfs: process 5044 (syz.1.596) did not claim interface 0 before use [ 59.086198][ T5046] loop4: detected capacity change from 0 to 128 [ 59.132742][ T5053] loop4: detected capacity change from 0 to 128 [ 59.141205][ T5053] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.158470][ T5050] loop1: detected capacity change from 0 to 512 [ 59.170078][ T5050] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.599: Invalid inode bitmap blk 4 in block_group 0 [ 59.223139][ T5059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 59.245817][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.603'. [ 59.336533][ T5067] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 59.348891][ T5067] loop4: detected capacity change from 0 to 164 [ 59.469493][ T5071] netlink: 96 bytes leftover after parsing attributes in process `syz.3.607'. [ 59.501703][ T5073] loop3: detected capacity change from 0 to 2048 [ 59.508689][ T5073] EXT4-fs: Ignoring removed bh option [ 59.660500][ T5079] loop2: detected capacity change from 0 to 128 [ 59.692407][ T5081] usb usb1: usbfs: process 5081 (syz.2.610) did not claim interface 0 before use [ 59.781780][ T5083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.611'. [ 59.823164][ T12] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.839293][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.851520][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.851520][ T12] [ 59.861249][ T12] EXT4-fs (loop3): Total free blocks count 0 [ 59.867266][ T12] EXT4-fs (loop3): Free/Dirty block details [ 59.873272][ T12] EXT4-fs (loop3): free_blocks=2415919104 [ 59.879145][ T12] EXT4-fs (loop3): dirty_blocks=8224 [ 59.884459][ T12] EXT4-fs (loop3): Block reservation details [ 59.884738][ T5086] loop2: detected capacity change from 0 to 512 [ 59.890461][ T12] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 59.901744][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 59.915521][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.915521][ T12] [ 59.923275][ T5088] loop0: detected capacity change from 0 to 764 [ 59.932660][ T5088] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 59.941042][ T5086] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.612: Invalid inode bitmap blk 4 in block_group 0 [ 60.045311][ T5093] loop0: detected capacity change from 0 to 128 [ 60.058942][ T5093] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.133639][ T5101] usb usb1: usbfs: process 5101 (syz.1.618) did not claim interface 0 before use [ 60.214588][ T5105] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 60.251907][ T5109] loop3: detected capacity change from 0 to 2048 [ 60.271563][ T5113] loop2: detected capacity change from 0 to 2048 [ 60.278583][ T5113] EXT4-fs: Ignoring removed bh option [ 60.286390][ T5109] EXT4-fs (loop3): failed to initialize system zone (-117) [ 60.293790][ T5109] EXT4-fs (loop3): mount failed [ 60.294216][ T5117] loop1: detected capacity change from 0 to 512 [ 60.318614][ T5117] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.624: Invalid inode bitmap blk 4 in block_group 0 [ 60.679171][ T57] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.694085][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.706516][ T57] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.706516][ T57] [ 60.716175][ T57] EXT4-fs (loop2): Total free blocks count 0 [ 60.722148][ T57] EXT4-fs (loop2): Free/Dirty block details [ 60.728225][ T57] EXT4-fs (loop2): free_blocks=2415919104 [ 60.734084][ T57] EXT4-fs (loop2): dirty_blocks=8224 [ 60.739407][ T57] EXT4-fs (loop2): Block reservation details [ 60.745500][ T57] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 60.755669][ T394] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 60.768258][ T394] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.768258][ T394] [ 61.044318][ T5143] loop2: detected capacity change from 0 to 128 [ 61.077597][ T5147] loop0: detected capacity change from 0 to 128 [ 61.102120][ T5147] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.144288][ T5154] __nla_validate_parse: 2 callbacks suppressed [ 61.144305][ T5154] netlink: 120 bytes leftover after parsing attributes in process `syz.4.638'. [ 61.200869][ T5158] usb usb1: usbfs: process 5158 (syz.4.640) did not claim interface 0 before use [ 61.273599][ T5165] loop2: detected capacity change from 0 to 128 [ 61.297880][ T5171] loop1: detected capacity change from 0 to 128 [ 61.433746][ T5183] loop1: detected capacity change from 0 to 2048 [ 61.456052][ T5183] EXT4-fs (loop1): failed to initialize system zone (-117) [ 61.463320][ T5183] EXT4-fs (loop1): mount failed [ 61.724546][ T5198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.146480][ T5205] loop0: detected capacity change from 0 to 128 [ 62.190189][ T5211] loop2: detected capacity change from 0 to 764 [ 62.199624][ T5211] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.218084][ T5209] loop0: detected capacity change from 0 to 512 [ 62.245133][ T5209] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.661: Invalid inode bitmap blk 4 in block_group 0 [ 62.290610][ T5223] loop2: detected capacity change from 0 to 128 [ 62.391822][ T5232] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 62.413109][ T5232] loop2: detected capacity change from 0 to 164 [ 62.420869][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.671'. [ 62.628814][ T5242] loop1: detected capacity change from 0 to 764 [ 62.636048][ T5242] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.668492][ T5244] loop1: detected capacity change from 0 to 764 [ 62.675711][ T5244] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.100358][ T5249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'. [ 63.184266][ T5255] loop3: detected capacity change from 0 to 512 [ 63.195283][ T5259] loop2: detected capacity change from 0 to 128 [ 63.206598][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 63.206632][ T29] audit: type=1326 audit(1745130840.768:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5260 comm="syz.4.683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x0 [ 63.235943][ T5255] loop3: detected capacity change from 0 to 2048 [ 63.242557][ T5255] EXT4-fs: Ignoring removed bh option [ 63.305613][ T5268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 63.318671][ T29] audit: type=1326 audit(1745130840.868:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.342125][ T29] audit: type=1326 audit(1745130840.868:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.365668][ T29] audit: type=1326 audit(1745130840.868:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.389181][ T29] audit: type=1326 audit(1745130840.868:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.412849][ T29] audit: type=1326 audit(1745130840.868:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.436607][ T29] audit: type=1326 audit(1745130840.868:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.460121][ T29] audit: type=1326 audit(1745130840.868:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.483363][ T29] audit: type=1326 audit(1745130840.868:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.494648][ T5275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.686'. [ 63.506994][ T29] audit: type=1326 audit(1745130840.878:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 63.613427][ T5279] loop0: detected capacity change from 0 to 512 [ 63.635877][ T5279] loop0: detected capacity change from 0 to 2048 [ 63.643831][ T5279] EXT4-fs: Ignoring removed bh option [ 63.749665][ T57] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.766174][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 63.778605][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.778605][ T57] [ 63.788561][ T57] EXT4-fs (loop3): Total free blocks count 0 [ 63.794576][ T57] EXT4-fs (loop3): Free/Dirty block details [ 63.800594][ T57] EXT4-fs (loop3): free_blocks=2415919104 [ 63.806366][ T57] EXT4-fs (loop3): dirty_blocks=8224 [ 63.811659][ T57] EXT4-fs (loop3): Block reservation details [ 63.817672][ T57] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 63.831894][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 63.844627][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.844627][ T57] [ 64.108559][ T394] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.130961][ T394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.143279][ T394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.143279][ T394] [ 64.153052][ T394] EXT4-fs (loop0): Total free blocks count 0 [ 64.159198][ T394] EXT4-fs (loop0): Free/Dirty block details [ 64.165155][ T394] EXT4-fs (loop0): free_blocks=2415919104 [ 64.171022][ T394] EXT4-fs (loop0): dirty_blocks=8224 [ 64.176360][ T394] EXT4-fs (loop0): Block reservation details [ 64.182347][ T394] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 64.186926][ T5291] netlink: 96 bytes leftover after parsing attributes in process `syz.2.692'. [ 64.195476][ T394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 64.210058][ T394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.210058][ T394] [ 64.388027][ T5296] loop2: detected capacity change from 0 to 512 [ 64.397474][ T5296] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.693: Invalid inode bitmap blk 4 in block_group 0 [ 64.554432][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 64.598694][ T5312] netlink: 120 bytes leftover after parsing attributes in process `syz.4.700'. [ 64.653764][ T5314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.790973][ T5325] usb usb1: usbfs: process 5325 (syz.4.702) did not claim interface 0 before use [ 64.821615][ T5328] loop4: detected capacity change from 0 to 128 [ 64.830606][ T5328] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.924501][ T5335] 9pnet_fd: Insufficient options for proto=fd [ 65.004666][ T5342] loop4: detected capacity change from 0 to 2048 [ 65.016161][ T5342] EXT4-fs (loop4): failed to initialize system zone (-117) [ 65.023509][ T5342] EXT4-fs (loop4): mount failed [ 65.033516][ T5348] loop3: detected capacity change from 0 to 128 [ 65.078508][ T5352] usb usb1: usbfs: process 5352 (syz.3.713) did not claim interface 0 before use [ 65.100289][ T5350] loop1: detected capacity change from 0 to 512 [ 65.112294][ T5350] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.712: Invalid inode bitmap blk 4 in block_group 0 [ 65.268883][ T5368] netlink: 3 bytes leftover after parsing attributes in process `syz.4.719'. [ 65.278066][ T5368] 0ªX¹¦À: renamed from caif0 [ 65.284636][ T5368] 0ªX¹¦À: entered allmulticast mode [ 65.289975][ T5368] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 65.293869][ T5372] usb usb1: usbfs: process 5372 (syz.1.721) did not claim interface 0 before use [ 65.306712][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.719'. [ 65.362143][ T5378] loop4: detected capacity change from 0 to 764 [ 65.370017][ T5378] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 65.403847][ T5383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 65.433365][ T5384] loop0: detected capacity change from 0 to 512 [ 65.442089][ T5380] loop1: detected capacity change from 0 to 128 [ 65.461158][ T5384] loop0: detected capacity change from 0 to 2048 [ 65.468723][ T5380] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.471171][ T5384] EXT4-fs: Ignoring removed bh option [ 65.504265][ T5395] netem: change failed [ 65.600109][ T5402] usb usb1: usbfs: process 5402 (syz.4.733) did not claim interface 0 before use [ 65.650483][ T5405] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 65.673984][ T5405] loop1: detected capacity change from 0 to 164 [ 65.849698][ T153] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.865914][ T153] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.878181][ T153] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.878181][ T153] [ 65.887874][ T153] EXT4-fs (loop0): Total free blocks count 0 [ 65.893864][ T153] EXT4-fs (loop0): Free/Dirty block details [ 65.899792][ T153] EXT4-fs (loop0): free_blocks=2415919104 [ 65.905524][ T153] EXT4-fs (loop0): dirty_blocks=8224 [ 65.910873][ T153] EXT4-fs (loop0): Block reservation details [ 65.916873][ T153] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 65.926872][ T394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 65.939580][ T394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 65.939580][ T394] [ 66.197399][ T5428] loop3: detected capacity change from 0 to 128 [ 66.208120][ T5428] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.284620][ T5431] loop3: detected capacity change from 0 to 128 [ 66.359402][ T5440] loop3: detected capacity change from 0 to 512 [ 66.376407][ T5440] loop3: detected capacity change from 0 to 2048 [ 66.383091][ T5440] EXT4-fs: Ignoring removed bh option [ 66.481314][ T5447] usb usb1: usbfs: process 5447 (syz.1.751) did not claim interface 0 before use [ 66.651570][ T5454] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.691506][ T5460] loop1: detected capacity change from 0 to 128 [ 66.813326][ T394] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.829681][ T394] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.841938][ T394] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.841938][ T394] [ 66.851789][ T394] EXT4-fs (loop3): Total free blocks count 0 [ 66.857976][ T394] EXT4-fs (loop3): Free/Dirty block details [ 66.864040][ T394] EXT4-fs (loop3): free_blocks=2415919104 [ 66.869805][ T394] EXT4-fs (loop3): dirty_blocks=8224 [ 66.875123][ T394] EXT4-fs (loop3): Block reservation details [ 66.881227][ T394] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 66.898653][ T394] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 66.911241][ T394] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.911241][ T394] [ 67.075613][ T5482] loop0: detected capacity change from 0 to 764 [ 67.082841][ T5482] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.118149][ T5486] loop3: detected capacity change from 0 to 512 [ 67.134722][ T5489] loop0: detected capacity change from 0 to 128 [ 67.253158][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.262171][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.271102][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.286778][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.295628][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.308983][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.328920][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.337882][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.347425][ T5500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 67.501360][ T5513] netlink: 120 bytes leftover after parsing attributes in process `syz.4.778'. [ 67.545985][ T5517] loop4: detected capacity change from 0 to 764 [ 67.553552][ T5517] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.599115][ T5521] loop1: detected capacity change from 0 to 128 [ 67.616766][ T5524] loop2: detected capacity change from 0 to 128 [ 67.777253][ T5540] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.838880][ T5543] loop2: detected capacity change from 0 to 512 [ 67.846991][ T5543] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.791: Invalid inode bitmap blk 4 in block_group 0 [ 67.860291][ T5543] EXT4-fs mount: 121 callbacks suppressed [ 67.860303][ T5543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.879276][ T5543] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.970629][ T5554] loop2: detected capacity change from 0 to 128 [ 68.021858][ T5560] loop2: detected capacity change from 0 to 512 [ 68.038633][ T5560] loop2: detected capacity change from 0 to 2048 [ 68.046127][ T5560] EXT4-fs: Ignoring removed bh option [ 68.068706][ T5560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.119402][ T5570] loop3: detected capacity change from 0 to 164 [ 68.128313][ T5570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.142287][ T5570] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 68.151695][ T5570] rock: directory entry would overflow storage [ 68.157939][ T5570] rock: sig=0x4f50, size=4, remaining=3 [ 68.163534][ T5570] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 68.408926][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 68.408940][ T29] audit: type=1326 audit(1745130845.968:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5584 comm="syz.3.807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x0 [ 68.454185][ T394] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.470338][ T394] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 68.482685][ T394] EXT4-fs (loop2): This should not happen!! Data will be lost [ 68.482685][ T394] [ 68.492395][ T394] EXT4-fs (loop2): Total free blocks count 0 [ 68.498636][ T394] EXT4-fs (loop2): Free/Dirty block details [ 68.504683][ T394] EXT4-fs (loop2): free_blocks=2415919104 [ 68.510455][ T394] EXT4-fs (loop2): dirty_blocks=8224 [ 68.515876][ T394] EXT4-fs (loop2): Block reservation details [ 68.521897][ T394] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 68.531268][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 68.652657][ T5601] loop0: detected capacity change from 0 to 764 [ 68.660089][ T5601] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 68.827170][ T5631] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 69.290193][ T5670] usb usb1: usbfs: process 5670 (syz.3.841) did not claim interface 0 before use [ 69.404231][ T5681] loop4: detected capacity change from 0 to 128 [ 69.437790][ T5684] loop4: detected capacity change from 0 to 764 [ 69.445401][ T5684] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.477493][ T5686] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.541942][ T5695] loop4: detected capacity change from 0 to 128 [ 69.644897][ T29] audit: type=1326 audit(1745130847.198:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.668362][ T29] audit: type=1326 audit(1745130847.198:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.691769][ T29] audit: type=1326 audit(1745130847.198:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.715168][ T29] audit: type=1326 audit(1745130847.198:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.738688][ T29] audit: type=1326 audit(1745130847.198:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.762809][ T29] audit: type=1326 audit(1745130847.208:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.786367][ T29] audit: type=1326 audit(1745130847.208:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.809767][ T29] audit: type=1326 audit(1745130847.258:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.833960][ T29] audit: type=1326 audit(1745130847.258:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5698 comm="syz.4.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fa3d933e169 code=0x7ffc0000 [ 69.908128][ T5709] usb usb1: usbfs: process 5709 (syz.1.856) did not claim interface 0 before use [ 69.969708][ T5715] loop2: detected capacity change from 0 to 512 [ 69.978170][ T5715] EXT4-fs: Ignoring removed oldalloc option [ 70.006593][ T5715] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.859: Parent and EA inode have the same ino 15 [ 70.029393][ T5715] EXT4-fs (loop2): 1 orphan inode deleted [ 70.039841][ T5715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.044574][ T5730] xt_TPROXY: Can be used only with -p tcp or -p udp [ 70.060891][ T5715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.107507][ T5735] loop1: detected capacity change from 0 to 128 [ 70.129516][ T5735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.146611][ T5735] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.166741][ T5739] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 70.188073][ T3304] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.234221][ T5749] loop0: detected capacity change from 0 to 128 [ 70.289496][ T5759] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 70.457822][ T5774] loop4: detected capacity change from 0 to 128 [ 70.502161][ T5781] loop4: detected capacity change from 0 to 128 [ 70.581223][ T5790] usb usb1: usbfs: process 5790 (syz.0.891) did not claim interface 0 before use [ 70.728407][ T5809] loop1: detected capacity change from 0 to 512 [ 70.748609][ T5809] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.901: Invalid inode bitmap blk 4 in block_group 0 [ 70.762172][ T5809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.777042][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.811189][ T5815] loop4: detected capacity change from 0 to 2048 [ 70.827263][ T5815] EXT4-fs (loop4): failed to initialize system zone (-117) [ 70.834755][ T5815] EXT4-fs (loop4): mount failed [ 70.862495][ T5823] usb usb1: usbfs: process 5823 (syz.0.906) did not claim interface 0 before use [ 71.025451][ T5839] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.126170][ T5851] usb usb1: usbfs: process 5851 (syz.4.920) did not claim interface 0 before use [ 71.193805][ T5862] loop0: detected capacity change from 0 to 128 [ 71.221731][ T5868] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.234396][ T5862] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.262748][ T5862] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.292201][ T5875] loop3: detected capacity change from 0 to 128 [ 71.343076][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.354964][ T5883] usb usb1: usbfs: process 5883 (syz.3.934) did not claim interface 0 before use [ 71.465730][ T5906] loop4: detected capacity change from 0 to 128 [ 71.602431][ T5925] loop4: detected capacity change from 0 to 128 [ 71.619681][ T5925] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.640498][ T5925] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.704633][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.869539][ T5958] loop1: detected capacity change from 0 to 512 [ 71.878519][ T5958] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.968: Invalid inode bitmap blk 4 in block_group 0 [ 71.893186][ T5958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.907670][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.141242][ T5988] loop1: detected capacity change from 0 to 512 [ 72.158843][ T5988] loop1: detected capacity change from 0 to 2048 [ 72.166823][ T5988] EXT4-fs: Ignoring removed bh option [ 72.176718][ T5988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.433860][ T6007] loop0: detected capacity change from 0 to 2048 [ 72.446952][ T6007] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.454319][ T6007] EXT4-fs (loop0): mount failed [ 72.547573][ T153] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 72.564916][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 72.577202][ T153] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.577202][ T153] [ 72.586876][ T153] EXT4-fs (loop1): Total free blocks count 0 [ 72.592882][ T153] EXT4-fs (loop1): Free/Dirty block details [ 72.598881][ T153] EXT4-fs (loop1): free_blocks=2415919104 [ 72.604626][ T153] EXT4-fs (loop1): dirty_blocks=8224 [ 72.609990][ T153] EXT4-fs (loop1): Block reservation details [ 72.615999][ T153] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 72.626478][ T153] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 72.829375][ T6035] loop3: detected capacity change from 0 to 512 [ 72.856890][ T6035] loop3: detected capacity change from 0 to 2048 [ 72.863890][ T6035] EXT4-fs: Ignoring removed bh option [ 72.888588][ T6035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.921365][ T6041] loop0: detected capacity change from 0 to 128 [ 72.960176][ T6044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.990267][ T6046] loop0: detected capacity change from 0 to 128 [ 73.009667][ T6046] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.022574][ T6046] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.138033][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.243210][ T6053] __nla_validate_parse: 40 callbacks suppressed [ 73.243228][ T6053] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1005'. [ 73.263162][ T3415] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.279887][ T3415] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 73.292293][ T3415] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.292293][ T3415] [ 73.302038][ T3415] EXT4-fs (loop3): Total free blocks count 0 [ 73.308130][ T3415] EXT4-fs (loop3): Free/Dirty block details [ 73.314223][ T3415] EXT4-fs (loop3): free_blocks=2415919104 [ 73.320235][ T3415] EXT4-fs (loop3): dirty_blocks=8224 [ 73.325655][ T3415] EXT4-fs (loop3): Block reservation details [ 73.331661][ T3415] EXT4-fs (loop3): i_reserved_data_blocks=514 [ 73.344440][ T3415] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 73.382237][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.391238][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.401842][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.421550][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.430660][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.441790][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.473518][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.482519][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.496588][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 73.666954][ T6092] usb usb1: usbfs: process 6092 (syz.0.1019) did not claim interface 0 before use [ 73.738739][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 73.738755][ T29] audit: type=1326 audit(1745130851.298:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6105 comm="syz.2.1025" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfb9c2e169 code=0x0 [ 73.831502][ T6116] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 73.845410][ T6116] loop2: detected capacity change from 0 to 164 [ 73.858686][ T6117] loop1: detected capacity change from 0 to 512 [ 73.880427][ T6117] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1028: Invalid inode bitmap blk 4 in block_group 0 [ 73.894221][ T6117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.897698][ T6120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 73.916516][ T6117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.963587][ T29] audit: type=1326 audit(1745130851.508:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 73.987138][ T29] audit: type=1326 audit(1745130851.508:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.010610][ T29] audit: type=1326 audit(1745130851.508:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.034263][ T29] audit: type=1326 audit(1745130851.508:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.057686][ T29] audit: type=1326 audit(1745130851.508:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.081412][ T29] audit: type=1326 audit(1745130851.508:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.105133][ T29] audit: type=1326 audit(1745130851.508:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.128557][ T29] audit: type=1326 audit(1745130851.508:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.152037][ T29] audit: type=1326 audit(1745130851.508:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.1.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 74.506507][ T6164] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 74.517505][ T6164] loop1: detected capacity change from 0 to 164 [ 74.581897][ T6172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.668978][ T6189] loop2: detected capacity change from 0 to 128 [ 74.677850][ T6189] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.693284][ T6189] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.746696][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.767279][ T6201] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.907597][ T6216] loop2: detected capacity change from 0 to 512 [ 74.915481][ T6216] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1067: Invalid inode bitmap blk 4 in block_group 0 [ 74.928815][ T6216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.941869][ T6216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.999749][ T6226] loop2: detected capacity change from 0 to 128 [ 75.009234][ T6226] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.021583][ T6226] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.077785][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.105217][ T6239] loop2: detected capacity change from 0 to 512 [ 75.125974][ T6239] loop2: detected capacity change from 0 to 2048 [ 75.132918][ T6239] EXT4-fs: Ignoring removed bh option [ 75.159000][ T6239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.642126][ T394] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.659841][ T394] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.672164][ T394] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.672164][ T394] [ 75.681960][ T394] EXT4-fs (loop2): Total free blocks count 0 [ 75.688174][ T394] EXT4-fs (loop2): Free/Dirty block details [ 75.694297][ T394] EXT4-fs (loop2): free_blocks=2415919104 [ 75.700098][ T394] EXT4-fs (loop2): dirty_blocks=8224 [ 75.705506][ T394] EXT4-fs (loop2): Block reservation details [ 75.709598][ T6290] loop1: detected capacity change from 0 to 512 [ 75.711561][ T394] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 75.724676][ T6290] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1094: Invalid inode bitmap blk 4 in block_group 0 [ 75.728647][ T394] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 75.743954][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.766431][ T6290] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.088619][ T6324] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 77.058300][ T6362] loop4: detected capacity change from 0 to 512 [ 77.066579][ T6362] EXT4-fs: Ignoring removed oldalloc option [ 77.074069][ T6362] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1123: Parent and EA inode have the same ino 15 [ 77.088983][ T6362] EXT4-fs (loop4): 1 orphan inode deleted [ 77.095671][ T6362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.116048][ T6362] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.174750][ T6374] xt_TPROXY: Can be used only with -p tcp or -p udp [ 77.711346][ T6406] loop2: detected capacity change from 0 to 512 [ 77.719455][ T6406] EXT4-fs: Ignoring removed oldalloc option [ 77.738497][ T6406] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1139: Parent and EA inode have the same ino 15 [ 77.751948][ T6406] EXT4-fs (loop2): 1 orphan inode deleted [ 77.759628][ T6406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.774191][ T6406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.912555][ T6422] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.923483][ T6422] loop4: detected capacity change from 0 to 164 [ 78.100723][ T6432] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.240843][ T6450] loop1: detected capacity change from 0 to 512 [ 78.255807][ T6450] loop1: detected capacity change from 0 to 2048 [ 78.262566][ T6450] EXT4-fs: Ignoring removed bh option [ 78.276376][ T6450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.563014][ T394] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.578055][ T394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 78.590273][ T394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 78.590273][ T394] [ 78.600048][ T394] EXT4-fs (loop1): Total free blocks count 0 [ 78.606425][ T394] EXT4-fs (loop1): Free/Dirty block details [ 78.612422][ T394] EXT4-fs (loop1): free_blocks=2415919104 [ 78.618170][ T394] EXT4-fs (loop1): dirty_blocks=8224 [ 78.623460][ T394] EXT4-fs (loop1): Block reservation details [ 78.629484][ T394] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 78.639078][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 78.711660][ T6461] __nla_validate_parse: 58 callbacks suppressed [ 78.711679][ T6461] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1163'. [ 78.772148][ T6471] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1167'. [ 78.802451][ T6476] 9pnet_fd: Insufficient options for proto=fd [ 78.960936][ T6487] loop1: detected capacity change from 0 to 512 [ 78.971794][ T6487] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1173: Invalid inode bitmap blk 4 in block_group 0 [ 78.984891][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 78.984906][ T29] audit: type=1326 audit(1745130856.538:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6489 comm="syz.4.1174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3d933e169 code=0x0 [ 78.986756][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.029161][ T6487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.048094][ T6494] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1176'. [ 79.054898][ T29] audit: type=1326 audit(1745130856.608:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.080563][ T29] audit: type=1326 audit(1745130856.608:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.104128][ T29] audit: type=1326 audit(1745130856.608:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.127652][ T29] audit: type=1326 audit(1745130856.608:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.151111][ T29] audit: type=1326 audit(1745130856.608:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.174563][ T29] audit: type=1326 audit(1745130856.608:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.198019][ T29] audit: type=1326 audit(1745130856.608:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.221537][ T29] audit: type=1326 audit(1745130856.608:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.244977][ T29] audit: type=1326 audit(1745130856.608:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6486 comm="syz.1.1173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 79.349926][ T6507] 9pnet_fd: Insufficient options for proto=fd [ 79.350409][ T6509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 79.367895][ T6502] loop2: detected capacity change from 0 to 512 [ 79.396722][ T6502] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1179: Invalid inode bitmap blk 4 in block_group 0 [ 79.410721][ T6502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.424050][ T6502] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.600651][ T6528] loop1: detected capacity change from 0 to 2048 [ 79.616504][ T6528] EXT4-fs (loop1): failed to initialize system zone (-117) [ 79.623991][ T6528] EXT4-fs (loop1): mount failed [ 79.746291][ T6541] 9pnet_fd: Insufficient options for proto=fd [ 79.798694][ T6545] loop3: detected capacity change from 0 to 512 [ 79.807146][ T6545] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1197: Invalid inode bitmap blk 4 in block_group 0 [ 79.821332][ T6545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.843806][ T6545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.846970][ T6551] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1199'. [ 79.958265][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1202'. [ 79.971629][ T6558] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 79.996158][ T6564] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.025401][ T6558] syzkaller0: entered promiscuous mode [ 80.030939][ T6558] syzkaller0: entered allmulticast mode [ 80.142191][ T6572] loop4: detected capacity change from 0 to 2048 [ 80.166213][ T6572] EXT4-fs (loop4): failed to initialize system zone (-117) [ 80.173541][ T6572] EXT4-fs (loop4): mount failed [ 80.185533][ T6575] loop1: detected capacity change from 0 to 512 [ 80.193449][ T6575] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1208: Invalid inode bitmap blk 4 in block_group 0 [ 80.207627][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.220672][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.366361][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 80.375325][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 80.394593][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 80.417577][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 80.426561][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 80.526986][ T6612] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 80.536600][ T6612] loop0: detected capacity change from 0 to 164 [ 80.555051][ T6614] Illegal XDP return value 37073280 on prog (id 782) dev N/A, expect packet loss! [ 80.696528][ T6625] loop2: detected capacity change from 0 to 2048 [ 80.705655][ T6625] EXT4-fs (loop2): failed to initialize system zone (-117) [ 80.712948][ T6625] EXT4-fs (loop2): mount failed [ 81.058158][ T6649] loop3: detected capacity change from 0 to 1024 [ 81.071920][ T6645] loop2: detected capacity change from 0 to 8192 [ 81.076739][ T6649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.080044][ T6645] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.090509][ T6649] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.128028][ T57] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 393: padding at end of block bitmap is not set [ 81.144279][ T57] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 81.156963][ T57] EXT4-fs (loop3): This should not happen!! Data will be lost [ 81.156963][ T57] [ 81.178264][ T6649] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.304179][ T6660] loop2: detected capacity change from 0 to 2048 [ 81.337187][ T6660] EXT4-fs (loop2): failed to initialize system zone (-117) [ 81.354476][ T6660] EXT4-fs (loop2): mount failed [ 81.588840][ T6690] xt_TPROXY: Can be used only with -p tcp or -p udp [ 81.857104][ T6703] loop2: detected capacity change from 0 to 2048 [ 81.865659][ T6703] EXT4-fs (loop2): failed to initialize system zone (-117) [ 81.873047][ T6703] EXT4-fs (loop2): mount failed [ 82.099183][ T6717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.288342][ T6744] xt_TPROXY: Can be used only with -p tcp or -p udp [ 82.309934][ T6746] FAULT_INJECTION: forcing a failure. [ 82.309934][ T6746] name failslab, interval 1, probability 0, space 0, times 0 [ 82.322655][ T6746] CPU: 1 UID: 0 PID: 6746 Comm: syz.3.1277 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 82.322687][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.322809][ T6746] Call Trace: [ 82.322816][ T6746] [ 82.322823][ T6746] dump_stack_lvl+0xf6/0x150 [ 82.322849][ T6746] dump_stack+0x15/0x1a [ 82.322873][ T6746] should_fail_ex+0x261/0x270 [ 82.322897][ T6746] should_failslab+0x8f/0xb0 [ 82.322919][ T6746] __kmalloc_noprof+0xad/0x410 [ 82.323044][ T6746] ? io_cache_alloc_new+0x2b/0xa0 [ 82.323064][ T6746] io_cache_alloc_new+0x2b/0xa0 [ 82.323099][ T6746] __io_prep_rw+0xe9/0x5e0 [ 82.323142][ T6746] io_prep_read+0x1e/0xa0 [ 82.323235][ T6746] io_submit_sqes+0x607/0x1050 [ 82.323266][ T6746] __se_sys_io_uring_enter+0x1e8/0x1b70 [ 82.323374][ T6746] ? 0xffffffff81000000 [ 82.323388][ T6746] ? get_pid_task+0x94/0xd0 [ 82.323405][ T6746] ? strncpy_from_user_nofault+0xdb/0xe0 [ 82.323433][ T6746] ? bpf_probe_read_compat_str+0xd2/0x130 [ 82.323515][ T6746] ? __rcu_read_unlock+0x4e/0x70 [ 82.323600][ T6746] ? bpf_trace_run2+0x12c/0x1d0 [ 82.323624][ T6746] ? __bpf_trace_sys_enter+0x10/0x30 [ 82.323716][ T6746] ? trace_sys_enter+0xcd/0x110 [ 82.323815][ T6746] __x64_sys_io_uring_enter+0x78/0x90 [ 82.323840][ T6746] x64_sys_call+0x26cb/0x2e10 [ 82.323912][ T6746] do_syscall_64+0xc9/0x1a0 [ 82.324073][ T6746] ? clear_bhb_loop+0x25/0x80 [ 82.324094][ T6746] ? clear_bhb_loop+0x25/0x80 [ 82.324120][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.324168][ T6746] RIP: 0033:0x7f5b8df3e169 [ 82.324181][ T6746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.324200][ T6746] RSP: 002b:00007f5b8c5a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 82.324218][ T6746] RAX: ffffffffffffffda RBX: 00007f5b8e165fa0 RCX: 00007f5b8df3e169 [ 82.324229][ T6746] RDX: 0000000000000000 RSI: 00000000000047f9 RDI: 0000000000000005 [ 82.324241][ T6746] RBP: 00007f5b8c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.324252][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.324334][ T6746] R13: 0000000000000000 R14: 00007f5b8e165fa0 R15: 00007ffe3d58f878 [ 82.324352][ T6746] [ 82.591630][ T6748] loop4: detected capacity change from 0 to 512 [ 82.604711][ T6755] netlink: 'syz.1.1282': attribute type 1 has an invalid length. [ 82.610421][ T6748] loop4: detected capacity change from 0 to 2048 [ 82.619410][ T6748] EXT4-fs: Ignoring removed bh option [ 82.646541][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.648486][ T6755] syzkaller0: entered promiscuous mode [ 82.664151][ T6755] syzkaller0: entered allmulticast mode [ 82.942918][ T6775] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 82.952074][ T6775] loop1: detected capacity change from 0 to 164 [ 82.999340][ T31] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.014309][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 83.026698][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.026698][ T31] [ 83.036497][ T31] EXT4-fs (loop4): Total free blocks count 0 [ 83.042554][ T31] EXT4-fs (loop4): Free/Dirty block details [ 83.048512][ T31] EXT4-fs (loop4): free_blocks=2415919104 [ 83.054269][ T31] EXT4-fs (loop4): dirty_blocks=8224 [ 83.059576][ T31] EXT4-fs (loop4): Block reservation details [ 83.065568][ T31] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 83.075714][ T3415] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 83.348677][ T6789] FAULT_INJECTION: forcing a failure. [ 83.348677][ T6789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.361878][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.4.1292 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 83.361901][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.361991][ T6789] Call Trace: [ 83.361996][ T6789] [ 83.362002][ T6789] dump_stack_lvl+0xf6/0x150 [ 83.362028][ T6789] dump_stack+0x15/0x1a [ 83.362042][ T6789] should_fail_ex+0x261/0x270 [ 83.362123][ T6789] should_fail+0xb/0x10 [ 83.362141][ T6789] should_fail_usercopy+0x1a/0x20 [ 83.362162][ T6789] _copy_from_user+0x1c/0xa0 [ 83.362186][ T6789] move_addr_to_kernel+0x8c/0x130 [ 83.362276][ T6789] copy_msghdr_from_user+0x280/0x2b0 [ 83.362384][ T6789] __sys_sendmsg+0x141/0x240 [ 83.362417][ T6789] __x64_sys_sendmsg+0x46/0x50 [ 83.362437][ T6789] x64_sys_call+0x26f3/0x2e10 [ 83.362474][ T6789] do_syscall_64+0xc9/0x1a0 [ 83.362496][ T6789] ? clear_bhb_loop+0x25/0x80 [ 83.362514][ T6789] ? clear_bhb_loop+0x25/0x80 [ 83.362532][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.362548][ T6789] RIP: 0033:0x7fa3d933e169 [ 83.362602][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.362616][ T6789] RSP: 002b:00007fa3d79a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.362631][ T6789] RAX: ffffffffffffffda RBX: 00007fa3d9565fa0 RCX: 00007fa3d933e169 [ 83.362656][ T6789] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 83.362666][ T6789] RBP: 00007fa3d79a7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.362676][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.362686][ T6789] R13: 0000000000000000 R14: 00007fa3d9565fa0 R15: 00007fff90966da8 [ 83.362762][ T6789] [ 83.710023][ T6803] 9pnet_fd: Insufficient options for proto=fd [ 83.758436][ T6806] __nla_validate_parse: 35 callbacks suppressed [ 83.758454][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.773846][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.782870][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.801147][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.810298][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.820283][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.835982][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.845047][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.858593][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 83.914190][ T6826] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1308'. [ 84.022851][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 84.022865][ T29] audit: type=1326 audit(1745130861.578:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6838 comm="syz.4.1312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3d933e169 code=0x0 [ 84.108665][ T6846] loop0: detected capacity change from 0 to 2048 [ 84.117302][ T6848] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.128777][ T6848] loop4: detected capacity change from 0 to 164 [ 84.157912][ T6846] EXT4-fs (loop0): failed to initialize system zone (-117) [ 84.166375][ T6846] EXT4-fs (loop0): mount failed [ 84.221625][ T6855] netlink: 'syz.2.1317': attribute type 1 has an invalid length. [ 84.253970][ T6855] syzkaller0: entered promiscuous mode [ 84.259685][ T6855] syzkaller0: entered allmulticast mode [ 84.286105][ T29] audit: type=1326 audit(1745130861.848:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.0.1318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e86f7e169 code=0x0 [ 84.345317][ T29] audit: type=1326 audit(1745130861.908:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x0 [ 84.792592][ T29] audit: type=1326 audit(1745130862.348:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.816412][ T29] audit: type=1326 audit(1745130862.348:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.839865][ T29] audit: type=1326 audit(1745130862.348:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.863354][ T29] audit: type=1326 audit(1745130862.348:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.886836][ T29] audit: type=1326 audit(1745130862.348:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.910316][ T29] audit: type=1326 audit(1745130862.348:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 84.933977][ T29] audit: type=1326 audit(1745130862.348:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6862 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88f27ae169 code=0x7ffc0000 [ 85.082700][ T6879] loop4: detected capacity change from 0 to 512 [ 85.104452][ T6879] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1326: Invalid inode bitmap blk 4 in block_group 0 [ 85.120052][ T6879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.135908][ T6879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.213090][ T6893] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 85.260563][ T6893] syzkaller0: entered promiscuous mode [ 85.266136][ T6893] syzkaller0: entered allmulticast mode [ 85.274014][ T6898] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.283782][ T6898] loop0: detected capacity change from 0 to 164 [ 85.318583][ T6902] loop3: detected capacity change from 0 to 2048 [ 85.336126][ T6902] EXT4-fs (loop3): failed to initialize system zone (-117) [ 85.343504][ T6902] EXT4-fs (loop3): mount failed [ 85.356220][ T6906] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 85.365372][ T6906] loop4: detected capacity change from 0 to 164 [ 85.901245][ T6946] loop2: detected capacity change from 0 to 2048 [ 85.915994][ T6946] EXT4-fs (loop2): failed to initialize system zone (-117) [ 85.923387][ T6946] EXT4-fs (loop2): mount failed [ 85.923458][ T6945] loop3: detected capacity change from 0 to 512 [ 85.936220][ T6945] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1350: Invalid inode bitmap blk 4 in block_group 0 [ 85.950532][ T6945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.963541][ T6945] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.146635][ T6961] loop3: detected capacity change from 0 to 512 [ 86.166067][ T6961] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1356: Invalid inode bitmap blk 4 in block_group 0 [ 86.244330][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.266656][ T6984] loop2: detected capacity change from 0 to 2048 [ 86.294497][ T6961] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.326778][ T6984] EXT4-fs (loop2): failed to initialize system zone (-117) [ 86.334642][ T6984] EXT4-fs (loop2): mount failed [ 86.366993][ T7001] loop4: detected capacity change from 0 to 512 [ 86.398051][ T7001] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1369: Invalid inode bitmap blk 4 in block_group 0 [ 86.427429][ T7001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.467578][ T7001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.477285][ T7008] syz.3.1374 uses obsolete (PF_INET,SOCK_PACKET) [ 86.636468][ T7021] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 87.017505][ T7056] 9pnet: Could not find request transport: fd0x0000000000000003 [ 87.269234][ T7083] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 87.308894][ T7083] syzkaller0: entered promiscuous mode [ 87.314501][ T7083] syzkaller0: entered allmulticast mode [ 87.540359][ T7102] loop1: detected capacity change from 0 to 512 [ 87.565753][ T7102] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1415: Invalid inode bitmap blk 4 in block_group 0 [ 87.605201][ T7102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.640367][ T7102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.884058][ T7122] loop1: detected capacity change from 0 to 2048 [ 87.907660][ T7122] EXT4-fs (loop1): failed to initialize system zone (-117) [ 87.916132][ T7122] EXT4-fs (loop1): mount failed [ 88.256630][ T7145] loop1: detected capacity change from 0 to 512 [ 88.264398][ T7145] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1431: Invalid inode bitmap blk 4 in block_group 0 [ 88.287896][ T7145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.309597][ T7145] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.342080][ T7150] netlink: 'syz.0.1433': attribute type 1 has an invalid length. [ 88.380353][ T7150] syzkaller0: entered promiscuous mode [ 88.385887][ T7150] syzkaller0: entered allmulticast mode [ 88.534048][ T7166] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 88.601438][ T7181] 9pnet_fd: Insufficient options for proto=fd [ 88.629932][ T7173] loop1: detected capacity change from 0 to 512 [ 88.651231][ T7173] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1444: Invalid inode bitmap blk 4 in block_group 0 [ 88.744628][ T7204] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 88.776596][ T7204] loop4: detected capacity change from 0 to 164 [ 88.810073][ T7212] 9pnet_fd: Insufficient options for proto=fd [ 88.975751][ T7231] __nla_validate_parse: 46 callbacks suppressed [ 88.975843][ T7231] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1471'. [ 89.185818][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 89.185873][ T29] audit: type=1326 audit(1745130866.748:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.219168][ T29] audit: type=1326 audit(1745130866.778:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.242748][ T29] audit: type=1326 audit(1745130866.778:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.266374][ T29] audit: type=1326 audit(1745130866.778:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.289990][ T29] audit: type=1326 audit(1745130866.778:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.313581][ T29] audit: type=1326 audit(1745130866.778:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.337595][ T29] audit: type=1326 audit(1745130866.908:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.361353][ T29] audit: type=1326 audit(1745130866.908:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.394832][ T29] audit: type=1326 audit(1745130866.948:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.418421][ T29] audit: type=1326 audit(1745130866.948:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb9c2e169 code=0x7ffc0000 [ 89.482869][ T7267] loop2: detected capacity change from 0 to 512 [ 89.499244][ T7267] loop2: detected capacity change from 0 to 2048 [ 89.507602][ T7267] EXT4-fs: Ignoring removed bh option [ 89.541656][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1488'. [ 89.563547][ T7277] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 89.584558][ T7280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1489'. [ 89.644522][ T7277] syzkaller0: entered promiscuous mode [ 89.650162][ T7277] syzkaller0: entered allmulticast mode [ 89.970623][ T7312] loop4: detected capacity change from 0 to 512 [ 89.998097][ T7312] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.008746][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1505'. [ 90.036120][ T7315] netlink: 'syz.0.1505': attribute type 1 has an invalid length. [ 90.048065][ T7312] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 90.060893][ T7312] System zones: 1-12 [ 90.067090][ T7312] EXT4-fs (loop4): 1 truncate cleaned up [ 90.129820][ T31] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 90.155955][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 90.168296][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.168296][ T31] [ 90.169993][ T7315] syzkaller0: entered promiscuous mode [ 90.178293][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 90.183632][ T7315] syzkaller0: entered allmulticast mode [ 90.195324][ T31] EXT4-fs (loop2): Free/Dirty block details [ 90.201237][ T31] EXT4-fs (loop2): free_blocks=2415919104 [ 90.207033][ T31] EXT4-fs (loop2): dirty_blocks=8224 [ 90.212395][ T31] EXT4-fs (loop2): Block reservation details [ 90.218420][ T31] EXT4-fs (loop2): i_reserved_data_blocks=514 [ 90.232079][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 90.244696][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 90.244696][ T31] [ 90.327498][ T7336] loop0: detected capacity change from 0 to 512 [ 90.356344][ T7336] EXT4-fs (loop0): too many log groups per flexible block group [ 90.364048][ T7336] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 90.374006][ T7336] EXT4-fs (loop0): mount failed [ 90.396086][ T7336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1513'. [ 90.445132][ T7353] loop0: detected capacity change from 0 to 512 [ 90.474565][ T7353] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 90.496177][ T7353] EXT4-fs (loop0): mount failed [ 90.588529][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'. [ 90.597655][ T7375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 90.607068][ T7371] netlink: 'syz.4.1524': attribute type 1 has an invalid length. [ 90.610047][ T7377] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1527'. [ 90.651803][ T7371] syzkaller0: entered promiscuous mode [ 90.657341][ T7371] syzkaller0: entered allmulticast mode [ 90.664643][ T7379] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1528'. [ 91.223012][ T7413] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1541'. [ 91.322281][ T7419] netlink: 'syz.2.1544': attribute type 1 has an invalid length. [ 91.393795][ T7419] syzkaller0: entered promiscuous mode [ 91.399394][ T7419] syzkaller0: entered allmulticast mode [ 91.858037][ T7458] netlink: 'syz.2.1560': attribute type 1 has an invalid length. [ 91.894396][ T7458] syzkaller0: entered promiscuous mode [ 91.899990][ T7458] syzkaller0: entered allmulticast mode [ 92.188992][ T7473] loop4: detected capacity change from 0 to 512 [ 92.305157][ T7473] ext3: Unknown parameter 'nodelalloc"journal_async_commit' [ 92.474883][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7490 comm=syz.4.1573 [ 92.488189][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7490 comm=syz.4.1573 [ 92.501040][ T7490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7490 comm=syz.4.1573 [ 92.603051][ T7494] loop2: detected capacity change from 0 to 2048 [ 92.629232][ T7494] EXT4-fs (loop2): failed to initialize system zone (-117) [ 92.637936][ T7494] EXT4-fs (loop2): mount failed [ 92.669588][ T7508] loop1: detected capacity change from 0 to 512 [ 92.688572][ T7508] loop1: detected capacity change from 0 to 2048 [ 92.695377][ T7508] EXT4-fs: Ignoring removed bh option [ 92.826213][ T7523] loop2: detected capacity change from 0 to 512 [ 92.895303][ T7523] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1585: Invalid inode bitmap blk 4 in block_group 0 [ 93.221611][ T7189] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.382758][ T394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 93.395119][ T394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.395119][ T394] [ 93.404960][ T394] EXT4-fs (loop1): Total free blocks count 0 [ 93.410996][ T394] EXT4-fs (loop1): Free/Dirty block details [ 93.416961][ T394] EXT4-fs (loop1): free_blocks=2415919104 [ 93.422711][ T394] EXT4-fs (loop1): dirty_blocks=8224 [ 93.428072][ T394] EXT4-fs (loop1): Block reservation details [ 93.434061][ T394] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 93.452051][ T394] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 93.464652][ T394] EXT4-fs (loop1): This should not happen!! Data will be lost [ 93.464652][ T394] [ 93.560915][ T7574] loop4: detected capacity change from 0 to 512 [ 93.569752][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7573 comm=syz.3.1609 [ 93.600258][ T7574] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1605: Invalid inode bitmap blk 4 in block_group 0 [ 93.614613][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7573 comm=syz.3.1609 [ 93.654833][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7573 comm=syz.3.1609 [ 94.077599][ T7620] __nla_validate_parse: 5 callbacks suppressed [ 94.077642][ T7620] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1622'. [ 94.101421][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7619 comm=syz.3.1623 [ 94.123818][ T7622] loop4: detected capacity change from 0 to 164 [ 94.125972][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7619 comm=syz.3.1623 [ 94.147194][ T7619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=7619 comm=syz.3.1623 [ 94.297759][ T7628] loop3: detected capacity change from 0 to 512 [ 94.305822][ T7628] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1626: Invalid inode bitmap blk 4 in block_group 0 [ 94.322960][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 94.322975][ T29] audit: type=1326 audit(1745130871.878:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.352979][ T29] audit: type=1326 audit(1745130871.878:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.377343][ T29] audit: type=1326 audit(1745130871.878:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.401046][ T29] audit: type=1326 audit(1745130871.878:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.424466][ T29] audit: type=1326 audit(1745130871.878:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.447968][ T29] audit: type=1326 audit(1745130871.878:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.471425][ T29] audit: type=1326 audit(1745130871.878:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.494815][ T29] audit: type=1326 audit(1745130871.878:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.518211][ T29] audit: type=1326 audit(1745130871.878:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.541703][ T29] audit: type=1326 audit(1745130871.878:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7627 comm="syz.3.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 94.586416][ T7633] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1627'. [ 94.900174][ T7651] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1634'. [ 95.243115][ T7679] loop0: detected capacity change from 0 to 164 [ 95.253198][ T7681] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1647'. [ 95.445583][ T7695] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1654'. [ 95.836065][ T7723] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1667'. [ 95.883850][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1670'. [ 95.895423][ T7730] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 95.908880][ T7721] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1666'. [ 95.994329][ T7735] FAULT_INJECTION: forcing a failure. [ 95.994329][ T7735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.007598][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.3.1672 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 96.007624][ T7735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.007636][ T7735] Call Trace: [ 96.007642][ T7735] [ 96.007649][ T7735] dump_stack_lvl+0xf6/0x150 [ 96.007734][ T7735] dump_stack+0x15/0x1a [ 96.007751][ T7735] should_fail_ex+0x261/0x270 [ 96.007774][ T7735] should_fail+0xb/0x10 [ 96.007793][ T7735] should_fail_usercopy+0x1a/0x20 [ 96.007824][ T7735] _copy_to_user+0x20/0xa0 [ 96.007896][ T7735] simple_read_from_buffer+0xb2/0x130 [ 96.007931][ T7735] proc_fail_nth_read+0x103/0x140 [ 96.007965][ T7735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.008057][ T7735] vfs_read+0x1b2/0x710 [ 96.008074][ T7735] ? __sys_bpf+0x6ef/0x800 [ 96.008107][ T7735] ksys_read+0xeb/0x1b0 [ 96.008138][ T7735] __x64_sys_read+0x42/0x50 [ 96.008159][ T7735] x64_sys_call+0x2a3b/0x2e10 [ 96.008182][ T7735] do_syscall_64+0xc9/0x1a0 [ 96.008212][ T7735] ? clear_bhb_loop+0x25/0x80 [ 96.008236][ T7735] ? clear_bhb_loop+0x25/0x80 [ 96.008265][ T7735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.008287][ T7735] RIP: 0033:0x7f5b8df3cb7c [ 96.008303][ T7735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.008324][ T7735] RSP: 002b:00007f5b8c5a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.008345][ T7735] RAX: ffffffffffffffda RBX: 00007f5b8e165fa0 RCX: 00007f5b8df3cb7c [ 96.008359][ T7735] RDX: 000000000000000f RSI: 00007f5b8c5a70a0 RDI: 0000000000000003 [ 96.008372][ T7735] RBP: 00007f5b8c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 96.008421][ T7735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.008433][ T7735] R13: 0000000000000000 R14: 00007f5b8e165fa0 R15: 00007ffe3d58f878 [ 96.008455][ T7735] [ 96.206616][ T7730] syzkaller0: entered promiscuous mode [ 96.212215][ T7730] syzkaller0: entered allmulticast mode [ 96.484178][ T7766] loop0: detected capacity change from 0 to 2048 [ 96.494732][ T7769] loop2: detected capacity change from 0 to 164 [ 96.520886][ T7773] FAULT_INJECTION: forcing a failure. [ 96.520886][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 96.526080][ T7766] EXT4-fs (loop0): failed to initialize system zone (-117) [ 96.533598][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.1.1687 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 96.533786][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.533801][ T7773] Call Trace: [ 96.533809][ T7773] [ 96.533890][ T7773] dump_stack_lvl+0xf6/0x150 [ 96.533916][ T7773] dump_stack+0x15/0x1a [ 96.533937][ T7773] should_fail_ex+0x261/0x270 [ 96.533969][ T7773] should_failslab+0x8f/0xb0 [ 96.533997][ T7773] __kmalloc_cache_node_noprof+0x58/0x340 [ 96.534090][ T7773] ? __get_vm_area_node+0xfb/0x1c0 [ 96.534134][ T7773] __get_vm_area_node+0xfb/0x1c0 [ 96.534245][ T7773] __vmalloc_node_range_noprof+0x285/0xe80 [ 96.534308][ T7773] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 96.534350][ T7773] ? avc_has_perm_noaudit+0x1cc/0x210 [ 96.534385][ T7773] ? selinux_capable+0x1f9/0x260 [ 96.534422][ T7773] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 96.534488][ T7773] __vmalloc_noprof+0x5e/0x70 [ 96.534510][ T7773] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 96.534545][ T7773] bpf_prog_alloc_no_stats+0x49/0x390 [ 96.534590][ T7773] ? bpf_prog_alloc+0x28/0x150 [ 96.534623][ T7773] bpf_prog_alloc+0x3a/0x150 [ 96.534733][ T7773] bpf_prog_load+0x532/0x10e0 [ 96.534787][ T7773] __sys_bpf+0x533/0x800 [ 96.534829][ T7773] __x64_sys_bpf+0x43/0x50 [ 96.534904][ T7773] x64_sys_call+0x23da/0x2e10 [ 96.534931][ T7773] do_syscall_64+0xc9/0x1a0 [ 96.534961][ T7773] ? clear_bhb_loop+0x25/0x80 [ 96.534988][ T7773] ? clear_bhb_loop+0x25/0x80 [ 96.535016][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.535141][ T7773] RIP: 0033:0x7f88f27ae169 [ 96.535158][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.535181][ T7773] RSP: 002b:00007f88f0e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.535211][ T7773] RAX: ffffffffffffffda RBX: 00007f88f29d5fa0 RCX: 00007f88f27ae169 [ 96.535226][ T7773] RDX: 0000000000000052 RSI: 0000200000000200 RDI: 0000000000000005 [ 96.535241][ T7773] RBP: 00007f88f0e17090 R08: 0000000000000000 R09: 0000000000000000 [ 96.535255][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.535269][ T7773] R13: 0000000000000000 R14: 00007f88f29d5fa0 R15: 00007fff434a7e98 [ 96.535299][ T7773] [ 96.535334][ T7773] syz.1.1687: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 96.544112][ T7766] EXT4-fs (loop0): mount failed [ 96.553136][ T7773] ,cpuset=/,mems_allowed=0 [ 96.553175][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.1.1687 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 96.553231][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.553247][ T7773] Call Trace: [ 96.553255][ T7773] [ 96.553264][ T7773] dump_stack_lvl+0xf6/0x150 [ 96.553293][ T7773] dump_stack+0x15/0x1a [ 96.553352][ T7773] warn_alloc+0x145/0x1b0 [ 96.553454][ T7773] __vmalloc_node_range_noprof+0x2aa/0xe80 [ 96.553507][ T7773] ? avc_has_perm_noaudit+0x1cc/0x210 [ 96.553542][ T7773] ? selinux_capable+0x1f9/0x260 [ 96.553647][ T7773] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 96.553682][ T7773] __vmalloc_noprof+0x5e/0x70 [ 96.553704][ T7773] ? bpf_prog_alloc_no_stats+0x49/0x390 [ 96.553740][ T7773] bpf_prog_alloc_no_stats+0x49/0x390 [ 96.553824][ T7773] ? bpf_prog_alloc+0x28/0x150 [ 96.553857][ T7773] bpf_prog_alloc+0x3a/0x150 [ 96.553891][ T7773] bpf_prog_load+0x532/0x10e0 [ 96.554052][ T7773] __sys_bpf+0x533/0x800 [ 96.554097][ T7773] __x64_sys_bpf+0x43/0x50 [ 96.554128][ T7773] x64_sys_call+0x23da/0x2e10 [ 96.554155][ T7773] do_syscall_64+0xc9/0x1a0 [ 96.554232][ T7773] ? clear_bhb_loop+0x25/0x80 [ 96.554259][ T7773] ? clear_bhb_loop+0x25/0x80 [ 96.554286][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.554355][ T7773] RIP: 0033:0x7f88f27ae169 [ 96.554374][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.554443][ T7773] RSP: 002b:00007f88f0e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.554465][ T7773] RAX: ffffffffffffffda RBX: 00007f88f29d5fa0 RCX: 00007f88f27ae169 [ 96.554480][ T7773] RDX: 0000000000000052 RSI: 0000200000000200 RDI: 0000000000000005 [ 96.554495][ T7773] RBP: 00007f88f0e17090 R08: 0000000000000000 R09: 0000000000000000 [ 96.554510][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.554525][ T7773] R13: 0000000000000000 R14: 00007f88f29d5fa0 R15: 00007fff434a7e98 [ 96.554569][ T7773] [ 96.554577][ T7773] Mem-Info: [ 96.998506][ T7773] active_anon:12657 inactive_anon:40 isolated_anon:0 [ 96.998506][ T7773] active_file:19203 inactive_file:2069 isolated_file:0 [ 96.998506][ T7773] unevictable:0 dirty:152 writeback:0 [ 96.998506][ T7773] slab_reclaimable:2888 slab_unreclaimable:13666 [ 96.998506][ T7773] mapped:31503 shmem:9604 pagetables:925 [ 96.998506][ T7773] sec_pagetables:0 bounce:0 [ 96.998506][ T7773] kernel_misc_reclaimable:0 [ 96.998506][ T7773] free:1880417 free_pcp:14096 free_cma:0 [ 97.043603][ T7773] Node 0 active_anon:36360kB inactive_anon:160kB active_file:76812kB inactive_file:8276kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126012kB dirty:608kB writeback:0kB shmem:24148kB writeback_tmp:0kB kernel_stack:2928kB pagetables:3700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 97.072589][ T7773] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 97.099482][ T7773] lowmem_reserve[]: 0 2882 7860 7860 [ 97.104893][ T7773] Node 0 DMA32 free:2947780kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951308kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 97.133357][ T7773] lowmem_reserve[]: 0 0 4978 4978 [ 97.138455][ T7773] Node 0 Normal free:4582656kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:25688kB inactive_anon:160kB active_file:76812kB inactive_file:8276kB unevictable:0kB writepending:608kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:53596kB local_pcp:1736kB free_cma:0kB [ 97.168745][ T7773] lowmem_reserve[]: 0 0 0 0 [ 97.173317][ T7773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 97.186103][ T7773] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947780kB [ 97.202472][ T7773] Node 0 Normal: 680*4kB (ME) 688*8kB (ME) 132*16kB (UME) 241*32kB (UME) 193*64kB (UME) 47*128kB (UME) 25*256kB (UME) 11*512kB (UME) 8*1024kB (UME) 2*2048kB (U) 1104*4096kB (UM) = 4582720kB [ 97.221570][ T7773] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 97.231093][ T7773] 24707 total pagecache pages [ 97.235807][ T7773] 40 pages in swap cache [ 97.240052][ T7773] Free swap = 124836kB [ 97.244328][ T7773] Total swap = 124996kB [ 97.248539][ T7773] 2097051 pages RAM [ 97.252353][ T7773] 0 pages HighMem/MovableOnly [ 97.257110][ T7773] 80823 pages reserved [ 97.351429][ T7787] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1692'. [ 97.382094][ T7793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1695'. [ 97.393413][ T7793] netlink: 'syz.3.1695': attribute type 1 has an invalid length. [ 97.493378][ T7793] syzkaller0: entered promiscuous mode [ 97.499454][ T7793] syzkaller0: entered allmulticast mode [ 97.555921][ T7810] loop0: detected capacity change from 0 to 164 [ 97.908822][ T7839] loop2: detected capacity change from 0 to 2048 [ 97.937183][ T7839] EXT4-fs mount: 14 callbacks suppressed [ 97.937200][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.035466][ T7846] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 98.086476][ T7846] syzkaller0: entered promiscuous mode [ 98.092100][ T7846] syzkaller0: entered allmulticast mode [ 98.547487][ T7881] loop1: detected capacity change from 0 to 512 [ 98.565935][ T7881] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1728: Invalid inode bitmap blk 4 in block_group 0 [ 98.645285][ T7881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.668799][ T7881] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.734414][ T7861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.760556][ T7897] loop1: detected capacity change from 0 to 512 [ 98.769695][ T7895] FAULT_INJECTION: forcing a failure. [ 98.769695][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.782909][ T7895] CPU: 1 UID: 0 PID: 7895 Comm: syz.3.1738 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 98.782968][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.782979][ T7895] Call Trace: [ 98.783025][ T7895] [ 98.783032][ T7895] dump_stack_lvl+0xf6/0x150 [ 98.783056][ T7895] dump_stack+0x15/0x1a [ 98.783071][ T7895] should_fail_ex+0x261/0x270 [ 98.783111][ T7895] should_fail+0xb/0x10 [ 98.783134][ T7895] should_fail_usercopy+0x1a/0x20 [ 98.783210][ T7895] _copy_from_user+0x1c/0xa0 [ 98.783242][ T7895] memdup_user+0x6b/0xd0 [ 98.783280][ T7895] strndup_user+0x68/0xa0 [ 98.783371][ T7895] __se_sys_mount+0x50/0x2e0 [ 98.783393][ T7895] ? fput+0x99/0xd0 [ 98.783444][ T7895] ? ksys_write+0x180/0x1b0 [ 98.783474][ T7895] __x64_sys_mount+0x67/0x80 [ 98.783492][ T7895] x64_sys_call+0xd11/0x2e10 [ 98.783512][ T7895] do_syscall_64+0xc9/0x1a0 [ 98.783542][ T7895] ? clear_bhb_loop+0x25/0x80 [ 98.783562][ T7895] ? clear_bhb_loop+0x25/0x80 [ 98.783582][ T7895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.783602][ T7895] RIP: 0033:0x7f5b8df3e169 [ 98.783616][ T7895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.783637][ T7895] RSP: 002b:00007f5b8c5a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.783659][ T7895] RAX: ffffffffffffffda RBX: 00007f5b8e165fa0 RCX: 00007f5b8df3e169 [ 98.783674][ T7895] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 98.783710][ T7895] RBP: 00007f5b8c5a7090 R08: 0000200000000500 R09: 0000000000000000 [ 98.783721][ T7895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.783731][ T7895] R13: 0000000000000000 R14: 00007f5b8e165fa0 R15: 00007ffe3d58f878 [ 98.783748][ T7895] [ 98.796050][ T7897] loop1: detected capacity change from 0 to 2048 [ 98.800383][ T7899] FAULT_INJECTION: forcing a failure. [ 98.800383][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.808592][ T7897] EXT4-fs: Ignoring removed bh option [ 98.810635][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.0.1739 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 98.810673][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.810690][ T7899] Call Trace: [ 98.810698][ T7899] [ 98.810707][ T7899] dump_stack_lvl+0xf6/0x150 [ 98.810737][ T7899] dump_stack+0x15/0x1a [ 98.810873][ T7899] should_fail_ex+0x261/0x270 [ 98.810902][ T7899] should_fail+0xb/0x10 [ 98.810942][ T7899] should_fail_usercopy+0x1a/0x20 [ 98.811012][ T7899] _copy_from_user+0x1c/0xa0 [ 98.811048][ T7899] move_addr_to_kernel+0x8c/0x130 [ 98.811085][ T7899] __sys_connect+0x6c/0x1b0 [ 98.811155][ T7899] __x64_sys_connect+0x41/0x50 [ 98.811248][ T7899] x64_sys_call+0x2030/0x2e10 [ 98.811275][ T7899] do_syscall_64+0xc9/0x1a0 [ 98.811359][ T7899] ? clear_bhb_loop+0x25/0x80 [ 98.811435][ T7899] ? clear_bhb_loop+0x25/0x80 [ 98.811461][ T7899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.811487][ T7899] RIP: 0033:0x7f9e86f7e169 [ 98.811504][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.811526][ T7899] RSP: 002b:00007f9e855e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 98.811597][ T7899] RAX: ffffffffffffffda RBX: 00007f9e871a5fa0 RCX: 00007f9e86f7e169 [ 98.811609][ T7899] RDX: 000000000000001e RSI: 0000200000000080 RDI: 0000000000000003 [ 98.811619][ T7899] RBP: 00007f9e855e7090 R08: 0000000000000000 R09: 0000000000000000 [ 98.811694][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.811708][ T7899] R13: 0000000000000000 R14: 00007f9e871a5fa0 R15: 00007fff956dc5f8 [ 98.811729][ T7899] [ 99.043548][ T7910] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 99.179152][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.179607][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.261013][ T7923] loop0: detected capacity change from 0 to 512 [ 99.269788][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.319684][ T7923] loop0: detected capacity change from 0 to 2048 [ 99.350734][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.364973][ T7923] EXT4-fs: Ignoring removed bh option [ 99.388166][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.417949][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.474537][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 99.474554][ T29] audit: type=1326 audit(1745130877.028:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.517491][ T29] audit: type=1326 audit(1745130877.068:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.541012][ T29] audit: type=1326 audit(1745130877.068:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.564463][ T29] audit: type=1326 audit(1745130877.068:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.587955][ T29] audit: type=1326 audit(1745130877.068:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.611433][ T29] audit: type=1326 audit(1745130877.078:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.634859][ T29] audit: type=1326 audit(1745130877.078:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.658361][ T29] audit: type=1326 audit(1745130877.078:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.689880][ T29] audit: type=1326 audit(1745130877.248:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.713489][ T29] audit: type=1326 audit(1745130877.248:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7936 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8df3e169 code=0x7ffc0000 [ 99.747690][ T3415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.763016][ T3415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.775258][ T3415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.775258][ T3415] [ 99.784931][ T3415] EXT4-fs (loop1): Total free blocks count 0 [ 99.790914][ T3415] EXT4-fs (loop1): Free/Dirty block details [ 99.796927][ T3415] EXT4-fs (loop1): free_blocks=2415919104 [ 99.802656][ T3415] EXT4-fs (loop1): dirty_blocks=7216 [ 99.807980][ T3415] EXT4-fs (loop1): Block reservation details [ 99.814008][ T3415] EXT4-fs (loop1): i_reserved_data_blocks=451 [ 99.825839][ T3415] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 99.867170][ T7914] chnl_net:caif_netlink_parms(): no params data found [ 99.876317][ T57] bridge_slave_1: left allmulticast mode [ 99.881983][ T57] bridge_slave_1: left promiscuous mode [ 99.887784][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.930221][ T57] bridge_slave_0: left allmulticast mode [ 99.935960][ T57] bridge_slave_0: left promiscuous mode [ 99.941635][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.078043][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.088075][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.101163][ T57] bond0 (unregistering): Released all slaves [ 100.146213][ T57] hsr_slave_0: left promiscuous mode [ 100.152045][ T57] hsr_slave_1: left promiscuous mode [ 100.157877][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.165384][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.185046][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.192730][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.202211][ T3415] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.218661][ T3415] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.230963][ T3415] EXT4-fs (loop0): This should not happen!! Data will be lost [ 100.230963][ T3415] [ 100.240658][ T3415] EXT4-fs (loop0): Total free blocks count 0 [ 100.246679][ T3415] EXT4-fs (loop0): Free/Dirty block details [ 100.252610][ T3415] EXT4-fs (loop0): free_blocks=2415919104 [ 100.258371][ T3415] EXT4-fs (loop0): dirty_blocks=8224 [ 100.263680][ T3415] EXT4-fs (loop0): Block reservation details [ 100.269736][ T3415] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 100.276449][ T57] veth1_macvtap: left promiscuous mode [ 100.281641][ T3415] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 100.282109][ T57] veth0_macvtap: left promiscuous mode [ 100.353651][ T57] veth1_vlan: left promiscuous mode [ 100.359996][ T57] veth0_vlan: left promiscuous mode [ 100.457865][ T57] team0 (unregistering): Port device team_slave_1 removed [ 100.468667][ T57] team0 (unregistering): Port device team_slave_0 removed [ 100.559852][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.567088][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.574402][ T7914] bridge_slave_0: entered allmulticast mode [ 100.582565][ T7914] bridge_slave_0: entered promiscuous mode [ 100.589779][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.596982][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.605615][ T7914] bridge_slave_1: entered allmulticast mode [ 100.612156][ T7914] bridge_slave_1: entered promiscuous mode [ 100.643177][ T7971] __nla_validate_parse: 6 callbacks suppressed [ 100.643192][ T7971] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1762'. [ 100.667699][ T7914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.678689][ T7914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.702423][ T7914] team0: Port device team_slave_0 added [ 100.709060][ T7914] team0: Port device team_slave_1 added [ 100.731603][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.738616][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.764598][ T7914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.780976][ T7914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.788083][ T7914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.814123][ T7914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.900418][ T7914] hsr_slave_0: entered promiscuous mode [ 100.907494][ T7914] hsr_slave_1: entered promiscuous mode [ 100.913640][ T7914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.920024][ T7980] loop1: detected capacity change from 0 to 512 [ 100.921352][ T7914] Cannot create hsr debugfs directory [ 100.944049][ T7980] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1764: Invalid inode bitmap blk 4 in block_group 0 [ 100.965824][ T7980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.986402][ T7980] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.032722][ T7989] vhci_hcd: invalid port number 32 [ 101.037985][ T7989] vhci_hcd: default hub control req: 2006 v5000 i0020 l0 [ 101.062648][ T7989] loop4: detected capacity change from 0 to 128 [ 101.073952][ T7993] vcan0: MTU too low for tipc bearer [ 101.079389][ T7993] tipc: Enabling of bearer rejected, failed to enable media [ 101.081049][ T7914] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.093171][ T7914] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.095787][ T7914] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.097857][ T7914] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.122920][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.122979][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.123086][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.123121][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.171896][ T7914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.189622][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.198624][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.265323][ T7914] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.268642][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.268702][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.294560][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.294592][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.353816][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 101.374126][ T7914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.433923][ T8028] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1781'. [ 101.542221][ T7914] veth0_vlan: entered promiscuous mode [ 101.550887][ T7914] veth1_vlan: entered promiscuous mode [ 101.570341][ T7914] veth0_macvtap: entered promiscuous mode [ 101.577740][ T8044] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1784'. [ 101.587949][ T7914] veth1_macvtap: entered promiscuous mode [ 101.599234][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.609775][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.619656][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.630213][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.640133][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.650619][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.660531][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.671080][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.683880][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.695323][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.705880][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.715765][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.726222][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.736051][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.746585][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.756497][ T7914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.766987][ T7914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.777899][ T7914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.795466][ T7914] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.804269][ T7914] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.813074][ T7914] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.821980][ T7914] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.062990][ T8067] FAULT_INJECTION: forcing a failure. [ 102.062990][ T8067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.076294][ T8067] CPU: 0 UID: 0 PID: 8067 Comm: syz.0.1794 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 102.076320][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.076331][ T8067] Call Trace: [ 102.076337][ T8067] [ 102.076344][ T8067] dump_stack_lvl+0xf6/0x150 [ 102.076369][ T8067] dump_stack+0x15/0x1a [ 102.076386][ T8067] should_fail_ex+0x261/0x270 [ 102.076457][ T8067] should_fail+0xb/0x10 [ 102.076479][ T8067] should_fail_usercopy+0x1a/0x20 [ 102.076509][ T8067] _copy_from_user+0x1c/0xa0 [ 102.076543][ T8067] memdup_user+0x6b/0xd0 [ 102.076626][ T8067] strndup_user+0x68/0xa0 [ 102.076660][ T8067] __se_sys_mount+0x50/0x2e0 [ 102.076681][ T8067] ? fput+0x99/0xd0 [ 102.076714][ T8067] ? ksys_write+0x180/0x1b0 [ 102.076772][ T8067] __x64_sys_mount+0x67/0x80 [ 102.076794][ T8067] x64_sys_call+0xd11/0x2e10 [ 102.076819][ T8067] do_syscall_64+0xc9/0x1a0 [ 102.076925][ T8067] ? clear_bhb_loop+0x25/0x80 [ 102.076980][ T8067] ? clear_bhb_loop+0x25/0x80 [ 102.077001][ T8067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.077026][ T8067] RIP: 0033:0x7f9e86f7e169 [ 102.077083][ T8067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.077103][ T8067] RSP: 002b:00007f9e855e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.077124][ T8067] RAX: ffffffffffffffda RBX: 00007f9e871a5fa0 RCX: 00007f9e86f7e169 [ 102.077138][ T8067] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 102.077154][ T8067] RBP: 00007f9e855e7090 R08: 0000200000000500 R09: 0000000000000000 [ 102.077166][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.077196][ T8067] R13: 0000000000000000 R14: 00007f9e871a5fa0 R15: 00007fff956dc5f8 [ 102.077217][ T8067] [ 102.365323][ T8083] FAULT_INJECTION: forcing a failure. [ 102.365323][ T8083] name failslab, interval 1, probability 0, space 0, times 0 [ 102.378004][ T8083] CPU: 0 UID: 0 PID: 8083 Comm: syz.1.1798 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 102.378033][ T8083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.378048][ T8083] Call Trace: [ 102.378053][ T8083] [ 102.378059][ T8083] dump_stack_lvl+0xf6/0x150 [ 102.378143][ T8083] dump_stack+0x15/0x1a [ 102.378239][ T8083] should_fail_ex+0x261/0x270 [ 102.378265][ T8083] should_failslab+0x8f/0xb0 [ 102.378289][ T8083] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 102.378349][ T8083] ? __alloc_skb+0x10d/0x320 [ 102.378367][ T8083] __alloc_skb+0x10d/0x320 [ 102.378383][ T8083] netlink_alloc_large_skb+0xad/0xe0 [ 102.378428][ T8083] netlink_sendmsg+0x3da/0x720 [ 102.378495][ T8083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.378518][ T8083] __sock_sendmsg+0x140/0x180 [ 102.378544][ T8083] ____sys_sendmsg+0x350/0x4e0 [ 102.378710][ T8083] __sys_sendmsg+0x1a0/0x240 [ 102.378742][ T8083] __x64_sys_sendmsg+0x46/0x50 [ 102.378767][ T8083] x64_sys_call+0x26f3/0x2e10 [ 102.378790][ T8083] do_syscall_64+0xc9/0x1a0 [ 102.378889][ T8083] ? clear_bhb_loop+0x25/0x80 [ 102.378911][ T8083] ? clear_bhb_loop+0x25/0x80 [ 102.378961][ T8083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.378990][ T8083] RIP: 0033:0x7f88f27ae169 [ 102.379005][ T8083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.379025][ T8083] RSP: 002b:00007f88f0e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.379041][ T8083] RAX: ffffffffffffffda RBX: 00007f88f29d5fa0 RCX: 00007f88f27ae169 [ 102.379116][ T8083] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.379129][ T8083] RBP: 00007f88f0e17090 R08: 0000000000000000 R09: 0000000000000000 [ 102.379141][ T8083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.379154][ T8083] R13: 0000000000000000 R14: 00007f88f29d5fa0 R15: 00007fff434a7e98 [ 102.379173][ T8083] [ 102.682986][ T8095] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1803'. [ 103.074002][ T8119] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1814'. [ 103.149336][ T8121] loop4: detected capacity change from 0 to 256 [ 103.449016][ T8132] loop4: detected capacity change from 0 to 164 [ 103.522641][ T8134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.598740][ T8137] loop0: detected capacity change from 0 to 512 [ 103.690784][ T8146] syz.5.1826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.706508][ T8137] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.1823: Invalid inode bitmap blk 4 in block_group 0 [ 103.720405][ T8137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.744415][ T8137] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.803066][ T8155] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1829'. [ 103.870819][ T8162] FAULT_INJECTION: forcing a failure. [ 103.870819][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 103.883581][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.3.1832 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 103.883662][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.883685][ T8162] Call Trace: [ 103.883723][ T8162] [ 103.883729][ T8162] dump_stack_lvl+0xf6/0x150 [ 103.883753][ T8162] dump_stack+0x15/0x1a [ 103.883773][ T8162] should_fail_ex+0x261/0x270 [ 103.883804][ T8162] should_failslab+0x8f/0xb0 [ 103.883831][ T8162] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 103.883866][ T8162] ? __alloc_skb+0x10d/0x320 [ 103.883892][ T8162] __alloc_skb+0x10d/0x320 [ 103.883915][ T8162] netlink_alloc_large_skb+0xad/0xe0 [ 103.883946][ T8162] netlink_sendmsg+0x3da/0x720 [ 103.883969][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.884050][ T8162] __sock_sendmsg+0x140/0x180 [ 103.884097][ T8162] ____sys_sendmsg+0x350/0x4e0 [ 103.884130][ T8162] __sys_sendmsg+0x1a0/0x240 [ 103.884184][ T8162] __x64_sys_sendmsg+0x46/0x50 [ 103.884212][ T8162] x64_sys_call+0x26f3/0x2e10 [ 103.884232][ T8162] do_syscall_64+0xc9/0x1a0 [ 103.884258][ T8162] ? clear_bhb_loop+0x25/0x80 [ 103.884280][ T8162] ? clear_bhb_loop+0x25/0x80 [ 103.884352][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.884372][ T8162] RIP: 0033:0x7f5b8df3e169 [ 103.884387][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.884462][ T8162] RSP: 002b:00007f5b8c5a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.884484][ T8162] RAX: ffffffffffffffda RBX: 00007f5b8e165fa0 RCX: 00007f5b8df3e169 [ 103.884495][ T8162] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 103.884561][ T8162] RBP: 00007f5b8c5a7090 R08: 0000000000000000 R09: 0000000000000000 [ 103.884574][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.884587][ T8162] R13: 0000000000000000 R14: 00007f5b8e165fa0 R15: 00007ffe3d58f878 [ 103.884607][ T8162] [ 104.143752][ T8169] vhci_hcd: invalid port number 32 [ 104.148943][ T8169] vhci_hcd: default hub control req: 2006 v5000 i0020 l0 [ 104.169045][ T8169] loop3: detected capacity change from 0 to 128 [ 104.220474][ T8181] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1840'. [ 104.252761][ T8186] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1842'. [ 104.382884][ T8198] loop1: detected capacity change from 0 to 2048 [ 104.383700][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1835'. [ 104.436278][ T8209] ================================================================== [ 104.444420][ T8209] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 104.451307][ T8209] [ 104.453635][ T8209] write to 0xffff888104bd1808 of 8 bytes by task 8208 on cpu 0: [ 104.461283][ T8209] call_rcu+0x49/0x430 [ 104.465375][ T8209] mas_wmb_replace+0xff5/0x1510 [ 104.470257][ T8209] mas_wr_store_entry+0x158c/0x2460 [ 104.471855][ T8198] EXT4-fs (loop1): failed to initialize system zone (-117) [ 104.475452][ T8209] mas_store_prealloc+0x6d5/0x960 [ 104.475482][ T8209] vma_iter_store_new+0x1d3/0x210 [ 104.482850][ T8198] EXT4-fs (loop1): mount failed [ 104.487669][ T8209] vma_complete+0x12b/0x570 [ 104.487697][ T8209] __split_vma+0x56c/0x630 [ 104.487721][ T8209] vma_modify+0x105/0x200 [ 104.487740][ T8209] vma_modify_flags+0x10a/0x140 [ 104.487760][ T8209] mprotect_fixup+0x30f/0x5d0 [ 104.520314][ T8209] do_mprotect_pkey+0x6ce/0x9a0 [ 104.525177][ T8209] __x64_sys_mprotect+0x48/0x60 [ 104.530033][ T8209] x64_sys_call+0x272f/0x2e10 [ 104.534731][ T8209] do_syscall_64+0xc9/0x1a0 [ 104.539244][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.545143][ T8209] [ 104.547482][ T8209] read to 0xffff888104bd1808 of 8 bytes by task 8209 on cpu 1: [ 104.555033][ T8209] mtree_range_walk+0x143/0x460 [ 104.559888][ T8209] mas_walk+0x16e/0x320 [ 104.564045][ T8209] lock_vma_under_rcu+0xa7/0x340 [ 104.568995][ T8209] exc_page_fault+0x150/0x6a0 [ 104.573678][ T8209] asm_exc_page_fault+0x26/0x30 [ 104.578530][ T8209] [ 104.580855][ T8209] Reported by Kernel Concurrency Sanitizer on: [ 104.587000][ T8209] CPU: 1 UID: 0 PID: 8209 Comm: syz.4.1850 Not tainted 6.15.0-rc2-syzkaller-00471-g119009db2674 #0 PREEMPT(voluntary) [ 104.599412][ T8209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.609467][ T8209] ==================================================================