last executing test programs: 1m37.332136569s ago: executing program 3 (id=1455): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000080)=""/62}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='sys_enter\x00', r1, 0x0, 0x20000000}, 0x18) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1m37.331153338s ago: executing program 3 (id=1457): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 1m37.21194536s ago: executing program 3 (id=1465): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}, 0x1c, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x80020}], 0x492492492492719, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x2, 0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x101002) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x14}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1m36.946122903s ago: executing program 3 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x4, 0xf, 0x0, 0x2, 0x0}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) pwrite64(r5, &(0x7f0000000200)="a372eac5a3f1a3f058a6bf160cffd803f19b9bb277bcbcf43d4319e52c9b33275311bbd45fbe", 0x26, 0x8001) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2bc, &(0x7f0000000900)="$eJzs3U9rK1UUAPAz+TMJukgWrkRwQBeuHu+9rZsUeQ/ErixZqAsttgVpgtBCwT84duXWjQs/gyD4Qdz4DQS3gjsrFEZmMmmSmqZNaSra32/R3t57z9wzd4Z2GsjJR6+MD/eyODj98tfodpNoDGIQZ0n0oxFTX8eCwbcBAPyXnRVF/FFMrBOXRER3c2kBABt0s7//rVnzp3tJCwDYoJ333n9na3v72btZ1o3n429OhuV/9uX3yfjWQXwSo9iPx9GL84jqQaEd1dNC2XxeFEXeykr9eH2cnwzLyPGHP9fH3/q9frGg1K++XjxtVPFvbz97kk3MxedlHi/U6w/K9Z9GL166CF6If7okPoZpvPHaXP6Pohe/fByfxij2qiRm8V89ybK3iu/+/OKDMr0yPslPhp1q3kzRvMfLAgAAAAAAAAAAAAAAAAAAAADA/9yjunZOJ6r6PWVXXX+neV7+0I5sqr9Yn2cSPy3ts1AfqCiKvCqXM6mv8zjLsqKeOItvxcut+cKCAAAAAAAAAAAAAAAAAAAA8HAdf/b54e5otH90J41pNYBWRPy1E3Hb4wzmel6N1ZM79Zq7o1Gjbi7Oac33RHM6J4lYmUZ5Ene0Ldc08iuvxQ8/rnvA7vVz2nHFUPO21yu/3DO9uw53k+V72IlpT7de9Ps0YjYnjRuunl41VMQ6t1+6dKi39m6kL1aNfMWcSFYl9uZvk52re5LLZ5FWu7o0vF035sIv3Rs3up+jOwn/5++KRLUOAAAAAAAAAAAAAAAAAADYqNm7f5cMnq4MbRSdjaUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPdq9vn/azTyiGjXB7hmchpHx//yKQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAA/B0AAP//4h5VFw==") syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r9, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r10, 0xf) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r0}, 0xc) setxattr$security_capability(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) 1m36.840169195s ago: executing program 3 (id=1484): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m36.602222738s ago: executing program 3 (id=1497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f8000000fcff0dca3806bfd6a08a00000001000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x200000c, 0x2012, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r8, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mq_timedsend(r4, &(0x7f00000006c0)="a4fe83b4189f9f9b7b34d1fe6e99446c514ec8a117736babca7827aeab8e053ba6fc44964908aaf0eb9993b9afedc69970459310d117b12503239db3bae54785012c76a426cbbb7c3e3e3af9341c5c364973f0cfd79d13098af055eea7fda96f4590060f62fdc76e4c2e7546926f80ded2529273df5523ab9d9ec4095d340dc530cbbb2fd79fcc2ed931b71dff613115f2ba0daab8d051a5ef6512d968ed6e8a6f2d32acaf43d56f82f74adb76131c4f32863463f64bf3831009906e4e46a7089fca9e59eeaff7ee66b30c341df77eb54478981d032e689b7d4e686de37b66400907d02b6f0b93a539482457678ebe7c8ca01d7dfea3e47b95dbeb265a", 0xfd, 0x8, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r5, &(0x7f0000000380)=[{&(0x7f0000003300)=""/4095, 0xfff}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m36.601495938s ago: executing program 32 (id=1497): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000f8000000fcff0dca3806bfd6a08a00000001000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}, 0x50) r2 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x200000c, 0x2012, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r8, 0x0, 0x0, 0x20, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) mq_timedsend(r4, &(0x7f00000006c0)="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", 0xfd, 0x8, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r5, &(0x7f0000000380)=[{&(0x7f0000003300)=""/4095, 0xfff}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2.472364987s ago: executing program 1 (id=3720): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_read_part_table(0x5e3, &(0x7f0000000700)="$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") 2.410173668s ago: executing program 1 (id=3724): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001540)=@newtaction={0x898, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x0, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x6, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0x6, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0x7fffffff, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x226, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4e, 0xa158, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x2000007, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x6, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x5, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x7, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x3, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4eedcacd, 0x1, 0x4, 0x9df4, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0xcf6, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x1401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x81, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x300000, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0xc01, 0x400, 0x436, 0x3, 0x205, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x7, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x2, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x7, 0x2, 0x7ff, 0x6, {0x9, 0x1, 0x8, 0xef3, 0x9, 0x1}, {0x2, 0x1, 0x2, 0x827, 0x29a, 0x100}, 0x3, 0x9, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000d7f4000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) 1.924045584s ago: executing program 1 (id=3729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) 1.912950334s ago: executing program 1 (id=3730): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f00000002c0)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 1.434862851s ago: executing program 1 (id=3736): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000002080)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 1.043171606s ago: executing program 5 (id=3751): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)}}], 0x3, 0x0) 955.160917ms ago: executing program 5 (id=3754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000440)={0x3, 'vlan0\x00', {}, 0x97eb}) 882.522318ms ago: executing program 5 (id=3755): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x193, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x8c, 0x2, 0x6, 0x3, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x21}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x5f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x8c}}, 0x0) membarrier(0x10, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xb6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabaaaaa0020fc0290780000001ce00003000306907800fa00094318fff6006500060504000300000000ac1414aa940400008641ffffffff030ecee3292470c1a81c96a1a5bd010ba3e60b80e37813a47302020704991f07088a03d5f6a886050400000510dd8ae8adbcabf85f6dbbfa0f08d7940401000094040100860830349b6433ae440c2c51ffffffff000003e9014414c570000000bc000000fd0000001080009300"/182], 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x4, 0x85}, 0x3c) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) close_range(r6, 0xffffffffffffffff, 0x0) 822.044319ms ago: executing program 0 (id=3757): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x193, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x64, 0x2, 0x6, 0x3, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xfffffffffffffc87, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTO={0x0, 0x7, 0xff}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x21}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0xa}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_NETMASK={0x0, 0x14, 0x5f}, @IPSET_ATTR_LINENO={0x0, 0x9, 0x1, 0x0, 0xfffffff9}, @IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_HASHSIZE={0x0, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) membarrier(0x10, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='mm_page_alloc\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@mblk_io_submit}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nojournal_checksum}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0xb6, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabaaaaa0020fc0290780000001ce00003000306907800fa00094318fff6006500060504000300000000ac1414aa940400008641ffffffff030ecee3292470c1a81c96a1a5bd010ba3e60b80e37813a47302020704991f07088a03d5f6a886050400000510dd8ae8adbcabf85f6dbbfa0f08d7940401000094040100860830349b6433ae440c2c51ffffffff000003e9014414c570000000bc000000fd0000001080009300"/182], 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x4, 0x85}, 0x3c) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) close_range(r6, 0xffffffffffffffff, 0x0) 716.70979ms ago: executing program 5 (id=3762): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) 687.542391ms ago: executing program 0 (id=3763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x548, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x240000, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfffffffb, 0x0, 0x0, 0x0, 0x1, 0x1936, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x1000000, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x4, 0x9, 0x934a, {0x10, 0x0, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x101, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 615.517692ms ago: executing program 0 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x0, 0x2f, 0xcf, 0x4}, {0x8, 0x7, 0x80, 0x2}, {0x1ff, 0x6, 0xfa, 0x3}, {0x9, 0x40, 0x7, 0x4}, {0x5, 0x4, 0x3, 0x100}, {0x8, 0x4, 0x5, 0x7}, {0x6, 0x3, 0x3b, 0x8}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000240)={0x6, 0xf, 0x0, 'queue1\x00', 0x1db}) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x0, 0x2f, 0xcf, 0x4}, {0x8, 0x7, 0x80, 0x2}, {0x1ff, 0x6, 0xfa, 0x3}, {0x9, 0x40, 0x7, 0x4}, {0x5, 0x4, 0x3, 0x100}, {0x8, 0x4, 0x5, 0x7}, {0x6, 0x3, 0x3b, 0x8}]}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000240)={0x6, 0xf, 0x0, 'queue1\x00', 0x1db}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}) (async) 614.953682ms ago: executing program 4 (id=3765): ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000440)={0x3, 'vlan0\x00', {}, 0x97eb}) 614.345082ms ago: executing program 4 (id=3766): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000006c0)) (fail_nth: 3) 324.818026ms ago: executing program 5 (id=3767): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x4e, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 324.355916ms ago: executing program 0 (id=3768): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f00000058c0)=ANY=[], 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x6, 0x0, 0xb}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xe}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x48841) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r10, 0x2) flock(r10, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) 324.131766ms ago: executing program 4 (id=3769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x3, 0x0) 323.825586ms ago: executing program 1 (id=3770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f00000000c0)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 308.619586ms ago: executing program 5 (id=3771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x42, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt(r1, 0x9, 0x7, &(0x7f0000000240)="d3481a3f542ef3d1924b18a457beada75c7a6b323fa427a4a409558544b1", 0x1e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xbe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r6 = syz_io_uring_setup(0x49d, &(0x7f0000000380)={0x0, 0x14c9, 0x10, 0x0, 0x24e}, &(0x7f0000000340)=0x0, &(0x7f0000000440)=0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)=0xd2a0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x108, &(0x7f0000000080)=0x6, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') fchdir(r3) syz_usb_disconnect(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/net\x00') syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x22, 0x4007, @fd=r3, 0x10000, &(0x7f0000000b40)="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"/653, 0x28d, 0xe}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 305.327106ms ago: executing program 2 (id=3772): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)={0x0, 0x0, 0x11}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f00000003c0)="91fe9e0c15bafe7c4554557bb4e297d517c4af33bec563a054099a38c8ced337ee3d36089a60004065f38a1a5e277828255f2217a254e0ec2256f7afc8a8ecb942f00e31b0c59ea221b0da55f1820cb6687a52cad25f65a3a3eb52c4cd53b6cfafd2a940ac08d91a0cc780d13e9e427ffe27d80b52b9f4ae09b7b462ad5121c35036dea0839ac8bb19bb7be4072de8bd31b05bea4f559c64e43a57ba02fe43a753ef361719f01c942421b22fb6210eb06ad07d2ae1569f2c934ffc68959287b0c51c9f17be607c422f8f7209160ed9076f65fb7abfa3cc8fe965b797c6efdf929f335e60cded251e5ed7f5b8feb5a4ce9364ee", &(0x7f0000000200)=""/119, &(0x7f00000004c0)="fbc424b83efab911b38065c8f46b51be150b14bf41682b4f1cbdd6047d310979e54c345f78ba1f64af39b4b65020ea4ed6f724170d44c18f9eaaa249ec571d465da3eb93ac2311d3ef70d77abcb098489d92bd8e777f8ee6edeb84879508ba1c1fee028f46e52e", &(0x7f00000000c0)="1a2055d467a478edc12c882f009db312a9903d098b", 0x0, r0}, 0x38) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000040)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0xffffffffffffff58, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendfile(r9, r8, 0x0, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0, @ANYRESOCT=r5, @ANYRESOCT, @ANYRES64=r4, @ANYRES8=r0, @ANYRES16=r4, @ANYBLOB="3a4c47fba67784b4caea027a85fa1eb4751ed82bdab39a0139468f054c51774958f8cb81f46c8c8f1d79d7221ac9632812cfb98de90235f1b987332762a43955a66a2c6ebaf76d796ad047a1cc8f6483b102a9df83b34bc5ebdee3", @ANYRESDEC=r3, @ANYBLOB="ed70081766aa8672e5a79ef41428f349fca83a6e308095064ca8a862c01dfbeda9a88c4fd99e2e6493871ed51281aa4323a539769f019b4b9efedb035c3bfefca8c8df3d466e8ece22577b685c55f78c0fbeab4e79ff70dc0b0ba74772f1aebaebff3a0092fae4db2ad3cdb9f7ccd86cac8c3eccc2384e83131b9676b6fba2b98fa11e8e90b180150921a47c10d4770c31c010d8a75050cfb5", @ANYRESOCT=r4, @ANYRESHEX=r1], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000440)={0x3, 'vlan0\x00', {}, 0x97eb}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r12 = socket$caif_stream(0x25, 0x1, 0x5) close(r12) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000001540), 0x7, 0x900) read(r12, &(0x7f0000002940)=""/204, 0xcc) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): cuous mode [ 151.977672][T11251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.998113][T11251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.006491][T11251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.015365][T11251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.024163][T11251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.032935][T11251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.080870][T11441] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.109819][T11441] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 152.136227][T11441] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 152.148943][T11441] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.148943][T11441] [ 152.158879][T11441] EXT4-fs (loop4): Total free blocks count 0 [ 152.164944][T11441] EXT4-fs (loop4): Free/Dirty block details [ 152.170682][T11460] netlink: 'syz.5.2969': attribute type 1 has an invalid length. [ 152.170847][T11441] EXT4-fs (loop4): free_blocks=4293918720 [ 152.184549][T11441] EXT4-fs (loop4): dirty_blocks=16 [ 152.189848][T11441] EXT4-fs (loop4): Block reservation details [ 152.195927][T11441] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 152.212158][T11460] bond2: entered promiscuous mode [ 152.227647][T11460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.281444][T11473] openvswitch: netlink: Message has 6 unknown bytes. [ 152.288808][ T123] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 152.301290][ T123] EXT4-fs (loop4): This should not happen!! Data will be lost [ 152.301290][ T123] [ 152.338919][T11475] loop2: detected capacity change from 0 to 1024 [ 152.352746][T11480] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2978'. [ 152.378002][T11480] syz_tun: entered allmulticast mode [ 152.391661][T11480] syz_tun: left allmulticast mode [ 152.410458][T11475] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.426906][T11475] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 152.453833][T11492] openvswitch: netlink: Message has 6 unknown bytes. [ 152.464547][T11475] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 152.476946][T11475] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.476946][T11475] [ 152.486741][T11475] EXT4-fs (loop2): Total free blocks count 0 [ 152.489477][T11497] netlink: 'syz.1.2985': attribute type 1 has an invalid length. [ 152.492742][T11475] EXT4-fs (loop2): Free/Dirty block details [ 152.492761][T11475] EXT4-fs (loop2): free_blocks=4293918720 [ 152.512214][T11475] EXT4-fs (loop2): dirty_blocks=16 [ 152.517324][T11475] EXT4-fs (loop2): Block reservation details [ 152.523363][T11475] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 152.535722][T11475] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 152.548190][T11475] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.548190][T11475] [ 152.632957][T11503] netlink: 'syz.4.2987': attribute type 4 has an invalid length. [ 152.689481][T11509] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.758129][T11513] loop4: detected capacity change from 0 to 764 [ 152.773276][T11522] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 152.786505][T11513] rock: directory entry would overflow storage [ 152.792760][T11513] rock: sig=0x4f50, size=4, remaining=3 [ 152.798485][T11513] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 152.808240][T11522] bond3: entered promiscuous mode [ 152.814758][T11522] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.835642][T11527] openvswitch: netlink: Message has 6 unknown bytes. [ 152.879538][T11532] loop4: detected capacity change from 0 to 128 [ 152.909450][T11532] vfat: Unknown parameter '' [ 152.924414][T11538] netlink: 'syz.2.3003': attribute type 4 has an invalid length. [ 152.944535][T11540] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.974795][T11546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.072108][T11557] loop2: detected capacity change from 0 to 1024 [ 153.115383][T11556] bond4: entered promiscuous mode [ 153.125862][T11557] ext4 filesystem being mounted at /537/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.144205][T11556] 8021q: adding VLAN 0 to HW filter on device bond4 [ 153.224974][T11557] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 153.263378][T11557] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 153.275923][T11557] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.275923][T11557] [ 153.285616][T11557] EXT4-fs (loop2): Total free blocks count 0 [ 153.291633][T11557] EXT4-fs (loop2): Free/Dirty block details [ 153.297588][T11557] EXT4-fs (loop2): free_blocks=4293918720 [ 153.303467][T11557] EXT4-fs (loop2): dirty_blocks=16 [ 153.308629][T11557] EXT4-fs (loop2): Block reservation details [ 153.314714][T11557] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 153.346336][T11557] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 153.358991][T11557] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.358991][T11557] [ 153.377854][ T123] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.430910][ T123] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.523419][ T123] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.526013][T11585] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.568260][T11587] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 153.587357][T11587] SELinux: failed to load policy [ 153.593082][ T123] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.641098][T11593] openvswitch: netlink: Message has 6 unknown bytes. [ 153.760949][T11568] chnl_net:caif_netlink_parms(): no params data found [ 153.789308][T11614] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.825104][ T10] IPVS: starting estimator thread 0... [ 153.913789][T11631] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 153.923544][T11616] IPVS: using max 3648 ests per chain, 182400 per kthread [ 153.924043][T11631] SELinux: failed to load policy [ 153.996038][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.008560][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.018144][ T123] bond0 (unregistering): Released all slaves [ 154.028305][ T123] bond1 (unregistering): Released all slaves [ 154.036754][ T123] bond2 (unregistering): Released all slaves [ 154.045023][ T123] bond3 (unregistering): Released all slaves [ 154.053232][ T123] bond4 (unregistering): Released all slaves [ 154.080518][T11627] bond3: entered promiscuous mode [ 154.087560][T11627] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.147064][ T123] hsr_slave_0: left promiscuous mode [ 154.164222][ T123] hsr_slave_1: left promiscuous mode [ 154.186022][ T123] veth1_macvtap: left promiscuous mode [ 154.191590][ T123] veth0_macvtap: left promiscuous mode [ 154.218648][ T123] veth1_vlan: left promiscuous mode [ 154.225031][ T123] veth0_vlan: left promiscuous mode [ 154.335973][T11664] loop5: detected capacity change from 0 to 1024 [ 154.354334][T11666] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 154.368375][T11666] SELinux: failed to load policy [ 154.378604][ T123] team0 (unregistering): Port device team_slave_1 removed [ 154.397448][ T123] team0 (unregistering): Port device team_slave_0 removed [ 154.407200][T11664] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.444954][T11664] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 154.465675][T11664] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 154.478259][T11664] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.478259][T11664] [ 154.488051][T11664] EXT4-fs (loop5): Total free blocks count 0 [ 154.494279][T11664] EXT4-fs (loop5): Free/Dirty block details [ 154.500206][T11664] EXT4-fs (loop5): free_blocks=4293918720 [ 154.505983][T11664] EXT4-fs (loop5): dirty_blocks=16 [ 154.511144][T11664] EXT4-fs (loop5): Block reservation details [ 154.517268][T11664] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 154.545711][ T3429] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 154.558700][ T3429] EXT4-fs (loop5): This should not happen!! Data will be lost [ 154.558700][ T3429] [ 154.573380][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.580555][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.589524][T11568] bridge_slave_0: entered allmulticast mode [ 154.597369][T11568] bridge_slave_0: entered promiscuous mode [ 154.617500][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.624676][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.632244][T11568] bridge_slave_1: entered allmulticast mode [ 154.639289][T11568] bridge_slave_1: entered promiscuous mode [ 154.672611][T11676] bond4: entered promiscuous mode [ 154.724049][T11676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.746058][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.765743][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.828806][T11568] team0: Port device team_slave_0 added [ 154.837169][T11568] team0: Port device team_slave_1 added [ 154.859319][ T123] IPVS: stop unused estimator thread 0... [ 154.867385][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.874489][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.901077][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.913372][T11694] loop5: detected capacity change from 0 to 128 [ 154.920189][T11694] vfat: Unknown parameter '' [ 154.927246][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.934261][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.960302][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.994163][T11568] hsr_slave_0: entered promiscuous mode [ 155.000330][T11568] hsr_slave_1: entered promiscuous mode [ 155.006538][T11568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.014559][T11568] Cannot create hsr debugfs directory [ 155.163078][T11708] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3067'. [ 155.235721][T11709] loop5: detected capacity change from 0 to 1024 [ 155.242459][T11709] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.255284][T11709] EXT4-fs: Ignoring removed nobh option [ 155.261035][T11709] EXT4-fs: Ignoring removed bh option [ 155.296389][T11708] syz_tun: entered allmulticast mode [ 155.302590][T11708] syz_tun: left allmulticast mode [ 155.354728][T11568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.376983][T11568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.381684][T11727] openvswitch: netlink: Message has 6 unknown bytes. [ 155.394902][T11568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.406767][T11568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.427439][T11731] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3077'. [ 155.457240][T11731] loop5: detected capacity change from 0 to 1024 [ 155.464552][T11731] EXT4-fs: Ignoring removed mblk_io_submit option [ 155.467355][T11568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.471184][T11731] EXT4-fs: Ignoring removed nobh option [ 155.483730][T11731] EXT4-fs: Ignoring removed bh option [ 155.485247][T11568] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.500739][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.507927][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.528029][T11568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.538484][T11568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.551834][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.557669][T11740] loop2: detected capacity change from 0 to 2048 [ 155.559049][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.599091][T11731] syz_tun: entered allmulticast mode [ 155.609214][T11731] syz_tun: left allmulticast mode [ 155.616451][T11740] loop2: p1 < > p4 [ 155.620895][T11740] loop2: p4 size 8388608 extends beyond EOD, truncated [ 155.643198][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.692754][T11754] loop2: detected capacity change from 0 to 128 [ 155.720335][T11754] vfat: Unknown parameter '' [ 155.802117][T11768] openvswitch: netlink: Message has 6 unknown bytes. [ 155.902056][T11781] openvswitch: netlink: Message has 6 unknown bytes. [ 155.932706][T11786] loop2: detected capacity change from 0 to 1024 [ 155.946921][T11789] loop5: detected capacity change from 0 to 1024 [ 155.968982][T11568] veth0_vlan: entered promiscuous mode [ 155.977646][T11568] veth1_vlan: entered promiscuous mode [ 155.989573][T11789] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.001371][T11786] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.019293][T11568] veth0_macvtap: entered promiscuous mode [ 156.034503][T11568] veth1_macvtap: entered promiscuous mode [ 156.040734][T11789] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 156.057981][T11786] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 156.078202][T11568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.088376][T11789] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 156.089457][T11568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.100896][T11789] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.100896][T11789] [ 156.109251][T11568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.117873][T11789] EXT4-fs (loop5): Total free blocks count 0 [ 156.117893][T11789] EXT4-fs (loop5): Free/Dirty block details [ 156.127427][T11568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.127466][T11568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.133434][T11789] EXT4-fs (loop5): free_blocks=4293918720 [ 156.139372][T11568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.148057][T11789] EXT4-fs (loop5): dirty_blocks=16 [ 156.148076][T11789] EXT4-fs (loop5): Block reservation details [ 156.182878][T11789] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 156.189320][T11786] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 156.201729][T11786] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.201729][T11786] [ 156.211459][T11786] EXT4-fs (loop2): Total free blocks count 0 [ 156.217469][T11786] EXT4-fs (loop2): Free/Dirty block details [ 156.223473][T11786] EXT4-fs (loop2): free_blocks=4293918720 [ 156.229422][T11786] EXT4-fs (loop2): dirty_blocks=16 [ 156.234770][T11786] EXT4-fs (loop2): Block reservation details [ 156.240873][T11786] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 156.250363][T11795] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 156.262895][T11795] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.262895][T11795] [ 156.322733][ T123] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 156.335300][ T123] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.335300][ T123] [ 156.391674][T11806] loop2: detected capacity change from 0 to 128 [ 156.398740][T11806] vfat: Unknown parameter '' [ 156.428356][T11811] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3101'. [ 156.483271][T11818] validate_nla: 10 callbacks suppressed [ 156.483288][T11818] netlink: 'syz.0.3104': attribute type 1 has an invalid length. [ 156.511230][T11818] bond5: entered promiscuous mode [ 156.516638][T11818] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.546430][T11826] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3107'. [ 156.576145][T11825] loop5: detected capacity change from 0 to 1024 [ 156.592395][T11826] loop2: detected capacity change from 0 to 1024 [ 156.612647][T11826] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.621584][T11826] EXT4-fs: Ignoring removed nobh option [ 156.627246][T11826] EXT4-fs: Ignoring removed bh option [ 156.650034][T11825] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.664519][T11825] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 156.682878][T11839] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3111'. [ 156.683039][T11826] syz_tun: entered allmulticast mode [ 156.692349][T11825] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 156.709737][T11825] EXT4-fs (loop5): This should not happen!! Data will be lost [ 156.709737][T11825] [ 156.717225][T11826] syz_tun: left allmulticast mode [ 156.719553][T11825] EXT4-fs (loop5): Total free blocks count 0 [ 156.730536][T11825] EXT4-fs (loop5): Free/Dirty block details [ 156.736509][T11825] EXT4-fs (loop5): free_blocks=4293918720 [ 156.742309][T11825] EXT4-fs (loop5): dirty_blocks=16 [ 156.747481][T11825] EXT4-fs (loop5): Block reservation details [ 156.753494][T11825] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 156.767844][T11839] syz_tun: entered allmulticast mode [ 156.777151][T11839] syz_tun: left allmulticast mode [ 156.804171][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 156.804188][ T29] audit: type=1326 audit(1747814779.294:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.836448][ T29] audit: type=1326 audit(1747814779.324:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.860120][ T29] audit: type=1326 audit(1747814779.324:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.883808][ T29] audit: type=1326 audit(1747814779.324:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.908061][ T29] audit: type=1326 audit(1747814779.344:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.931769][ T29] audit: type=1326 audit(1747814779.344:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.955442][ T29] audit: type=1326 audit(1747814779.344:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 156.979189][ T29] audit: type=1326 audit(1747814779.344:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 157.002908][ T29] audit: type=1326 audit(1747814779.344:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 157.026807][ T29] audit: type=1326 audit(1747814779.344:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11810 comm="syz.4.3014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac1a2e969 code=0x7ffc0000 [ 157.088874][ T3429] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 157.101330][ T3429] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.101330][ T3429] [ 157.214636][T11861] loop5: detected capacity change from 0 to 2048 [ 157.260762][T11861] loop5: p1 < > p4 [ 157.265470][T11861] loop5: p4 size 8388608 extends beyond EOD, [ 157.265476][T11873] netlink: 'syz.0.3125': attribute type 4 has an invalid length. [ 157.279715][T11861] truncated [ 157.368235][T11877] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.427043][T11881] loop5: detected capacity change from 0 to 1024 [ 157.479495][T11881] EXT4-fs mount: 32 callbacks suppressed [ 157.479516][T11881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.510062][T11888] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 157.514215][T11881] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.529113][T11890] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3132'. [ 157.532914][T11881] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 157.555903][T11881] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 157.568247][T11881] EXT4-fs (loop5): This should not happen!! Data will be lost [ 157.568247][T11881] [ 157.578042][T11881] EXT4-fs (loop5): Total free blocks count 0 [ 157.584199][T11881] EXT4-fs (loop5): Free/Dirty block details [ 157.589370][T11888] bond9: entered promiscuous mode [ 157.590357][T11881] EXT4-fs (loop5): free_blocks=4293918720 [ 157.601054][T11881] EXT4-fs (loop5): dirty_blocks=16 [ 157.606211][T11881] EXT4-fs (loop5): Block reservation details [ 157.612225][T11881] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 157.617494][T11888] 8021q: adding VLAN 0 to HW filter on device bond9 [ 157.655813][T11890] syz_tun: entered allmulticast mode [ 157.680612][ T2416] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 157.680859][T11890] syz_tun: left allmulticast mode [ 157.761116][T11906] loop5: detected capacity change from 0 to 2048 [ 157.784153][T11910] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 157.801295][T11906] loop5: p1 < > p4 [ 157.816366][T11906] loop5: p4 size 8388608 extends beyond EOD, truncated [ 157.834754][T11914] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.887058][T11920] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 157.914217][T11920] bond6: entered promiscuous mode [ 157.922022][T11920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.086872][T11932] loop4: detected capacity change from 0 to 2048 [ 158.104813][T11935] netlink: 'syz.0.3153': attribute type 4 has an invalid length. [ 158.149078][T11932] loop4: p1 < > p4 [ 158.154057][T11932] loop4: p4 size 8388608 extends beyond EOD, truncated [ 158.253173][T11955] loop5: detected capacity change from 0 to 512 [ 158.307775][T11961] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.325570][T11955] EXT4-fs (loop5): 1 orphan inode deleted [ 158.346233][T11955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.408673][T11955] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.426638][ T48] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 158.490985][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.503802][T11977] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 158.648296][T11992] loop4: detected capacity change from 0 to 1024 [ 158.665999][T11995] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.691334][T11992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.715004][T11992] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.723229][T12009] netlink: 'syz.1.3183': attribute type 1 has an invalid length. [ 158.742703][T12009] bond1: entered promiscuous mode [ 158.748049][T12009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.761352][T12011] netlink: 'syz.2.3184': attribute type 4 has an invalid length. [ 158.793019][T11992] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 158.806204][T12017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3187'. [ 158.820015][T11992] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 158.832490][T11992] EXT4-fs (loop4): This should not happen!! Data will be lost [ 158.832490][T11992] [ 158.832608][T12019] loop2: detected capacity change from 0 to 1024 [ 158.842196][T11992] EXT4-fs (loop4): Total free blocks count 0 [ 158.854885][T11992] EXT4-fs (loop4): Free/Dirty block details [ 158.860923][T11992] EXT4-fs (loop4): free_blocks=4293918720 [ 158.866731][T11992] EXT4-fs (loop4): dirty_blocks=16 [ 158.872168][T11992] EXT4-fs (loop4): Block reservation details [ 158.878576][T11992] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 158.887948][T12020] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 158.903353][T12019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.916961][T12019] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.930226][T12019] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 158.946468][T12019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 158.958915][T12019] EXT4-fs (loop2): This should not happen!! Data will be lost [ 158.958915][T12019] [ 158.968769][T12019] EXT4-fs (loop2): Total free blocks count 0 [ 158.974821][T12019] EXT4-fs (loop2): Free/Dirty block details [ 158.980829][T12019] EXT4-fs (loop2): free_blocks=4293918720 [ 158.987025][T12019] EXT4-fs (loop2): dirty_blocks=16 [ 158.992190][T12019] EXT4-fs (loop2): Block reservation details [ 158.998395][T12019] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 159.061763][T12031] loop4: detected capacity change from 0 to 2048 [ 159.069695][T12033] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.076557][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 159.124504][T12031] loop4: p1 < > p4 [ 159.128900][T12031] loop4: p4 size 8388608 extends beyond EOD, truncated [ 159.231438][T12046] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3197'. [ 159.281734][T12055] loop5: detected capacity change from 0 to 1024 [ 159.309795][T12055] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.329922][T12056] loop2: detected capacity change from 0 to 1024 [ 159.344311][T12056] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.350912][T12060] loop4: detected capacity change from 0 to 1024 [ 159.373727][T12056] EXT4-fs: Ignoring removed nobh option [ 159.379392][T12056] EXT4-fs: Ignoring removed bh option [ 159.379493][T12055] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.470486][T12055] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 159.493069][T12056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.506921][T12060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.524072][T12060] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.538476][T12055] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 159.551337][T12055] EXT4-fs (loop5): This should not happen!! Data will be lost [ 159.551337][T12055] [ 159.561060][T12055] EXT4-fs (loop5): Total free blocks count 0 [ 159.567124][T12055] EXT4-fs (loop5): Free/Dirty block details [ 159.573155][T12055] EXT4-fs (loop5): free_blocks=4293918720 [ 159.578912][T12055] EXT4-fs (loop5): dirty_blocks=16 [ 159.584106][T12055] EXT4-fs (loop5): Block reservation details [ 159.590153][T12055] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 159.599173][T12056] syz_tun: entered allmulticast mode [ 159.614469][T12056] syz_tun: left allmulticast mode [ 159.623564][T12067] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 159.636999][T12060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 159.652222][T12060] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 159.664688][T12060] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.664688][T12060] [ 159.674435][T12060] EXT4-fs (loop4): Total free blocks count 0 [ 159.680512][T12060] EXT4-fs (loop4): Free/Dirty block details [ 159.686532][T12060] EXT4-fs (loop4): free_blocks=4293918720 [ 159.692384][T12060] EXT4-fs (loop4): dirty_blocks=16 [ 159.697620][T12060] EXT4-fs (loop4): Block reservation details [ 159.703655][T12060] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 159.728404][ T48] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 159.742172][T12072] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3206'. [ 159.816064][T12077] syz_tun: entered allmulticast mode [ 159.827401][T12077] syz_tun: left allmulticast mode [ 159.898259][T12087] loop4: detected capacity change from 0 to 2048 [ 159.915181][T12089] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.976281][T12093] loop4: detected capacity change from 0 to 2048 [ 159.999464][T12097] loop5: detected capacity change from 0 to 1024 [ 160.006368][T12097] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.012958][T12097] EXT4-fs: Ignoring removed nobh option [ 160.014957][T12093] loop4: p1 < > p4 [ 160.018678][T12097] EXT4-fs: Ignoring removed bh option [ 160.028477][T12093] loop4: p4 size 8388608 extends beyond EOD, truncated [ 160.065608][T12097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.081143][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.096929][T12097] syz_tun: entered allmulticast mode [ 160.103319][T12097] syz_tun: left allmulticast mode [ 160.125663][T12105] netlink: 'syz.4.3222': attribute type 4 has an invalid length. [ 160.146085][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.197739][T12114] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.241701][T12111] bond5: entered promiscuous mode [ 160.260330][T12111] 8021q: adding VLAN 0 to HW filter on device bond5 [ 160.351040][T12130] syz_tun: entered allmulticast mode [ 160.373727][T12130] syz_tun: left allmulticast mode [ 160.437918][T12144] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.490556][T12132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3232'. [ 160.544255][T12150] bond6: entered promiscuous mode [ 160.549600][T12150] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.592144][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 160.840121][T12173] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.929760][T12179] loop2: detected capacity change from 0 to 2048 [ 161.003576][T12188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.067390][T12198] ieee802154 phy0 wpan0: encryption failed: -22 [ 161.300771][T12215] loop2: detected capacity change from 0 to 2048 [ 161.340025][T12222] loop4: detected capacity change from 0 to 1024 [ 161.394407][T12222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.419282][T12222] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.447441][T12230] loop5: detected capacity change from 0 to 2048 [ 161.456207][T12235] loop2: detected capacity change from 0 to 1024 [ 161.466717][T12222] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 161.482116][T12222] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 161.494652][T12222] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.494652][T12222] [ 161.504382][T12222] EXT4-fs (loop4): Total free blocks count 0 [ 161.510437][T12222] EXT4-fs (loop4): Free/Dirty block details [ 161.516537][T12222] EXT4-fs (loop4): free_blocks=4293918720 [ 161.522403][T12222] EXT4-fs (loop4): dirty_blocks=16 [ 161.527583][T12222] EXT4-fs (loop4): Block reservation details [ 161.533659][T12222] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 161.543304][T12235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.558503][T12235] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.572597][T12230] loop5: p1 < > p4 [ 161.572719][ T2416] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 161.590304][T12230] loop5: p4 size 8388608 extends beyond EOD, truncated [ 161.600177][T12235] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 161.646585][T12235] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 161.659142][T12235] EXT4-fs (loop2): This should not happen!! Data will be lost [ 161.659142][T12235] [ 161.668987][T12235] EXT4-fs (loop2): Total free blocks count 0 [ 161.675156][T12235] EXT4-fs (loop2): Free/Dirty block details [ 161.681113][T12235] EXT4-fs (loop2): free_blocks=4293918720 [ 161.686896][T12235] EXT4-fs (loop2): dirty_blocks=16 [ 161.692114][T12235] EXT4-fs (loop2): Block reservation details [ 161.698132][T12235] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 161.724840][T12242] validate_nla: 4 callbacks suppressed [ 161.724857][T12242] netlink: 'syz.5.3279': attribute type 4 has an invalid length. [ 161.753960][ T3429] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 161.779293][T12247] loop5: detected capacity change from 0 to 512 [ 161.786634][T12247] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 161.788740][T12249] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3280'. [ 161.816694][T12247] EXT4-fs (loop5): 1 truncate cleaned up [ 161.824483][T12247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.865197][T12252] loop2: detected capacity change from 0 to 1024 [ 161.881510][T12252] EXT4-fs: Ignoring removed mblk_io_submit option [ 161.889502][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.899584][T12252] EXT4-fs: Ignoring removed nobh option [ 161.905362][T12252] EXT4-fs: Ignoring removed bh option [ 161.946363][T12252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.983258][T12252] syz_tun: entered allmulticast mode [ 162.003507][T12252] syz_tun: left allmulticast mode [ 162.100278][T12267] loop5: detected capacity change from 0 to 1024 [ 162.107534][T12267] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.114802][T12267] EXT4-fs: Ignoring removed nobh option [ 162.120465][T12267] EXT4-fs: Ignoring removed bh option [ 162.146845][T12267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.161281][T12267] syz_tun: entered allmulticast mode [ 162.167693][T12267] syz_tun: left allmulticast mode [ 162.183818][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.225517][T12275] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.295938][T12278] netlink: 'syz.0.3292': attribute type 4 has an invalid length. [ 162.438466][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 162.438555][ T29] audit: type=1326 audit(1747814784.924:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.468299][ T29] audit: type=1326 audit(1747814784.924:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.496680][ T29] audit: type=1326 audit(1747814784.924:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.520250][ T29] audit: type=1326 audit(1747814784.924:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.543933][ T29] audit: type=1326 audit(1747814784.924:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.567516][ T29] audit: type=1326 audit(1747814784.974:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.591155][ T29] audit: type=1326 audit(1747814784.974:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.615389][ T29] audit: type=1326 audit(1747814784.974:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.638987][ T29] audit: type=1326 audit(1747814784.974:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.662622][ T29] audit: type=1326 audit(1747814784.974:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12274 comm="syz.5.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 162.745236][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.857057][T12301] netlink: 'syz.4.3303': attribute type 4 has an invalid length. [ 162.887204][T12307] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.889211][T12312] loop2: detected capacity change from 0 to 128 [ 162.901526][T12312] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.918618][T12312] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 162.942215][T12315] loop5: detected capacity change from 0 to 1024 [ 162.971607][T12315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.001080][T12315] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.020533][T12315] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 163.044260][T12315] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 163.056926][T12315] EXT4-fs (loop5): This should not happen!! Data will be lost [ 163.056926][T12315] [ 163.066682][T12315] EXT4-fs (loop5): Total free blocks count 0 [ 163.072773][T12315] EXT4-fs (loop5): Free/Dirty block details [ 163.078776][T12315] EXT4-fs (loop5): free_blocks=4293918720 [ 163.084659][T12315] EXT4-fs (loop5): dirty_blocks=16 [ 163.089850][T12315] EXT4-fs (loop5): Block reservation details [ 163.096069][T12315] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 163.182578][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.319058][T12350] loop5: detected capacity change from 0 to 1024 [ 163.348763][T12350] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.364818][T12350] EXT4-fs: Ignoring removed nobh option [ 163.370462][T12350] EXT4-fs: Ignoring removed bh option [ 163.404364][T12333] chnl_net:caif_netlink_parms(): no params data found [ 163.424264][T12350] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.447749][ T123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.480140][T12350] syz_tun: entered allmulticast mode [ 163.542795][ T123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.565242][T12350] syz_tun: left allmulticast mode [ 163.587097][T12333] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.594590][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.624625][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.646037][T12333] bridge_slave_0: entered allmulticast mode [ 163.656985][T12333] bridge_slave_0: entered promiscuous mode [ 163.678392][ T123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.691742][T12363] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.707459][T12333] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.714609][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.730258][T12333] bridge_slave_1: entered allmulticast mode [ 163.754949][T12333] bridge_slave_1: entered promiscuous mode [ 163.777990][ T123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.797942][T12366] netlink: 'syz.0.3323': attribute type 1 has an invalid length. [ 163.803228][T12368] loop5: detected capacity change from 0 to 2048 [ 163.819443][T12366] bond7: entered promiscuous mode [ 163.825103][T12366] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.834568][T12368] loop5: p1 < > p4 [ 163.844084][T12368] loop5: p4 size 8388608 extends beyond EOD, truncated [ 163.859226][T12333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.870680][T12333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.912738][T12333] team0: Port device team_slave_0 added [ 163.925984][T12333] team0: Port device team_slave_1 added [ 163.967148][T12333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.974203][T12333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.000559][T12333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.009971][T12383] loop5: detected capacity change from 0 to 1024 [ 164.028292][T12333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.035315][T12333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.061535][T12333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.095659][T12386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.105291][T12383] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.122723][T12387] loop4: detected capacity change from 0 to 2048 [ 164.134874][T12383] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.188040][T12383] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 164.203397][T12383] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 164.205189][T12395] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 164.215818][T12383] EXT4-fs (loop5): This should not happen!! Data will be lost [ 164.215818][T12383] [ 164.215849][T12383] EXT4-fs (loop5): Total free blocks count 0 [ 164.215863][T12383] EXT4-fs (loop5): Free/Dirty block details [ 164.215875][T12383] EXT4-fs (loop5): free_blocks=4293918720 [ 164.252085][T12383] EXT4-fs (loop5): dirty_blocks=16 [ 164.256642][T12397] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3337'. [ 164.257306][T12383] EXT4-fs (loop5): Block reservation details [ 164.272437][T12383] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 164.297052][ T2416] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 164.316169][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.327107][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.337284][ T123] bond0 (unregistering): Released all slaves [ 164.351127][ T123] bond1 (unregistering): Released all slaves [ 164.370560][ T123] bond2 (unregistering): Released all slaves [ 164.384194][ T123] bond3 (unregistering): Released all slaves [ 164.394685][ T123] bond4 (unregistering): Released all slaves [ 164.410023][T12414] loop5: detected capacity change from 0 to 1024 [ 164.417111][ T123] bond5 (unregistering): Released all slaves [ 164.417799][T12414] EXT4-fs: Ignoring removed mblk_io_submit option [ 164.428046][ T123] bond6 (unregistering): Released all slaves [ 164.433393][T12414] EXT4-fs: Ignoring removed nobh option [ 164.438852][ T123] bond7 (unregistering): Released all slaves [ 164.441543][T12414] EXT4-fs: Ignoring removed bh option [ 164.450623][ T123] bond8 (unregistering): Released all slaves [ 164.461730][ T123] bond9 (unregistering): Released all slaves [ 164.465475][T12414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.503569][T12395] bond1: entered promiscuous mode [ 164.509580][T12395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.525050][T12404] syz_tun: entered allmulticast mode [ 164.534024][T12404] syz_tun: left allmulticast mode [ 164.556478][ T123] hsr_slave_0: left promiscuous mode [ 164.573170][ T123] hsr_slave_1: left promiscuous mode [ 164.593329][ T123] veth1_macvtap: left promiscuous mode [ 164.600123][ T123] veth0_macvtap: left promiscuous mode [ 164.605805][ T123] veth1_vlan: left promiscuous mode [ 164.611107][ T123] veth0_vlan: left promiscuous mode [ 164.703839][ T123] team0 (unregistering): Port device team_slave_1 removed [ 164.715967][ T123] team0 (unregistering): Port device team_slave_0 removed [ 164.790208][T12422] syz_tun: entered allmulticast mode [ 164.796751][T12422] syz_tun: left allmulticast mode [ 164.873558][T12333] hsr_slave_0: entered promiscuous mode [ 164.885219][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.900506][T12439] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.911935][T12333] hsr_slave_1: entered promiscuous mode [ 164.929796][ T23] IPVS: starting estimator thread 0... [ 164.985755][T12447] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3355'. [ 164.994279][T12449] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 165.021725][T12449] bond2: entered promiscuous mode [ 165.023971][T12442] IPVS: using max 2880 ests per chain, 144000 per kthread [ 165.027669][T12449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.049532][T12451] syz_tun: entered allmulticast mode [ 165.055642][T12451] syz_tun: left allmulticast mode [ 165.095751][T12453] openvswitch: netlink: Message has 6 unknown bytes. [ 165.134848][ T123] IPVS: stop unused estimator thread 0... [ 165.146770][T12455] netlink: 'syz.5.3365': attribute type 4 has an invalid length. [ 165.161375][T12457] loop4: detected capacity change from 0 to 1024 [ 165.175900][T12457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.210466][T12457] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.245843][T12463] loop5: detected capacity change from 0 to 128 [ 165.252575][T12463] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 165.266389][T12457] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 165.285540][T12457] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 165.298286][T12457] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.298286][T12457] [ 165.308056][T12457] EXT4-fs (loop4): Total free blocks count 0 [ 165.314095][T12457] EXT4-fs (loop4): Free/Dirty block details [ 165.320059][T12457] EXT4-fs (loop4): free_blocks=4293918720 [ 165.325903][T12457] EXT4-fs (loop4): dirty_blocks=16 [ 165.331044][T12457] EXT4-fs (loop4): Block reservation details [ 165.337128][T12457] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 165.356894][T12463] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 165.362873][T12333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.375959][T12457] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 165.378175][T12333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.408610][T12333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.440001][T12333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.509667][T12333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.520364][T12472] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.530827][T12333] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.542768][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.549905][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.570265][T12473] loop4: detected capacity change from 0 to 1024 [ 165.577655][T12473] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.578898][T12415] syz.0.3344 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 165.585004][T12473] EXT4-fs: Ignoring removed nobh option [ 165.595261][T12415] CPU: 1 UID: 0 PID: 12415 Comm: syz.0.3344 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 165.595301][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.595315][T12415] Call Trace: [ 165.595321][T12415] [ 165.595331][T12415] __dump_stack+0x1d/0x30 [ 165.595356][T12415] dump_stack_lvl+0xe8/0x140 [ 165.595421][T12415] dump_stack+0x15/0x1b [ 165.595440][T12415] dump_header+0x81/0x220 [ 165.595473][T12415] oom_kill_process+0x334/0x3f0 [ 165.595502][T12415] out_of_memory+0x979/0xb80 [ 165.595610][T12415] ? css_next_descendant_pre+0x138/0x160 [ 165.595634][T12415] mem_cgroup_out_of_memory+0x13d/0x190 [ 165.595671][T12415] try_charge_memcg+0x5e2/0x870 [ 165.595764][T12415] charge_memcg+0x51/0xc0 [ 165.595790][T12415] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 165.595856][T12415] __read_swap_cache_async+0x1df/0x350 [ 165.595885][T12415] swap_cluster_readahead+0x277/0x3e0 [ 165.595915][T12415] swapin_readahead+0xde/0x6f0 [ 165.595941][T12415] ? __filemap_get_folio+0x49f/0x650 [ 165.596124][T12415] ? swap_cache_get_folio+0x77/0x200 [ 165.596151][T12415] do_swap_page+0x301/0x2460 [ 165.596186][T12415] ? cgroup_rstat_updated+0xa3/0x510 [ 165.596220][T12415] ? __pfx_default_wake_function+0x10/0x10 [ 165.596247][T12415] handle_mm_fault+0xb60/0x2ae0 [ 165.596356][T12415] ? mas_walk+0xf2/0x120 [ 165.596406][T12415] do_user_addr_fault+0x636/0x1090 [ 165.596439][T12415] ? restore_fpregs_from_fpstate+0x61/0x120 [ 165.596514][T12415] ? fpregs_restore_userregs+0xbb/0x190 [ 165.596542][T12415] ? fpregs_assert_state_consistent+0x84/0xa0 [ 165.596574][T12415] exc_page_fault+0x54/0xc0 [ 165.596602][T12415] asm_exc_page_fault+0x26/0x30 [ 165.596691][T12415] RIP: 0033:0x7fa7565dd9bf [ 165.596710][T12415] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 46 35 00 89 f0 4c 8d 05 49 26 35 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 [ 165.596730][T12415] RSP: 002b:00007ffdd708e398 EFLAGS: 00010206 [ 165.596749][T12415] RAX: 00000000815114c5 RBX: 00007fa757475720 RCX: 0000000000078edb [ 165.596764][T12415] RDX: 00000000000014c5 RSI: ffffffff815114c5 RDI: 000000000000000f [ 165.596779][T12415] RBP: ffffffff815114c5 R08: 00007fa756930000 R09: 00007fa756932000 [ 165.596793][T12415] R10: 00000000815114c9 R11: 000000000000000f R12: 000000000000000f [ 165.596832][T12415] R13: 000000000000097b R14: ffffffff81511393 R15: 0000000000078edb [ 165.596847][T12415] ? smp_call_function_many_cond+0x793/0xb20 [ 165.596918][T12415] ? smp_call_function_many_cond+0x8c5/0xb20 [ 165.596941][T12415] ? smp_call_function_many_cond+0x8c5/0xb20 [ 165.596965][T12415] [ 165.596972][T12415] memory: usage 307200kB, limit 307200kB, failcnt 1056 [ 165.600876][T12473] EXT4-fs: Ignoring removed bh option [ 165.613402][T12415] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 165.613424][T12415] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 165.613439][T12415] Memory cgroup stats for /syz0: [ 165.889196][ T2416] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.901266][ T2416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.908876][T12415] cache 0 [ 165.911941][T12415] rss 0 [ 165.914760][T12415] shmem 0 [ 165.917718][T12415] mapped_file 0 [ 165.921293][T12415] dirty 0 [ 165.924289][T12415] writeback 4096 [ 165.927855][T12415] workingset_refault_anon 793 [ 165.930148][T12333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.932531][T12415] workingset_refault_file 1554 [ 165.932543][T12415] swap 192512 [ 165.932550][T12415] swapcached 12288 [ 165.932558][T12415] pgpgin 281472 [ 165.932566][T12415] pgpgout 281469 [ 165.932574][T12415] pgfault 321866 [ 165.932581][T12415] pgmajfault 479 [ 165.932588][T12415] inactive_anon 12288 [ 165.932595][T12415] active_anon 0 [ 165.932603][T12415] inactive_file 0 [ 165.942952][T12333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.947820][T12415] active_file 0 [ 165.994493][T12415] unevictable 0 [ 165.997978][T12415] hierarchical_memory_limit 314572800 [ 166.002011][T12333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.003435][T12415] hierarchical_memsw_limit 9223372036854771712 [ 166.003449][T12415] total_cache 0 [ 166.003456][T12415] total_rss 0 [ 166.003492][T12415] total_shmem 0 [ 166.020582][T12473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.023278][T12415] total_mapped_file 0 [ 166.023288][T12415] total_dirty 0 [ 166.023295][T12415] total_writeback 4096 [ 166.023304][T12415] total_workingset_refault_anon 793 [ 166.035552][T12473] syz_tun: entered allmulticast mode [ 166.039440][T12415] total_workingset_refault_file 1554 [ 166.039452][T12415] total_swap 192512 [ 166.060265][T12473] syz_tun: left allmulticast mode [ 166.061673][T12415] total_swapcached 12288 [ 166.080661][T12415] total_pgpgin 281472 [ 166.084814][T12415] total_pgpgout 281469 [ 166.088994][T12415] total_pgfault 321866 [ 166.093182][T12415] total_pgmajfault 479 [ 166.097358][T12415] total_inactive_anon 12288 [ 166.101889][T12415] total_active_anon 0 [ 166.105987][T12415] total_inactive_file 0 [ 166.110166][T12415] total_active_file 0 [ 166.114282][T12415] total_unevictable 0 [ 166.118311][T12415] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3344,pid=12415,uid=0 [ 166.130302][T12333] veth0_vlan: entered promiscuous mode [ 166.133147][T12415] Memory cgroup out of memory: Killed process 12415 (syz.0.3344) total-vm:93880kB, anon-rss:932kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 166.150156][T12333] veth1_vlan: entered promiscuous mode [ 166.185877][T12333] veth0_macvtap: entered promiscuous mode [ 166.197352][T12333] veth1_macvtap: entered promiscuous mode [ 166.209450][T12333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.223250][T12333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.237962][T12333] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.247076][T12333] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.255935][T12333] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.264721][T12333] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.330169][T12495] netlink: 'syz.5.3369': attribute type 4 has an invalid length. [ 166.385202][T12502] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3371'. [ 166.392899][T12504] loop2: detected capacity change from 0 to 1024 [ 166.415727][T12504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.429601][T12504] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.442382][T12504] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 166.458911][T12504] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 166.463290][T12507] loop5: detected capacity change from 0 to 1024 [ 166.471259][T12504] EXT4-fs (loop2): This should not happen!! Data will be lost [ 166.471259][T12504] [ 166.487424][T12504] EXT4-fs (loop2): Total free blocks count 0 [ 166.493423][T12504] EXT4-fs (loop2): Free/Dirty block details [ 166.494282][T12507] EXT4-fs: Ignoring removed mblk_io_submit option [ 166.499458][T12504] EXT4-fs (loop2): free_blocks=4293918720 [ 166.511688][T12504] EXT4-fs (loop2): dirty_blocks=16 [ 166.516846][T12504] EXT4-fs (loop2): Block reservation details [ 166.518728][T12507] EXT4-fs: Ignoring removed nobh option [ 166.522912][T12504] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 166.528516][T12507] EXT4-fs: Ignoring removed bh option [ 166.552751][T12504] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 166.567726][T12507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.599809][T12507] syz_tun: entered allmulticast mode [ 166.606479][T12507] syz_tun: left allmulticast mode [ 166.646168][T12514] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.654362][ T3498] IPVS: starting estimator thread 0... [ 166.699961][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.710163][T11568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.743097][T12523] netlink: 'syz.2.3380': attribute type 4 has an invalid length. [ 166.754377][T12515] IPVS: using max 2928 ests per chain, 146400 per kthread [ 166.787951][T12527] loop4: detected capacity change from 0 to 2048 [ 166.796332][T12533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.809930][T12535] netlink: 'syz.0.3384': attribute type 1 has an invalid length. [ 166.820927][T12537] ieee802154 phy0 wpan0: encryption failed: -22 [ 166.824248][T12535] bond8: entered promiscuous mode [ 166.832456][T12535] 8021q: adding VLAN 0 to HW filter on device bond8 [ 166.864463][T12527] loop4: p1 < > p4 [ 166.868824][T12527] loop4: p4 size 8388608 extends beyond EOD, truncated [ 166.923866][T12547] loop4: detected capacity change from 0 to 1024 [ 166.987538][T12547] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.048629][T12547] EXT4-fs: Ignoring removed nobh option [ 167.054415][T12547] EXT4-fs: Ignoring removed bh option [ 167.070221][T12547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.095805][T12547] syz_tun: entered allmulticast mode [ 167.110400][T12547] syz_tun: left allmulticast mode [ 167.171414][T11568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.216574][T12565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.259026][T12569] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.281047][T12573] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 167.296246][T12573] bond3: entered promiscuous mode [ 167.299811][T12571] loop5: detected capacity change from 0 to 2048 [ 167.301577][T12573] 8021q: adding VLAN 0 to HW filter on device bond3 [ 167.358347][T12571] loop5: p1 < > p4 [ 167.362873][T12571] loop5: p4 size 8388608 extends beyond EOD, truncated [ 167.620562][T12589] SELinux: failed to load policy [ 167.633755][T12595] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3408'. [ 167.643157][T12586] loop4: detected capacity change from 0 to 512 [ 167.705250][T12598] loop5: detected capacity change from 0 to 1024 [ 167.724347][T12598] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.731089][T12598] EXT4-fs: Ignoring removed nobh option [ 167.736880][T12598] EXT4-fs: Ignoring removed bh option [ 167.764324][T12600] ieee802154 phy0 wpan0: encryption failed: -22 [ 167.804896][T12598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.828370][T12586] EXT4-fs (loop4): 1 orphan inode deleted [ 167.845161][T12586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.870736][T12586] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.873944][ T568] __quota_error: 45 callbacks suppressed [ 167.874037][ T568] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 167.882385][T12608] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 167.887323][ T568] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 167.936935][T12608] bond2: entered promiscuous mode [ 167.942314][T12608] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.071590][T12614] syz_tun: entered allmulticast mode [ 168.079192][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.105142][T12614] syz_tun: left allmulticast mode [ 168.170377][T12620] loop5: detected capacity change from 0 to 2048 [ 168.213182][T11568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.235912][T12620] loop5: p1 < > p4 [ 168.244894][T12620] loop5: p4 size 8388608 extends beyond EOD, truncated [ 168.262691][T12638] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3426'. [ 168.274794][T12634] netlink: 'syz.2.3425': attribute type 4 has an invalid length. [ 168.292275][T12640] netlink: 'syz.4.3424': attribute type 1 has an invalid length. [ 168.314330][T12642] loop2: detected capacity change from 0 to 1024 [ 168.321178][T12642] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.328187][T12642] EXT4-fs: Ignoring removed nobh option [ 168.333913][T12642] EXT4-fs: Ignoring removed bh option [ 168.339922][T12640] bond4: entered promiscuous mode [ 168.362217][T12642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.362592][T12640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.384672][T12642] syz_tun: entered allmulticast mode [ 168.399404][T12642] syz_tun: left allmulticast mode [ 168.422880][T12655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.456362][T12333] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.490621][T12658] loop5: detected capacity change from 0 to 128 [ 168.500578][T12658] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.519474][T12658] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 168.566927][T12670] netlink: 'syz.4.3438': attribute type 4 has an invalid length. [ 168.615810][T12674] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3440'. [ 168.672779][T12684] netlink: 'syz.5.3445': attribute type 1 has an invalid length. [ 168.687236][T12684] bond7: entered promiscuous mode [ 168.692610][T12684] 8021q: adding VLAN 0 to HW filter on device bond7 [ 168.720034][T12686] loop4: detected capacity change from 0 to 1024 [ 168.728322][T12686] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.740515][T12686] EXT4-fs: Ignoring removed nobh option [ 168.746291][T12686] EXT4-fs: Ignoring removed bh option [ 168.749988][T12687] syz_tun: entered allmulticast mode [ 168.762552][T12689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.785320][T12687] syz_tun: left allmulticast mode [ 168.791925][T12686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.875581][T12699] netlink: 'syz.5.3450': attribute type 4 has an invalid length. [ 168.987335][T12708] loop5: detected capacity change from 0 to 2048 [ 169.015052][T12712] loop2: detected capacity change from 0 to 128 [ 169.021908][T12712] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.035883][T12712] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.064277][T12708] loop5: p1 < > p4 [ 169.073376][T12708] loop5: p4 size 8388608 extends beyond EOD, truncated [ 169.187628][T12724] netlink: 'syz.2.3462': attribute type 4 has an invalid length. [ 169.208294][T12726] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.263097][T12737] loop2: detected capacity change from 0 to 128 [ 169.269630][T12735] loop5: detected capacity change from 0 to 2048 [ 169.279076][T12737] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.301544][T11568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.310996][T12737] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.372719][T12745] bond8: entered promiscuous mode [ 169.397912][T12745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 169.434144][T12757] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.471251][T12767] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3481'. [ 169.491595][T12767] syz_tun: entered allmulticast mode [ 169.497706][T12764] loop5: detected capacity change from 0 to 1024 [ 169.505295][T12764] EXT4-fs: Ignoring removed mblk_io_submit option [ 169.512256][T12764] EXT4-fs: Ignoring removed nobh option [ 169.518262][T12764] EXT4-fs: Ignoring removed bh option [ 169.546570][T12764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.560793][T12764] syz_tun: entered allmulticast mode [ 169.568086][T12764] syz_tun: left allmulticast mode [ 169.576184][T12770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3479'. [ 169.630743][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.650162][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3485'. [ 169.718506][T12788] loop5: detected capacity change from 0 to 2048 [ 169.772901][T12788] loop5: p1 < > p4 [ 169.778977][T12788] loop5: p4 size 8388608 extends beyond EOD, truncated [ 169.850814][T12795] ieee802154 phy0 wpan0: encryption failed: -22 [ 169.880943][T12797] loop5: detected capacity change from 0 to 128 [ 169.888270][T12797] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.901820][T12797] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.985566][T12803] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3495'. [ 170.051575][T12804] loop5: detected capacity change from 0 to 1024 [ 170.059659][T12804] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.066436][T12804] EXT4-fs: Ignoring removed nobh option [ 170.072122][T12804] EXT4-fs: Ignoring removed bh option [ 170.085681][T12804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.101574][T12804] syz_tun: entered allmulticast mode [ 170.266282][T12773] syz.2.3483 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 170.280527][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.2.3483 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 170.280563][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.280607][T12773] Call Trace: [ 170.280615][T12773] [ 170.280623][T12773] __dump_stack+0x1d/0x30 [ 170.280647][T12773] dump_stack_lvl+0xe8/0x140 [ 170.280720][T12773] dump_stack+0x15/0x1b [ 170.280813][T12773] dump_header+0x81/0x220 [ 170.280855][T12773] oom_kill_process+0x334/0x3f0 [ 170.280944][T12773] out_of_memory+0x979/0xb80 [ 170.280979][T12773] ? css_next_descendant_pre+0x138/0x160 [ 170.281008][T12773] mem_cgroup_out_of_memory+0x13d/0x190 [ 170.281091][T12773] try_charge_memcg+0x5e2/0x870 [ 170.281130][T12773] obj_cgroup_charge_pages+0xb7/0x1a0 [ 170.281240][T12773] __memcg_kmem_charge_page+0x9f/0x170 [ 170.281324][T12773] __alloc_frozen_pages_noprof+0x188/0x360 [ 170.281361][T12773] alloc_pages_mpol+0xb3/0x250 [ 170.281390][T12773] alloc_pages_noprof+0x90/0x130 [ 170.281461][T12773] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 170.281506][T12773] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 170.281581][T12773] ? ip_set_alloc+0x1f/0x30 [ 170.281608][T12773] ? ip_set_alloc+0x1f/0x30 [ 170.281634][T12773] ? __kmalloc_cache_noprof+0x189/0x320 [ 170.281663][T12773] ip_set_alloc+0x1f/0x30 [ 170.281765][T12773] hash_netiface_create+0x282/0x740 [ 170.281796][T12773] ? __pfx_hash_netiface_create+0x10/0x10 [ 170.281825][T12773] ip_set_create+0x3c9/0x960 [ 170.281891][T12773] ? __nla_parse+0x40/0x60 [ 170.281913][T12773] nfnetlink_rcv_msg+0x4c6/0x590 [ 170.281937][T12773] ? update_curr+0x27f/0x320 [ 170.281982][T12773] netlink_rcv_skb+0x123/0x220 [ 170.282023][T12773] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 170.282116][T12773] nfnetlink_rcv+0x16b/0x1690 [ 170.282140][T12773] ? __kfree_skb+0x109/0x150 [ 170.282158][T12773] ? nlmon_xmit+0x4f/0x60 [ 170.282179][T12773] ? consume_skb+0x49/0x150 [ 170.282280][T12773] ? nlmon_xmit+0x4f/0x60 [ 170.282300][T12773] ? dev_hard_start_xmit+0x39e/0x3d0 [ 170.282322][T12773] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 170.282385][T12773] ? __dev_queue_xmit+0x182/0x1fb0 [ 170.282406][T12773] ? ref_tracker_free+0x37d/0x3e0 [ 170.282539][T12773] ? __netlink_deliver_tap+0x4dc/0x500 [ 170.282562][T12773] netlink_unicast+0x5a1/0x670 [ 170.282585][T12773] netlink_sendmsg+0x58b/0x6b0 [ 170.282600][T12773] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.282628][T12773] __sock_sendmsg+0x145/0x180 [ 170.282648][T12773] ____sys_sendmsg+0x31e/0x4e0 [ 170.282665][T12773] ___sys_sendmsg+0x17b/0x1d0 [ 170.282687][T12773] __x64_sys_sendmsg+0xd4/0x160 [ 170.282724][T12773] x64_sys_call+0x2999/0x2fb0 [ 170.282751][T12773] do_syscall_64+0xd0/0x1a0 [ 170.282769][T12773] ? clear_bhb_loop+0x40/0x90 [ 170.282869][T12773] ? clear_bhb_loop+0x40/0x90 [ 170.282885][T12773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.282901][T12773] RIP: 0033:0x7f20a722e969 [ 170.282913][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.282927][T12773] RSP: 002b:00007f20a5876038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.282943][T12773] RAX: ffffffffffffffda RBX: 00007f20a7456080 RCX: 00007f20a722e969 [ 170.282963][T12773] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 170.282973][T12773] RBP: 00007f20a72b0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 170.283015][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.283024][T12773] R13: 0000000000000000 R14: 00007f20a7456080 R15: 00007ffeaeb1cb18 [ 170.283037][T12773] [ 170.283041][T12773] memory: usage 307200kB, limit 307200kB, failcnt 981 [ 170.641699][T12773] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 170.649648][T12773] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 170.656940][T12773] Memory cgroup stats for /syz2: [ 170.657279][T12773] cache 0 [ 170.665238][T12773] rss 0 [ 170.667997][T12773] shmem 0 [ 170.670919][T12773] mapped_file 0 [ 170.674460][T12773] dirty 0 [ 170.677405][T12773] writeback 0 [ 170.680675][T12773] workingset_refault_anon 988 [ 170.685416][T12773] workingset_refault_file 1882 [ 170.690220][T12773] swap 200704 [ 170.693548][T12773] swapcached 0 [ 170.697012][T12773] pgpgin 209091 [ 170.700462][T12773] pgpgout 209090 [ 170.703999][T12773] pgfault 259107 [ 170.707555][T12773] pgmajfault 515 [ 170.711350][T12773] inactive_anon 0 [ 170.715081][T12773] active_anon 0 [ 170.718543][T12773] inactive_file 0 [ 170.722272][T12773] active_file 4096 [ 170.725993][T12773] unevictable 0 [ 170.729529][T12773] hierarchical_memory_limit 314572800 [ 170.734918][T12773] hierarchical_memsw_limit 9223372036854771712 [ 170.741060][T12773] total_cache 0 [ 170.744526][T12773] total_rss 0 [ 170.747812][T12773] total_shmem 0 [ 170.751249][T12773] total_mapped_file 0 [ 170.755303][T12773] total_dirty 0 [ 170.758770][T12773] total_writeback 0 [ 170.762578][T12773] total_workingset_refault_anon 988 [ 170.767809][T12773] total_workingset_refault_file 1882 [ 170.773069][T12773] total_swap 200704 [ 170.776867][T12773] total_swapcached 0 [ 170.780752][T12773] total_pgpgin 209091 [ 170.784734][T12773] total_pgpgout 209090 [ 170.788784][T12773] total_pgfault 259107 [ 170.792831][T12773] total_pgmajfault 515 [ 170.796917][T12773] total_inactive_anon 0 [ 170.801056][T12773] total_active_anon 0 [ 170.805047][T12773] total_inactive_file 0 [ 170.809256][T12773] total_active_file 4096 [ 170.813571][T12773] total_unevictable 0 [ 170.817590][T12773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3483,pid=12768,uid=0 [ 170.832663][T12773] Memory cgroup out of memory: Killed process 12768 (syz.2.3483) total-vm:93880kB, anon-rss:972kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 170.892644][T12808] loop4: detected capacity change from 0 to 1024 [ 170.896762][T12810] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3497'. [ 170.965341][T12808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.980020][T12808] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.012849][T12808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 171.029745][T12808] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 171.042272][T12808] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.042272][T12808] [ 171.052253][T12808] EXT4-fs (loop4): Total free blocks count 0 [ 171.058379][T12808] EXT4-fs (loop4): Free/Dirty block details [ 171.064483][T12808] EXT4-fs (loop4): free_blocks=4293918720 [ 171.070289][T12808] EXT4-fs (loop4): dirty_blocks=16 [ 171.075579][T12808] EXT4-fs (loop4): Block reservation details [ 171.081578][T12808] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 171.094592][T12808] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 171.200647][ T7385] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.208936][T12822] bond5: entered promiscuous mode [ 171.216304][T12822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 171.290655][T12833] loop4: detected capacity change from 0 to 1024 [ 171.310604][T12833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.357388][T12833] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.386937][T12851] bond9: entered promiscuous mode [ 171.392055][T12833] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 171.392322][T12833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 171.410613][T12851] 8021q: adding VLAN 0 to HW filter on device bond9 [ 171.419184][T12833] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.419184][T12833] [ 171.435706][T12833] EXT4-fs (loop4): Total free blocks count 0 [ 171.441973][T12833] EXT4-fs (loop4): Free/Dirty block details [ 171.448028][T12833] EXT4-fs (loop4): free_blocks=4293918720 [ 171.453778][T12833] EXT4-fs (loop4): dirty_blocks=16 [ 171.459007][T12833] EXT4-fs (loop4): Block reservation details [ 171.465039][T12833] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 171.572503][T12833] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 171.578308][T12862] loop5: detected capacity change from 0 to 2048 [ 171.610242][T12868] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3521'. [ 171.640088][T12868] syz_tun: entered allmulticast mode [ 171.640892][T12862] loop5: p1 < > p4 [ 171.650079][T12862] loop5: p4 size 8388608 extends beyond EOD, truncated [ 171.709070][T12871] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.725002][T12874] loop4: detected capacity change from 0 to 128 [ 171.742199][T12874] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.775312][T12874] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.993243][ T29] audit: type=1400 audit(1747814794.474:2601): avc: denied { create } for pid=12891 comm="syz.0.3532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 172.054578][T12896] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3533'. [ 172.078504][T12898] loop5: detected capacity change from 0 to 512 [ 172.094120][T12898] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.104082][T12898] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 172.119261][T12901] loop4: detected capacity change from 0 to 1024 [ 172.126110][T12901] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.132697][T12901] EXT4-fs: Ignoring removed nobh option [ 172.138402][T12901] EXT4-fs: Ignoring removed bh option [ 172.166830][T12901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.189216][T12906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.525415][T11568] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.633441][T12926] loop2: detected capacity change from 0 to 1024 [ 172.661481][T12930] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.675826][T12926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.718616][T12926] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.746748][T12926] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 172.777044][T12926] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 172.789643][T12926] EXT4-fs (loop2): This should not happen!! Data will be lost [ 172.789643][T12926] [ 172.799442][T12926] EXT4-fs (loop2): Total free blocks count 0 [ 172.805488][T12926] EXT4-fs (loop2): Free/Dirty block details [ 172.811554][T12926] EXT4-fs (loop2): free_blocks=4293918720 [ 172.817364][T12926] EXT4-fs (loop2): dirty_blocks=16 [ 172.822687][T12926] EXT4-fs (loop2): Block reservation details [ 172.828880][T12926] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 172.839374][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3548'. [ 172.852849][T12926] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 173.269155][ T29] audit: type=1326 audit(1747814795.754:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.326090][ T29] audit: type=1326 audit(1747814795.784:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.349700][ T29] audit: type=1326 audit(1747814795.784:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.373691][ T29] audit: type=1326 audit(1747814795.784:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.397470][ T29] audit: type=1326 audit(1747814795.784:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.421283][ T29] audit: type=1326 audit(1747814795.784:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.444935][ T29] audit: type=1326 audit(1747814795.784:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.468651][ T29] audit: type=1326 audit(1747814795.784:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.469220][T12961] validate_nla: 5 callbacks suppressed [ 173.469235][T12961] netlink: 'syz.0.3556': attribute type 4 has an invalid length. [ 173.492146][ T29] audit: type=1326 audit(1747814795.784:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.492183][ T29] audit: type=1326 audit(1747814795.784:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12952 comm="syz.0.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa75671e969 code=0x7ffc0000 [ 173.583785][T12963] loop4: detected capacity change from 0 to 1024 [ 173.601431][T12963] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.615004][T12963] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 173.631912][T12963] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 173.644308][T12963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 173.644308][T12963] [ 173.654224][T12963] EXT4-fs (loop4): Total free blocks count 0 [ 173.660447][T12963] EXT4-fs (loop4): Free/Dirty block details [ 173.666568][T12963] EXT4-fs (loop4): free_blocks=4293918720 [ 173.672319][T12963] EXT4-fs (loop4): dirty_blocks=16 [ 173.677575][T12963] EXT4-fs (loop4): Block reservation details [ 173.683767][T12963] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 173.709582][T12963] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 173.722031][T12963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 173.722031][T12963] [ 173.824978][T12977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.865152][T12982] netlink: 'syz.4.3562': attribute type 1 has an invalid length. [ 173.910892][T12982] bond6: entered promiscuous mode [ 173.916174][T12982] 8021q: adding VLAN 0 to HW filter on device bond6 [ 173.959971][T12988] netlink: 'syz.4.3568': attribute type 4 has an invalid length. [ 174.043167][T12997] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3571'. [ 174.121991][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 174.141459][T13002] loop4: detected capacity change from 0 to 1024 [ 174.185100][T13002] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.191731][T13002] EXT4-fs: Ignoring removed nobh option [ 174.197510][T13002] EXT4-fs: Ignoring removed bh option [ 174.270086][T12997] syz_tun: entered allmulticast mode [ 174.277446][T12997] syz_tun: left allmulticast mode [ 174.319618][T13014] netlink: 'syz.0.3577': attribute type 4 has an invalid length. [ 174.341218][T13020] loop5: detected capacity change from 0 to 1024 [ 174.366368][T13022] netlink: 'syz.2.3581': attribute type 4 has an invalid length. [ 174.386600][T13024] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.400184][T13020] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.447416][T13020] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 174.484569][T13020] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 174.497143][T13020] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.497143][T13020] [ 174.506966][T13020] EXT4-fs (loop5): Total free blocks count 0 [ 174.512977][T13020] EXT4-fs (loop5): Free/Dirty block details [ 174.518983][T13020] EXT4-fs (loop5): free_blocks=4293918720 [ 174.524940][T13020] EXT4-fs (loop5): dirty_blocks=16 [ 174.530257][T13020] EXT4-fs (loop5): Block reservation details [ 174.536678][T13020] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 174.546406][T13043] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 174.558899][T13043] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.558899][T13043] [ 174.652532][T13056] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.683320][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3591'. [ 174.778999][T13073] netlink: 'syz.5.3603': attribute type 4 has an invalid length. [ 174.847821][T13081] loop5: detected capacity change from 0 to 2048 [ 174.848379][T13085] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.045838][T13108] loop4: detected capacity change from 0 to 128 [ 175.146633][T13114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3621'. [ 175.176017][T13121] netlink: 'syz.4.3623': attribute type 4 has an invalid length. [ 175.202417][T13124] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3624'. [ 175.306905][T13134] loop4: detected capacity change from 0 to 1024 [ 175.316221][T13134] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.322774][T13134] EXT4-fs: Ignoring removed nobh option [ 175.328547][T13134] EXT4-fs: Ignoring removed bh option [ 175.364603][T13134] syz_tun: entered allmulticast mode [ 175.450265][T13146] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.509347][T13152] netlink: 'syz.1.3635': attribute type 4 has an invalid length. [ 175.888721][T13167] FAULT_INJECTION: forcing a failure. [ 175.888721][T13167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.902117][T13167] CPU: 1 UID: 0 PID: 13167 Comm: syz.1.3641 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 175.902149][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.902161][T13167] Call Trace: [ 175.902167][T13167] [ 175.902174][T13167] __dump_stack+0x1d/0x30 [ 175.902199][T13167] dump_stack_lvl+0xe8/0x140 [ 175.902223][T13167] dump_stack+0x15/0x1b [ 175.902244][T13167] should_fail_ex+0x265/0x280 [ 175.902287][T13167] should_fail+0xb/0x20 [ 175.902317][T13167] should_fail_usercopy+0x1a/0x20 [ 175.902342][T13167] copy_page_from_iter_atomic+0x21b/0xff0 [ 175.902402][T13167] ? shmem_write_begin+0xa8/0x190 [ 175.902437][T13167] ? shmem_write_begin+0xe1/0x190 [ 175.902513][T13167] generic_perform_write+0x2c2/0x490 [ 175.902556][T13167] shmem_file_write_iter+0xc5/0xf0 [ 175.902659][T13167] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 175.902698][T13167] vfs_write+0x4a0/0x8d0 [ 175.902770][T13167] ksys_write+0xda/0x1a0 [ 175.902801][T13167] __x64_sys_write+0x40/0x50 [ 175.902833][T13167] x64_sys_call+0x2cdd/0x2fb0 [ 175.902856][T13167] do_syscall_64+0xd0/0x1a0 [ 175.902880][T13167] ? clear_bhb_loop+0x40/0x90 [ 175.902967][T13167] ? clear_bhb_loop+0x40/0x90 [ 175.902994][T13167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.903020][T13167] RIP: 0033:0x7f281dfee969 [ 175.903039][T13167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.903057][T13167] RSP: 002b:00007f281c657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.903107][T13167] RAX: ffffffffffffffda RBX: 00007f281e215fa0 RCX: 00007f281dfee969 [ 175.903121][T13167] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000006 [ 175.903138][T13167] RBP: 00007f281c657090 R08: 0000000000000000 R09: 0000000000000000 [ 175.903183][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.903196][T13167] R13: 0000000000000000 R14: 00007f281e215fa0 R15: 00007ffd24a79f58 [ 175.903217][T13167] [ 176.114312][T13122] syz_tun: left allmulticast mode [ 176.146165][T13173] loop4: detected capacity change from 0 to 1024 [ 176.161942][T13170] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3642'. [ 176.178351][T13173] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.195446][T13173] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 176.211661][T13173] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 176.224167][T13173] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.224167][T13173] [ 176.233974][T13173] EXT4-fs (loop4): Total free blocks count 0 [ 176.239986][T13173] EXT4-fs (loop4): Free/Dirty block details [ 176.245961][T13173] EXT4-fs (loop4): free_blocks=4293918720 [ 176.251785][T13173] EXT4-fs (loop4): dirty_blocks=16 [ 176.256959][T13173] EXT4-fs (loop4): Block reservation details [ 176.263022][T13173] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 176.279420][T13173] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 176.291977][T13173] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.291977][T13173] [ 176.411048][T13188] loop4: detected capacity change from 0 to 128 [ 176.418035][T13188] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.431739][T13185] netlink: 'syz.1.3645': attribute type 8 has an invalid length. [ 176.439717][T13186] netlink: 'syz.1.3645': attribute type 8 has an invalid length. [ 176.448582][T13188] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.529277][T13197] loop4: detected capacity change from 0 to 2048 [ 176.595619][T13197] loop4: p1 < > p4 [ 176.599937][T13197] loop4: p4 size 8388608 extends beyond EOD, truncated [ 176.685595][T13204] bond7: entered promiscuous mode [ 176.690845][T13204] 8021q: adding VLAN 0 to HW filter on device bond7 [ 176.712211][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 176.857198][T13216] FAULT_INJECTION: forcing a failure. [ 176.857198][T13216] name failslab, interval 1, probability 0, space 0, times 0 [ 176.870114][T13216] CPU: 0 UID: 0 PID: 13216 Comm: syz.4.3658 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 176.870150][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.870164][T13216] Call Trace: [ 176.870171][T13216] [ 176.870180][T13216] __dump_stack+0x1d/0x30 [ 176.870205][T13216] dump_stack_lvl+0xe8/0x140 [ 176.870240][T13216] dump_stack+0x15/0x1b [ 176.870261][T13216] should_fail_ex+0x265/0x280 [ 176.870349][T13216] should_failslab+0x8c/0xb0 [ 176.870388][T13216] kmem_cache_alloc_noprof+0x50/0x310 [ 176.870409][T13216] ? skb_clone+0x151/0x1f0 [ 176.870436][T13216] skb_clone+0x151/0x1f0 [ 176.870460][T13216] __netlink_deliver_tap+0x2c9/0x500 [ 176.870487][T13216] netlink_unicast+0x64c/0x670 [ 176.870600][T13216] netlink_sendmsg+0x58b/0x6b0 [ 176.870620][T13216] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.870641][T13216] __sock_sendmsg+0x145/0x180 [ 176.870673][T13216] ____sys_sendmsg+0x31e/0x4e0 [ 176.870751][T13216] ___sys_sendmsg+0x17b/0x1d0 [ 176.870792][T13216] __x64_sys_sendmsg+0xd4/0x160 [ 176.870817][T13216] x64_sys_call+0x2999/0x2fb0 [ 176.870841][T13216] do_syscall_64+0xd0/0x1a0 [ 176.870870][T13216] ? clear_bhb_loop+0x40/0x90 [ 176.870968][T13216] ? clear_bhb_loop+0x40/0x90 [ 176.870993][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.871019][T13216] RIP: 0033:0x7f9ac1a2e969 [ 176.871038][T13216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.871075][T13216] RSP: 002b:00007f9ac0097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.871099][T13216] RAX: ffffffffffffffda RBX: 00007f9ac1c55fa0 RCX: 00007f9ac1a2e969 [ 176.871117][T13216] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 176.871130][T13216] RBP: 00007f9ac0097090 R08: 0000000000000000 R09: 0000000000000000 [ 176.871145][T13216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.871166][T13216] R13: 0000000000000000 R14: 00007f9ac1c55fa0 R15: 00007ffd09c8b8f8 [ 176.871186][T13216] [ 177.146961][T13219] loop4: detected capacity change from 0 to 128 [ 177.162253][T13219] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.250172][T13219] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.268893][T13227] bond10: entered promiscuous mode [ 177.274843][T13227] 8021q: adding VLAN 0 to HW filter on device bond10 [ 177.288538][T13230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.347114][T13236] bond8: entered promiscuous mode [ 177.354202][T13236] 8021q: adding VLAN 0 to HW filter on device bond8 [ 177.438985][T13245] loop4: detected capacity change from 0 to 1024 [ 177.446883][T13245] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.467888][T13245] EXT4-fs: Ignoring removed nobh option [ 177.473511][T13245] EXT4-fs: Ignoring removed bh option [ 177.530587][T13245] syz_tun: entered allmulticast mode [ 177.545300][T13245] syz_tun: left allmulticast mode [ 177.566854][T13259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.684238][T13273] bond11: entered promiscuous mode [ 177.692943][T13262] loop2: detected capacity change from 0 to 256 [ 177.699933][T13262] vfat: Unknown parameter '7Մ*H4wo~N"Ne?涫ߔ \GZA9ee^u%7n(7JY{O ٫dcvFOe~Q;z:r`(\as' [ 177.712040][T13273] 8021q: adding VLAN 0 to HW filter on device bond11 [ 177.757811][T13268] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 177.814049][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3684'. [ 177.857350][T13285] FAULT_INJECTION: forcing a failure. [ 177.857350][T13285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.870674][T13285] CPU: 1 UID: 0 PID: 13285 Comm: syz.0.3685 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 177.870747][T13285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.870757][T13285] Call Trace: [ 177.870761][T13285] [ 177.870842][T13285] __dump_stack+0x1d/0x30 [ 177.870904][T13285] dump_stack_lvl+0xe8/0x140 [ 177.870988][T13285] dump_stack+0x15/0x1b [ 177.871088][T13285] should_fail_ex+0x265/0x280 [ 177.871107][T13285] should_fail+0xb/0x20 [ 177.871158][T13285] should_fail_usercopy+0x1a/0x20 [ 177.871169][T13285] _copy_from_iter+0x24e/0xdd0 [ 177.871184][T13285] netlink_sendmsg+0x471/0x6b0 [ 177.871196][T13285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.871238][T13285] __sock_sendmsg+0x145/0x180 [ 177.871266][T13285] ____sys_sendmsg+0x31e/0x4e0 [ 177.871279][T13285] ___sys_sendmsg+0x17b/0x1d0 [ 177.871363][T13285] __x64_sys_sendmsg+0xd4/0x160 [ 177.871385][T13285] x64_sys_call+0x2999/0x2fb0 [ 177.871476][T13285] do_syscall_64+0xd0/0x1a0 [ 177.871490][T13285] ? clear_bhb_loop+0x40/0x90 [ 177.871509][T13285] ? clear_bhb_loop+0x40/0x90 [ 177.871559][T13285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.871639][T13285] RIP: 0033:0x7fa75671e969 [ 177.871649][T13285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.871660][T13285] RSP: 002b:00007fa754d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.871672][T13285] RAX: ffffffffffffffda RBX: 00007fa756945fa0 RCX: 00007fa75671e969 [ 177.871679][T13285] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 177.871685][T13285] RBP: 00007fa754d87090 R08: 0000000000000000 R09: 0000000000000000 [ 177.871692][T13285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.871739][T13285] R13: 0000000000000000 R14: 00007fa756945fa0 R15: 00007ffdd708e318 [ 177.871753][T13285] [ 178.130951][T13290] loop5: detected capacity change from 0 to 1024 [ 178.137873][T13290] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.144555][T13290] EXT4-fs: Ignoring removed nobh option [ 178.150276][T13290] EXT4-fs: Ignoring removed bh option [ 178.201321][T13298] loop5: detected capacity change from 0 to 1024 [ 178.218294][T13298] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.248524][T13298] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 178.265235][T13298] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 178.277706][T13298] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.277706][T13298] [ 178.287433][T13298] EXT4-fs (loop5): Total free blocks count 0 [ 178.293453][T13298] EXT4-fs (loop5): Free/Dirty block details [ 178.299550][T13298] EXT4-fs (loop5): free_blocks=4293918720 [ 178.305360][T13298] EXT4-fs (loop5): dirty_blocks=16 [ 178.305880][T13304] loop2: detected capacity change from 0 to 2048 [ 178.310693][T13298] EXT4-fs (loop5): Block reservation details [ 178.323328][T13298] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 178.340467][T13298] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 178.352924][T13298] EXT4-fs (loop5): This should not happen!! Data will be lost [ 178.352924][T13298] [ 178.360928][T13306] bond3: entered promiscuous mode [ 178.368921][T13306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.434107][T13313] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3695'. [ 178.490937][T13321] validate_nla: 7 callbacks suppressed [ 178.490955][T13321] netlink: 'syz.2.3698': attribute type 21 has an invalid length. [ 178.504505][T13321] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.514251][T13323] loop4: detected capacity change from 0 to 512 [ 178.534194][T13328] netlink: 'syz.1.3702': attribute type 21 has an invalid length. [ 178.542200][T13328] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.560657][T13323] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.589009][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 178.589027][ T29] audit: type=1400 audit(1747814801.074:2743): avc: denied { getopt } for pid=13334 comm="syz.2.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 178.615124][ T29] audit: type=1400 audit(1747814801.074:2744): avc: denied { read } for pid=13334 comm="syz.2.3704" lport=120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.637352][T13338] loop5: detected capacity change from 0 to 1024 [ 178.653690][T13338] EXT4-fs: Ignoring removed i_version option [ 178.693264][T13338] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 178.702204][T13338] EXT4-fs (loop5): inodes count not valid: 15 vs 32 [ 178.730237][T13349] tmpfs: Bad value for 'mpol' [ 178.756271][T13354] FAULT_INJECTION: forcing a failure. [ 178.756271][T13354] name failslab, interval 1, probability 0, space 0, times 0 [ 178.769081][T13354] CPU: 1 UID: 0 PID: 13354 Comm: syz.1.3711 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 178.769115][T13354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.769129][T13354] Call Trace: [ 178.769137][T13354] [ 178.769146][T13354] __dump_stack+0x1d/0x30 [ 178.769173][T13354] dump_stack_lvl+0xe8/0x140 [ 178.769204][T13354] dump_stack+0x15/0x1b [ 178.769224][T13354] should_fail_ex+0x265/0x280 [ 178.769315][T13354] should_failslab+0x8c/0xb0 [ 178.769348][T13354] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 178.769376][T13354] ? kasprintf+0x83/0xb0 [ 178.769442][T13354] kvasprintf+0x8a/0x110 [ 178.769471][T13354] kasprintf+0x83/0xb0 [ 178.769494][T13354] ? alloc_bprm+0x62/0x660 [ 178.769520][T13354] alloc_bprm+0x133/0x660 [ 178.769609][T13354] ? should_fail+0xb/0x20 [ 178.769642][T13354] do_execveat_common+0x12e/0x750 [ 178.769672][T13354] ? getname_flags+0x154/0x3b0 [ 178.769720][T13354] __x64_sys_execveat+0x73/0x90 [ 178.769768][T13354] x64_sys_call+0x2dae/0x2fb0 [ 178.769794][T13354] do_syscall_64+0xd0/0x1a0 [ 178.769899][T13354] ? clear_bhb_loop+0x40/0x90 [ 178.769924][T13354] ? clear_bhb_loop+0x40/0x90 [ 178.769950][T13354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.770078][T13354] RIP: 0033:0x7f281dfee969 [ 178.770104][T13354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.770123][T13354] RSP: 002b:00007f281c657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 178.770150][T13354] RAX: ffffffffffffffda RBX: 00007f281e215fa0 RCX: 00007f281dfee969 [ 178.770190][T13354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 178.770206][T13354] RBP: 00007f281c657090 R08: 0000000000001000 R09: 0000000000000000 [ 178.770222][T13354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.770237][T13354] R13: 0000000000000000 R14: 00007f281e215fa0 R15: 00007ffd24a79f58 [ 178.770254][T13354] [ 179.035864][T13364] loop4: detected capacity change from 0 to 1024 [ 179.056779][T13364] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.072502][T13367] loop5: detected capacity change from 0 to 1024 [ 179.085313][T13364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.101172][T13367] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.115226][T13367] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 179.131359][T13367] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 179.140813][T13364] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 179.143674][T13367] EXT4-fs (loop5): This should not happen!! Data will be lost [ 179.143674][T13367] [ 179.155928][T13364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.155928][T13364] [ 179.155950][T13364] EXT4-fs (loop4): Total free blocks count 0 [ 179.165625][T13367] EXT4-fs (loop5): Total free blocks count 0 [ 179.165647][T13367] EXT4-fs (loop5): Free/Dirty block details [ 179.165659][T13367] EXT4-fs (loop5): free_blocks=4293918720 [ 179.165682][T13367] EXT4-fs (loop5): dirty_blocks=16 [ 179.175353][T13364] EXT4-fs (loop4): Free/Dirty block details [ 179.181357][T13367] EXT4-fs (loop5): Block reservation details [ 179.187410][T13364] EXT4-fs (loop4): free_blocks=4293918720 [ 179.193275][T13367] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 179.228248][T13364] EXT4-fs (loop4): dirty_blocks=16 [ 179.233423][T13364] EXT4-fs (loop4): Block reservation details [ 179.239719][T13364] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 179.261570][T13367] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 179.274102][T13367] EXT4-fs (loop5): This should not happen!! Data will be lost [ 179.274102][T13367] [ 179.406173][T13386] netlink: 'syz.5.3722': attribute type 4 has an invalid length. [ 179.487851][T13393] loop4: detected capacity change from 0 to 1024 [ 179.637341][ T29] audit: type=1326 audit(1747814802.124:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.660962][ T29] audit: type=1326 audit(1747814802.124:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.684502][ T29] audit: type=1326 audit(1747814802.124:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.708127][ T29] audit: type=1326 audit(1747814802.124:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.731621][ T29] audit: type=1326 audit(1747814802.124:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.755144][ T29] audit: type=1326 audit(1747814802.124:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.778664][ T29] audit: type=1326 audit(1747814802.124:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 179.802291][ T29] audit: type=1326 audit(1747814802.124:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.5.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f357d84e969 code=0x7ffc0000 [ 180.056522][T13412] FAULT_INJECTION: forcing a failure. [ 180.056522][T13412] name failslab, interval 1, probability 0, space 0, times 0 [ 180.069319][T13412] CPU: 0 UID: 0 PID: 13412 Comm: syz.4.3731 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 180.069350][T13412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.069362][T13412] Call Trace: [ 180.069369][T13412] [ 180.069378][T13412] __dump_stack+0x1d/0x30 [ 180.069501][T13412] dump_stack_lvl+0xe8/0x140 [ 180.069525][T13412] dump_stack+0x15/0x1b [ 180.069546][T13412] should_fail_ex+0x265/0x280 [ 180.069586][T13412] should_failslab+0x8c/0xb0 [ 180.069651][T13412] __kmalloc_noprof+0xa5/0x3e0 [ 180.069716][T13412] ? copy_splice_read+0xc2/0x5f0 [ 180.069767][T13412] copy_splice_read+0xc2/0x5f0 [ 180.069911][T13412] ? sysvec_reschedule_ipi+0x4f/0x70 [ 180.069943][T13412] ? trace_reschedule_exit+0xd/0xc0 [ 180.069983][T13412] ? __pfx_copy_splice_read+0x10/0x10 [ 180.070010][T13412] splice_direct_to_actor+0x26f/0x680 [ 180.070039][T13412] ? __pfx_direct_splice_actor+0x10/0x10 [ 180.070064][T13412] do_splice_direct+0xda/0x150 [ 180.070107][T13412] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 180.070140][T13412] do_sendfile+0x380/0x640 [ 180.070160][T13412] __x64_sys_sendfile64+0x105/0x150 [ 180.070193][T13412] x64_sys_call+0xb39/0x2fb0 [ 180.070298][T13412] do_syscall_64+0xd0/0x1a0 [ 180.070327][T13412] ? clear_bhb_loop+0x40/0x90 [ 180.070366][T13412] ? clear_bhb_loop+0x40/0x90 [ 180.070392][T13412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.070479][T13412] RIP: 0033:0x7f9ac1a2e969 [ 180.070497][T13412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.070521][T13412] RSP: 002b:00007f9ac0097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.070543][T13412] RAX: ffffffffffffffda RBX: 00007f9ac1c55fa0 RCX: 00007f9ac1a2e969 [ 180.070556][T13412] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 180.070577][T13412] RBP: 00007f9ac0097090 R08: 0000000000000000 R09: 0000000000000000 [ 180.070590][T13412] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 180.070605][T13412] R13: 0000000000000000 R14: 00007f9ac1c55fa0 R15: 00007ffd09c8b8f8 [ 180.070626][T13412] [ 180.416355][T13427] loop2: detected capacity change from 0 to 512 [ 180.425941][T13432] netlink: 'syz.4.3737': attribute type 4 has an invalid length. [ 180.436952][T13427] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.455866][T13427] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.472455][T13427] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3738: invalid indirect mapped block 256 (level 2) [ 180.497630][T13443] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3743'. [ 180.532898][T13439] loop5: detected capacity change from 0 to 512 [ 180.549633][T13443] syz_tun: entered allmulticast mode [ 180.562351][T13427] EXT4-fs (loop2): 2 truncates cleaned up [ 180.568399][T13439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.580022][T13439] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 180.588718][T13443] syz_tun: left allmulticast mode [ 180.686837][T13453] FAULT_INJECTION: forcing a failure. [ 180.686837][T13453] name failslab, interval 1, probability 0, space 0, times 0 [ 180.697333][T13455] loop4: detected capacity change from 0 to 2048 [ 180.699616][T13453] CPU: 1 UID: 0 PID: 13453 Comm: syz.5.3749 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 180.699774][T13453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.699788][T13453] Call Trace: [ 180.699795][T13453] [ 180.699804][T13453] __dump_stack+0x1d/0x30 [ 180.699884][T13453] dump_stack_lvl+0xe8/0x140 [ 180.699905][T13453] dump_stack+0x15/0x1b [ 180.699924][T13453] should_fail_ex+0x265/0x280 [ 180.699959][T13453] should_failslab+0x8c/0xb0 [ 180.700004][T13453] kmem_cache_alloc_noprof+0x50/0x310 [ 180.700026][T13453] ? getname_flags+0x80/0x3b0 [ 180.700058][T13453] getname_flags+0x80/0x3b0 [ 180.700109][T13453] user_path_at+0x28/0x130 [ 180.700131][T13453] __se_sys_mount+0x25b/0x2e0 [ 180.700200][T13453] ? fput+0x8f/0xc0 [ 180.700222][T13453] __x64_sys_mount+0x67/0x80 [ 180.700250][T13453] x64_sys_call+0xd36/0x2fb0 [ 180.700336][T13453] do_syscall_64+0xd0/0x1a0 [ 180.700362][T13453] ? clear_bhb_loop+0x40/0x90 [ 180.700385][T13453] ? clear_bhb_loop+0x40/0x90 [ 180.700505][T13453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.700529][T13453] RIP: 0033:0x7f357d84e969 [ 180.700546][T13453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.700565][T13453] RSP: 002b:00007f357beb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 180.700587][T13453] RAX: ffffffffffffffda RBX: 00007f357da75fa0 RCX: 00007f357d84e969 [ 180.700602][T13453] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 180.700649][T13453] RBP: 00007f357beb7090 R08: 0000200000000240 R09: 0000000000000000 [ 180.700664][T13453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.700677][T13453] R13: 0000000000000000 R14: 00007f357da75fa0 R15: 00007ffdcf6b5dc8 [ 180.700703][T13453] [ 180.745310][T13451] loop2: detected capacity change from 0 to 164 [ 180.762259][T13457] tmpfs: Bad value for 'mpol' [ 180.771121][T13451] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 180.868045][T13466] netlink: 'syz.0.3753': attribute type 4 has an invalid length. [ 180.946991][T13469] loop5: detected capacity change from 0 to 1024 [ 180.971007][T13469] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.987511][T13469] EXT4-fs: Ignoring removed nobh option [ 180.993172][T13469] EXT4-fs: Ignoring removed bh option [ 181.014553][T13474] loop4: detected capacity change from 0 to 128 [ 181.021598][T13474] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.024858][T13477] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3757'. [ 181.034240][T13474] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.085287][T13481] loop2: detected capacity change from 0 to 1024 [ 181.101448][T13481] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.122659][T13481] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 181.139106][T13481] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 181.151551][T13481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.151551][T13481] [ 181.161416][T13481] EXT4-fs (loop2): Total free blocks count 0 [ 181.167526][T13481] EXT4-fs (loop2): Free/Dirty block details [ 181.173534][T13481] EXT4-fs (loop2): free_blocks=4293918720 [ 181.179370][T13481] EXT4-fs (loop2): dirty_blocks=16 [ 181.184552][T13481] EXT4-fs (loop2): Block reservation details [ 181.190592][T13481] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 181.207612][T13481] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 12 with error 28 [ 181.220153][T13481] EXT4-fs (loop2): This should not happen!! Data will be lost [ 181.220153][T13481] [ 181.224663][T13496] FAULT_INJECTION: forcing a failure. [ 181.224663][T13496] name failslab, interval 1, probability 0, space 0, times 0 [ 181.242692][T13496] CPU: 1 UID: 0 PID: 13496 Comm: syz.4.3766 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 181.242729][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.242751][T13496] Call Trace: [ 181.242759][T13496] [ 181.242770][T13496] __dump_stack+0x1d/0x30 [ 181.242844][T13496] dump_stack_lvl+0xe8/0x140 [ 181.242868][T13496] dump_stack+0x15/0x1b [ 181.242888][T13496] should_fail_ex+0x265/0x280 [ 181.242954][T13496] should_failslab+0x8c/0xb0 [ 181.243028][T13496] kmem_cache_alloc_noprof+0x50/0x310 [ 181.243106][T13496] ? locks_get_lock_context+0x89/0x210 [ 181.243132][T13496] locks_get_lock_context+0x89/0x210 [ 181.243214][T13496] posix_lock_inode+0x67/0x2380 [ 181.243234][T13496] ? file_has_perm+0x324/0x370 [ 181.243266][T13496] fcntl_setlk+0x61f/0x950 [ 181.243292][T13496] do_fcntl+0x5dd/0xdf0 [ 181.243333][T13496] ? selinux_file_fcntl+0x1cb/0x1e0 [ 181.243363][T13496] __se_sys_fcntl+0xb1/0x120 [ 181.243434][T13496] __x64_sys_fcntl+0x43/0x50 [ 181.243452][T13496] x64_sys_call+0x1f1d/0x2fb0 [ 181.243472][T13496] do_syscall_64+0xd0/0x1a0 [ 181.243515][T13496] ? clear_bhb_loop+0x40/0x90 [ 181.243536][T13496] ? clear_bhb_loop+0x40/0x90 [ 181.243557][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.243577][T13496] RIP: 0033:0x7f9ac1a2e969 [ 181.243593][T13496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.243610][T13496] RSP: 002b:00007f9ac0097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 181.243646][T13496] RAX: ffffffffffffffda RBX: 00007f9ac1c55fa0 RCX: 00007f9ac1a2e969 [ 181.243659][T13496] RDX: 00002000000006c0 RSI: 0000000000000007 RDI: 0000000000000003 [ 181.243670][T13496] RBP: 00007f9ac0097090 R08: 0000000000000000 R09: 0000000000000000 [ 181.243682][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.243694][T13496] R13: 0000000000000000 R14: 00007f9ac1c55fa0 R15: 00007ffd09c8b8f8 [ 181.243802][T13496] [ 181.474181][T13501] netlink: 'syz.5.3767': attribute type 4 has an invalid length. [ 181.525110][T13509] loop4: detected capacity change from 0 to 1024 [ 181.532397][T13509] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.539761][T13509] EXT4-fs: Ignoring removed nobh option [ 181.542887][T13513] loop2: detected capacity change from 0 to 128 [ 181.545476][T13509] EXT4-fs: Ignoring removed bh option [ 181.553501][T13513] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.570270][T13513] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.587281][T13509] syz_tun: entered allmulticast mode [ 181.603048][T13509] syz_tun: left allmulticast mode [ 181.661983][T13520] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3774'. [ 181.690041][T13520] loop4: detected capacity change from 0 to 1024 [ 181.697909][T13520] EXT4-fs: Ignoring removed mblk_io_submit option [ 181.704685][T13520] EXT4-fs: Ignoring removed nobh option [ 181.707507][T13525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.710274][T13520] EXT4-fs: Ignoring removed bh option [ 181.750015][T13529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.752500][T13520] syz_tun: entered allmulticast mode [ 181.773696][T13520] syz_tun: left allmulticast mode [ 181.814878][T13534] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.818645][T13536] netlink: 'syz.0.3782': attribute type 1 has an invalid length. [ 181.822093][T13534] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.842238][T13537] FAULT_INJECTION: forcing a failure. [ 181.842238][T13537] name failslab, interval 1, probability 0, space 0, times 0 [ 181.855129][T13537] CPU: 1 UID: 0 PID: 13537 Comm: syz.2.3780 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 181.855205][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.855218][T13537] Call Trace: [ 181.855224][T13537] [ 181.855233][T13537] __dump_stack+0x1d/0x30 [ 181.855291][T13537] dump_stack_lvl+0xe8/0x140 [ 181.855311][T13537] dump_stack+0x15/0x1b [ 181.855328][T13537] should_fail_ex+0x265/0x280 [ 181.855361][T13537] should_failslab+0x8c/0xb0 [ 181.855506][T13537] __kmalloc_noprof+0xa5/0x3e0 [ 181.855529][T13537] ? ___neigh_create+0x4c9/0x1290 [ 181.855577][T13537] ___neigh_create+0x4c9/0x1290 [ 181.855599][T13537] ? ipt_do_table+0x9fb/0xab0 [ 181.855626][T13537] ? netlbl_enabled+0x25/0x40 [ 181.855730][T13537] ? selinux_ip_postroute+0x1b7/0xb50 [ 181.855767][T13537] __neigh_create+0x54/0x70 [ 181.855790][T13537] ip_neigh_gw4+0x12e/0x170 [ 181.855884][T13537] ip_finish_output2+0x857/0x8b0 [ 181.855948][T13537] ? __rcu_read_unlock+0x4f/0x70 [ 181.855972][T13537] ip_finish_output+0x112/0x290 [ 181.856028][T13537] ip_output+0xad/0x170 [ 181.856052][T13537] ? __pfx_ip_finish_output+0x10/0x10 [ 181.856076][T13537] ? __pfx_ip_output+0x10/0x10 [ 181.856101][T13537] ip_push_pending_frames+0x15b/0x180 [ 181.856164][T13537] raw_sendmsg+0xcb8/0xe40 [ 181.856208][T13537] ? __pfx_raw_sendmsg+0x10/0x10 [ 181.856241][T13537] inet_sendmsg+0xc2/0xd0 [ 181.856331][T13537] __sock_sendmsg+0x102/0x180 [ 181.856361][T13537] ____sys_sendmsg+0x345/0x4e0 [ 181.856386][T13537] ___sys_sendmsg+0x17b/0x1d0 [ 181.856510][T13537] __sys_sendmmsg+0x178/0x300 [ 181.856546][T13537] __x64_sys_sendmmsg+0x57/0x70 [ 181.856571][T13537] x64_sys_call+0x2f2f/0x2fb0 [ 181.856594][T13537] do_syscall_64+0xd0/0x1a0 [ 181.856621][T13537] ? clear_bhb_loop+0x40/0x90 [ 181.856663][T13537] ? clear_bhb_loop+0x40/0x90 [ 181.856688][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.856713][T13537] RIP: 0033:0x7f20a722e969 [ 181.856729][T13537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.856791][T13537] RSP: 002b:00007f20a5876038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.856814][T13537] RAX: ffffffffffffffda RBX: 00007f20a7456080 RCX: 00007f20a722e969 [ 181.856906][T13537] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 181.856919][T13537] RBP: 00007f20a5876090 R08: 0000000000000000 R09: 0000000000000000 [ 181.856932][T13537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.856964][T13537] R13: 0000000000000001 R14: 00007f20a7456080 R15: 00007ffeaeb1cb18 [ 181.856985][T13537] [ 182.167012][T13534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.177487][T13534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.190383][T13537] ================================================================== [ 182.198499][T13537] BUG: KCSAN: data-race in fib_sync_down_dev / fib_table_lookup [ 182.206145][T13537] [ 182.208457][T13537] write to 0xffff888115a36b40 of 4 bytes by task 13534 on cpu 0: [ 182.216155][T13537] fib_sync_down_dev+0x4d2/0x560 [ 182.221085][T13537] fib_netdev_event+0x219/0x430 [ 182.225938][T13537] raw_notifier_call_chain+0x6f/0x1b0 [ 182.231300][T13537] call_netdevice_notifiers_info+0xae/0x100 [ 182.237192][T13537] __dev_notify_flags+0xff/0x1a0 [ 182.242117][T13537] netif_change_flags+0xac/0xd0 [ 182.246957][T13537] do_setlink+0x90e/0x27f0 [ 182.251371][T13537] rtnl_newlink+0xd8b/0x12d0 [ 182.255948][T13537] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 182.260897][T13537] netlink_rcv_skb+0x123/0x220 [ 182.265652][T13537] rtnetlink_rcv+0x1c/0x30 [ 182.270053][T13537] netlink_unicast+0x5a1/0x670 [ 182.274843][T13537] netlink_sendmsg+0x58b/0x6b0 [ 182.279597][T13537] __sock_sendmsg+0x145/0x180 [ 182.284262][T13537] ____sys_sendmsg+0x31e/0x4e0 [ 182.289010][T13537] ___sys_sendmsg+0x17b/0x1d0 [ 182.293687][T13537] __x64_sys_sendmsg+0xd4/0x160 [ 182.298537][T13537] x64_sys_call+0x2999/0x2fb0 [ 182.303199][T13537] do_syscall_64+0xd0/0x1a0 [ 182.307694][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.313570][T13537] [ 182.315876][T13537] read to 0xffff888115a36b40 of 4 bytes by task 13537 on cpu 1: [ 182.323498][T13537] fib_table_lookup+0x3b8/0xd70 [ 182.328332][T13537] ip_route_output_key_hash_rcu+0x37f/0x13d0 [ 182.334317][T13537] ip_route_output_flow+0x7b/0x130 [ 182.339441][T13537] raw_sendmsg+0x9e9/0xe40 [ 182.343883][T13537] inet_sendmsg+0xc2/0xd0 [ 182.348262][T13537] __sock_sendmsg+0x102/0x180 [ 182.352955][T13537] ____sys_sendmsg+0x345/0x4e0 [ 182.357742][T13537] ___sys_sendmsg+0x17b/0x1d0 [ 182.362429][T13537] __sys_sendmmsg+0x178/0x300 [ 182.367120][T13537] __x64_sys_sendmmsg+0x57/0x70 [ 182.371984][T13537] x64_sys_call+0x2f2f/0x2fb0 [ 182.376680][T13537] do_syscall_64+0xd0/0x1a0 [ 182.381287][T13537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.387188][T13537] [ 182.389513][T13537] value changed: 0x00000000 -> 0x00000011 [ 182.395235][T13537] [ 182.397569][T13537] Reported by Kernel Concurrency Sanitizer on: [ 182.403724][T13537] CPU: 1 UID: 0 PID: 13537 Comm: syz.2.3780 Not tainted 6.15.0-rc7-syzkaller-00002-gb36ddb9210e6 #0 PREEMPT(voluntary) [ 182.416232][T13537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.426295][T13537] ================================================================== [ 182.450546][T13534] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.459589][T13534] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.468660][T13534] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.477541][T13534] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.495644][T13536] bond12: entered promiscuous mode [ 182.501407][T13536] 8021q: adding VLAN 0 to HW filter on device bond12 [ 182.505596][T13544] netlink: 'syz.4.3781': attribute type 4 has an invalid length.