last executing test programs: 6m29.866569069s ago: executing program 3 (id=7481): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r2], 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 6m29.429941768s ago: executing program 3 (id=7482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 6m29.228014957s ago: executing program 3 (id=7483): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 6m29.167869338s ago: executing program 3 (id=7484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close(r2) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0xe, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1000000}}}, 0x108) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ipv6_route\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$char_usb(r8, &(0x7f00000006c0)=""/204, 0xcc) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1065841, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r7, &(0x7f00000000c0)='./file0/file0\x00', 0x0) r9 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) r10 = socket$key(0xf, 0x3, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x401, 0x2, 0x6, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x6, 0x9, @void, @value, @void, @value}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0234000002c000"/16], 0x10}}, 0x0) 6m28.568525966s ago: executing program 3 (id=7492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10100) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 6m28.200610484s ago: executing program 3 (id=7498): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 6m28.106718424s ago: executing program 32 (id=7498): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 3.93697814s ago: executing program 1 (id=13325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, 0x0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x894}}, 0x0) 3.050234827s ago: executing program 1 (id=13341): r0 = socket(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x14, r2, 0x805}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="feffffff030f000000ff4f000080ca167a3585ee2508355004514d505fcc053cfd89b210b789d68fb240864cdb720fea8fc2b0fa48297701b1df6e62e0f69d19b5208c05af5b74a708e2b9491109ed4b465f995bf95efa3eaba91dc7497060d1f36e2a81d7bb314aefcab86a8e0663b218c5dac7917e6be6121abeac7da36584ba14771218d750974f0af9eb4cb9b60328e475974cfe14985bc98ab195ede3b00ff74decfa0a903b923370898d5734d5859c35cd057086e550acdc4cb37b87e846ee819dbb21f30e558a1a03171c16c196bafefc2776081a0e55d1f9d5a08c7ffcdc4656189845501625fff7ab25d9c5760b260ce62422a0caa857a3c1a54d9b018a5b1b801ea53e85dc3b1a52b41f04576ea1abfba3c5f407cf131a798c0a86f56bab1b05aea8040c8f00fee670c6713c8c01b01b22c978db550a5ef8df4aa5431db8d4bd"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001680)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @loopback, 0x3}, 0x1c, &(0x7f0000000140)}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="24b3", 0x2}], 0x1}}], 0x2, 0x48) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x6515fb69, 0x4e8, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4882}, 0x4000) io_setup(0xbf, &(0x7f0000000280)) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xfffffffd}, &(0x7f0000000380)=0x8) 2.708986407s ago: executing program 1 (id=13350): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535", 0xa9}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) 2.583893856s ago: executing program 1 (id=13351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, 0x0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x894}}, 0x0) 1.890159434s ago: executing program 5 (id=13366): r0 = socket(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="feffffff030f000000ff4f000080ca167a3585ee2508355004514d505fcc053cfd89b210b789d68fb240864cdb720fea8fc2b0fa48297701b1df6e62e0f69d19b5208c05af5b74a708e2b9491109ed4b465f995bf95efa3eaba91dc7497060d1f36e2a81d7bb314aefcab86a8e0663b218c5dac7917e6be6121abeac7da36584ba14771218d750974f0af9eb4cb9b60328e475974cfe14985bc98ab195ede3b00f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x6515fb69, 0x4e8, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4882}, 0x4000) io_setup(0xbf, &(0x7f0000000280)=0x0) r7 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, &(0x7f0000000080)='\x00\x00', 0x2}]) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(r8, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) getsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xfffffffd}, &(0x7f0000000380)=0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d00)={'syztnl1\x00', &(0x7f0000000c80)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xf, 0x1, 0x22, @rand_addr=' \x01\x00', @loopback, 0x8000, 0x8000, 0x3, 0x6}}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000d40), 0x100, 0x0) 1.776120184s ago: executing program 0 (id=13369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000480)=""/137, 0x89) 1.760662674s ago: executing program 2 (id=13370): r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4087, 0xff7}], 0x1, 0x4000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x11512, 0x5dd8, 0x3, 0x5, 0x4, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.748509374s ago: executing program 0 (id=13371): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f000010e000/0x3000)=nil, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1.718308114s ago: executing program 0 (id=13372): pipe2$9p(&(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x6, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 1.679850804s ago: executing program 2 (id=13373): pipe2$9p(&(0x7f0000000140), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x6, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400008f2000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 1.679042634s ago: executing program 1 (id=13374): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) 636.504161ms ago: executing program 5 (id=13376): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000480)=""/137, 0x89) 501.119221ms ago: executing program 1 (id=13377): socket$kcm(0x10, 0x2, 0x0) request_key(&(0x7f0000000540)='dns_resolver\x00', 0x0, 0x0, 0xfffffffffffffffe) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0xf5ffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x88420, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9302ce0ecd0c3027, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000fc0)=ANY=[@ANYRESHEX], 0x27) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0xd0, 0x388, 0xd0, 0x2b8, 0x2b8, 0x4a8, 0x4a8, 0x4f8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000, 0x0, 0xe}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@empty, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = getegid() fsetxattr$system_posix_acl(r4, &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="10000700000000002000030000000000"], 0x74, 0x2) 499.91179ms ago: executing program 5 (id=13378): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x9, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xdf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x25, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 486.296021ms ago: executing program 0 (id=13379): r0 = socket(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x14, r2, 0x805}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001680)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @loopback, 0x3}, 0x1c, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000340)="24b3", 0x2}], 0x1}}], 0x2, 0x48) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4882}, 0x4000) io_setup(0xbf, &(0x7f0000000280)) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvnWSyyW62SdUHLbRWW8kW3ZmksW3woVYQfSqI9X2NySSETDIhM2k3oWj2LxBEVPBJX3wR/AMEWfDFRxEK+qxQUUS3CvqgvTIzd5I4uZPM1tlMdvL5wN17zrk/vufM5ty5Pw53Ariyno2I1yLi/TRNX4iImay8kE1x2J6a67334O2V5pREmr7x1ySSrKyzrySb38g2m4yIr3454hvJ6bj1/YPN5Wq1spvly42tnXJ9/+D2xtbyemW9sr24uPDy0itLLy3ND6SdNyPi1S/+8Xvf/smXXv3FZ976w50/3/pms1rT2fKT7XhI42ctbDe9eG2ya4PdDxjsMmq2p9jJTPW3zb1HWB8AAHprnuN/KCI+GREvxEyMnX06CwAAADyG0s9Px7+TiDTfRI9yAAAA4DFSaI2BTQqlbCzAdBQKpVJ7DO9H4nqhWqs3Pr1W29tebY+VnY1iYW2jWpnPxgrPRjFp5hda6eP8i135xYh4MiK+OzPVypdWatXVYd/8AAAAgCviRtf1/z9m2tf/AAAAwIiZHXYFAAAAgEfO9T8AAACMPtf/AAAAMNK+8vrrzSnt/P716pv7e5u1N2+vVuqbpa29ldJKbXentF6rrbfe2bd13v6qtdrOZ2N77265Uak3yvX9gztbtb3txp2NmLyQBgEAAACnPPnx+79LIuLwc1OtqWli2JUCLsT4USrJ5jm9//dPtOfvXlClgAsx1sc6717LL3eeAI+38e6CHn0dGD3FYVcAGLrknOU9B+/8Opt/YrD1AQAABm/uY/nP/wvnbnl4/irApaYTw9XV9fw/nRlWRYAL13r+3+9AHicLMFKKfY0ABEbZ//38/1xp+lAVAgAABm66NSWFUnZ7bzoKhVIp4mbrZwGKydpGtTIfEU9ExG9nitea+YXWlsm51wwAAAAAAAAAAAAAAAAAAAAAAAAAQFuaJpECAAAAIy2i8Kfkl+13+c/NPD/dfX9gIvlX6yeBJyLirR++8f27y43G7kKz/G9H5Y0fZOUvDuMOBgAAANCtc53emv9z2LUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNS89+Dtlc7Ux+pTg4r7ly9ExGxe/PGYbM0noxgR1/+exPiJ7ZKIGBtA/MN7EfHRvPhJs1pHIfPiD+JDOCd+zGafQl78GwOID1fZ/ebx57W8/leIZ1vz/P43HvE/+Q+q9/Evjo5/Yz36/80+Yzz1zs/KPePfi3hqPP/404mf9Ij/XJ/xv/61g4Ney9IfRcx1vn9aR7yTEY5T5cbWTrm+f3B7Y2t5vbJe2V5cXHh56ZWll5bmy2sb1Ur2b26M7zz98/fPav/13O+/JKtN7/Y/n7O/vO+k/7xz98GHO5nD0/FvPZcT/1c/ztY4Hb+QxflUlm4un+ukD9vpk5756W+eOav9q8ftLz7M//+tXjvtdqqjPN3vnw4A8AjU9w82l6vVyu7IJppX6ZegGhKXMPGtge4wTdO02adyFt2PiH72k8SAW1rIr89xoucRYNhHJgAAYNCOT/qHXRMAAAAAAAAAAAAAAAAAAAC4ui7iLWvdMY9fgZwM4hXaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8d8AAAD//42Q0/o=") perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xfffffffd}, &(0x7f0000000380)=0x8) 415.97994ms ago: executing program 4 (id=13380): r0 = socket(0x15, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x14, r2, 0x805}, 0x14}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="feffffff030f000000ff4f000080ca167a3585ee2508355004514d505fcc053cfd89b210b789d68fb240864cdb720fea8fc2b0fa48297701b1df6e62e0f69d19b5208c05af5b74a708e2b9491109ed4b465f995bf95efa3eaba91dc7497060d1f36e2a81d7bb314aefcab86a8e0663b218c5dac7917e6be6121abeac7da36584ba14771218"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x1) setsockopt(r4, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x6515fb69, 0x4e8, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) io_setup(0xbf, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, &(0x7f0000000080)='\x00\x00', 0x2}]) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(r7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 401.91779ms ago: executing program 2 (id=13381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000000400030005", @ANYRES8], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400002e590000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = dup(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_emit_ethernet(0x66, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x30, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d5"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 381.61577ms ago: executing program 2 (id=13382): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000181100000800000000000000bff26ab776c41eb04b319425f6f8de8e7f4954ded5acd1adf1a5130c34cbe445dc1a2e2229dc34ece6a72eb5e2d4adde144ddf599efc6acdabdb60b08d163cd7df148cb62a027faab168e447baf06dc262847ada483a4768decd06b41750bac7bc39f98d850f56291ecd46b09cdaf9c0e1dad394671c4fc7d8ead3cbcaa8268f7d862e6166a9d7e08607a091", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}]}}}]}, 0x68}}, 0x0) 364.34842ms ago: executing program 2 (id=13383): r0 = syz_open_procfs(0x0, &(0x7f00000020c0)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)=""/4087, 0xff7}], 0x1, 0x4000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x11512, 0x5dd8, 0x3, 0x5, 0x4, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 317.67951ms ago: executing program 4 (id=13384): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x800, @private, @local, {[@cipso={0x86, 0x6}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @empty, @empty]}]}}, "a815a23d"}}}}}, 0x0) 301.39534ms ago: executing program 5 (id=13385): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xb4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, &(0x7f00000003c0)=0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000440), 0xb0000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x4995, 0x2}}}}]}, 0x4c}}, 0x0) 300.37547ms ago: executing program 4 (id=13386): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535", 0xa9}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) 292.40068ms ago: executing program 5 (id=13387): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200), 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) 274.90462ms ago: executing program 0 (id=13388): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x2, &(0x7f0000000480)=""/137, 0x89) 243.10607ms ago: executing program 4 (id=13389): r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xdf}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x50040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x7fffffff, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x4000000000000004, 0xffffffffffffffff, 0x2) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x25, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 156.75993ms ago: executing program 2 (id=13390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) unshare(0x64000600) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x4a, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x8000, 0x0) mmap$xdp(&(0x7f0000aea000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 68.163059ms ago: executing program 0 (id=13391): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x2c00, 0x3, 0xbfff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x80003, 0xff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x4, 0xcb, &(0x7f0000000340)=""/203, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd56}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 67.771789ms ago: executing program 4 (id=13392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000007f0000000c00000008100000", @ANYRES32, @ANYBLOB="000000000000e30d5793874436dfc7fe9cf70f84051b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) ioperm(0x0, 0x2, 0x2) unshare(0x20040600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) utimensat(r1, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) unshare(0x28000600) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) 47.602079ms ago: executing program 5 (id=13393): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000181100000800000000000000bff26ab776c41eb04b319425f6f8de8e7f4954ded5acd1adf1a5130c34cbe445dc1a2e2229dc34ece6a72eb5e2d4adde144ddf599efc6acdabdb60b08d163cd7df148cb62a027faab168e447baf06dc262847ada483a4768decd06b41750bac7bc39f98d850f56291ecd46b09cdaf9c0e1dad394671c4fc7d8ead3cbcaa8268f7d862e6166a9d7e08607a091", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0xa}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}]}}}]}, 0x68}}, 0x0) 0s ago: executing program 4 (id=13394): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='timer_start\x00', r3}, 0x18) socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(1737136132.489:26178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f0231c65d29 code=0x7ffc0000 [ 764.739274][ T29] audit: type=1326 audit(1737136132.489:26179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0231c65d29 code=0x7ffc0000 [ 764.749246][ T5432] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12754: Failed to acquire dquot type 1 [ 764.762952][ T29] audit: type=1326 audit(1737136132.489:26180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.4.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0231c65d29 code=0x7ffc0000 [ 764.802141][ T5432] EXT4-fs (loop1): 1 truncate cleaned up [ 764.820590][ T5432] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.882673][ T5442] loop4: detected capacity change from 0 to 512 [ 764.900296][ T5446] tmpfs: Unknown parameter '' [ 764.909925][ T5442] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12758: bg 0: block 248: padding at end of block bitmap is not set [ 764.927800][ T5442] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12758: Failed to acquire dquot type 1 [ 764.939977][ T5442] EXT4-fs (loop4): 1 truncate cleaned up [ 764.957393][ T5442] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.031783][ T5453] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12761'. [ 765.080187][ T5456] Process accounting resumed [ 765.102681][ T5460] loop5: detected capacity change from 0 to 512 [ 765.116962][ T5460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 765.132126][ T5460] EXT4-fs (loop5): 1 truncate cleaned up [ 765.159870][ T5460] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 765.177851][ T5469] netlink: 'syz.1.12767': attribute type 21 has an invalid length. [ 765.195901][ T5469] netlink: 'syz.1.12767': attribute type 1 has an invalid length. [ 765.203903][ T5469] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12767'. [ 765.251644][ T5476] loop4: detected capacity change from 0 to 512 [ 765.279277][ T5476] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 765.341809][ T5487] Process accounting resumed [ 765.359122][ T5490] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12776'. [ 765.370473][ T5493] syz.5.12777[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.370660][ T5493] syz.5.12777[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.382503][ T5493] syz.5.12777[5493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.434077][ T5497] loop5: detected capacity change from 0 to 512 [ 765.457608][ T5497] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12779: bg 0: block 248: padding at end of block bitmap is not set [ 765.472420][ T5497] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.12779: Failed to acquire dquot type 1 [ 765.493376][ T5497] EXT4-fs (loop5): 1 truncate cleaned up [ 765.501255][ T5497] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.707257][ T5519] Process accounting resumed [ 765.772200][ T5525] syz.4.12790[5525] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.882993][ T5538] 9pnet_fd: Insufficient options for proto=fd [ 765.934297][ T5544] Process accounting resumed [ 765.950141][ T5543] loop1: detected capacity change from 0 to 512 [ 765.968912][ T5543] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12798: bg 0: block 248: padding at end of block bitmap is not set [ 765.984919][ T5543] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12798: Failed to acquire dquot type 1 [ 765.987501][ T5552] tmpfs: Unknown parameter '' [ 766.000263][ T5548] loop4: detected capacity change from 0 to 512 [ 766.009769][ T5543] EXT4-fs (loop1): 1 truncate cleaned up [ 766.016159][ T5543] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.016822][ T5548] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12801: bg 0: block 248: padding at end of block bitmap is not set [ 766.042306][ T5548] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12801: Failed to acquire dquot type 1 [ 766.055653][ T5548] EXT4-fs (loop4): 1 truncate cleaned up [ 766.062388][ T5548] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.690374][ T5580] Process accounting resumed [ 766.722671][ T5584] loop5: detected capacity change from 0 to 512 [ 766.737074][ T5584] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 766.852078][ T5590] loop0: detected capacity change from 0 to 512 [ 766.866782][ T5590] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12815: bg 0: block 248: padding at end of block bitmap is not set [ 766.881835][ T5590] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.12815: Failed to acquire dquot type 1 [ 766.894375][ T5590] EXT4-fs (loop0): 1 truncate cleaned up [ 766.903032][ T5590] ext4 filesystem being mounted at /280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.468564][ T5602] loop4: detected capacity change from 0 to 1024 [ 767.475667][ T5602] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 767.495024][ T5602] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 767.508938][ T5608] Process accounting resumed [ 767.523404][ T5602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 767.533659][ T5602] System zones: 0-1, 3-12 [ 767.538617][ T5602] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.12819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 767.559657][ T5602] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.12819: couldn't read orphan inode 11 (err -117) [ 767.572450][ T5612] Process accounting resumed [ 767.578003][ T5616] loop0: detected capacity change from 0 to 512 [ 767.599497][ T5616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 767.641283][ T5616] EXT4-fs (loop0): 1 truncate cleaned up [ 767.677879][ T5602] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.12819: Invalid block bitmap block 0 in block_group 0 [ 767.714102][ T5602] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12819: Failed to acquire dquot type 0 [ 767.828431][ T5632] loop5: detected capacity change from 0 to 2048 [ 767.835647][ T5632] EXT4-fs: Ignoring removed bh option [ 767.846136][ T5640] loop4: detected capacity change from 0 to 512 [ 767.851785][ T5632] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 767.870977][ T5632] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 767.883548][ T5632] EXT4-fs (loop5): This should not happen!! Data will be lost [ 767.883548][ T5632] [ 767.893323][ T5632] EXT4-fs (loop5): Total free blocks count 0 [ 767.899442][ T5632] EXT4-fs (loop5): Free/Dirty block details [ 767.905395][ T5632] EXT4-fs (loop5): free_blocks=2415919104 [ 767.911146][ T5632] EXT4-fs (loop5): dirty_blocks=32 [ 767.916328][ T5632] EXT4-fs (loop5): Block reservation details [ 767.920987][ T5640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12833: bg 0: block 248: padding at end of block bitmap is not set [ 767.922304][ T5632] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 767.943151][ T5640] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12833: Failed to acquire dquot type 1 [ 767.955254][ T5640] EXT4-fs (loop4): 1 truncate cleaned up [ 767.961293][ T5640] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.996673][T26714] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 768.009474][T26714] EXT4-fs (loop5): This should not happen!! Data will be lost [ 768.009474][T26714] [ 768.126412][ T5663] 9pnet_fd: Insufficient options for proto=fd [ 768.322367][ T5669] bpf_get_probe_write_proto: 5 callbacks suppressed [ 768.322390][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.329236][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.340789][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.355417][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.366946][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.378495][ T5669] syz.4.12841[5669] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.521307][ T5674] loop5: detected capacity change from 0 to 512 [ 768.811685][ T5686] loop0: detected capacity change from 0 to 512 [ 768.858294][ T5686] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.903110][ T5692] loop5: detected capacity change from 0 to 512 [ 768.911496][ T5690] loop1: detected capacity change from 0 to 512 [ 768.930907][ T5690] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 768.943687][ T5690] System zones: 0-2, 18-18, 34-34 [ 768.952805][ T5690] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12848: bg 0: block 248: padding at end of block bitmap is not set [ 768.977671][ T5690] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12848: Failed to acquire dquot type 1 [ 769.011060][ T5690] EXT4-fs (loop1): 1 truncate cleaned up [ 769.017463][ T5690] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 769.032673][ T5699] loop0: detected capacity change from 0 to 512 [ 769.047405][ T5699] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 769.123204][ T5705] loop4: detected capacity change from 0 to 512 [ 769.169315][ T5705] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 769.263529][ T5705] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 769.305241][ T5705] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.12854: bad orphan inode 13 [ 769.333474][ T5728] loop0: detected capacity change from 0 to 1024 [ 769.340074][ T5705] EXT4-fs (loop4): Remounting filesystem read-only [ 769.346649][ T5705] ext4_test_bit(bit=12, block=4) = 1 [ 769.352036][ T5705] is_bad_inode(inode)=0 [ 769.356275][ T5705] NEXT_ORPHAN(inode)=17694720 [ 769.361047][ T5705] max_ino=32 [ 769.364336][ T5705] i_nlink=0 [ 769.367910][ T5728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 769.374239][ T5730] loop5: detected capacity change from 0 to 512 [ 769.384574][ T5705] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 769.391583][ T5728] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 769.405047][ T5728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 769.412521][ T5705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 769.413893][ T5728] System zones: 0-1, 3-12 [ 769.429768][ T5730] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 769.455850][ T5728] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.12859: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 769.497716][ T5728] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.12859: couldn't read orphan inode 11 (err -117) [ 769.526792][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 769.526809][ T29] audit: type=1326 audit(1737136137.359:26520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.556633][ T29] audit: type=1326 audit(1737136137.359:26521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.585205][ T29] audit: type=1326 audit(1737136137.429:26522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.585258][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.623239][ T29] audit: type=1326 audit(1737136137.459:26523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.646996][ T29] audit: type=1326 audit(1737136137.459:26524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.697480][ T5728] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.12859: Invalid block bitmap block 0 in block_group 0 [ 769.720498][ T5728] Quota error (device loop0): write_blk: dquota write failed [ 769.728070][ T5728] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 769.758046][ T5728] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.12859: Failed to acquire dquot type 0 [ 769.769370][ T29] audit: type=1326 audit(1737136137.519:26525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.769428][ T29] audit: type=1326 audit(1737136137.519:26526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.816653][ T29] audit: type=1326 audit(1737136137.519:26527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5729 comm="syz.5.12862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 769.890988][ T5745] loop4: detected capacity change from 0 to 512 [ 769.908679][ T5749] loop1: detected capacity change from 0 to 512 [ 769.918605][ T5745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12865: bg 0: block 248: padding at end of block bitmap is not set [ 769.958925][ T5749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12868: bg 0: block 248: padding at end of block bitmap is not set [ 769.983105][ T5745] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12865: Failed to acquire dquot type 1 [ 770.019087][ T5749] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12868: Failed to acquire dquot type 1 [ 770.043487][ T5749] EXT4-fs (loop1): 1 truncate cleaned up [ 770.044071][ T5745] EXT4-fs (loop4): 1 truncate cleaned up [ 770.055522][ T5749] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.084818][ T5745] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.278696][ T5774] loop0: detected capacity change from 0 to 512 [ 770.288004][ T5774] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 770.299435][ T5774] EXT4-fs (loop0): 1 truncate cleaned up [ 770.369082][ T5774] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 770.523109][ T5783] loop0: detected capacity change from 0 to 512 [ 770.554852][ T5787] syz.2.12880[5787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.554989][ T5787] syz.2.12880[5787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.575771][ T5783] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 770.610325][ T5787] syz.2.12880[5787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 770.627564][ T5783] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.12878: bad orphan inode 15 [ 770.674432][ T5783] ext4_test_bit(bit=14, block=4) = 1 [ 770.677714][ T5791] netlink: 100 bytes leftover after parsing attributes in process `syz.2.12881'. [ 770.679817][ T5783] is_bad_inode(inode)=0 [ 770.693135][ T5783] NEXT_ORPHAN(inode)=0 [ 770.697263][ T5783] max_ino=32 [ 770.700471][ T5783] i_nlink=1 [ 770.762534][ T5797] netlink: 'syz.0.12884': attribute type 21 has an invalid length. [ 770.770882][ T5797] netlink: 'syz.0.12884': attribute type 1 has an invalid length. [ 770.778799][ T5797] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12884'. [ 770.976269][ T5803] 9pnet_fd: Insufficient options for proto=fd [ 771.025330][ T5808] loop1: detected capacity change from 0 to 512 [ 771.054169][ T5813] loop5: detected capacity change from 0 to 512 [ 771.217281][ T5808] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 771.228161][ T5813] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12890: bg 0: block 248: padding at end of block bitmap is not set [ 771.251810][ T5808] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 771.262911][ T5808] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.12888: bad orphan inode 13 [ 771.274194][ T5813] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.12890: Failed to acquire dquot type 1 [ 771.316427][ T5808] EXT4-fs (loop1): Remounting filesystem read-only [ 771.323050][ T5808] ext4_test_bit(bit=12, block=4) = 1 [ 771.328432][ T5808] is_bad_inode(inode)=0 [ 771.332630][ T5808] NEXT_ORPHAN(inode)=17694720 [ 771.337361][ T5808] max_ino=32 [ 771.340622][ T5808] i_nlink=0 [ 771.357679][ T5813] EXT4-fs (loop5): 1 truncate cleaned up [ 771.366205][ T5813] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 771.383375][ T5808] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 771.394254][ T5820] tmpfs: Unknown parameter '' [ 771.400849][ T5808] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.460786][ T5826] netlink: 100 bytes leftover after parsing attributes in process `syz.1.12893'. [ 771.493252][ T5829] loop1: detected capacity change from 0 to 512 [ 771.502625][ T5829] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #32: comm syz.1.12894: iget: special inode unallocated [ 771.515955][ T5829] EXT4-fs (loop1): Remounting filesystem read-only [ 771.522522][ T5829] EXT4-fs (loop1): no journal found [ 771.527956][ T5829] EXT4-fs (loop1): can't get journal size [ 771.534077][ T5829] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 771.544683][ T5829] EXT4-fs (loop1): failed to initialize system zone (-117) [ 771.552521][ T5829] EXT4-fs (loop1): mount failed [ 771.583493][ T5834] netlink: 'syz.5.12896': attribute type 21 has an invalid length. [ 771.591705][ T5834] netlink: 'syz.5.12896': attribute type 1 has an invalid length. [ 771.599678][ T5834] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12896'. [ 771.683384][ T5841] loop4: detected capacity change from 0 to 512 [ 771.690312][ T5841] EXT4-fs: Ignoring removed mblk_io_submit option [ 771.757102][ T5841] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 771.791259][ T5841] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 771.799861][ T5841] System zones: 1-12 [ 771.804089][ T5841] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.12899: corrupted in-inode xattr: e_value size too large [ 771.809220][ T5846] loop0: detected capacity change from 0 to 2048 [ 771.819560][ T5841] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.12899: couldn't read orphan inode 15 (err -117) [ 772.184915][ T5846] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 772.220092][ T5846] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 772.232662][ T5846] EXT4-fs (loop0): This should not happen!! Data will be lost [ 772.232662][ T5846] [ 772.242381][ T5846] EXT4-fs (loop0): Total free blocks count 0 [ 772.248409][ T5846] EXT4-fs (loop0): Free/Dirty block details [ 772.254425][ T5846] EXT4-fs (loop0): free_blocks=2415919104 [ 772.260211][ T5846] EXT4-fs (loop0): dirty_blocks=8192 [ 772.265541][ T5846] EXT4-fs (loop0): Block reservation details [ 772.271551][ T5846] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 772.372190][ T5850] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 772.385042][ T5850] EXT4-fs (loop0): This should not happen!! Data will be lost [ 772.385042][ T5850] [ 772.621372][ T5863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.12905'. [ 772.719992][ T5868] netlink: 'syz.5.12908': attribute type 21 has an invalid length. [ 772.731479][ T5868] netlink: 'syz.5.12908': attribute type 1 has an invalid length. [ 772.739348][ T5868] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12908'. [ 772.990067][ T5876] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 773.017892][ T5881] tmpfs: Unknown parameter '' [ 773.067220][ T5886] xt_cluster: node mask cannot exceed total number of nodes [ 773.105976][ T5887] loop5: detected capacity change from 0 to 512 [ 773.118879][ T5887] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12915: bg 0: block 248: padding at end of block bitmap is not set [ 773.133927][ T5887] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.12915: Failed to acquire dquot type 1 [ 773.145520][ T5896] loop0: detected capacity change from 0 to 512 [ 773.146332][ T5887] EXT4-fs (loop5): 1 truncate cleaned up [ 773.158167][ T5887] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.180339][ T5896] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12918: bg 0: block 248: padding at end of block bitmap is not set [ 773.197134][ T5896] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.12918: Failed to acquire dquot type 1 [ 773.214168][ T5896] EXT4-fs (loop0): 1 truncate cleaned up [ 773.220504][ T5896] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.358270][ T5910] netlink: 'syz.5.12921': attribute type 21 has an invalid length. [ 773.366462][ T5910] netlink: 'syz.5.12921': attribute type 1 has an invalid length. [ 773.374291][ T5910] netlink: 144 bytes leftover after parsing attributes in process `syz.5.12921'. [ 773.439893][ T5916] FAULT_INJECTION: forcing a failure. [ 773.439893][ T5916] name failslab, interval 1, probability 0, space 0, times 0 [ 773.452677][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: syz.5.12924 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 773.463552][ T5916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 773.473647][ T5916] Call Trace: [ 773.477002][ T5916] [ 773.479955][ T5916] dump_stack_lvl+0xf2/0x150 [ 773.484640][ T5916] dump_stack+0x15/0x1a [ 773.488842][ T5916] should_fail_ex+0x223/0x230 [ 773.493569][ T5916] should_failslab+0x8f/0xb0 [ 773.498323][ T5916] __kmalloc_noprof+0xab/0x3f0 [ 773.503175][ T5916] ? security_prepare_creds+0x53/0x120 [ 773.508713][ T5916] security_prepare_creds+0x53/0x120 [ 773.514110][ T5916] prepare_creds+0x346/0x480 [ 773.518748][ T5916] copy_creds+0x90/0x3f0 [ 773.523156][ T5916] copy_process+0x64b/0x1f90 [ 773.527791][ T5916] ? 0xffffffff81000000 [ 773.532035][ T5916] ? selinux_file_permission+0x22a/0x360 [ 773.537709][ T5916] ? __rcu_read_unlock+0x4e/0x70 [ 773.542702][ T5916] kernel_clone+0x167/0x5e0 [ 773.547240][ T5916] ? vfs_write+0x596/0x920 [ 773.551769][ T5916] __x64_sys_clone+0xe8/0x120 [ 773.556485][ T5916] x64_sys_call+0x2d7e/0x2dc0 [ 773.561235][ T5916] do_syscall_64+0xc9/0x1c0 [ 773.565764][ T5916] ? clear_bhb_loop+0x55/0xb0 [ 773.570535][ T5916] ? clear_bhb_loop+0x55/0xb0 [ 773.575307][ T5916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.581276][ T5916] RIP: 0033:0x7f35ebd95d29 [ 773.585719][ T5916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.605393][ T5916] RSP: 002b:00007f35ea400fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 773.613901][ T5916] RAX: ffffffffffffffda RBX: 00007f35ebf85fa0 RCX: 00007f35ebd95d29 [ 773.621916][ T5916] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 773.630040][ T5916] RBP: 00007f35ea401090 R08: 0000000000000000 R09: 0000000000000000 [ 773.638047][ T5916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 773.646050][ T5916] R13: 0000000000000000 R14: 00007f35ebf85fa0 R15: 00007fff166506e8 [ 773.654050][ T5916] [ 773.666598][ T5918] loop0: detected capacity change from 0 to 512 [ 773.684888][ T5918] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 773.694998][ T5918] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 773.703290][ T5918] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.12923: bad orphan inode 13 [ 773.716052][ T5918] EXT4-fs (loop0): Remounting filesystem read-only [ 773.722693][ T5918] ext4_test_bit(bit=12, block=4) = 1 [ 773.728038][ T5918] is_bad_inode(inode)=0 [ 773.732216][ T5918] NEXT_ORPHAN(inode)=17694720 [ 773.736993][ T5918] max_ino=32 [ 773.740209][ T5918] i_nlink=0 [ 773.744041][ T5918] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 773.771228][ T5914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.795070][ T5925] xt_cluster: node mask cannot exceed total number of nodes [ 773.873452][ T5927] xt_cluster: node mask cannot exceed total number of nodes [ 773.908735][ T5934] syz.4.12930[5934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 773.908807][ T5934] syz.4.12930[5934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 773.934208][ T5935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5935 comm=syz.0.12931 [ 773.961214][ T5934] syz.4.12930[5934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 773.966926][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12931'. [ 773.983750][ T5938] Process accounting resumed [ 774.026169][ T5946] loop4: detected capacity change from 0 to 512 [ 774.034631][ T5946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 774.056146][ T5946] EXT4-fs (loop4): 1 truncate cleaned up [ 774.084387][ T5946] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.12936: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 774.153688][ T5954] loop1: detected capacity change from 0 to 512 [ 774.159230][ T5958] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 774.168472][ T5962] loop4: detected capacity change from 0 to 512 [ 774.187975][ T5954] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 774.196137][ T5954] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 774.196300][ T5954] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.12939: bad orphan inode 13 [ 774.217628][ T5962] EXT4-fs: Ignoring removed mblk_io_submit option [ 774.224464][ T5954] EXT4-fs (loop1): Remounting filesystem read-only [ 774.231167][ T5954] ext4_test_bit(bit=12, block=4) = 1 [ 774.232447][ T5962] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 774.236498][ T5954] is_bad_inode(inode)=0 [ 774.236512][ T5954] NEXT_ORPHAN(inode)=17694720 [ 774.253663][ T5954] max_ino=32 [ 774.256929][ T5954] i_nlink=0 [ 774.258982][ T5964] xt_cluster: node mask cannot exceed total number of nodes [ 774.287669][ T5962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 774.294447][ T5954] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 774.296162][ T5962] System zones: 1-12 [ 774.307459][ T5962] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.12942: corrupted in-inode xattr: e_value size too large [ 774.329751][ T5954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.331859][ T5962] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.12942: couldn't read orphan inode 15 (err -117) [ 774.356249][ T5962] FAULT_INJECTION: forcing a failure. [ 774.356249][ T5962] name failslab, interval 1, probability 0, space 0, times 0 [ 774.365832][ T5970] loop0: detected capacity change from 0 to 512 [ 774.369031][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.4.12942 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 774.385970][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 774.396054][ T5962] Call Trace: [ 774.399403][ T5962] [ 774.402377][ T5962] dump_stack_lvl+0xf2/0x150 [ 774.407003][ T5962] dump_stack+0x15/0x1a [ 774.411243][ T5962] should_fail_ex+0x223/0x230 [ 774.415980][ T5962] should_failslab+0x8f/0xb0 [ 774.420704][ T5962] kmem_cache_alloc_noprof+0x52/0x320 [ 774.426154][ T5962] ? ext4_mb_new_blocks+0x2fc/0x2020 [ 774.431462][ T5962] ? __mark_inode_dirty+0x1b7/0x7e0 [ 774.436864][ T5962] ext4_mb_new_blocks+0x2fc/0x2020 [ 774.442086][ T5962] ? __rcu_read_unlock+0x4e/0x70 [ 774.447054][ T5962] ext4_ind_map_blocks+0xb3e/0x14a0 [ 774.452363][ T5962] ext4_map_blocks+0x555/0xd20 [ 774.457208][ T5962] ext4_iomap_begin+0x4a9/0x5d0 [ 774.462105][ T5962] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 774.467561][ T5962] iomap_iter+0x3f1/0x830 [ 774.471981][ T5962] __iomap_dio_rw+0x6e9/0x1110 [ 774.476768][ T5962] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 774.482796][ T5962] iomap_dio_rw+0x40/0x90 [ 774.487264][ T5962] ext4_file_write_iter+0xb71/0xf20 [ 774.492499][ T5962] do_iter_readv_writev+0x394/0x450 [ 774.497770][ T5962] vfs_writev+0x2d4/0x880 [ 774.502111][ T5962] ? proc_fail_nth_write+0x12a/0x150 [ 774.507507][ T5962] __se_sys_pwritev2+0x100/0x1c0 [ 774.512468][ T5962] __x64_sys_pwritev2+0x78/0x90 [ 774.517339][ T5962] x64_sys_call+0x2afe/0x2dc0 [ 774.522143][ T5962] do_syscall_64+0xc9/0x1c0 [ 774.526718][ T5962] ? clear_bhb_loop+0x55/0xb0 [ 774.531406][ T5962] ? clear_bhb_loop+0x55/0xb0 [ 774.536097][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.542001][ T5962] RIP: 0033:0x7f0231c65d29 [ 774.546480][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.566098][ T5962] RSP: 002b:00007f02302d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 774.574617][ T5962] RAX: ffffffffffffffda RBX: 00007f0231e55fa0 RCX: 00007f0231c65d29 [ 774.582618][ T5962] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 774.590604][ T5962] RBP: 00007f02302d7090 R08: 0000000000029000 R09: 0000000000000007 [ 774.598588][ T5962] R10: 0000000000007000 R11: 0000000000000246 R12: 0000000000000001 [ 774.606564][ T5962] R13: 0000000000000000 R14: 00007f0231e55fa0 R15: 00007ffef4fe9db8 [ 774.614568][ T5962] [ 774.646801][ T5970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 774.663602][ T5970] System zones: 0-2, 18-18, 34-34 [ 774.669577][ T5970] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12944: bg 0: block 248: padding at end of block bitmap is not set [ 774.684643][ T5970] __quota_error: 114 callbacks suppressed [ 774.684658][ T5970] Quota error (device loop0): write_blk: dquota write failed [ 774.698238][ T5970] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 774.711327][ T5970] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.12944: Failed to acquire dquot type 1 [ 774.730006][ T5976] tmpfs: Unknown parameter '' [ 774.738086][ T5970] EXT4-fs (loop0): 1 truncate cleaned up [ 774.744185][ T5974] loop4: detected capacity change from 0 to 2048 [ 774.745571][ T5970] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 774.753311][ T5974] EXT4-fs: Ignoring removed bh option [ 774.799391][ T5974] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 774.826974][ T5974] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 774.839484][ T5974] EXT4-fs (loop4): This should not happen!! Data will be lost [ 774.839484][ T5974] [ 774.849176][ T5974] EXT4-fs (loop4): Total free blocks count 0 [ 774.855242][ T5974] EXT4-fs (loop4): Free/Dirty block details [ 774.861157][ T5974] EXT4-fs (loop4): free_blocks=2415919104 [ 774.866995][ T5974] EXT4-fs (loop4): dirty_blocks=32 [ 774.872133][ T5974] EXT4-fs (loop4): Block reservation details [ 774.878155][ T5974] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 774.899109][ T5987] syz.0.12948[5987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.899371][ T5987] syz.0.12948[5987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.911733][ T5987] syz.0.12948[5987] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.958467][ T29] audit: type=1326 audit(1737136142.799:26632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5988 comm="syz.0.12949" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb790965d29 code=0x0 [ 775.053341][T25255] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 775.066097][T25255] EXT4-fs (loop4): This should not happen!! Data will be lost [ 775.066097][T25255] [ 775.079674][ T4744] EXT4-fs unmount: 87 callbacks suppressed [ 775.108267][ T29] audit: type=1326 audit(1737136142.949:26633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.155557][ T29] audit: type=1326 audit(1737136142.949:26634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.179304][ T29] audit: type=1326 audit(1737136142.949:26635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.182071][ T6001] xt_cluster: node mask cannot exceed total number of nodes [ 775.203039][ T29] audit: type=1326 audit(1737136142.949:26636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.203079][ T29] audit: type=1326 audit(1737136142.949:26637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.257826][ T29] audit: type=1326 audit(1737136142.949:26638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.281431][ T29] audit: type=1326 audit(1737136142.949:26639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5993 comm="syz.2.12952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 775.295726][ T6006] loop4: detected capacity change from 0 to 512 [ 775.318226][ T6007] loop5: detected capacity change from 0 to 512 [ 775.329338][ T6006] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.12956: bg 0: block 248: padding at end of block bitmap is not set [ 775.347940][ T6007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.361081][ T6007] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 775.363337][ T6006] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.12956: Failed to acquire dquot type 1 [ 775.384668][ T6006] EXT4-fs (loop4): 1 truncate cleaned up [ 775.393058][ T6006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.406110][ T6006] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.441248][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.464186][ T6019] loop5: detected capacity change from 0 to 512 [ 775.477699][ T6019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.490444][ T6019] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 775.538570][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.539905][ T6024] loop1: detected capacity change from 0 to 1024 [ 775.554844][ T6024] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 775.563759][ T6024] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 775.574799][ T6024] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 775.583048][ T6024] System zones: 0-1, 3-12 [ 775.583865][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.588290][ T6024] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.12960: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 775.615605][ T6024] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.12960: couldn't read orphan inode 11 (err -117) [ 775.636462][ T6024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.664121][ T6026] loop5: detected capacity change from 0 to 2048 [ 775.676805][ T6024] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.12960: Invalid block bitmap block 0 in block_group 0 [ 775.693738][ T6026] EXT4-fs: Ignoring removed bh option [ 775.721477][ T6026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.733808][ T6024] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12960: Failed to acquire dquot type 0 [ 775.758461][ T6026] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 775.778046][ T6026] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 775.790428][ T6026] EXT4-fs (loop5): This should not happen!! Data will be lost [ 775.790428][ T6026] [ 775.800136][ T6026] EXT4-fs (loop5): Total free blocks count 0 [ 775.806178][ T6026] EXT4-fs (loop5): Free/Dirty block details [ 775.812108][ T6026] EXT4-fs (loop5): free_blocks=2415919104 [ 775.818006][ T6026] EXT4-fs (loop5): dirty_blocks=32 [ 775.823146][ T6026] EXT4-fs (loop5): Block reservation details [ 775.829229][ T6026] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 775.838258][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.982472][T26714] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 776.020897][ T6046] loop1: detected capacity change from 0 to 512 [ 776.031326][ T6046] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #32: comm syz.1.12969: iget: special inode unallocated [ 776.044357][ T6046] EXT4-fs (loop1): Remounting filesystem read-only [ 776.051072][ T6046] EXT4-fs (loop1): no journal found [ 776.056445][ T6046] EXT4-fs (loop1): can't get journal size [ 776.062517][ T6046] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 776.073340][ T6046] EXT4-fs (loop1): failed to initialize system zone (-117) [ 776.078706][ T6048] loop0: detected capacity change from 0 to 512 [ 776.087530][ T6046] EXT4-fs (loop1): mount failed [ 776.103533][ T6048] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 776.112028][ T6048] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 776.120383][ T6048] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.12970: bad orphan inode 13 [ 776.132522][ T6048] EXT4-fs (loop0): Remounting filesystem read-only [ 776.139190][ T6048] ext4_test_bit(bit=12, block=4) = 1 [ 776.142452][ T6052] loop4: detected capacity change from 0 to 512 [ 776.144474][ T6048] is_bad_inode(inode)=0 [ 776.144486][ T6048] NEXT_ORPHAN(inode)=17694720 [ 776.159682][ T6048] max_ino=32 [ 776.162896][ T6048] i_nlink=0 [ 776.166445][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.179033][ T6048] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 776.179785][ T6052] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 776.188393][ T6048] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.197052][ T6052] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 776.207248][ T6059] loop1: detected capacity change from 0 to 512 [ 776.212070][ T6052] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.12971: bad orphan inode 13 [ 776.228050][ T6052] EXT4-fs (loop4): Remounting filesystem read-only [ 776.234584][ T6052] ext4_test_bit(bit=12, block=4) = 1 [ 776.239965][ T6052] is_bad_inode(inode)=0 [ 776.244133][ T6052] NEXT_ORPHAN(inode)=17694720 [ 776.247166][ T6059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.12972: bg 0: block 248: padding at end of block bitmap is not set [ 776.248927][ T6052] max_ino=32 [ 776.263809][ T6059] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.12972: Failed to acquire dquot type 1 [ 776.266553][ T6052] i_nlink=0 [ 776.280864][ T6059] EXT4-fs (loop1): 1 truncate cleaned up [ 776.287245][ T6059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.301948][ T6059] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.313178][ T6052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.325890][ T6052] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 776.332762][ T6052] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.336988][ T6048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.423163][ T6052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.540245][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.603563][ T6081] geneve0: entered allmulticast mode [ 776.642643][ T6084] sctp: [Deprecated]: +}[@ (pid 6084) Use of int in max_burst socket option deprecated. [ 776.642643][ T6084] Use struct sctp_assoc_value instead [ 776.643382][ T6081] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12978'. [ 776.687435][ T6081] 0ªX¹¦À: renamed from caif0 [ 776.702917][ T6081] 0ªX¹¦À: entered allmulticast mode [ 776.708261][ T6081] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 776.777035][ T6089] loop4: detected capacity change from 0 to 128 [ 776.927355][ T6089] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 776.940245][ T6089] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 776.953341][ T6089] sctp: [Deprecated]: +}[@ (pid 6089) Use of int in max_burst socket option deprecated. [ 776.953341][ T6089] Use struct sctp_assoc_value instead [ 778.182098][ T4744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 778.201786][ T6102] Process accounting resumed [ 778.293755][ T6108] loop5: detected capacity change from 0 to 512 [ 778.315102][ T6110] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 778.349266][ T6108] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.12988: bg 0: block 248: padding at end of block bitmap is not set [ 778.382255][ T6108] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.12988: Failed to acquire dquot type 1 [ 778.413898][ T6108] EXT4-fs (loop5): 1 truncate cleaned up [ 778.420345][ T6108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.482158][ T6108] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.737188][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.814805][ T6122] loop0: detected capacity change from 0 to 512 [ 778.827863][ T6122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 778.848506][ T6122] EXT4-fs (loop0): 1 truncate cleaned up [ 778.863100][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.956439][ T1752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.003345][ T6128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6128 comm=syz.0.12994 [ 779.049896][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12994'. [ 779.138245][ T6133] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 779.361951][ T6145] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13000'. [ 779.400572][ T6147] loop0: detected capacity change from 0 to 512 [ 779.416987][ T6147] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13001: bg 0: block 248: padding at end of block bitmap is not set [ 779.450297][ T6147] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13001: Failed to acquire dquot type 1 [ 779.474390][ T6150] loop4: detected capacity change from 0 to 128 [ 779.481369][ T6147] EXT4-fs (loop0): 1 truncate cleaned up [ 779.497278][ T6150] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 779.509931][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.534102][ T6150] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.554816][ T6147] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.569811][ T6150] sctp: [Deprecated]: +}[@ (pid 6150) Use of int in max_burst socket option deprecated. [ 779.569811][ T6150] Use struct sctp_assoc_value instead [ 779.774178][ T1752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.801511][ T6159] loop1: detected capacity change from 0 to 512 [ 779.826778][ T6159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.865255][ T6159] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 779.896024][ T6165] loop0: detected capacity change from 0 to 512 [ 779.928626][ T6165] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13006: bg 0: block 248: padding at end of block bitmap is not set [ 779.960616][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.970341][ T6165] __quota_error: 147 callbacks suppressed [ 779.970361][ T6165] Quota error (device loop0): write_blk: dquota write failed [ 779.983628][ T6165] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 779.993687][ T6165] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13006: Failed to acquire dquot type 1 [ 780.012157][ T6165] EXT4-fs (loop0): 1 truncate cleaned up [ 780.025691][ T6165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.050811][ T6165] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.055880][ T6171] tmpfs: Unknown parameter '' [ 780.082805][ T29] audit: type=1326 audit(1737136147.919:26777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.111374][ T29] audit: type=1326 audit(1737136147.949:26778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.135089][ T29] audit: type=1326 audit(1737136147.949:26779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.158786][ T29] audit: type=1326 audit(1737136147.949:26780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.182471][ T29] audit: type=1326 audit(1737136147.949:26781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.206034][ T29] audit: type=1326 audit(1737136147.949:26782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.229685][ T29] audit: type=1326 audit(1737136147.949:26783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.0.13006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 780.302234][ T6181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6181 comm=syz.2.13013 [ 780.312130][ T6177] loop1: detected capacity change from 0 to 512 [ 780.322696][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13013'. [ 780.356802][ T6177] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13011: bg 0: block 248: padding at end of block bitmap is not set [ 780.388295][ T6177] Quota error (device loop1): write_blk: dquota write failed [ 780.401992][ T1752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.415453][ T6177] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13011: Failed to acquire dquot type 1 [ 780.462828][ T6177] EXT4-fs (loop1): 1 truncate cleaned up [ 780.481267][ T6191] loop0: detected capacity change from 0 to 256 [ 780.490488][ T6177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 780.526480][ T6177] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.542891][ T6191] FAT-fs (loop0): Directory bread(block 64) failed [ 780.555221][ T6191] FAT-fs (loop0): Directory bread(block 65) failed [ 780.572847][ T6191] FAT-fs (loop0): Directory bread(block 66) failed [ 780.581710][ T6191] FAT-fs (loop0): Directory bread(block 67) failed [ 780.589591][ T6191] FAT-fs (loop0): Directory bread(block 68) failed [ 780.596242][ T6191] FAT-fs (loop0): Directory bread(block 69) failed [ 780.603214][ T6191] FAT-fs (loop0): Directory bread(block 70) failed [ 780.610016][ T6191] FAT-fs (loop0): Directory bread(block 71) failed [ 780.616936][ T6191] FAT-fs (loop0): Directory bread(block 72) failed [ 780.623576][ T6191] FAT-fs (loop0): Directory bread(block 73) failed [ 780.660300][ T6191] syz.0.13016: attempt to access beyond end of device [ 780.660300][ T6191] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 780.729334][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.730792][ T6202] loop0: detected capacity change from 0 to 512 [ 780.747001][ T6202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 780.781735][ T6202] EXT4-fs (loop0): 1 truncate cleaned up [ 780.796390][ T6208] syz.5.13022[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.796533][ T6208] syz.5.13022[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.815793][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.863413][ T6208] syz.5.13022[6208] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 780.931994][ T6216] xt_cluster: node mask cannot exceed total number of nodes [ 780.945903][ T6202] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 781.044540][ T6221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6221 comm=syz.5.13026 [ 781.117332][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13026'. [ 781.138508][ T1752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.239740][ T6226] loop5: detected capacity change from 0 to 512 [ 781.261635][ T6224] loop0: detected capacity change from 0 to 1024 [ 781.307718][ T6226] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13028: bg 0: block 248: padding at end of block bitmap is not set [ 781.327959][ T6224] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 781.342897][ T6226] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13028: Failed to acquire dquot type 1 [ 781.376800][ T6224] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 781.394629][ T6226] EXT4-fs (loop5): 1 truncate cleaned up [ 781.403447][ T6226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.418520][ T6224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 781.426803][ T6224] System zones: 0-1, 3-12 [ 781.431704][ T6226] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 781.437685][ T6224] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.13027: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 781.504617][ T6224] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.13027: couldn't read orphan inode 11 (err -117) [ 781.508692][ T6235] sctp: [Deprecated]: +}[@ (pid 6235) Use of int in max_burst socket option deprecated. [ 781.508692][ T6235] Use struct sctp_assoc_value instead [ 781.532224][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.556773][ T6237] loop1: detected capacity change from 0 to 128 [ 781.578074][ T6237] EXT4-fs: Ignoring removed nobh option [ 781.588842][ T6237] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.606621][ T6224] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.13027: Invalid block bitmap block 0 in block_group 0 [ 781.630403][ T6237] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.642802][ T6224] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13027: Failed to acquire dquot type 0 [ 781.678359][ T1752] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.708732][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.739314][ T6241] FAULT_INJECTION: forcing a failure. [ 781.739314][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 781.752040][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.13031 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 781.762836][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 781.772911][ T6241] Call Trace: [ 781.776203][ T6241] [ 781.779145][ T6241] dump_stack_lvl+0xf2/0x150 [ 781.783832][ T6241] dump_stack+0x15/0x1a [ 781.788078][ T6241] should_fail_ex+0x223/0x230 [ 781.792931][ T6241] should_failslab+0x8f/0xb0 [ 781.797644][ T6241] kmem_cache_alloc_noprof+0x52/0x320 [ 781.803050][ T6241] ? skb_clone+0x154/0x1f0 [ 781.807637][ T6241] skb_clone+0x154/0x1f0 [ 781.811931][ T6241] __netlink_deliver_tap+0x2bd/0x4f0 [ 781.817279][ T6241] netlink_unicast+0x64a/0x670 [ 781.822214][ T6241] netlink_sendmsg+0x5cc/0x6e0 [ 781.827025][ T6241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.832425][ T6241] __sock_sendmsg+0x140/0x180 [ 781.837155][ T6241] ____sys_sendmsg+0x312/0x410 [ 781.842062][ T6241] __sys_sendmsg+0x19d/0x230 [ 781.846742][ T6241] __x64_sys_sendmsg+0x46/0x50 [ 781.851593][ T6241] x64_sys_call+0x2734/0x2dc0 [ 781.856384][ T6241] do_syscall_64+0xc9/0x1c0 [ 781.860910][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 781.865648][ T6241] ? clear_bhb_loop+0x55/0xb0 [ 781.870434][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.876449][ T6241] RIP: 0033:0x7fb790965d29 [ 781.880881][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.900599][ T6241] RSP: 002b:00007fb78efd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.909054][ T6241] RAX: ffffffffffffffda RBX: 00007fb790b55fa0 RCX: 00007fb790965d29 [ 781.917169][ T6241] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 781.925181][ T6241] RBP: 00007fb78efd7090 R08: 0000000000000000 R09: 0000000000000000 [ 781.933191][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.941192][ T6241] R13: 0000000000000000 R14: 00007fb790b55fa0 R15: 00007ffcf4bad458 [ 781.947415][ T6243] syz.5.13032[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.949187][ T6241] [ 781.953230][ T6241] erspan0: entered promiscuous mode [ 781.970289][ T2992] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.988145][ T6241] erspan0: left promiscuous mode [ 782.003500][ T6243] syz.5.13032[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.003590][ T6243] syz.5.13032[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.064134][ T6251] loop1: detected capacity change from 0 to 512 [ 782.096327][ T4744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 782.128712][ T6251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.155333][ T6251] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 782.173641][ T6259] loop4: detected capacity change from 0 to 512 [ 782.181912][ T6255] loop5: detected capacity change from 0 to 1024 [ 782.216806][ T6255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 782.241070][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.252970][ T6255] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 782.267948][ T6259] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13036: bg 0: block 248: padding at end of block bitmap is not set [ 782.318790][ T6255] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 782.336516][ T6259] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.13036: Failed to acquire dquot type 1 [ 782.358200][ T6255] System zones: 0-1, 3-12 [ 782.387501][ T6259] EXT4-fs (loop4): 1 truncate cleaned up [ 782.393416][ T6255] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #11: comm syz.5.13035: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 782.432772][ T6259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.516618][ T6259] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.543945][ T6255] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.13035: couldn't read orphan inode 11 (err -117) [ 782.638407][ T6255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.768399][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.801118][ T6255] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.13035: Invalid block bitmap block 0 in block_group 0 [ 782.849442][ T6255] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13035: Failed to acquire dquot type 0 [ 782.867539][ T6277] loop4: detected capacity change from 0 to 512 [ 782.914398][ T6277] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13040: bg 0: block 248: padding at end of block bitmap is not set [ 782.942660][ T6277] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.13040: Failed to acquire dquot type 1 [ 782.958856][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.024369][ T6277] EXT4-fs (loop4): 1 truncate cleaned up [ 783.051353][ T6277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.077649][ T6281] loop5: detected capacity change from 0 to 512 [ 783.115895][ T6277] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.160249][ T6281] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13042: bg 0: block 248: padding at end of block bitmap is not set [ 783.186957][ T6281] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13042: Failed to acquire dquot type 1 [ 783.216438][ T6281] EXT4-fs (loop5): 1 truncate cleaned up [ 783.240596][ T6281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.261561][ T4744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.274696][ T6289] xt_cluster: node mask cannot exceed total number of nodes [ 783.283180][ T6281] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.325227][ T6293] syz.1.13046[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.326085][ T6293] syz.1.13046[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.349329][ T6293] syz.1.13046[6293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.442262][ T6303] loop1: detected capacity change from 0 to 512 [ 783.463272][ T6303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 783.474343][ T6303] EXT4-fs (loop1): 1 truncate cleaned up [ 783.484245][ T6303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.500508][ T6303] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 783.528394][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.553035][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.603534][ T6312] loop1: detected capacity change from 0 to 512 [ 783.606090][ T6229] Process accounting paused [ 783.613103][ T6314] loop5: detected capacity change from 0 to 128 [ 783.614711][ T6312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 783.621259][ T6314] EXT4-fs: Ignoring removed nobh option [ 783.658989][ T6314] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 783.674373][ T6312] EXT4-fs (loop1): 1 truncate cleaned up [ 783.681530][ T6314] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 783.685572][ T6312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.724664][ T6322] syz.2.13058[6322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.771717][ T6312] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 784.082231][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.441174][ T3249] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 785.092118][ T6345] loop1: detected capacity change from 0 to 512 [ 785.211912][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.232898][ T6345] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 785.269021][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.338854][ T6359] loop0: detected capacity change from 0 to 128 [ 785.418882][ T6359] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 785.477009][ T6359] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.554676][ T6359] sctp: [Deprecated]: +}[@ (pid 6359) Use of int in max_burst socket option deprecated. [ 785.554676][ T6359] Use struct sctp_assoc_value instead [ 785.795082][ T6373] loop4: detected capacity change from 0 to 2048 [ 785.829542][ T6373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.908623][ T6384] loop1: detected capacity change from 0 to 512 [ 785.992543][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.033139][ T6390] bpf_get_probe_write_proto: 14 callbacks suppressed [ 786.033277][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.040257][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.051849][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.066914][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.078399][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.090141][ T6390] syz.5.13077[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.104623][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 786.104642][ T29] audit: type=1326 audit(1737136153.909:26902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.145887][ T29] audit: type=1326 audit(1737136153.909:26903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.169552][ T29] audit: type=1326 audit(1737136153.909:26904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.193139][ T29] audit: type=1326 audit(1737136153.909:26905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.216777][ T29] audit: type=1326 audit(1737136153.909:26906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.240427][ T29] audit: type=1326 audit(1737136153.909:26907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.264107][ T29] audit: type=1326 audit(1737136153.949:26908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.287727][ T29] audit: type=1326 audit(1737136153.949:26909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.311488][ T29] audit: type=1326 audit(1737136153.949:26910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.335160][ T29] audit: type=1326 audit(1737136153.949:26911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6376 comm="syz.5.13077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 786.373336][ T6384] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 786.464252][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.520087][ T6396] loop1: detected capacity change from 0 to 512 [ 786.527344][ T6396] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 786.542627][ T6396] EXT4-fs (loop1): 1 truncate cleaned up [ 786.555236][ T6396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.618851][ T6396] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 786.728443][ T6401] bond0: entered promiscuous mode [ 786.733612][ T6401] bond0: entered allmulticast mode [ 786.769789][ T6387] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 786.788257][ T6401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.805077][ T6401] bond0 (unregistering): Released all slaves [ 786.814869][ T6387] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 786.827475][ T6387] EXT4-fs (loop4): This should not happen!! Data will be lost [ 786.827475][ T6387] [ 786.837172][ T6387] EXT4-fs (loop4): Total free blocks count 0 [ 786.843190][ T6387] EXT4-fs (loop4): Free/Dirty block details [ 786.849487][ T6387] EXT4-fs (loop4): free_blocks=2415919104 [ 786.855378][ T6387] EXT4-fs (loop4): dirty_blocks=6592 [ 786.860692][ T6387] EXT4-fs (loop4): Block reservation details [ 786.866780][ T6387] EXT4-fs (loop4): i_reserved_data_blocks=412 [ 786.907783][ T6373] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 787.045574][ T6415] loop5: detected capacity change from 0 to 512 [ 787.060022][ T6415] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.13090: iget: special inode unallocated [ 787.073694][ T6415] EXT4-fs (loop5): Remounting filesystem read-only [ 787.080292][ T6415] EXT4-fs (loop5): no journal found [ 787.085527][ T6415] EXT4-fs (loop5): can't get journal size [ 787.103649][ T6415] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 787.117187][ T6415] EXT4-fs (loop5): failed to initialize system zone (-117) [ 787.128966][ T6422] loop1: detected capacity change from 0 to 1024 [ 787.136047][ T6415] EXT4-fs (loop5): mount failed [ 787.141157][ T6422] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 787.153326][ T6422] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 787.187629][ T6422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 787.196686][ T6422] System zones: 0-1, 3-12 [ 787.201702][ T6422] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.13091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 787.222653][ T6422] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.13091: couldn't read orphan inode 11 (err -117) [ 787.249035][ T6422] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.13091: Invalid block bitmap block 0 in block_group 0 [ 787.265283][ T6422] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13091: Failed to acquire dquot type 0 [ 787.286207][ T6429] loop5: detected capacity change from 0 to 512 [ 787.296147][ T6429] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.13093: iget: special inode unallocated [ 787.326458][ T6429] EXT4-fs (loop5): Remounting filesystem read-only [ 787.333089][ T6429] EXT4-fs (loop5): no journal found [ 787.338523][ T6429] EXT4-fs (loop5): can't get journal size [ 787.354713][ T6429] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 787.383696][ T6429] EXT4-fs (loop5): failed to initialize system zone (-117) [ 787.404154][ T6429] EXT4-fs (loop5): mount failed [ 788.401118][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13117'. [ 788.410263][ T6494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13117'. [ 788.419370][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13117'. [ 788.428616][ T6494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13117'. [ 788.511330][ T6500] loop5: detected capacity change from 0 to 512 [ 788.538101][ T6500] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 788.593605][ T6515] netlink: 100 bytes leftover after parsing attributes in process `syz.5.13125'. [ 788.642464][ T6521] netlink: 100 bytes leftover after parsing attributes in process `syz.0.13128'. [ 788.722657][ T6523] loop0: detected capacity change from 0 to 512 [ 788.747808][ T6523] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.13129: iget: special inode unallocated [ 788.774611][ T6527] loop1: detected capacity change from 0 to 512 [ 788.783858][ T6523] EXT4-fs (loop0): Remounting filesystem read-only [ 788.790493][ T6523] EXT4-fs (loop0): no journal found [ 788.795873][ T6523] EXT4-fs (loop0): can't get journal size [ 788.811713][ T6527] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13130: bg 0: block 248: padding at end of block bitmap is not set [ 788.836724][ T6523] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 788.846072][ T6527] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13130: Failed to acquire dquot type 1 [ 788.846824][ T6527] EXT4-fs (loop1): 1 truncate cleaned up [ 788.944417][ T6523] EXT4-fs (loop0): failed to initialize system zone (-117) [ 788.951512][ T6527] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.974363][ T6523] EXT4-fs (loop0): mount failed [ 789.225747][ T6556] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13139'. [ 789.245683][ T6554] geneve0: entered allmulticast mode [ 789.369394][ T6567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 789.573564][ T6577] xt_cluster: node mask cannot exceed total number of nodes [ 789.865050][ T6589] netlink: 100 bytes leftover after parsing attributes in process `syz.5.13154'. [ 789.910455][ T6593] loop5: detected capacity change from 0 to 512 [ 789.917445][ T6593] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 789.929182][ T6593] EXT4-fs (loop5): 1 truncate cleaned up [ 790.112565][ T6602] loop0: detected capacity change from 0 to 512 [ 790.151807][ T6602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 790.166965][ T6606] loop4: detected capacity change from 0 to 512 [ 790.173764][ T6602] System zones: 0-2, 18-18, 34-34 [ 790.188770][ T6609] 9pnet_fd: Insufficient options for proto=fd [ 790.188961][ T6606] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 790.201869][ T6602] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13159: bg 0: block 248: padding at end of block bitmap is not set [ 790.220202][ T6602] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13159: Failed to acquire dquot type 1 [ 790.232846][ T6606] EXT4-fs (loop4): 1 truncate cleaned up [ 790.241555][ T6611] loop5: detected capacity change from 0 to 512 [ 790.248726][ T6602] EXT4-fs (loop0): 1 truncate cleaned up [ 790.255447][ T6602] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.269124][ T6611] EXT4-fs error (device loop5): ext4_get_journal_inode:5809: inode #32: comm syz.5.13162: iget: special inode unallocated [ 790.293130][ T6611] EXT4-fs (loop5): Remounting filesystem read-only [ 790.299756][ T6611] EXT4-fs (loop5): no journal found [ 790.304970][ T6611] EXT4-fs (loop5): can't get journal size [ 790.345501][ T6611] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 790.368381][ T6611] EXT4-fs (loop5): failed to initialize system zone (-117) [ 790.383058][ T6611] EXT4-fs (loop5): mount failed [ 790.391967][ T6621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6621 comm=syz.1.13167 [ 790.395561][ T6625] loop4: detected capacity change from 0 to 512 [ 790.427503][ T6625] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 790.448128][ T6625] EXT4-fs (loop4): 1 truncate cleaned up [ 790.545561][ T6636] 9pnet_fd: Insufficient options for proto=fd [ 790.682465][ T6643] loop4: detected capacity change from 0 to 2048 [ 790.689559][ T6643] EXT4-fs: Ignoring removed bh option [ 790.721676][ T6643] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 790.746143][ T6643] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 790.758515][ T6643] EXT4-fs (loop4): This should not happen!! Data will be lost [ 790.758515][ T6643] [ 790.768229][ T6643] EXT4-fs (loop4): Total free blocks count 0 [ 790.774289][ T6643] EXT4-fs (loop4): Free/Dirty block details [ 790.780224][ T6643] EXT4-fs (loop4): free_blocks=2415919104 [ 790.785994][ T6643] EXT4-fs (loop4): dirty_blocks=32 [ 790.791139][ T6643] EXT4-fs (loop4): Block reservation details [ 790.797160][ T6643] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 790.917351][T25243] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 790.930128][T25243] EXT4-fs (loop4): This should not happen!! Data will be lost [ 790.930128][T25243] [ 791.343940][ T6668] loop5: detected capacity change from 0 to 512 [ 791.351100][ T6668] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 791.383868][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 791.383886][ T29] audit: type=1326 audit(1737136159.219:27028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.413809][ T29] audit: type=1326 audit(1737136159.219:27029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.437522][ T29] audit: type=1326 audit(1737136159.219:27030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.461412][ T29] audit: type=1326 audit(1737136159.219:27031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.485042][ T29] audit: type=1326 audit(1737136159.219:27032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.508807][ T29] audit: type=1326 audit(1737136159.219:27033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.532463][ T29] audit: type=1326 audit(1737136159.219:27034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.556138][ T29] audit: type=1326 audit(1737136159.219:27035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.579911][ T29] audit: type=1326 audit(1737136159.219:27036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.603532][ T29] audit: type=1326 audit(1737136159.219:27037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.0.13184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 791.628232][ T6668] EXT4-fs (loop5): 1 truncate cleaned up [ 791.634604][ T6671] geneve0: entered allmulticast mode [ 791.755952][ T6677] 9pnet_fd: Insufficient options for proto=fd [ 791.795071][ T6679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6679 comm=syz.5.13186 [ 791.884594][ T6685] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 791.921225][ T6687] loop4: detected capacity change from 0 to 512 [ 791.936979][ T6687] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13190: bg 0: block 248: padding at end of block bitmap is not set [ 791.956355][ T6692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13188'. [ 791.966362][ T6692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13188'. [ 791.967493][ T6687] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.13190: Failed to acquire dquot type 1 [ 791.987671][ T6687] EXT4-fs (loop4): 1 truncate cleaned up [ 791.994249][ T6687] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.981655][ T6724] loop4: detected capacity change from 0 to 2048 [ 793.095871][ T6732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6732 comm=syz.2.13204 [ 793.406679][ T6734] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 793.423025][ T6734] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 793.435611][ T6734] EXT4-fs (loop4): This should not happen!! Data will be lost [ 793.435611][ T6734] [ 793.445330][ T6734] EXT4-fs (loop4): Total free blocks count 0 [ 793.451328][ T6734] EXT4-fs (loop4): Free/Dirty block details [ 793.457286][ T6734] EXT4-fs (loop4): free_blocks=2415919104 [ 793.463030][ T6734] EXT4-fs (loop4): dirty_blocks=8192 [ 793.468367][ T6734] EXT4-fs (loop4): Block reservation details [ 793.474459][ T6734] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 793.526256][ T6724] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 793.539216][ T6724] EXT4-fs (loop4): This should not happen!! Data will be lost [ 793.539216][ T6724] [ 793.623724][ T6749] loop1: detected capacity change from 0 to 512 [ 793.640136][ T6749] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13211: bg 0: block 248: padding at end of block bitmap is not set [ 793.689035][ T6749] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13211: Failed to acquire dquot type 1 [ 793.729709][ T6756] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 793.755577][ T6749] EXT4-fs (loop1): 1 truncate cleaned up [ 793.787286][ T6749] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.991834][ T6763] loop0: detected capacity change from 0 to 512 [ 794.027841][ T6763] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 794.124021][ T6773] loop0: detected capacity change from 0 to 1024 [ 794.131238][ T6773] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 794.140482][ T6773] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 794.197673][ T6775] loop1: detected capacity change from 0 to 128 [ 794.216291][ T6773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 794.224549][ T6773] System zones: 0-1, 3-12 [ 794.231549][ T6773] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.13218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 794.309410][ T6773] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.13218: couldn't read orphan inode 11 (err -117) [ 794.323954][ T6775] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.339846][ T6775] sctp: [Deprecated]: +}[@ (pid 6775) Use of int in max_burst socket option deprecated. [ 794.339846][ T6775] Use struct sctp_assoc_value instead [ 794.441844][ T6773] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.13218: Invalid block bitmap block 0 in block_group 0 [ 794.495256][ T6773] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13218: Failed to acquire dquot type 0 [ 794.586184][ T6773] Process accounting paused [ 794.774656][ T6782] syz.5.13221[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.774796][ T6782] syz.5.13221[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.788774][ T6782] syz.5.13221[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.803448][ T6782] __nla_validate_parse: 2 callbacks suppressed [ 794.803471][ T6782] netlink: 100 bytes leftover after parsing attributes in process `syz.5.13221'. [ 794.972960][ T6786] geneve0: entered allmulticast mode [ 794.980743][ T6788] loop5: detected capacity change from 0 to 128 [ 794.996092][ T6788] EXT4-fs: Ignoring removed nobh option [ 795.029991][ T6788] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 795.093044][ T6795] loop4: detected capacity change from 0 to 2048 [ 795.156102][ T6802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6802 comm=syz.0.13228 [ 795.370698][ T6806] loop0: detected capacity change from 0 to 2048 [ 795.386972][ T6806] EXT4-fs: Ignoring removed bh option [ 795.421339][ T6806] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 795.454904][ T6806] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 795.467333][ T6806] EXT4-fs (loop0): This should not happen!! Data will be lost [ 795.467333][ T6806] [ 795.477271][ T6806] EXT4-fs (loop0): Total free blocks count 0 [ 795.483354][ T6806] EXT4-fs (loop0): Free/Dirty block details [ 795.489274][ T6806] EXT4-fs (loop0): free_blocks=2415919104 [ 795.495066][ T6806] EXT4-fs (loop0): dirty_blocks=32 [ 795.500241][ T6806] EXT4-fs (loop0): Block reservation details [ 795.506275][ T6806] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 795.592117][ T6803] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 795.612339][ T6803] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 795.624893][ T6803] EXT4-fs (loop4): This should not happen!! Data will be lost [ 795.624893][ T6803] [ 795.634741][ T6803] EXT4-fs (loop4): Total free blocks count 0 [ 795.640811][ T6803] EXT4-fs (loop4): Free/Dirty block details [ 795.646858][ T6803] EXT4-fs (loop4): free_blocks=2415919104 [ 795.652659][ T6803] EXT4-fs (loop4): dirty_blocks=8192 [ 795.657990][ T6803] EXT4-fs (loop4): Block reservation details [ 795.664016][ T6803] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 795.687866][ T6795] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 795.700794][ T6795] EXT4-fs (loop4): This should not happen!! Data will be lost [ 795.700794][ T6795] [ 795.716187][ T6811] xt_CT: You must specify a L4 protocol and not use inversions on it [ 795.774048][T25260] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 795.786762][T25260] EXT4-fs (loop0): This should not happen!! Data will be lost [ 795.786762][T25260] [ 795.899055][ T6829] loop0: detected capacity change from 0 to 512 [ 795.910196][ T6829] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 795.923852][ T6827] 9pnet_fd: Insufficient options for proto=fd [ 795.936659][ T6829] EXT4-fs (loop0): 1 truncate cleaned up [ 795.944732][ T6833] xt_cluster: node mask cannot exceed total number of nodes [ 795.957039][ T6829] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 795.992557][ T6832] Process accounting paused [ 796.048222][ T6845] loop4: detected capacity change from 0 to 2048 [ 796.096304][ T6839] loop1: detected capacity change from 0 to 2048 [ 796.123226][ T6839] EXT4-fs: Ignoring removed bh option [ 796.177847][ T6839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 796.219050][ T6848] loop0: detected capacity change from 0 to 2048 [ 796.225838][ T6839] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 796.238114][ T6839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 796.238114][ T6839] [ 796.247824][ T6839] EXT4-fs (loop1): Total free blocks count 0 [ 796.248837][ T6848] EXT4-fs: Ignoring removed bh option [ 796.253813][ T6839] EXT4-fs (loop1): Free/Dirty block details [ 796.253831][ T6839] EXT4-fs (loop1): free_blocks=2415919104 [ 796.271154][ T6839] EXT4-fs (loop1): dirty_blocks=32 [ 796.276326][ T6839] EXT4-fs (loop1): Block reservation details [ 796.282330][ T6839] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 796.308777][ T6848] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 796.327323][ T6848] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 796.339675][ T6848] EXT4-fs (loop0): This should not happen!! Data will be lost [ 796.339675][ T6848] [ 796.349439][ T6848] EXT4-fs (loop0): Total free blocks count 0 [ 796.355525][ T6848] EXT4-fs (loop0): Free/Dirty block details [ 796.361678][ T6848] EXT4-fs (loop0): free_blocks=2415919104 [ 796.367539][ T6848] EXT4-fs (loop0): dirty_blocks=32 [ 796.372700][ T6848] EXT4-fs (loop0): Block reservation details [ 796.378790][ T6848] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 796.423607][ T6845] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 796.441004][ T6845] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 796.453617][ T6845] EXT4-fs (loop4): This should not happen!! Data will be lost [ 796.453617][ T6845] [ 796.463392][ T6845] EXT4-fs (loop4): Total free blocks count 0 [ 796.469440][ T6845] EXT4-fs (loop4): Free/Dirty block details [ 796.475431][ T6845] EXT4-fs (loop4): free_blocks=2415919104 [ 796.481161][ T6845] EXT4-fs (loop4): dirty_blocks=8192 [ 796.486491][ T6845] EXT4-fs (loop4): Block reservation details [ 796.492496][ T6845] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 796.513586][ T6853] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 796.526537][ T6853] EXT4-fs (loop4): This should not happen!! Data will be lost [ 796.526537][ T6853] [ 796.536724][T25255] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 796.549455][T25255] EXT4-fs (loop1): This should not happen!! Data will be lost [ 796.549455][T25255] [ 796.581050][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 796.581067][ T29] audit: type=1326 audit(1737136164.419:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.1.13249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f74a5d29 code=0x7ffc0000 [ 796.629249][ T29] audit: type=1326 audit(1737136164.449:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.1.13249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f88f74a5d29 code=0x7ffc0000 [ 796.652989][ T29] audit: type=1326 audit(1737136164.449:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.1.13249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f74a5d29 code=0x7ffc0000 [ 796.676690][ T29] audit: type=1326 audit(1737136164.449:27135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6864 comm="syz.1.13249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f74a5d29 code=0x7ffc0000 [ 796.702345][T25255] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 796.715015][T25255] EXT4-fs (loop0): This should not happen!! Data will be lost [ 796.715015][T25255] [ 796.860550][ T29] audit: type=1326 audit(1737136164.699:27136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6873 comm="syz.5.13255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35ebd95d29 code=0x0 [ 796.899163][ T29] audit: type=1326 audit(1737136164.729:27137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.13254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88f74a5d29 code=0x0 [ 796.959783][ T6877] loop0: detected capacity change from 0 to 512 [ 796.986200][ T6883] xt_cluster: node mask cannot exceed total number of nodes [ 796.997527][ T6877] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13252: bg 0: block 248: padding at end of block bitmap is not set [ 797.022271][ T6877] Quota error (device loop0): write_blk: dquota write failed [ 797.029786][ T6877] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 797.042100][ T6877] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13252: Failed to acquire dquot type 1 [ 797.070249][ T6877] EXT4-fs (loop0): 1 truncate cleaned up [ 797.078568][ T6877] ext4 filesystem being mounted at /365/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.106497][ T29] audit: type=1326 audit(1737136164.939:27138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.0.13252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 797.130351][ T29] audit: type=1326 audit(1737136164.939:27139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6876 comm="syz.0.13252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 797.577979][ T6896] loop0: detected capacity change from 0 to 2048 [ 797.594167][ T6896] EXT4-fs: Ignoring removed bh option [ 797.611907][ T6896] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 797.630514][ T6896] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 797.642968][ T6896] EXT4-fs (loop0): This should not happen!! Data will be lost [ 797.642968][ T6896] [ 797.652690][ T6896] EXT4-fs (loop0): Total free blocks count 0 [ 797.658739][ T6896] EXT4-fs (loop0): Free/Dirty block details [ 797.664649][ T6896] EXT4-fs (loop0): free_blocks=2415919104 [ 797.670471][ T6896] EXT4-fs (loop0): dirty_blocks=32 [ 797.675634][ T6896] EXT4-fs (loop0): Block reservation details [ 797.681709][ T6896] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 797.746704][ T6905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6905 comm=syz.5.13263 [ 797.794088][ T6909] loop1: detected capacity change from 0 to 512 [ 797.801145][T25255] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 797.813765][T25255] EXT4-fs (loop0): This should not happen!! Data will be lost [ 797.813765][T25255] [ 797.823695][ T6909] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 797.837160][ T6909] EXT4-fs (loop1): 1 truncate cleaned up [ 797.909510][ T6909] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 797.932056][ T6917] 9pnet_fd: Insufficient options for proto=fd [ 798.018710][ T6925] loop5: detected capacity change from 0 to 512 [ 798.046563][ T6925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 798.071376][ T6925] System zones: 0-2, 18-18, 34-34 [ 798.083185][ T6925] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13270: bg 0: block 248: padding at end of block bitmap is not set [ 798.127458][ T6925] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13270: Failed to acquire dquot type 1 [ 798.161752][ T6934] loop1: detected capacity change from 0 to 512 [ 798.177167][ T6925] EXT4-fs (loop5): 1 truncate cleaned up [ 798.190861][ T6925] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.211408][ T6934] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13272: bg 0: block 248: padding at end of block bitmap is not set [ 798.242018][ T6934] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13272: Failed to acquire dquot type 1 [ 798.257541][ T6934] EXT4-fs (loop1): 1 truncate cleaned up [ 798.282905][ T6934] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.401933][ T6944] loop1: detected capacity change from 0 to 2048 [ 798.462112][ T6949] sctp: [Deprecated]: +}[@ (pid 6949) Use of int in max_burst socket option deprecated. [ 798.462112][ T6949] Use struct sctp_assoc_value instead [ 798.544496][ T6952] loop4: detected capacity change from 0 to 2048 [ 798.822885][ T6961] loop0: detected capacity change from 0 to 512 [ 798.886083][ T6961] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.946390][ T6944] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 799.001057][ T6944] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 799.013713][ T6944] EXT4-fs (loop1): This should not happen!! Data will be lost [ 799.013713][ T6944] [ 799.023531][ T6944] EXT4-fs (loop1): Total free blocks count 0 [ 799.029574][ T6944] EXT4-fs (loop1): Free/Dirty block details [ 799.035598][ T6944] EXT4-fs (loop1): free_blocks=2415919104 [ 799.041431][ T6944] EXT4-fs (loop1): dirty_blocks=8192 [ 799.046286][ T6965] loop0: detected capacity change from 0 to 512 [ 799.046763][ T6944] EXT4-fs (loop1): Block reservation details [ 799.059064][ T6944] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 799.068910][ T6965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 799.102719][ T6950] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 799.104703][ T6965] EXT4-fs (loop0): 1 truncate cleaned up [ 799.115768][ T6950] EXT4-fs (loop1): This should not happen!! Data will be lost [ 799.115768][ T6950] [ 799.139189][ T6965] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 799.217559][ T6970] 9pnet_fd: Insufficient options for proto=fd [ 799.218033][ T6956] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 799.245793][ T6956] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 799.258575][ T6956] EXT4-fs (loop4): This should not happen!! Data will be lost [ 799.258575][ T6956] [ 799.268297][ T6956] EXT4-fs (loop4): Total free blocks count 0 [ 799.274312][ T6956] EXT4-fs (loop4): Free/Dirty block details [ 799.280338][ T6956] EXT4-fs (loop4): free_blocks=2415919104 [ 799.286200][ T6956] EXT4-fs (loop4): dirty_blocks=8192 [ 799.291596][ T6956] EXT4-fs (loop4): Block reservation details [ 799.297733][ T6956] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 799.320864][ T6952] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 799.333714][ T6952] EXT4-fs (loop4): This should not happen!! Data will be lost [ 799.333714][ T6952] [ 799.362286][ T6975] loop0: detected capacity change from 0 to 512 [ 799.370095][ T6975] EXT4-fs error (device loop0): ext4_get_journal_inode:5809: inode #32: comm syz.0.13283: iget: special inode unallocated [ 799.385828][ T6975] EXT4-fs (loop0): Remounting filesystem read-only [ 799.392427][ T6975] EXT4-fs (loop0): no journal found [ 799.397681][ T6975] EXT4-fs (loop0): can't get journal size [ 799.425427][ T6975] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 799.440421][ T6975] EXT4-fs (loop0): failed to initialize system zone (-117) [ 799.546055][ T6982] loop1: detected capacity change from 0 to 128 [ 799.552731][ T6982] EXT4-fs: Ignoring removed nobh option [ 799.555189][ T6975] EXT4-fs (loop0): mount failed [ 799.574033][ T6982] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 799.648904][ T6985] loop5: detected capacity change from 0 to 128 [ 799.790158][ T6985] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.804359][ T6985] sctp: [Deprecated]: +}[@ (pid 6985) Use of int in max_burst socket option deprecated. [ 799.804359][ T6985] Use struct sctp_assoc_value instead [ 799.934706][ T6990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=6990 comm=syz.0.13286 [ 800.173681][ T6994] xt_cluster: node mask cannot exceed total number of nodes [ 800.350715][ T7002] loop4: detected capacity change from 0 to 512 [ 800.372112][ T7001] loop1: detected capacity change from 0 to 2048 [ 800.380876][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13289'. [ 800.390061][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13289'. [ 800.399224][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13289'. [ 800.418431][ T7002] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 800.449249][ T7002] EXT4-fs (loop4): 1 truncate cleaned up [ 800.490306][ T7003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13289'. [ 800.513893][ T7002] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 800.641520][ T7011] loop4: detected capacity change from 0 to 1024 [ 800.666283][ T7011] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 800.692596][ T7011] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 800.730943][ T7011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 800.754299][ T7011] System zones: 0-1, 3-12 [ 800.769878][ T7011] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.13292: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 800.831369][ T7011] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.13292: couldn't read orphan inode 11 (err -117) [ 800.882619][ T7011] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.13292: Invalid block bitmap block 0 in block_group 0 [ 800.919671][ T7011] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.13292: Failed to acquire dquot type 0 [ 801.033742][ T7014] loop4: detected capacity change from 0 to 512 [ 801.068953][ T7014] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13293: bg 0: block 248: padding at end of block bitmap is not set [ 801.101229][ T7008] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 801.119694][ T7008] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 801.132305][ T7008] EXT4-fs (loop1): This should not happen!! Data will be lost [ 801.132305][ T7008] [ 801.142278][ T7008] EXT4-fs (loop1): Total free blocks count 0 [ 801.148358][ T7008] EXT4-fs (loop1): Free/Dirty block details [ 801.154354][ T7008] EXT4-fs (loop1): free_blocks=2415919104 [ 801.160308][ T7008] EXT4-fs (loop1): dirty_blocks=8192 [ 801.165645][ T7008] EXT4-fs (loop1): Block reservation details [ 801.171636][ T7008] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 801.194339][ T7001] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 801.207160][ T7001] EXT4-fs (loop1): This should not happen!! Data will be lost [ 801.207160][ T7001] [ 801.266910][ T7014] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.13293: Failed to acquire dquot type 1 [ 801.297064][ T7014] EXT4-fs (loop4): 1 truncate cleaned up [ 801.459797][ T7014] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.714322][ T7031] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 801.758789][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 801.758837][ T29] audit: type=1326 audit(1737136169.599:27183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7028 comm="syz.4.13298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0231c65d29 code=0x0 [ 801.780899][ T7030] loop0: detected capacity change from 0 to 2048 [ 801.794876][ T7030] EXT4-fs: Ignoring removed bh option [ 801.800272][ T29] audit: type=1326 audit(1737136169.609:27184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7033 comm="syz.1.13296" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f88f74a5d29 code=0x0 [ 801.837516][ T7038] 9pnet_fd: Insufficient options for proto=fd [ 801.852830][ T7030] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 801.869134][ T7042] xt_cluster: node mask cannot exceed total number of nodes [ 801.870404][ T7030] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 801.888699][ T7030] EXT4-fs (loop0): This should not happen!! Data will be lost [ 801.888699][ T7030] [ 801.898382][ T7030] EXT4-fs (loop0): Total free blocks count 0 [ 801.904395][ T7030] EXT4-fs (loop0): Free/Dirty block details [ 801.910337][ T7030] EXT4-fs (loop0): free_blocks=2415919104 [ 801.916133][ T7030] EXT4-fs (loop0): dirty_blocks=32 [ 801.921274][ T7030] EXT4-fs (loop0): Block reservation details [ 801.927542][ T7030] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 802.111691][T25260] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 802.124410][T25260] EXT4-fs (loop0): This should not happen!! Data will be lost [ 802.124410][T25260] [ 802.126447][ T7058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7058 comm=syz.2.13308 [ 802.224338][ T7063] loop5: detected capacity change from 0 to 128 [ 802.277594][ T7063] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.293945][ T7063] sctp: [Deprecated]: +}[@ (pid 7063) Use of int in max_burst socket option deprecated. [ 802.293945][ T7063] Use struct sctp_assoc_value instead [ 802.343115][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13310'. [ 802.354947][ T7066] 9pnet_fd: Insufficient options for proto=fd [ 802.735346][ T7078] loop4: detected capacity change from 0 to 512 [ 802.776597][ T7081] loop0: detected capacity change from 0 to 1024 [ 802.803646][ T7078] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 802.877266][ T7081] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 802.899776][ T7078] EXT4-fs (loop4): 1 truncate cleaned up [ 802.911153][ T7081] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 802.927869][ T7078] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 802.947469][ T7081] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000] [ 803.005322][ T7081] System zones: 0-1, 3-12 [ 803.015775][ T7081] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #11: comm syz.0.13318: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 803.067388][ T7081] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.13318: couldn't read orphan inode 11 (err -117) [ 803.268328][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13325'. [ 803.277459][ T7109] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13325'. [ 803.286523][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13325'. [ 803.307485][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13325'. [ 803.339111][ T29] audit: type=1326 audit(1737136171.179:27185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.362969][ T29] audit: type=1326 audit(1737136171.179:27186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.368401][ T7114] loop0: detected capacity change from 0 to 512 [ 803.386626][ T29] audit: type=1326 audit(1737136171.179:27187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.416568][ T29] audit: type=1326 audit(1737136171.179:27188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.440241][ T29] audit: type=1326 audit(1737136171.179:27189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.463886][ T29] audit: type=1326 audit(1737136171.179:27190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.487476][ T29] audit: type=1326 audit(1737136171.179:27191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7110 comm="syz.2.13329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7883875d29 code=0x7ffc0000 [ 803.488681][ T7114] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.13330: bg 0: block 248: padding at end of block bitmap is not set [ 803.528872][ T7114] Quota error (device loop0): write_blk: dquota write failed [ 803.536504][ T7114] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.13330: Failed to acquire dquot type 1 [ 803.550259][ T7114] EXT4-fs (loop0): 1 truncate cleaned up [ 803.556487][ T7114] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 803.955091][ T7137] loop5: detected capacity change from 0 to 2048 [ 803.966094][ T7132] loop0: detected capacity change from 0 to 2048 [ 803.973189][ T7132] EXT4-fs: Ignoring removed bh option [ 803.991895][ T7132] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 804.030447][ T7109] Process accounting paused [ 804.035285][ T7132] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 804.047693][ T7132] EXT4-fs (loop0): This should not happen!! Data will be lost [ 804.047693][ T7132] [ 804.057739][ T7132] EXT4-fs (loop0): Total free blocks count 0 [ 804.063767][ T7132] EXT4-fs (loop0): Free/Dirty block details [ 804.069810][ T7132] EXT4-fs (loop0): free_blocks=2415919104 [ 804.070767][ T7146] loop1: detected capacity change from 0 to 512 [ 804.075593][ T7132] EXT4-fs (loop0): dirty_blocks=32 [ 804.087093][ T7132] EXT4-fs (loop0): Block reservation details [ 804.093092][ T7132] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 804.108897][ T7146] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13341: bg 0: block 248: padding at end of block bitmap is not set [ 804.162200][ T7146] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.13341: Failed to acquire dquot type 1 [ 804.183631][ T7146] EXT4-fs (loop1): 1 truncate cleaned up [ 804.192204][ T7146] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.218991][ T7160] loop4: detected capacity change from 0 to 512 [ 804.247431][ T7160] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 804.263770][T25260] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 804.276508][T25260] EXT4-fs (loop0): This should not happen!! Data will be lost [ 804.276508][T25260] [ 804.328729][ T7168] loop4: detected capacity change from 0 to 1024 [ 804.336859][ T7168] EXT4-fs: Ignoring removed oldalloc option [ 804.343375][ T7168] EXT4-fs: Mount option(s) incompatible with ext3 [ 804.380444][ T7147] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 804.396377][ T7147] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 804.408921][ T7147] EXT4-fs (loop5): This should not happen!! Data will be lost [ 804.408921][ T7147] [ 804.414402][ T7171] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 804.418608][ T7147] EXT4-fs (loop5): Total free blocks count 0 [ 804.418691][ T7147] EXT4-fs (loop5): Free/Dirty block details [ 804.418706][ T7147] EXT4-fs (loop5): free_blocks=2415919104 [ 804.418724][ T7147] EXT4-fs (loop5): dirty_blocks=8192 [ 804.418739][ T7147] EXT4-fs (loop5): Block reservation details [ 804.418752][ T7147] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 804.457677][ T7137] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 804.481869][ T7137] EXT4-fs (loop5): This should not happen!! Data will be lost [ 804.481869][ T7137] [ 804.601722][ T7180] loop4: detected capacity change from 0 to 512 [ 804.611608][ T7180] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 804.619966][ T7180] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 804.628265][ T7180] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.13352: bad orphan inode 13 [ 804.638860][ T7180] EXT4-fs (loop4): Remounting filesystem read-only [ 804.645608][ T7180] ext4_test_bit(bit=12, block=4) = 1 [ 804.650951][ T7180] is_bad_inode(inode)=0 [ 804.655241][ T7180] NEXT_ORPHAN(inode)=17694720 [ 804.659955][ T7180] max_ino=32 [ 804.663174][ T7180] i_nlink=0 [ 804.664984][ T7181] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13351'. [ 804.666989][ T7180] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 804.688245][ T7177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 804.696523][ T7184] loop5: detected capacity change from 0 to 512 [ 804.706891][ T7184] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13353: bg 0: block 248: padding at end of block bitmap is not set [ 804.721747][ T7184] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13353: Failed to acquire dquot type 1 [ 804.734275][ T7184] EXT4-fs (loop5): 1 truncate cleaned up [ 804.740416][ T7184] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.885819][ T7203] loop5: detected capacity change from 0 to 512 [ 804.892273][ T7203] EXT4-fs: Ignoring removed orlov option [ 804.898148][ T7203] EXT4-fs: test_dummy_encryption option not supported [ 804.961096][ T7206] loop5: detected capacity change from 0 to 512 [ 804.976963][ T7206] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13361: bg 0: block 248: padding at end of block bitmap is not set [ 804.992061][ T7206] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13361: Failed to acquire dquot type 1 [ 805.004357][ T7206] EXT4-fs (loop5): 1 truncate cleaned up [ 805.010517][ T7206] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.178038][ T3249] EXT4-fs unmount: 100 callbacks suppressed [ 805.178059][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.232312][ T7220] loop5: detected capacity change from 0 to 512 [ 805.257118][ T7220] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.13366: bg 0: block 248: padding at end of block bitmap is not set [ 805.272041][ T7220] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13366: Failed to acquire dquot type 1 [ 805.284376][ T7220] EXT4-fs (loop5): 1 truncate cleaned up [ 805.290619][ T7220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.303877][ T7220] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.436176][ T7242] loop1: detected capacity change from 0 to 512 [ 805.443156][ T7242] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 806.376937][ T7242] EXT4-fs (loop1): 1 truncate cleaned up [ 806.386532][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.386831][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.398543][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.414185][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.425735][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.437342][ T7243] syz.0.13372[7243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.450670][ T7242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.479423][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.482951][ T7244] syz.2.13373[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.488920][ T7244] syz.2.13373[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.501019][ T7244] syz.2.13373[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.514492][ T7242] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 806.543919][ T7244] syz.2.13373[7244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 806.563070][ T2992] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.589303][ T7252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7252 comm=syz.4.13375 [ 806.631297][ T7258] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 806.638298][ T7260] loop0: detected capacity change from 0 to 512 [ 806.823408][ T7276] loop5: detected capacity change from 0 to 512 [ 806.830893][ T7276] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 806.842456][ T7276] EXT4-fs (loop5): 1 truncate cleaned up [ 806.849479][ T7276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.862008][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 806.862028][ T29] audit: type=1326 audit(1737136174.689:27383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.0.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 806.888165][ T7276] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 16: block 33: [ 806.891863][ T29] audit: type=1326 audit(1737136174.689:27384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.0.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 806.891894][ T29] audit: type=1326 audit(1737136174.689:27385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.0.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 806.891947][ T29] audit: type=1326 audit(1737136174.689:27386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.0.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 806.901261][ T7276] freeing already freed block (bit 32); block bitmap corrupt. [ 806.924716][ T29] audit: type=1326 audit(1737136174.709:27387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.0.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb790965d29 code=0x7ffc0000 [ 807.059524][ T3249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.083249][ T7289] ================================================================== [ 807.091520][ T7289] BUG: KCSAN: data-race in rxrpc_input_call_event / rxrpc_send_data [ 807.099582][ T7289] [ 807.101930][ T7289] write to 0xffff88813619dd74 of 4 bytes by task 7293 on cpu 1: [ 807.109607][ T7289] rxrpc_input_call_event+0x8ef/0x12e0 [ 807.114249][ T29] audit: type=1326 audit(1737136174.949:27388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7294 comm="syz.4.13394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0231c65d29 code=0x0 [ 807.115102][ T7289] rxrpc_io_thread+0x30e/0x1fb0 [ 807.115135][ T7289] kthread+0x1d1/0x210 [ 807.115158][ T7289] ret_from_fork+0x4b/0x60 [ 807.151413][ T7289] ret_from_fork_asm+0x1a/0x30 [ 807.156220][ T7289] [ 807.158575][ T7289] read to 0xffff88813619dd74 of 4 bytes by task 7289 on cpu 0: [ 807.166143][ T7289] rxrpc_send_data+0x889/0x1820 [ 807.171072][ T7289] rxrpc_do_sendmsg+0xb92/0xc30 [ 807.175974][ T7289] rxrpc_sendmsg+0x417/0x520 [ 807.180604][ T7289] __sock_sendmsg+0x140/0x180 [ 807.185331][ T7289] ____sys_sendmsg+0x312/0x410 [ 807.190122][ T7289] __sys_sendmsg+0x19d/0x230 [ 807.194740][ T7289] __x64_sys_sendmsg+0x46/0x50 [ 807.199543][ T7289] x64_sys_call+0x2734/0x2dc0 [ 807.204245][ T7289] do_syscall_64+0xc9/0x1c0 [ 807.208776][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.214701][ T7289] [ 807.217047][ T7289] value changed: 0x00000000 -> 0x00000001 [ 807.222787][ T7289] [ 807.225144][ T7289] Reported by Kernel Concurrency Sanitizer on: [ 807.231311][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.0.13391 Not tainted 6.13.0-rc7-syzkaller-00149-g9bffa1ad25b8 #0 [ 807.242104][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 807.252190][ T7289] ================================================================== [ 807.266583][ T29] audit: type=1326 audit(1737136175.099:27389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.5.13395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 807.290363][ T29] audit: type=1326 audit(1737136175.109:27390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.5.13395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 807.314027][ T29] audit: type=1326 audit(1737136175.109:27391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.5.13395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000 [ 807.390139][ T29] audit: type=1326 audit(1737136175.109:27392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7296 comm="syz.5.13395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f35ebd95d29 code=0x7ffc0000